Marriott admits it falsely claimed for five years it was using encryption during 2018 breach
Marriot revealed in a court case around a massive 2018 data breach that it had been using secure hash algorithm 1 and not the much more secure AES-1 encryption as it had earlier maintained.
https://www.csoonline.com/article/2096365/marriott-admits-it-falsely-claimed-for-five-years-it-was-using-encryption-during-2018-breach.htmlOpen linkView original on lemmy.zip129
Comments4
Many years ago, back when Marriot locked their non-shit WiFi behind a paywall I was able to get around it by changing some values (Iirc, I literally changed the price that was sent to the server to 0.00) with TamperMonkey lol no server side validation, no lookups, no checksums no verification of any kind lmao
So this doesn't surprise me in the least
Aes1 and sha1 do very different things...
Ooh, the lawyers are gonna drag Marriot to the hot box.
Good thing at least they did not waste any money on some dude's salary who coulda do like a job, that would be really socialist imho thank god we are safe with the leadership like this.