Military personnel from junior ranks to command positions were identified. A Brigadier General used a common six letter nickname, based on his own, to sign up to a film festival. A Colonel specialising in “information security” took inspiration from an English football manager for his password: “FrankLampard”. A district director used the password “123456aA”, while a high-ranking member of Hungary’s delegation to NATO used a password that translates in English to “cute”.
(...)
Among the breached data were the credentials of a deputy state secretary, who used the password “snoopy”. Other staff members used their date of birth or the word “Jelszo” – the Hungarian word for password.
A senior advisor who currently works in the ministry had their credentials breached four times using four different passwords, including “Kurvaanyad1” (roughly translated to “your mother is a wh**e”).
L'essentiel - les faits vérifiésQui aurait pu prédire ?®
- Le prototype européen de vérification d'âge ne protège pas contre la modification de ses propres fichiers locaux.
- La couche zero-knowledge protège le transit des données mais pas leur fabrication locale : la cryptographie chiffre un mensonge si la donnée est falsifiée en amont.
- Sept États membres pilotes, dont la France, sont les plus avancés vers le déploiement.
- L'app leader Yoti embarque 4 trackers malgré sa promesse de « privacy-first ».
- Seules 3,67 % des applications adultes sur Google Play implémentent une vérification d'âge.
- L'article 74 du DSA prévoit des amendes jusqu'à 6 % du CA mondial, mais la Commission doit d'abord fournir un outil de vérification crédible.