<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Don't become a Songkick in Industry News</title>
    <link>https://community.isc2.org/t5/Industry-News/Don-t-become-a-Songkick/m-p/42156#M5240</link>
    <description>&lt;P&gt;Songkick&amp;nbsp; sold concert tickets.&amp;nbsp; One of their execs left for a competitor, taking trade secrets and access to Songkick's systems, which Ticketmaster subsequently used in violation of the Computer Fraud and Abuse Act, resulting in Ticketmaster paying both a $110M &lt;A href="https://www.bizjournals.com/losangeles/news/2018/01/15/live-nation-settles-with-songkick-for-110-million.html" target="_blank" rel="noopener"&gt;settlement&lt;/A&gt; to Songkick and a $10M &lt;A href="https://www.justice.gov/usao-edny/pr/ticketmaster-pays-10-million-criminal-fine-intrusions-competitor-s-computer-systems-0" target="_blank" rel="noopener"&gt;federal criminal fine&lt;/A&gt;.&amp;nbsp; Songkick however fared even worse.&amp;nbsp; Between the loss of business and the dealing with the legal aspects, they ended up bankrupt and now part of Warner Music.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Apparently, the big things the enabled Tickemaster to succeed was that URLs to pre-release information were protected only by "secret" URLs; future URLs could be predicted by knowing generation algorithm; and that Songkick did not change passwords when the exec left.&amp;nbsp; These all seem pretty much like the things one should learn in security 101.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 05 Jan 2021 23:15:07 GMT</pubDate>
    <dc:creator>denbesten</dc:creator>
    <dc:date>2021-01-05T23:15:07Z</dc:date>
    <item>
      <title>Don't become a Songkick</title>
      <link>https://community.isc2.org/t5/Industry-News/Don-t-become-a-Songkick/m-p/42156#M5240</link>
      <description>&lt;P&gt;Songkick&amp;nbsp; sold concert tickets.&amp;nbsp; One of their execs left for a competitor, taking trade secrets and access to Songkick's systems, which Ticketmaster subsequently used in violation of the Computer Fraud and Abuse Act, resulting in Ticketmaster paying both a $110M &lt;A href="https://www.bizjournals.com/losangeles/news/2018/01/15/live-nation-settles-with-songkick-for-110-million.html" target="_blank" rel="noopener"&gt;settlement&lt;/A&gt; to Songkick and a $10M &lt;A href="https://www.justice.gov/usao-edny/pr/ticketmaster-pays-10-million-criminal-fine-intrusions-competitor-s-computer-systems-0" target="_blank" rel="noopener"&gt;federal criminal fine&lt;/A&gt;.&amp;nbsp; Songkick however fared even worse.&amp;nbsp; Between the loss of business and the dealing with the legal aspects, they ended up bankrupt and now part of Warner Music.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Apparently, the big things the enabled Tickemaster to succeed was that URLs to pre-release information were protected only by "secret" URLs; future URLs could be predicted by knowing generation algorithm; and that Songkick did not change passwords when the exec left.&amp;nbsp; These all seem pretty much like the things one should learn in security 101.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 05 Jan 2021 23:15:07 GMT</pubDate>
      <guid>https://community.isc2.org/t5/Industry-News/Don-t-become-a-Songkick/m-p/42156#M5240</guid>
      <dc:creator>denbesten</dc:creator>
      <dc:date>2021-01-05T23:15:07Z</dc:date>
    </item>
  </channel>
</rss>

