If you have an account on SourceForge.net, then you need to reset your password now
Posted by jpluimers on 2011/01/31
If you have an account on SourceForge.net, then now you need to reset your password by visiting https://sourceforge.net/account/registration/recover.php.
SourceForge.net was attacked recently (the whole story is on exploit-DB), so they are requesting everyone to reset their passwords.
I got a mail about it last weekend, and their blog now contains this message:
SourceForge.net passwords reset
Posted on Friday, January 28th, 2011 by admin
Category: General
We recently experienced a directed attack on SourceForge infrastructure (http://sourceforge.net/blog/sourceforge-net-attack/) and so we are resetting all passwords in the sf.net database — just in case.
Our investigation uncovered evidence of password sniffing attempts. We have no evidence to suggest that the sniffing attempt was completed successfully. But, what we definitely don’t want is to find out in 2 months that passwords were compromised and we didn’t take action.
So, we’ve invalidated all sourceforge.net account passwords, and to access the site again, everyone will need to go through the email recovery process and choose a shiny new password:
https://sourceforge.net/account/registration/recover.php
We have received a lot of support and sympathy from our community, and I know our ops team is immensely grateful for all of it. Thanks again for your patience with us as we work to respond to this attack. We’ll be working through the weekend to get things back to normal as quickly as possible.
–jeroen
via: SourceForge.net: SourceForge.net passwords reset.
Leave a Reply