Hi there.  Since there has been no mention of this on boston.pm I thought
I'd pass this along.

Mike

---------- Forwarded message ----------
From: Chris Fields <[email protected]>
Date: Thu, Jul 30, 2009 at 9:27 AM
Subject: [Bioperl-l] Perlmonks hacked
To: BioPerl List <[email protected]>


All,

In case there are a few users who haven't been notified, PerlMonks has been
hacked rather severely:

http://perlmonks.org/

The site was unsecure; all passwords were (astonishingly) stored as plain
text, are out in the open, can be easily found (I did, and not I will not
point them out).  If anyone has decided to use a common password for, say
Perlmonks and PAUSE (or Amazon, or CitiBank, or...), make sure to change
both.  Also realize that PerlMonks is NOT https, and that they have NOT
patched the security hole yet, so any changed password may be further
compromised (don't use a common password).

In fact, your PAUSE account may be frozen already due to this:

http://use.perl.org/~Alias/journal/39372<http://use.perl.org/%7EAlias/journal/39372>

It's hard to overstate the intense irony of all this. For some reaction:

http://perlhacks.com/2009/07/perl-monks-passwords.php
http://blog.afoolishmanifesto.com/archives/1028

<now you can smack you hand against your head in frustration>

Good luck!

chris
_______________________________________________
Bioperl-l mailing list
[email protected]
http://lists.open-bio.org/mailman/listinfo/bioperl-l

_______________________________________________
Boston-pm mailing list
[email protected]
http://mail.pm.org/mailman/listinfo/boston-pm

Reply via email to