Mageia passwords hacked!

Well it is a family: Mandriva Mageia ROSA Unity PCLOS. Brothers and sisters living together in perfect harmony - so it deserved som space of its own.

Moderators: b1o, jkerr82508

Forum rules
Post Reply
User avatar
viking60
Über-Berserk
Posts: 9344
Joined: 14 Mar 2010, 16:34

Mageia passwords hacked!

Postby viking60 » 25 Feb 2018, 00:04

The Mageia project is experiencing a security problem:

The LDAP database has been hacked so the attacker has published the emails Names and also password hashes for all uses registered om https://identity.mageia.org :berserkf

That may also include my identities there :berserk2

The project has reacted by resetting all passwords.

This would mean that you cannot log in at Mageia anymore and must change/reset your password over there too.

The exciting part would be how this could happen....and nobody has a clue! :C

The very configuration of LDAP servers should prevent stuff like this.

So if you use your Mageia password here - CHANGE IT! ..and do the same on every other forum where you are using your Mageia password.

More here
Manjaro 64bit on the main box -Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz and nVidia Corporation GT200b [GeForce GTX 275] (rev a1. + Centos on the server - Arch on the laptop.
"There are no stupid questions - Only stupid answers!"
Top
User avatar
R_Head
Berserk
Posts: 2784
Joined: 17 Mar 2010, 15:40

Re: Mageia passwords hacked!

Postby R_Head » 25 Feb 2018, 17:30

How this happen? I thought the Mageia developers were smarter. Could it be an inside job? :think:
Top
User avatar
viking60
Über-Berserk
Posts: 9344
Joined: 14 Mar 2010, 16:34

Re: Mageia passwords hacked!

Postby viking60 » 25 Feb 2018, 22:48

It is hard to say.

Maby someone exploited the CPU flaw from Intel that has been around for 6 months before anybody cared to inform about it :confused

In that case there is no way of telling and the Mageia people can be smart as hell...and stll have no way of discovering it...

Computing has simply become unsafe due to crappy hardware...and that is not Mageias fault.

If it is something else then it should not have happened in the first place or someone really must have fubared the server configuration.

There is no way for us to know...

It will be interesting to see what the Mageia gurus come up with, because there must be an explanation at some point. My data are compromised by Mageia servers - and I want to know what happened (If it is possible).
Manjaro 64bit on the main box -Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz and nVidia Corporation GT200b [GeForce GTX 275] (rev a1. + Centos on the server - Arch on the laptop.
"There are no stupid questions - Only stupid answers!"
Top
User avatar
dedanna1029
Sound-Berserk
Posts: 8727
Joined: 14 Mar 2010, 20:29
Contact:
Contact dedanna1029

Re: Mageia passwords hacked!

Postby dedanna1029 » 12 Mar 2018, 00:25

"My data are compromised by Mageia servers - and I want to know what happened (If it is possible)."

There is a solution to that. Don't give any site any data to compromise...
I'd rather be a free person who fears terrorists, than be a "safe" person who fears the government.
No gods, no masters.
"A druid is by nature anarchistic, that is, submits to no one."
http://uk.druidcollege.org/faqs.html
Top
User avatar
R_Head
Berserk
Posts: 2784
Joined: 17 Mar 2010, 15:40

Re: Mageia passwords hacked!

Postby R_Head » 12 Mar 2018, 13:03

Amen to that K +1
Top
Post Reply

Return to “The Mandriva family”