Shoutbox

I got this email!

quote:

---

The Spread Firefox Team became aware this week that the server hosting
Spread Firefox, our community marketing site, has been accessed by
unknown remote attackers who attempted to exploit a security
vulnerability in TWiki software installed on the server.  The TWiki
software was disabled as soon as we were aware of the attempts to access
SpreadFirefox.com.  This exploit was limited to SpreadFirefox.com and
did not affect mozilla.org web sites or Mozilla software.

We have scanned Spread Firefox servers and at this time do not believe
any sensitive data was taken, but as a precautionary measure we have
shutdown the site and will be rebuilding the web site from scratch.  We
also recommend that you change your Spread Firefox password and the
password of any accounts where you use the same password as your Spread
Firefox account.  We will notify you again when the site is back up with
instructions on how to change your password. (Note: We do use MD5
hashing on the passwords, but MD5 cannot protect all passwords against
off-line dictionary style attacks.)

After Spread Firefox was compromised in July, we instituted procedures
to ensure that we apply all security fixes to the software running the
site (Drupal and PHP) as soon as they become available.  Unfortunately,
those procedures overlooked the installation of the TWiki software since
it is not used by the main Spread Firefox site.  When the system is
rebuilt, all the software will be audited to ensure that security
updates will be applied in a timely manner.  We deeply regret this
incident and any inconvenience this may have caused you. Sincerely,

Spread Firefox Team
Mozilla

---

Almost hacked? It was hacked!

Although the site seemed to have been left intact, they didn't have verbose logs of all activity, so have taked the site offline, and instead, placed a "We're sorry!" HTML page.

Actually, the page is calling itself HTML, but isn't really, two whole uncloses <div>s by the people who call themselves crusaders for web standards.

Good thing my password was the wierd random one I got when I reset my password .

How old is this? I remember reading this on a news site a little while ago.

Could this be a fake? If not then thats frightening!

quote:

---

Originally posted by linx05
How old is this? I remember reading this on a news site a little while ago.

---

I got the mail this morning.

hmmmm...why are you happy about your password i dont understand  explain

If they hackers got my password, then thay can do almost nothing with it. The password has no relevance to me. It was meant to be changed by me after I logged in, but i was too lazy, and it is (was?) still some jibberish.

what is this spreadfirefox exactly?

Hasnt this happened before?

I swear ive got that message months ago.

quote:

---

Originally posted by -rafy-
Hasnt this happened before?

I swear ive got that message months ago.

---

I swear I read about this one some news site a while ago. Unless they've kept that one quiet and this is a new one. Or they are just slow at emailing the news out?