Hi folks,
I tried to enter ubuntuforums.org a while ago and saw an announcement saying it has been compromised. Seems that the crackers got the users' database too. Thought I'd post here, for people who use both UF and LQ (like me; though I don't regularly use Ubuntu, I do hang at UF sometimes). This is part of the announcement at UF:
Quote:
Ubuntu Forums is down for maintenance
There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore normal operations. This page will be updated regularly with progress reports.
What we know
Unfortunately the attackers have gotten every user's local username, password, and email address from the Ubuntu Forums database.
The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.
Progress report
2013-07-20 2011UTC: Reports of defacement
2013-07-20 2015UTC: Site taken down, this splash page put in place while investigation continues.
|
Regards.
