Hi
Just spotted this on the net and felt it might be of interest to the
Ubuntu users in the Group.....
/There has been a security breach on the Ubuntu Forums. The Canonical IS
team is working hard as we speak to restore normal operations. This page
(/ /http://ubuntuforums.org/announce.html?t=2145868//) will be updated
with progress reports./
/What we know/
* /Unfortunately the attackers have gotten every user's local
username, password, and email address from the Ubuntu Forums database./
* /The passwords are not stored in plain text, they are stored as
salted hashes. However, if you were using the same password as your
Ubuntu Forums one on another service (such as email), you
are////*strongly*////encouraged to change the password on the other
service ASAP./
* /Ubuntu One, Launchpad and other Ubuntu/Canonical services
are////*NOT affected*////by the breach./
/Progress report/
* /2013-07-20 2011UTC: Reports of defacement/
* /2013-07-20 2015UTC: Site taken down, this splash page put in place
while investigation continues./
* /2013-07-21: we believe the root cause of the breach has been
identified. We are currently reinstalling the forums software from
scratch. No data (posts, private messages etc.) will be lost as part
of this process./
* /2013-07-22: work on reinstalling the forums continues./
... I expect others already know about this (I must admit to wondering
if it was a hoax)
but it may affect someone.
Gemma
--
Next meeting: Bournemouth, Tuesday, 2013-08-06 20:00
Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/
New thread on mailing list: mailto:[email protected]
How to Report Bugs Effectively: http://goo.gl/4Xue
