9th
May
2007
AOL: Password problems threaten user security
posted in Security |
The Washington Post’s security guru Brian Krebs has written an intriguing article on AOL’s password practices.
A reader wrote in to Krebs to tell him that AOL’s password system seemed to be accepting the first eight characters of his (more than 8 character) password plus any combination of characters thereafter, bringing into question the strength of AOL’s password security.
Krebs said that AOL spokesman Andrew Weinstein explained that “the company was looking into the matter” but didn’t provide any further information.