專供Ubuntu開發人員交流的官方論壇Ubuntuforums.org在周六(7/20)宣布被駭客入侵並關站進行維修。
2004年設立的Ubuntuforums.org現有超過180萬的註冊會員,一開始是由Ryan Troy所建立,一直到2006年才交由Canonical代管,Canonical並在2007年取得Ubuntuforums.org的網域名稱、授權與其他相關資產。
現在連至Ubuntuforums.org仍出現該站正在進行維護的訊息,同時也坦承受到駭客入侵。該站表示,駭客已經自Ubuntu Forums的資料庫取得所有用戶的名稱、密碼,與郵件位址,雖然密碼採用雜湊加密,但Canonical仍強烈建議在其他網站使用同樣密碼的用戶儘快更新其他服務的密碼。
Ubuntu Forums is down for maintenance
There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore normal operations. This page will be updated regularly with progress reports.
What we know
- Unfortunately the attackers have gotten every user's local username, password, and email address from the Ubuntu Forums database.
- The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
- Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.
Progress report
- 2013-07-20 2011UTC: Reports of defacement
- 2013-07-20 2015UTC: Site taken down, this splash page put in place while investigation continues.
If you're using Ubuntu and need technical support please see the following page for support:
If you're looking for a place to discuss Ubuntu, in the meantime we encourage you to check out these sites:
嘿嘿~不要說是討論區,很顯然「Ubuntu」伺服器本身也一點都不安全!![]()
