Beefy Boxes and Bandwidth Generously Provided by pair Networks
Syntactic Confectionery Delight
 
PerlMonks  

Re^3: What happened?

by jrsimmon (Hermit)
on Jul 29, 2009 at 15:25 UTC ( #784266=note: print w/ replies, xml ) Need Help??


in reply to Re^2: What happened?
in thread What happened?

Evidently they were stored plain text. Until someone updates the users that the breach has been closed and the passwords are actually being stored in a sane manner, you should expect that people who care to do so have full access to your profile.


Comment on Re^3: What happened?
Re^4: What happened?
by Juerd (Abbot) on Jul 29, 2009 at 15:35 UTC
    Yes, but still people should change their passwords *now*. And *again* when the problems have been fixed.

    If your password is listed, anyone can use your password to change your posts, or worse: change your password so you can't change it yourself, later.

    If you change it now, your new (temporary) password would still be stored in clear text, on a possibly insecure host (although apparently the passwords were stolen from a disused server), but getting it would require significant effort as opposed to just reading a magazine that has probably been copied over a million times already.

      users who havent logged into perlmonks in over a year should have their passwords changed by gods

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://784266]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others exploiting the Monastery: (8)
As of 2014-07-13 04:31 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    When choosing user names for websites, I prefer to use:








    Results (246 votes), past polls