Hilton may be victim of T-Mobile Web holes

Flaw in Web site's password reset feature is believed to have played a role in hacking

By Paul Roberts, IDG News Service
March 01, 2005

Hotel heiress Paris Hilton's mobile phone account and those of other T-Mobile customers may have fallen victim to hackers who took advantage of a gaping hole in the company's Web site to steal information, according to security experts and those familiar with the incident.

A flaw in a Web site feature to reset T-Mobile account passwords is believed have played a role in hacking Hilton's T-Mobile Sidekick account, which resulted in her star-studded address book, photos, e-mail messages and voice mail being posted for public consumption on the Internet. The password reset hole is just one of hundreds, or even thousands of similar flaws in the mobile provider's Web page that could provide easy access to malicious hackers, according to an analysis by one security expert.

A spokesman for T-Mobile USA, a division of T-Mobile International, declined to comment specifically on the password reset exploit or on the security of the company's Web site despite repeated requests. In an e-mail statement attributed to Sue Swenson, Chief Operating Officer of T-Mobile USA, the company said that it cares about protecting the security and privacy of its customers, and that the company is "aggressively investigating the illegal dissemination of information over the Internet of T-Mobile customers' personal data."
<snip>

http://www.infoworld.com/article/05/03/01/HNtmobileholes_1.html?source=NLC-TB2005-03-01

that hasn't been exploited?

}(

...is funny!

yet so right. lol

:o