OIT Tech 32px
Email upgrade: Hands on demo, April 25
Summer 2014 instructors: Upload 1st session course materials before May 7
Email upgrade: Improved web access
OHIO passwords to require secret questions
VoIP telephone upgrade: Site surveys and pilot under way
Email scams expected to rise: What you can do
Box cloud storage accounts now available
Email upgrade: larger quotas, better web access, easier calendaring
Exchange maintenance scheduled for 1:00 am - 3:30 am, April 12, 2014
IT Change Guide: Upgrades that will affect you
deco-circuit-banner

Adobe breach highlights importance of unique passwords

Wednesday, November 6, 2013
Sean O'Malley, illustration courtesy of xkcd.com  

XKCD comic that illustrates how password hints can be used to guess common passwordsEarlier this fall, Adobe suffered a security breach on its corporate network that exposed many customer usernames, passwords and password hints, including some belonging to OHIO customers.  

According to a Nov 6 email from the OIT Service Desk, the Adobe breach did not affect the university directly but does have the potential to affect individuals who did not properly protect their OHIO passwords. The email instructs anyone who used their OHIO password at Adobe to change it as soon as possible.

"Your OHIO password should be for OHIO use only," said Matthew Dalton, director of information security for OIT. "You should never use it to create accounts outside of the university. This Adobe incident is a perfect illustration of why."

According to Dalton, it is common practice in the hacking community to take a list of hacked accounts and try those usernames and passwords at popular Internet sites. If a username includes an email address, hackers also will try logging into that email account. 

"Your best protection is to avoid duplicate passwords," said Dalton. 

Individuals with questions about password security can contact the OIT Service Desk at 740-593-1222.


Related Links

Adobe customer security alert 
Adobe to announce source code, customer data breach
How to change your password