Everyone,
I'm back from San Francisco. SourceForge was hacked. I'll check into it
more thoroughly tomorrow.
>To: [EMAIL PROTECTED]
>Subject: SourceForge - URGENT: Please change your password (mhnoyes)
>From: [EMAIL PROTECTED]
>Date: Mon, 28 May 2001 14:00:23 -0700
>
>Dear SourceForge User,
>
>The SourceForge team takes security very seriously. This week, one of
>our systems was compromised. We have promptly taken the necessary steps
>to correct this situation.
>
>You have been contacted, because according to our log files, you have
>used SourceForge during the past week and may have used the system that
>was compromised.
>
>In order to complete the security fix, we are asking all users who used
>the system to change their password immediately. We've reset your
>password to a randomly generated string.
>
>To prevent risk of SSH key data having been compromised, we have also
>removed any SSH key data you had previously posted to the SourceForge
>project CVS servers or shell servers, either directly or via the
>SourceForge website. If you had not posted SSH key data to the
>SourceForge site or the shell or CVS servers, this paragraph may be
>disregarded. We request that you review the SSH keys (authorized_keys)
>and use the 'Edit keys' link on your Account Maintenance page
>(https://sourceforge.net/account/editsshkeys.php) to post those public
>keys you are actively using. It should be noted that both SSH1 and SSH2
>public key data (identity.pub/authorized_keys/authorized_keys2) may be
>posted via this interface.
>
>Below is a URL that will allow you to change your password. Please go
>to web address and follow the instructions.
>
>http://sourceforge.net/account/lostpw.php
>
>** Until you change your password, you will not be able to login to the
>SourceForge website, use the CVS server or the shell server. ***
>
>I know this is an inconvenience, but it is something we have to do to
>make SourceForge safe for all users.
>
>If you have any questions about this, please email
>[EMAIL PROTECTED]
--
Mike Noyes <[EMAIL PROTECTED]>
http://leaf.sourceforge.net/
_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/leaf-devel
