See, I bought a snowblower this year after hurting my back from last year's shoveling. So obviously, no snow.
I apologize for screwing up the weather this winter.
Well yeah. Getting a Brazilian was listed as an important step on the forum I was using to get my wireless card working. And I got it working so the wax job must have helped, right?
We are assuming that the attackers have a copy of the JIRA database, which includes a hash (SHA-512 unsalted) of the password you set when signing up as [redacted] to JIRA. If the password you set was not of great quality (eg. based on a dictionary word), it should be assumed that the attackers can guess your password from the password hash via brute force.
The upshot is that someone malicious may know both your email address and a password of yours.
This is a problem because many people reuse passwords across online services. If you reuse passwords across systems, we urge you to change your passwords on ALL SYSTEMS that might be using the compromised JIRA password. Prime examples might be gmail or hotmail accounts, online banking sites, or sites known to be related to your email's domain, [redacted].
Naturally we would also like you to reset your JIRA password. That can be done at:
We (the Apache JIRA administrators) sincerely apologize for this security breach. If you have any questions, please let us know by email. We are also available on the #asfinfra IRC channel on irc.freenode.net.
Someone should really check out the source, just to be sure it doesn't contain hidden subliminal "You Love Microsoft" messages. A good way to brainwash people is to interfere with their education...
Slashdot Mirror
See, I bought a snowblower this year after hurting my back from last year's shoveling. So obviously, no snow. I apologize for screwing up the weather this winter.
Willful tech slaves: I, for one, welcome our super-hearing microphone overlords!
Well yeah. Getting a Brazilian was listed as an important step on the forum I was using to get my wireless card working. And I got it working so the wax job must have helped, right?
I received this from Apache just moments ago. It may clear up some questions. I redacted personal info.
Dear [redacted],
You are receiving this email because you have a login, [redacted], on the Apache JIRA installation, https://issues.apache.org/jira/
On April 6 the issues.apache.org server was hacked. The attackers were able to install a trojan JIRA login screen and later get full root access:
https://blogs.apache.org/infra/entry/apache_org_04_09_2010
We are assuming that the attackers have a copy of the JIRA database, which includes a hash (SHA-512 unsalted) of the password
you set when signing up as [redacted] to JIRA. If the password you set was not of great quality (eg. based on a dictionary word), it
should be assumed that the attackers can guess your password from the password hash via brute force.
The upshot is that someone malicious may know both your email address and a password of yours.
This is a problem because many people reuse passwords across online services. If you reuse passwords across systems, we urge you to change
your passwords on ALL SYSTEMS that might be using the compromised JIRA password. Prime examples might be gmail or hotmail accounts, online
banking sites, or sites known to be related to your email's domain, [redacted].
Naturally we would also like you to reset your JIRA password. That can be done at:
https://issues.apache.org/jira/secure/ChangePassword!default.jspa
We (the Apache JIRA administrators) sincerely apologize for this security breach. If you have any questions, please let us know by email.
We are also available on the #asfinfra IRC channel on irc.freenode.net.
Regards,
The Apache Infrastructure Team
Someone should really check out the source, just to be sure it doesn't contain hidden subliminal "You Love Microsoft" messages. A good way to brainwash people is to interfere with their education...
So will IBM then try to get a patent for "Winning Jeopardy", then all the contestants have to pay royalties if they win?