Ubuntu Forums Get Breached, 2 Million Users/Emails/IPs

[phoronix]

Phoronix: Ubuntu Forums Get Breached, 2 Million Users/Emails/IPs

Through an SQL injection vulnerability, the Ubuntu Forums were penetrated, as disclosed this morning by Canonical...

http://www.phoronix.com/scan.php?page=news_item&px=Ubuntu-Forums-Breached

[bobwya]

That's bad. Real bad.

[blackout23]

Again?

http://www.theregister.co.uk/2013/07/21/ubuntu_forums_breached_18_passwords_pinched/

[Krysto]

Was the forum protected by a "secure snap"?

[Up123]

Was the forum protected by a "secure snap"?

Definitely not.

They should really consider outsourcing their forums.

[Dick Palmer]

That's bad. Real bad.

Doesn't strike me as that bad... "No passwords were compromised" so presumably they had appropriately salted/hashed and/or segregated authentication in place...

[Scellow]

That's what happens when you only distribute outdated package, and release LTS OS

Ubuntu it's time to change

[nomadewolf]

I wonder how hard it was penetrated...

[eydee]

Were they running Windows Server?

[Tomin]

Doesn't strike me as that bad... "No passwords were compromised" so presumably they had appropriately salted/hashed and/or segregated authentication in place...

I think they have been using OpenID since the previous breach.