Ubuntu alert

ICIT2LOL · 25 Jul 2013

I didn't know where to put this so I thought s it was a security matter for those of the membership who use Ubuntu I found this in my old mail address this morning dated 24/7/2013.

Hello,

You are receiving this message because you have an account registered with this address on ubuntuforums.org.

The Ubuntu forums software was compromised by an external attacker. As a result, the attacker has gained access to read your username, email address and an encrypted copy of your password from the forum database.

If you have used this password and email address to authenticate at any other website, you are urged to reset the password on those accounts immediately as the attacker may be able to use the compromised personal information to access these other accounts. It is important to have a distinct password for different accounts.

The ubuntuforums.org website is currently offline and we are working to restore this service. Please take the time to change your ubuntuforums.org account password when service is restored.

We apologize for any inconvenience to the Ubuntu community, thank you for your understanding.

The Canonical Sysadmins.

Britton30 · 28 Jul 2013

That sounds like a typical scam. If there were any links in the email DO NOT click on them, just ignore it.

ICIT2LOL · 28 Jul 2013

Britton30 said:

That sounds like a typical scam. If there were any links in the email DO NOT click on them, just ignore it.

Righto mate I did have a tiny thought when I saw your account but it seemed genuine. Anyway there wasn't any links so I haven't clicked on anything the only ones I do are here as a general rule.

madcratebuilder · 28 Jul 2013

Not a scam.

Ubuntu Forums is down for maintenance

There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore normal operations. This page will be updated with progress reports.
What we know

Unfortunately the attackers have gotten every user's local username, password, and email address from the Ubuntu Forums database.
The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP.
Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach.

Progress report

2013-07-20 2011UTC: Reports of defacement
2013-07-20 2015UTC: Site taken down, this splash page put in place while investigation continues.
2013-07-21: we believe the root cause of the breach has been identified. We are currently reinstalling the forums software from scratch. No data (posts, private messages etc.) will be lost as part of this process.
2013-07-22 -> 2013-07-25: work on reinstalling the forums continues.
2013-07-26: the forums are up running again and being tested privately by Forum administrators.

If you're using Ubuntu and need technical support please see the following page for support:

Finding Help.

If you're looking for a place to discuss Ubuntu, in the meantime we encourage you to check out these sites:

ICIT2LOL · 28 Jul 2013

Ok madcrater was not real sure and I thought if it was genuine those who use it - I do from time to time for fixing stuff:)

Britton30 · 28 Jul 2013

That's good to know Mr. Bengal.