newsNews: Gna! frontend back - change your passwords

 
 
Show feedback again
Latest News
Gna.org SSL certificate renewed posted by zerodeux, Thu 24 Apr 2014 07:13:06 AM UTC - 0 replies
Heartbleed status and measures posted by beuc, Wed 09 Apr 2014 09:47:29 AM UTC - 0 replies
mail subsystem automatically reinstalled posted by beuc, Sat 08 Mar 2014 11:02:17 PM UTC - 0 replies
Reboot posted by beuc, Tue 04 Mar 2014 10:14:15 PM UTC - 2 replies
download+homepage subsystem automatically reinstalled posted by beuc, Sun 02 Mar 2014 09:53:20 PM UTC - 8 replies
[122 news in archive]

Gna! frontend back - change your passwords

Item posted by Beuc <beuc> on Thu 02 Dec 2010 10:24:16 PM UTC.

Following the password compromise at Savannah, which is also running the Savane Forge, we took the frontend down so we could investigate.

The (earlier) version at Gna! appears not to be impacted by the SQL injection. However it also uses (weak) MD5 hashes for storing encrypted passwords.

We took this opportunity to upgrade Savane, and have reset the passwords for safety (all the more since some people have the same password on both websites). We now use crypt(3) with SHA-512.

To change your password, you need to click on "Login" link on the left, and then on "Lost your password?".

Comments:

Message: 21700
RE: I am still logged in. (posted by ralph53, Sat 09 Aug 2014 09:15:42 AM UTC)

It could be that many people do not know the technology and the tools. There are so many types of technology that you can combine it with this tool.
https://www.rebelmouse.com/venusfactor_reviews/fat-burning-workouts-for-women-655207817.html

Thread Author Date
I am still logged in.kernighThu 02 Dec 2010 10:27:37 PM UTC
      RE: I am still logged in.beucFri 03 Dec 2010 07:13:36 AM UTC
            RE: I am still logged in.abel672Mon 31 Mar 2014 04:48:36 AM UTC
                  Nice jobvenusft1Sun 06 Jul 2014 09:44:10 PM UTC
                        RE: Nice jobrguktMon 07 Jul 2014 07:30:00 PM UTC
                  RE: I am still logged in.nisa453Sun 16 Nov 2014 12:14:28 PM UTC
      RE: I am still logged in.ralph53Sat 09 Aug 2014 09:15:42 AM UTC
            RE: I am still logged in.eguruTue 09 Dec 2014 12:51:39 PM UTC
                  RE: I am still logged in.manohar2515Wed 17 Dec 2014 03:15:34 PM UTC

 

Post a followup to this message

You could post if you were logged in
Show feedback again

Back to the top


Powered by Savane 3.1-cleanup