newsNews: Gna! frontend back - change your passwords

 
 
Show feedback again
Latest News
Gna.org SSL certificate renewed posted by zerodeux, Thu 24 Apr 2014 07:13:06 AM UTC - 0 replies
Heartbleed status and measures posted by beuc, Wed 09 Apr 2014 09:47:29 AM UTC - 0 replies
mail subsystem automatically reinstalled posted by beuc, Sat 08 Mar 2014 11:02:17 PM UTC - 0 replies
Reboot posted by beuc, Tue 04 Mar 2014 10:14:15 PM UTC - 2 replies
download+homepage subsystem automatically reinstalled posted by beuc, Sun 02 Mar 2014 09:53:20 PM UTC - 8 replies
[122 news in archive]

Gna! frontend back - change your passwords

Item posted by Beuc <beuc> on Thu 02 Dec 2010 10:24:16 PM UTC.

Following the password compromise at Savannah, which is also running the Savane Forge, we took the frontend down so we could investigate.

The (earlier) version at Gna! appears not to be impacted by the SQL injection. However it also uses (weak) MD5 hashes for storing encrypted passwords.

We took this opportunity to upgrade Savane, and have reset the passwords for safety (all the more since some people have the same password on both websites). We now use crypt(3) with SHA-512.

To change your password, you need to click on "Login" link on the left, and then on "Lost your password?".

Comments:

Message: 21691
Re: Gna! frontend back - change your password (posted by socialpinger, Thu 03 Apr 2014 06:21:26 PM UTC)

It is in reality a great and helpful piece of information. I am happy that you simply shared this useful information with us. Please keep us up to date like this. Thanks for sharing.
great issues altogether, you simply received a emblem new reader. What could you suggest about your submit that you made some days ago? Any positive?

http://socialpinger.net/google-plus-service

Thread Author Date
Re: Gna! frontend back - change your passwordsocialpingerThu 03 Apr 2014 06:21:26 PM UTC

 

Post a followup to this message

You could post if you were logged in
Show feedback again

Back to the top


Powered by Savane 3.1-cleanup