Ubuntu Forums Hacked - Do you have an account there!

Chat about Linux in general

Ubuntu Forums Hacked - Do you have an account there!

Postby caf4926 on Sun Jul 21, 2013 12:18 am

Quote

Ubuntu Forums is down for maintenance

There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore normal operations. This page will be updated regularly with progress reports.

What we know

Unfortunately the attackers have gotten every user's local username, password, and email address from the Ubuntu Forums database.
The passwords are not stored in plain text. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.
Progress report

2013-07-20 2011UTC: Reports of defacement
2013-07-20 2015UTC: Site taken down, this splash page put in place while investigation continues.
If you're using Ubuntu and need technical support please see the following page for support:
Finding Help.
If you're looking for a place to discuss Ubuntu, in the meantime we encourage you to check out these sites:

The Ubuntu subreddit
The Ubuntu Community on Google+
Ubuntu Discourse


http://www.zdnet.com/ubuntu-forums-hack ... 000018336/
Last edited by xenopeek on Sun Jul 21, 2013 4:34 am, edited 1 time in total.
Reason: Emphasis added on changing passwords on other websites if using the same password from Ubuntu Forums
Image
Mint 16 Cinnamon_64
User avatar
caf4926
Level 7
Level 7
 
Posts: 1778
Joined: Mon Mar 22, 2010 3:21 pm
Location: UK Lake District

Linux Mint is funded by ads and donations.
 

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby 3mutts on Sun Jul 21, 2013 12:29 am

I do, luckily I don't use the password I have there for important things (like email) and the user name doesn't bother me. Also, do I need to change my email address? The worst I think I will get is spam (not dump enough to fall for those) but IDK what else they can use for it.
User avatar
3mutts
Level 1
Level 1
 
Posts: 48
Joined: Thu Feb 28, 2013 3:53 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby KBD47 on Sun Jul 21, 2013 12:46 am

Probably a lot of people on this forum have an account there. Good idea to never use the same password in more than one place.
KBD47
Level 6
Level 6
 
Posts: 1025
Joined: Fri Jul 29, 2011 12:03 am

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby caf4926 on Sun Jul 21, 2013 12:56 am

KBD47 wrote:Probably a lot of people on this forum have an account there. Good idea to never use the same password in more than one place.

A lot of people use the same password everywhere FYI
Image
Mint 16 Cinnamon_64
User avatar
caf4926
Level 7
Level 7
 
Posts: 1778
Joined: Mon Mar 22, 2010 3:21 pm
Location: UK Lake District

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby uzername on Sun Jul 21, 2013 2:03 am

caf4926 wrote:
KBD47 wrote:Probably a lot of people on this forum have an account there. Good idea to never use the same password in more than one place.

A lot of people use the same password everywhere FYI


A lot of people are dumb. :lol:
Linux counter #317716
User avatar
uzername
Level 3
Level 3
 
Posts: 118
Joined: Mon Feb 25, 2013 4:41 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby caf4926 on Sun Jul 21, 2013 2:13 am

A lot of people are dumb. :lol:


I couldn't possibly comment
Except to say, all of us have our moments.
Image
Mint 16 Cinnamon_64
User avatar
caf4926
Level 7
Level 7
 
Posts: 1778
Joined: Mon Mar 22, 2010 3:21 pm
Location: UK Lake District

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby Zill on Sun Jul 21, 2013 5:59 am

caf4926 wrote:A lot of people use the same password everywhere FYI

No excuse for that if you use a password manager such as Figaro's Password Manager 2 (it's in the repos).

In addition to securely storing passwords, it can also generate unique passwords and so there is no need to use the same password on multiple websites.

Code: Select all
sudo apt-get install fpm2
Last edited by Zill on Sun Jul 21, 2013 3:24 pm, edited 1 time in total.
User avatar
Zill
Level 2
Level 2
 
Posts: 79
Joined: Tue Sep 20, 2011 11:15 am
Location: Lincolnshire, UK

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby excollier on Sun Jul 21, 2013 6:37 am

I can just imagine the sheer delight from some quarters on hearing this news.
Registered Linux user #557695
CompTIA A+
KWheezy , Debian Wheezy 7.6 XFCE (headless on an old P4 desktop), SolydX BE, Raspberry Pi
excollier
Level 4
Level 4
 
Posts: 309
Joined: Mon Oct 01, 2012 3:31 pm
Location: Way off centre.

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby caf4926 on Sun Jul 21, 2013 6:57 am

excollier wrote:I can just imagine the sheer delight from some quarters on hearing this news.

Not sure what to make of that.
Image
Mint 16 Cinnamon_64
User avatar
caf4926
Level 7
Level 7
 
Posts: 1778
Joined: Mon Mar 22, 2010 3:21 pm
Location: UK Lake District

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby excollier on Sun Jul 21, 2013 7:05 am

Well, one forum in particular has a cohort that simply despise anything Ubuntu, and anyone "bad enough" to even speak of it, let alone use it or participate on it's forum.(and that includes using, or approving of, Linux Mint).
Not all of them, just a hard core.
Registered Linux user #557695
CompTIA A+
KWheezy , Debian Wheezy 7.6 XFCE (headless on an old P4 desktop), SolydX BE, Raspberry Pi
excollier
Level 4
Level 4
 
Posts: 309
Joined: Mon Oct 01, 2012 3:31 pm
Location: Way off centre.

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby uzername on Sun Jul 21, 2013 1:10 pm

Zill wrote:
caf4926 wrote:A lot of people use the same password everywhere FYI

No excuse for that if you use a password manager such as Figaro's Password Manager 2] (it's in the repos).

In addition to securely storing passwords, it can also generate unique passwords and so there is no need to use the same password on multiple websites.

Code: Select all
sudo apt-get install fpm2


Or try KeepassX - I can't live without it! Also in the repos.

http://www.keepassx.org/
Linux counter #317716
User avatar
uzername
Level 3
Level 3
 
Posts: 118
Joined: Mon Feb 25, 2013 4:41 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby daveinuk on Sun Jul 21, 2013 2:00 pm

I find it kinda sad that people have an obsession like that about an OS, maybe they need some addditional hobbies :|

I didn't frequent the ubuntu forums much after my conversion to Mint so does that mean everyone will have to recreate their accounts again when it's back or will they just force a password change ?
Lenovo ThinkPad T61 LM16-64 bit Intel T7500/2.2GHz/Cinammon 1.8 Intel GM965. Toshiba Satellite M70: LM16-32bit. Desktop:LM13 Maya 64 bit, on new Intel 3.2ghz proc/asus MB/8gb RAM
User avatar
daveinuk
Level 5
Level 5
 
Posts: 958
Joined: Tue Mar 23, 2010 7:52 pm
Location: Manchester, England.

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby sammiev on Sun Jul 21, 2013 2:18 pm

I would likely expect to see the same post here in a few days. The hackers will likely be here next if they have not already. Change your passwords on both sites.
User avatar
sammiev
Level 3
Level 3
 
Posts: 143
Joined: Sat May 19, 2012 12:16 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby /dev/urandom on Sun Jul 21, 2013 4:16 pm

Ubuntu forums, the most unfriendly place on the internet.
No sympathy.
Linux is not the only answer! :: eD2k/Kad mirrors for Linux Mint and LMDE.
Users who misspell "Windows" as "Windoze" intentionally will be considered stupid.

Image
User avatar
/dev/urandom
Level 4
Level 4
 
Posts: 464
Joined: Sun Jul 17, 2011 8:02 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby Nilla Wafer on Sun Jul 21, 2013 5:45 pm

/dev/urandom wrote:Ubuntu forums, the most unfriendly place on the internet.
No sympathy.


I take it you haven't been on many forums. I find Ubuntu Forums one of the most friendly places on the 'net.

~nilla
User avatar
Nilla Wafer
Level 3
Level 3
 
Posts: 121
Joined: Sun Jun 30, 2013 6:11 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby /dev/urandom on Sun Jul 21, 2013 5:47 pm

Oh, I have. But if you go to the Ubuntu forums and criticize anything that's related to Ubuntu, you're flamed quite instantly.
If you want to talk about the command line instead of doing anything via X11, you're flamed quite instantly.
Etc.

Those are arrogant.
Linux is not the only answer! :: eD2k/Kad mirrors for Linux Mint and LMDE.
Users who misspell "Windows" as "Windoze" intentionally will be considered stupid.

Image
User avatar
/dev/urandom
Level 4
Level 4
 
Posts: 464
Joined: Sun Jul 17, 2011 8:02 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby craig10x on Sun Jul 21, 2013 8:35 pm

/dev/urandom wrote:Oh, I have. But if you go to the Ubuntu forums and criticize anything that's related to Ubuntu, you're flamed quite instantly.
If you want to talk about the command line instead of doing anything via X11, you're flamed quite instantly.
Etc.

Those are arrogant.


The problem on the ubuntu forums is when someone registers just to "troll"...they will make some stupid post about how ubuntu totally screwed up their computer or some other ridiculous nonsense and usually get locked pretty quickly...

Other then that...open discussion is welcome and there are many people who are very helpful with solving problems...including for beginners in that section as well...
and i have had plenty of friendly discussions with people who disagreed with me over there...as long as you don't go "overboard" the moderators don't delete the posts...
craig10x
Level 7
Level 7
 
Posts: 1502
Joined: Fri Jul 03, 2009 12:44 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby AdrianCohea on Mon Jul 22, 2013 1:36 am

I feel like this is a pretty good time to point out how great passphrase managers are. People have like 50 accounts and get lazy, so they start reusing their weak passphrases. As a result of this fact, there's like 100% guarantee that someone's online bank account is going to get penetrated after a breach at any online service.
Last edited by xenopeek on Mon Jul 22, 2013 4:03 am, edited 1 time in total.
Reason: Removed colored text
With love and support,
Ziester Adrian (PGP Public Key: 4096R/df190bc1)

Image
User avatar
AdrianCohea
Level 1
Level 1
 
Posts: 8
Joined: Sun Jul 21, 2013 10:34 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby /dev/urandom on Mon Jul 22, 2013 1:37 am

Depends on 1) how they generate their passphrases and 2) where they store the databases. A KeePass database secured with one of your only 3 passwords in the Canonical cloud is maybe not the best idea.
Linux is not the only answer! :: eD2k/Kad mirrors for Linux Mint and LMDE.
Users who misspell "Windows" as "Windoze" intentionally will be considered stupid.

Image
User avatar
/dev/urandom
Level 4
Level 4
 
Posts: 464
Joined: Sun Jul 17, 2011 8:02 pm

Re: Ubuntu Forums Hacked - Do you have an account there!

Postby daveinuk on Mon Jul 22, 2013 6:54 am

I tend to keep a copy of my usernames/passes in my version of a password manager which is a tatty old small notebook that I very much doubt anyone would be likely to steal even if they could break in and manage to find it, or know what it was :|

Usernames are normally partial as are email addresses and passwords, there's only me that would ever 'get it', I sleep soundly at night with no worries about my online banking, password managers may be ok but the details on the machine, which is more likely to be taken than a scruffy notebook, sometimes you just can't beat a pen and paper :)

Edit: this is a good little site for anyone that has trouble thinking them up

https://www.random.org/passwords/
Lenovo ThinkPad T61 LM16-64 bit Intel T7500/2.2GHz/Cinammon 1.8 Intel GM965. Toshiba Satellite M70: LM16-32bit. Desktop:LM13 Maya 64 bit, on new Intel 3.2ghz proc/asus MB/8gb RAM
User avatar
daveinuk
Level 5
Level 5
 
Posts: 958
Joined: Tue Mar 23, 2010 7:52 pm
Location: Manchester, England.

Linux Mint is funded by ads and donations.
 
Next

Return to Chat about Linux

Who is online

Users browsing this forum: No registered users and 2 guests