Ubuntu Forums - FYI

[Patrick Asselman]

On 2013-07-23 17:11, Basil Chupin wrote:
> On 22/07/13 19:47, Patrick Asselman wrote:
>> @BC: you really need to read up on system security, considering the 
>> naive statements you are making!
>
> Don't be a smartarse.
>
> BC

I'm not saying that to be a smartarse, I'm saying it because I 
genuinely believe it would be a wise thing for you to do.
But you are free to do as you see fit, of course.


I got a message just 8 hrs ago from the Forums, see below.
The "root cause of the breach" was found 3 days ago.
Does anyone know why it is taking so long to restore the forums?
(I have no idea how large the forum database is, but 3 days seems a bit 
excessive for a db restore to me?)



Best regards,
Patrick Asselman




Hello,

You are receiving this message because you have an account registered 
with this address on ubuntuforums.org.

The Ubuntu forums software was compromised by an external attacker. As 
a result, the attacker has gained access to read your username, email 
address and an encrypted copy of your password from the forum database.

If you have used this password and email address to authenticate at any 
other website, you are urged to reset the password on those accounts 
immediately as the attacker may be able to use the compromised personal 
information to access these other accounts. It is important to have a 
distinct password for different accounts.

The ubuntuforums.org website is currently offline and we are working to 
restore this service. Please take the time to change your 
ubuntuforums.org account password when service is restored.

We apologize for any inconvenience to the Ubuntu community, thank you 
for your understanding.

The Canonical Sysadmins.