FCW Insider

Blog archive

FCW Insider: The story behind Palin's e-mail hack

What happened to Sarah Palin could happen to you.


That is the basic message in an AppScout article that explains how a hacker apparently broke into the Yahoo e-mail account of the vice presidential candidate (and Alaskan governor).


The short version is that the hacker took advantage of the Yahoo password recovery function. Most such systems require users to answer personal questions before providing them with their "forgotten" password. In this case, the perpetrator needed less than an hour to find the answers, thanks I large part to Wikipedia.


"Breaking into Sarah Palin's webmail account was a simple hack--one that required little to no technical expertise," AppScout states. "There is, of course, an important lesson to be learned here for the vice presidential candidate, and hopefully the rest of us can take something away from this as well."


The article provides more technical detail, for those who are so inclined.


Also, a reader commenting on the story offers one tip: When setting up the recovery function, do not provide real answers to the questions. Instead, use nonsense words.

Posted by John Stein Monroe on Sep 19, 2008 at 12:17 PM


Featured

  • People
    Dr. Ronny Jackson briefs the press on President Trump

    Uncertainty at VA after nominee withdraws

    With White House physician Adm. Ronny Jackson's withdrawal, VA watchers are wondering what's next for the agency and its planned $16 billion health IT modernization project.

  • Cybersecurity

    DHS floats 'collective defense' model for cybersecurity

    Homeland Security Secretary Kirstjen Nielsen wants her department to have a more direct role in defending the private sector and critical infrastructure entities from cyberthreats.

  • Defense
    Defense Secretary James Mattis testifies at an April 12 hearing of the House Armed Services Committee.

    Mattis: Cloud deal not tailored for Amazon

    On Capitol Hill, Defense Secretary Jim Mattis sought to quell "rumors" that the Pentagon's planned single-award cloud acquisition was designed with Amazon Web Services in mind.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.