Think about the following example: Your company's mail server sends you a message alerting you that your account's password has been changed and requesting your confirmation. You have not changed the password, based on what you are aware of! How did the password change occur, and what may have prompted it? Was there a virus, and if so, which ones, on whose computers, that may have given a hacker the data they need to reset the password successfully?

Think about the following example: Your company's mail server sends you a message alerting you that your account's password has been changed and requesting your confirmation. You have not changed the password, based on what you are aware of! How did the password change occur, and what may have prompted it? Was there a virus, and if so, which ones, on whose computers, that may have given a hacker the data they need to reset the password successfully?

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Consider the following scenario: you get a message from your company's mail server informing you that the password for your account has been changed and that you must confirm the change. According to what you know, you have not altered the password! What may have motivated the password change, and how did it happen? Was it a virus, and if so, on which computers, that may have given an attacker with the information they needed to successfully reset the password?
Imagine this: Your company's mail server sends you an email warning you that your password been changed. You haven't updated the password, however. Why? What changed the password? How did an attacker reset the password? What systems did the virus infect?
Your company's mail server appears to have sent you a letter claiming that your password has been changed and requesting that you take action to confirm this. Even so, you're not aware of any changes to the password! It's possible something happened to cause the password to be changed. The information an attacker needed to effectively alter the password was delivered by what kind of malware and on which computer systems?
Assume that your company's mail server has given you a message informing you that your password has been changed and that you must confirm this. To your knowledge, you have not changed the password in any way. Why might the password have been changed in the first place? Whose systems may have been compromised with malware that might have made the password reset information available to an attacker?
Imagine if the mail server at your employer sent you a message informing you that your password had been changed and that you needed to confirm it. However, you haven't changed the password in quite some time. What caused the password to be changed? What kind of malware and on what systems may an attacker have gotten the information needed to change the password?
Let's pretend your company's mail server sends you a notification asking you to verify a password change. However, you haven't changed the password recently. What happened that necessitated a new code? To what malware and on what machines may an attacker have gained access to reset the password?
Assume you get an email from your company's mail server informing you that your account password has been changed and that you must confirm this. But you haven't changed the password, have you? Why was the password changed? An attacker may have successfully changed the password by using malware on which computers.
To show the login process in action, you should make up a story. You have most likely encountered many forms of authentication. How soon might it be? Passwords will always be necessary, in my opinion.
Imagine the following: You get an email from the mail server of your firm informing you that the password you use has been updated. However, you haven't changed the password in quite some time. Why? What caused the password to be changed? How was it that the password was reset by the attacker? Which kinds of computers did the virus attack?
Let's imagine the mail server for your employer sends you a message alerting you that the password for your account has been changed and that you need to confirm this. In this scenario, you would need to confirm the new password. To the best of your knowledge, the password has not been changed in any way. What may have caused the requirement for the password to be changed? What systems were infected with what sort of malware, and how did the hacker get access to the information they required to properly reset the password?
I had never heard of authenticating a user with two separate factors before, and the idea fascinates me. What kind of an effect does this have on the level of security that people may expect for their passwords?