|Willis Hart: On the Fact that if Pervert Podesta Was Really and Truly Concerned About Hacking, He Probably Should Have Come Up with a Better Password than, Say, p@ssw0rd - https://wikileaks.org/podesta-emails/emailid/22335... Too much to ask? (12/19/2016 AT 5:04pm).|
Is it just me, or is Willis getting dumber by the day?
Below is the email he is referring to.
It appears to me that firstname.lastname@example.org is telling jpodesta that the CAP monkeyed with his computer (it's "good to go") and gave him a TEMPORARY password ("p@ssw0rd"). Which is COMMON. After you sign in the first time you change it. The system MAKES you change it.
On the other hand, it seems that John Podesta did fall for a phishing email and that's how the hackers got in. An email purporting to be from Google said his account had been compromised and that he should change his password (The phishing email that hacked the account of John Podesta).
Looks like there was a link in the email, and he clicked and "changed" his password through Google (i.e. gave his password to the hackers when he clicked on a link to a fake Google site). Which is pretty dumb (whoever did it. The article notes that someone might have done it for Podesta).
Although, according to the article "Charles Delevan at the HFA help desk wrote to Podesta's chief of staff, Sara Latham [and said] this is a legitimate email... John needs to change his password immediately".
OK, but navigate to Google yourself to change your password. Don't click a link in the email! Pretty basic stuff, IMO. I have received such phishing emails myself and I've never fallen for them.
"All of these hacks were executed using these shortened URLs... created with a Bitly account linked to a domain under the control of Fancy Bear" (Fancy Bear being the name of a Russian hacking group)... the article reveals.
Here I was thinking they used sophisticated methods beyond my understanding, but it was the age old reliance on the stupidity of the end user.
Apparently the Hartster is BIG into conspiracy theories these days. He talks about brain disease a LOT. Might that be the explanation?
Update 1/9/2016: Charles Delavan, the individual who wrote to John Podesta that the phishing email was "legitimate" says he intended to type "illegitimate". It was a typo. (see below).