http://www.perlmonks.org?node_id=784273


in reply to Re^3: What happened?
in thread What happened?

Yes, but still people should change their passwords *now*. And *again* when the problems have been fixed.

If your password is listed, anyone can use your password to change your posts, or worse: change your password so you can't change it yourself, later.

If you change it now, your new (temporary) password would still be stored in clear text, on a possibly insecure host (although apparently the passwords were stolen from a disused server), but getting it would require significant effort as opposed to just reading a magazine that has probably been copied over a million times already.

Replies are listed 'Best First'.
Re^5: What happened?
by Anonymous Monk on Jul 30, 2009 at 03:23 UTC
    users who havent logged into perlmonks in over a year should have their passwords changed by gods