Ubuntu site hacked -passwords and usernames stolen!

The newest distros the lastest Nvidia driver, gadgets .....

Moderators: b1o, jkerr82508

User avatar
viking60
Über-Berserk
Posts: 9301
Joined: 14 Mar 2010, 16:34

Ubuntu site hacked -passwords and usernames stolen!

Postby viking60 » 21 Jul 2013, 22:41

This looks bad:
http://ubuntuforums.org/announce.html?t=1506564
Here is the content:
Ubuntu Forums is down for maintenance

There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore normal operations. This page will be updated regularly with progress reports.

What we know

Unfortunately the attackers have gotten every user's local username, password, and email address from the Ubuntu Forums database.
The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.
Progress report

2013-07-20 2011UTC: Reports of defacement
2013-07-20 2015UTC: Site taken down, this splash page put in place while investigation continues.
If you're using Ubuntu and need technical support please see the following page for support:
Finding Help.
If you're looking for a place to discuss Ubuntu, in the meantime we encourage you to check out these sites:

The Ubuntu subreddit
The Ubuntu Community on Google+
Ubuntu Discourse

If you are registered in the forums and use the same password elsewhere change your password now. :T (In fact: Just do it anyway +1 )
All users registered at Ubuntu have gotten their Userid and passwords "stolen".

It looks like the official Ubuntu forum has been truly FUBARED.
Manjaro 64bit on the main box -Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz and nVidia Corporation GT200b [GeForce GTX 275] (rev a1. + Centos on the server - Arch on the laptop.
"There are no stupid questions - Only stupid answers!"

User avatar
dedanna1029
Sound-Berserk
Posts: 8522
Joined: 14 Mar 2010, 20:29
Contact:

Re: Ubuntu site hacked -passwords and usernames stolen!

Postby dedanna1029 » 22 Jul 2013, 02:14

Wow. Someone's pissed at them but good.

I don't know about you, but I'm mighty glad I either don't have a user/password there, or haven't used it in so many years that I've forgotten I have it, therefore don't really have to care very much.

There's several ways to look at how/why this happened, I guess. It all boils down to the same thing. Someone's either got too much time on their hands, maybe something happened at the forum to tick someone off, it's even possible I guess that someone hates Canonical that much. I'm thinking though that if someone hates them that much, they would have had the other sites hacked, too.

Disgruntled employee/moderator perhaps?
I'd rather be a free person who fears terrorists, than be a "safe" person who fears the government.
No gods, no masters.
"A druid is by nature anarchistic, that is, submits to no one."
http://uk.druidcollege.org/faqs.html

User avatar
viking60
Über-Berserk
Posts: 9301
Joined: 14 Mar 2010, 16:34

Re: Ubuntu site hacked -passwords and usernames stolen!

Postby viking60 » 22 Jul 2013, 02:59

:confused This is totally unacceptable though.- whoever is behind it.
Manjaro 64bit on the main box -Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz and nVidia Corporation GT200b [GeForce GTX 275] (rev a1. + Centos on the server - Arch on the laptop.
"There are no stupid questions - Only stupid answers!"

User avatar
dedanna1029
Sound-Berserk
Posts: 8522
Joined: 14 Mar 2010, 20:29
Contact:

Re: Ubuntu site hacked -passwords and usernames stolen!

Postby dedanna1029 » 22 Jul 2013, 03:25

Oh yeah, definitely wrong for sure. I think a lot of times for someone to even think of being that destructive, they have got to be a psycho.
I'd rather be a free person who fears terrorists, than be a "safe" person who fears the government.
No gods, no masters.
"A druid is by nature anarchistic, that is, submits to no one."
http://uk.druidcollege.org/faqs.html

User avatar
viking60
Über-Berserk
Posts: 9301
Joined: 14 Mar 2010, 16:34

Re: Ubuntu site hacked -passwords and usernames stolen!

Postby viking60 » 22 Jul 2013, 12:25

+1 I have said it many times:
The NSA should stop doing this :mrgreen:
Manjaro 64bit on the main box -Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz and nVidia Corporation GT200b [GeForce GTX 275] (rev a1. + Centos on the server - Arch on the laptop.
"There are no stupid questions - Only stupid answers!"

User avatar
dedanna1029
Sound-Berserk
Posts: 8522
Joined: 14 Mar 2010, 20:29
Contact:

Re: Ubuntu site hacked -passwords and usernames stolen!

Postby dedanna1029 » 23 Jul 2013, 07:15

That they should! :lol:
I'd rather be a free person who fears terrorists, than be a "safe" person who fears the government.
No gods, no masters.
"A druid is by nature anarchistic, that is, submits to no one."
http://uk.druidcollege.org/faqs.html

User avatar
viking60
Über-Berserk
Posts: 9301
Joined: 14 Mar 2010, 16:34

Re: Ubuntu site hacked -passwords and usernames stolen!

Postby viking60 » 26 Jul 2013, 22:01

Must be pretty serious - the site is not up yet.
Manjaro 64bit on the main box -Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz and nVidia Corporation GT200b [GeForce GTX 275] (rev a1. + Centos on the server - Arch on the laptop.
"There are no stupid questions - Only stupid answers!"

User avatar
dedanna1029
Sound-Berserk
Posts: 8522
Joined: 14 Mar 2010, 20:29
Contact:

Re: Ubuntu site hacked -passwords and usernames stolen!

Postby dedanna1029 » 28 Jul 2013, 02:24

Interesting.
I'd rather be a free person who fears terrorists, than be a "safe" person who fears the government.
No gods, no masters.
"A druid is by nature anarchistic, that is, submits to no one."
http://uk.druidcollege.org/faqs.html


Return to “Linux News”