Infoworld continues to have the best information on the Terry Childs case (new article)
And then later on the same page:(page 3) entering the VPN information into the court records made them public — the San Francisco district attorney’s office committed a significant security breach, opening up VPN access to anyone who cared to look at the document. Although the passwords alone were not enough to provide complete access to the city networks, they did constitute one part of the VPN’s two-phase authentication configuration.
Nearly two days after the DA’s office divulged these passwords to the public, DTIS changed all the passwords, locking everyone out of the city VPN services until they had reconfigured their client to the new passwords. Ironically, this was the first time the city network failed since Childs’ arrest.
