Ubuntu Linux forums hacked
http://betanews.com/2016/07/15/ubuntu-linux-forums-hacked/
What the attacker could access The attacker had the ability to
inject certain formatted SQL to the Forums database on the
Forums database servers. This gave them the ability to read
from any table but we believe they only ever read from the
'user' table. They used this access to download portions of
the 'user' table which contained usernames, email addresses
and IPs for 2 million users. No active passwords were
accessed; the passwords stored in this table were random
strings as the Ubuntu Forums rely on Ubuntu Single Sign On for
logins. The attacker did download these random strings (which
were hashed and salted).
- - -
Embarrassing, to say the least.
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
