Wednesday, November 09, 2005

OUCH: "Papa John's Pizza's Corporate E-mails Still Exposed"

Papa John's Pizza's Corporate E-mails Still Exposed (thanks Google)

"According to this posting on the Full Disclosure mailing list, Papa John’s Pizza’s web-based e-mail system was not password protected for a while. They have since fixed the problem, but Google currently has the information in its cache. The following Google query will let you see these e-mails (click on the ‘Cached’ links):

site:webmail02.papajohns.com PJFS


Now try the following query to find the more interesting e-mails:

site:webmail02.papajohns.com PJFS password

..."


ouch... ouCH... OUCH!!!! Wow, this so sucks for their IT folks. I'm sure someone is SO busted.

Searching on site:webmail02.papajohns.com right now returns 31,800 in cached emails.

Boy I hope for the sake of the people involved there's nothing really bad in there... But as we've all said and always been told, never write anything in an email that you wouldn't want to see posted on a newspaper's front page, a company bulletin board or have your mom read...

I just wish I could follow that advice more myself... :|

2 comments:

Anonymous said...

Links don't work anymore. Did Google remove them? How did Google find them anyway? Aren't they supposed to find things based on how many web pages linked to a page? Who would have linked to an e-mail?

Greg said...

It was only a matter of time until Papa John's asked Google to remove the cached data...

As to how the Google indexer/searcher found this in the first place, I have no clue.