Sounds like the security violation that led to the posting of Paris Hilton's private list of celebrity phone numbers was pretty straight-forward: they Googled the answer to her secret question (what's your favorite pet's name?) to "recover" her password on T-Mobile's online web account. Ironically enough, Bruce Schneier blogged about this very problem just last week.
Posted by bug to Security at February 23, 2005 5:53 PM | TrackBack