Rage at Autodesk

[iviv]

Beginning on the first of this month, I started receiving several spam emails each day from various addresses to my university email account, which has only ever been given out for university related business. The sudden influx of spam confused me, so I set out to find out where exactly my email had been obtained from. And after a little searching, I found this page:
http://au.autodesk.com/ama/i_student_countries.txt
A list of 3582 email addresses, all of people registered with autodeck in plain text available for all to see. And its obviously been harvested and now the spambots are hard at work making sure my inbox stays full.

I know there's nothing I can do now, but gah that's really infuriating!

 

[Vulcan]

http://au.autodesk.com/ama

Oh dear!

I seem to have even found a password for something. Time to use my 7 proxies!

 

[SexyGreyFox]

Thanks for all those addresses, now to send out my Viagra emails.

 

[iviv]

Thanks for all those addresses, now to send out my Viagra emails.

They were available through a google search anyway, they're even cached >_>

 

[flibbage0]

This is alarming

I thought autodesk were quite tight with security and stuff.

 

[asim18]

That's ridiculous. Even I've remembered to deny directory listings on my website.

Poor. Just poor. Wouldn't be surprised if they've got unencrypted passwords in a TXT file somewhere

 

[asim18]

Oh look what I've just found: http://au.autodesk.com/ama/local/emailaccounts.txt

 

[scrlk]

Instead of posting the files for all to see, why not try and inform Autodesk of the problems they have?

/rant

Can you not try forwarding the uni email to a GMail account - Google's spam filters are amazing, never once got a spam email in my inbox!

 

[asim18]

Instead of posting the files for all to see, why not try and inform Autodesk of the problems they have?

They obviously want them to be seen. Why else would you put data in plain view on a web server with absolutely ZERO security?

 

[Vulcan]

So far I've found a Google Analytics login, and a large database of peoples names, e-mail addresses, home phone numbers, cell phone numbers and employers.

 

[asim18]

So far I've found a Google Analytics login, and a large database of peoples names, e-mail addresses, home phone numbers, cell phone numbers and employers.

I've found that too lol

 

[SexyGreyFox]

So far I've found a Google Analytics login, and a large database of peoples names, e-mail addresses, home phone numbers, cell phone numbers and employers.

If true they could be in for a £500,000 fine.

 

[asim18]

If true they could be in for a £500,000 fine.

No sympathy from me. They haven't even made an attempt at securing the files. Not even an attempt!

 

[iviv]

So far I've found a Google Analytics login, and a large database of peoples names, e-mail addresses, home phone numbers, cell phone numbers and employers.

Really? Who would you forward such data breaches to? I assume not the police, but then who?

 

[asim18]

I assume not the police, but then who?

If a law has been broken, then the police would be the first line, obviously not 999 lol, but honestly they probably won't give a toss anyway.

 

[NiCkNaMe]

I think their privacy policy is hilarious;

http://au.autodesk.com/ama/content/privacy.txt

 

[SexyGreyFox]

If a law has been broken, then the police would be the first line, obviously not 999 lol, but honestly they probably won't give a toss anyway.

What you need to do is contact as many people as you can on the list and tell them you know where their names, addresses & mobile numbers are and you won't give the information unless you get 10% of their payout.

 

[mikeyp123]

I think their privacy policy is hilarious;

http://au.autodesk.com/ama/content/privacy.txt

Quite enjoyable to read a privacy policy within the internal listings

 

[Skillmister]

Hmm staffs student emails are on the list but mine isnt. Winner!

 

[TMP]

Would be interesting if account details were on there also, a lot of companies sink millions / year into Autodesk.