Re^3: It's Time for Everyone to Change Passwords!

[tirwhan]

however the hack ia few month old already : Fri Apr 15

I'm guessing, but from comments in the CB I've gathered that the server that was hacked was an old machine, which is still up but no longer in active use. So the hack might very well be more recent, with only older information being disclosed.

[m0ve]

the info might be old but i guess most people don't change their passwords every few months so most of those passwords might be working.

[tirwhan]

so most of those passwords might be working

Oh yeah, absolutely. And even if someone has changed their password between Apr. 15th and now they should still change it again now (and probably again after the gods declare the crisis to be over) just to be sure.

I just mentioned this (i.e. the date of the information not necessarily indicating when the hack occurred) to prevent a false sense of security (as in "Oh well, nothing bad has happened since April so I guess it's ok").

[m0ve]

i agree, however i think the hack was done just to prove the site is vulnerable.



There is a really simple reason we owned PerlMonks: we couldn't resist
+ more than 50,000 unencrypted programmer passwords.

[snip]

These Perl guys are alright, just a little dumb apparently.
A lot of them reuse.

else they would have done what they usually do : rm -rf /*

update : if they knew it wasn't an active box there may have been not much of a point to rm -rf /* but i guess they could have still shut perlmonks down with the obtained data...