Mozilla: data stolen from hacked bug database was used to attack Firefox
http://arstechnica.com/security/2015/09/mozilla-data-stolen-from-hacked-bug-database-was-used-to-attack-firefox/
An attacker stole security-sensitive vulnerability
information from the Mozilla's Bugzilla bug tracking system and
probably used it to attack Firefox users, the maker of the
open-source Firefox browser warned Friday. In an FAQ published
(PDF) alongside Mozilla's blog post about the attack, the
company added that the loss of information appeared to stem from
a privileged user's compromised account. The user appeared to
have re-used their Bugzilla account password on another website,
which suffered a data breach. The attacker then allegedly gained
access to the sensitive Bugzilla account and was able to
"download security-sensitive information about flaws in Firefox
and other Mozilla products."
- - -
No 2-factor login protection Mozilla? REALLY?
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
