Feeds

comiXology's Phantom Zone breached by villainous Haxxor

Use of password change Kryptonite urged for all e-comics readers

Intelligent flash storage arrays

E-comics outfit comiXology has written to customers advising them to change their passwords after “recent review and upgrade of our security infrastructure … determined that an unauthorized individual accessed a database of ours that contained usernames, email addresses, and cryptographically protected passwords.”

Just how many people are affected is not known, as comiXology doesn't reveal how many customers it has. But a September 2013 report in Crain's New York Business suggests its apps have been downloaded 200 million times. If even a quarter of those downloads became customers this is a significant breach.

The good news is that comiXology says “Payment account information is not stored on our servers”, which chimes with your correspondent's experience of the service: Apple provides its payment mechanism on the iPad and the service uses Google Play for in-app purchase for its Android incarnation.

The company is spinning the password change request as sensible, not urgent. Its email to customers says “Even though we store our passwords in protected form, as a precautionary measure we are requiring all users to change their passwords on the comiXology platform and recommend that you promptly change your password on any other website where you use the same or a similar password.”

That's probably decent advice, at least if your iTunes or Google Play passwords are similar to your comiXology code. Get to it, readers, faster than a speeding bullet, before HAXXOR SMASH! ®

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Choosing cloud Backup services
Demystify how you can address your data protection needs in your small- to medium-sized business and select the best online backup service to meet your needs.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.