Happy Friday

[cd34]

good morning.

what a fun night repelling the wily hacker.

If you had a vendor install software on your machine that runs credit card processing and uses a cgi script with multiple letters in the name that appear to be unreadable, and you haven't changed the password since that vendor has been on your system, change your password. I don't want to mention any names because I don't want to embarass ccbill for lax security policies regarding storing passwords. 4 clients in 3 days just seems more than coincidental.

But, when you need to have an external vendor in your system, change your password to something, give it to the vendor, and as soon as they are done, change the password back.