Canonical, the company behind the Ubuntu operating system, has suffered a massive data breach on its forums. All usernames, passwords, and email addresses were stolen.
It's gonna stain Ubuntu's reputation with regards to their upcoming phone unfortunately. I'm sure that was the intended purpose. Press is gonna be all over this once Ubuntu Edge launches. Mark my words.
Already changed my credentials everywhere where they were similar. It does sadly look pretty bad for Ubuntu. Linux is always touted for security and this surely will not benefit that image.
Already changed my credentials everywhere where they were similar. It does sadly look pretty bad for Ubuntu. Linux is always touted for security and this surely will not benefit that image.
Just got an email saying my account was compromised as well... That sucks. I don't use Ubuntu anymore though I Moved on to OpenSuse. Hopefully this exploit that the hackers used is isolated to Ubuntu only.
I was just starting the process of changing all of my awful passwords to long, complex, and different ones because I just found a cross-platform tool called KeePass to manage my passwords on a USB stick. Hopefully they don't brute force my password before I finish changing everything
People are dense and take it as a sign that anything related to them isn't as secure or whatever. It's just people getting ideas off baseless information, happens all the time, but when the masses are uninformed sheep when it comes to technology it's the reality.
I had an account there. I haven't logged into it in about 3 years. I'm sure that over half of the 1.82 million accounts are one and dones. The pretentious attitude was enough to turn me away. Like most forums a lot of people are helpful but a few "hipsters" really ruin it for everyone.
Just got an email saying my account was compromised as well... That sucks. I don't use Ubuntu anymore though I Moved on to OpenSuse. Hopefully this exploit that the hackers used is isolated to Ubuntu only.
If you read carefully it says that encrypted passwords were stolen. Highly doubt the hackers will go to the trouble of decrypting all 1.82m passwords, if they can even decrypt them in the first place.
Most of the time when an article says "hackers" it is just some average guy using an exploit that is already well known.
If you read carefully it says that encrypted passwords were stolen. Highly doubt the hackers will go to the trouble of decrypting all 1.82m passwords, if they can even decrypt them in the first place.
Most of the time when an article says "hackers" it is just some average guy using an exploit that is already well known.
They can't decrypt them, all passwords are hashed before being saved to the database. Then when you login, the password you entered is hashed using the same algorithm and compared to the one they have stored.
The title specifically states "Ubuntu forums hacked." That doesn't look misleading at all to me. The only way I could find it misleading is if you just glance over the title and somehow miss the word "forums."
They can't decrypt them, all passwords are hashed before being saved to the database. Then when you login, the password you entered is hashed using the same algorithm and compared to the one they have stored.
........
Hackers have databases or dictionaries of hashes for some simple passwords: 'password,' 'Johnny,' '12345' etc. The algorithm can be reverse engineered... well, at least in theory. Just google 'hashes dictionary' or such.
Salted-hashes take more time - computing power, that is - and probably not worthy cracking. Look for 'salt cryptography.'
Just use passwords longer than 8 characters and non dictionary words. For numbers - say, granny's birthdate, use the upper signs [Shift + Key] on the numeric keys; eg: 12345=!@#$%.
This is an older thread, you may not receive a response, and could be reviving an old thread. Please consider creating a new thread.
Related Threads
?
?
?
?
?
Ask a question
Ask a question
Overclock.net
27.8M posts
541.2K members
Since 2004
A forum community dedicated to overclocking enthusiasts and testing the limits of computing. Come join the discussion about computing, builds, collections, displays, models, styles, scales, specifications, reviews, accessories, classifieds, and more!