Subject: [ubuntu-mx] Fwd: Security issue on Ubuntu Forums - IMPORTANT for all members on it

From: Federico Torres <[email-masked]>
Date: Sun, 21 Jul 2013 09:23:17 -0500

Para los que tengan cuenta en ubuntuforums...

Saludos

---------- Forwarded message ----------
From: George Christofis <[email-masked]>
Date: 2013/7/21
Subject: Security issue on Ubuntu Forums - IMPORTANT for all members on it
To: "Ubuntu local community team (LoCo) contacts"
<[email-masked]>

Due to a security breach Ubuntu Forums is down.

Please let your loco members know what they must do if they have an
account on Ubuntu Forums.

You can read below the official announcement from
http://ubuntuforums.org/announce.html

Ubuntu Forums is down for maintenance

There has been a security breach on the Ubuntu Forums. The Canonical
IS team is working hard as we speak to restore normal operations. This
page will be updated regularly with progress reports.

What we know

Unfortunately the attackers have gotten every user's local username,
password, and email address from the Ubuntu Forums database.
The passwords are not stored in plain text. However, if you were using
the same password as your Ubuntu Forums one on another service (such
as email), you are strongly encouraged to change the password on the
other service ASAP.
Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT
affected by the breach.

Progress report

2013-07-20 2011UTC: Reports of defacement
2013-07-20 2015UTC: Site taken down, this splash page put in place
while investigation continues.

If you're using Ubuntu and need technical support please see the
following page for support:

Finding Help.

If you're looking for a place to discuss Ubuntu, in the meantime we
encourage you to check out these sites:

The Ubuntu subreddit
The Ubuntu Community on Google+
Ubuntu Discourse

--
loco-contacts mailing list
[email-masked]
https://lists.ubuntu.com/mailman/listinfo/loco-contacts

---

From: Adolfo Jayme Barrientos <[email-masked]>
Date: Sun, 21 Jul 2013 11:46:25 -0500

Gracias por el FYI. Si han reutilizado su contraseña de Ubuntu Forums
en otros sitios, ¡me parece que es tiempo de cambiarla! =)

(Creo que ya se habían tardado en hackear el foro de Ubuntu. No me
malinterpreten, quiero decir que históricamente los sitios con
software tipo VBulletin o phpBB son MUY vulnerables. Antes solía ser
administrador de unos cuantos foros de este tipo, y este tipo de
hackeos no es una cosa rara).