Security

Jewelry Site Leaks Personal Details, Plaintext Passwords of 1.3 Million Users (thenextweb.com) 37

Chicago-based MBM Company's jewelry brand Limoges Jewelry has accidentally leaked the personal information for over 1.3 million people. This includes addresses, zip-codes, e-mail addresses, and IP addresses. The Germany security firm Kromtech Security, which found the leak via an unsecured Amazon S3 storage bucket, also claims the database contained plaintext passwords. The Next Web reports: In a press release, Kromtech Security's head of communicationis, Bob Diachenko, said: "Passwords were stored in the plain text, which is great negligence [sic], taking into account the problem with many users re-using passwords for multiple accounts, including email accounts." The [MSSQL database] backup file was named "MBMWEB_backup_2018_01_13_003008_2864410.bak," which suggests the file was created on January 13, 2018. It's believed to contain current information about the company's customers. Records held in the database have dates reaching as far back as 2000. The latest records are from the start of this year. Other records held in the database include internal mailing lists, promo-codes, and item orders, which leads Kromtech to believe that this could be the primary customer database for the company. Diachenko says there's no evidence a malicious third-party has accessed the dump, but that "that does not mean that nobody [has] accessed the data."
Programming

Demand For Programmers Hits Full Boil as US Job Market Simmers (bloomberg.com) 272

When the American job market heats up, demand for technology talent boils, an anonymous reader writes citing a Bloomberg report. From the story: Nationally, the unemployment rate was 4.1 percent in January, and analysts project that it declined to 4 percent, the lowest since 2000, in Labor Department figures due Friday. For software developers, the unemployment rate was 1.9 percent in 2017, down from 4 percent in 2011. While companies are writing bigger checks, they are also adopting new strategies to find engineers for an economy where software is penetrating even mundane processes. Companies are focusing more on training, sourcing new talent through apprenticeships, and looking at atypical pools of candidates who have transferable skills.

"It is probably the most competitive market in the last 20 years that I have been doing this," said Desikan Madhavanur, chief development officer at Scottsdale, Arizona-based JDA Software, whose products help companies manage supply chains. "We have to compete better to get our fair share." What's happening in the market for software engineers may help illustrate why one of the tightest American labor markets in decades isn't leading to broader wage gains. While technology firms are looking at compensation, they are also finding ways to create the supply of workers themselves, which helps hold costs down.

Slashdot Top Deals