Feeds

comiXology's Phantom Zone breached by villainous Haxxor

Use of password change Kryptonite urged for all e-comics readers

Security for virtualized datacentres

E-comics outfit comiXology has written to customers advising them to change their passwords after “recent review and upgrade of our security infrastructure … determined that an unauthorized individual accessed a database of ours that contained usernames, email addresses, and cryptographically protected passwords.”

Just how many people are affected is not known, as comiXology doesn't reveal how many customers it has. But a September 2013 report in Crain's New York Business suggests its apps have been downloaded 200 million times. If even a quarter of those downloads became customers this is a significant breach.

The good news is that comiXology says “Payment account information is not stored on our servers”, which chimes with your correspondent's experience of the service: Apple provides its payment mechanism on the iPad and the service uses Google Play for in-app purchase for its Android incarnation.

The company is spinning the password change request as sensible, not urgent. Its email to customers says “Even though we store our passwords in protected form, as a precautionary measure we are requiring all users to change their passwords on the comiXology platform and recommend that you promptly change your password on any other website where you use the same or a similar password.”

That's probably decent advice, at least if your iTunes or Google Play passwords are similar to your comiXology code. Get to it, readers, faster than a speeding bullet, before HAXXOR SMASH! ®

Beginner's guide to SSL certificates

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.