August 7, 2007

Security issues on MyBlogLog sign in

It appears that there was a serious security issue with the MyBlogLog signing in process. Normally to sign in you would need your email address and password. But what was happening when some people were attempting to sign in, they put in their email address, as you do with many sign in’s. But went it comes to the password it was a different matter, this particular user had an eight digit password, but only to three or four before the system allowed access.

In response, Todd Sampson one of the founders of MyBlogLog agreed that there was an issue with security, but this has now been fixed, the system will check the whole password not just the beginning.

Source [Ugyen]

Filed Under Uncategorized