Martin, thanks for sharing this. You are a trustworthy guy and those words should have been enough proof under other circumstances. However, as I see it, in this case it is Michel who has the moral obligation to say the pessimists are really wrong here. And if they aren't, then he should immediately say so and promise a repair or redesign. Perhaps you can convince him. I haven't yet seen him reply to similar requests of several people. Someone said it's like talking to a stonewall and I fully understand the usage of that word. Perhaps Michel thinks this whole thread will bleed to death anyway, but it may well be that, in that case, more harm is done that he can handle.


>Hi, César.
>
>>Till now nobody from the UT admins has said anything specifically regarding the database security.
>>
>>Thanks in advance for your clarification,
>
>Excuse me if I didn't reply earlier, but I was not following the events. To my knowledge, there is no formal way someone can get user information from the UT Admin infrastructure, except perhaps Michel, who is the only one able to access the raw data.
>
>I have full administrative rights to the Admin interface and I can't do more to user profiles than approve newly submitted user pictures and edit bios for magazine authors.
>
>Even while I trust the investigation Andy did, I guess there should be another explanation for someone getting to this personal data, or there has been an explicit exploit to circumvent the UT security. My appreciation is that our security infrastructure is pretty good, but we all know that no technology guarantees absolute safety. I'm sure Michel can provide more details.
>
>Regards,