[JDEV] Fw: SourceForge - URGENT: Please change your password (tcharron)

Thomas Charron tcharron at ductape.net
Tue May 29 10:59:22 CDT 2001


  Forwarding this along, as many of you use sourceforge as well..

----- Original Message -----
From: <support at sourceforge.net>
To: <tcharron at ductape.net>
Sent: Monday, May 28, 2001 5:23 PM
Subject: SourceForge - URGENT: Please change your password (tcharron)


> Dear SourceForge User,
>
> The SourceForge team takes security very seriously.  This week, one of
> our systems was compromised.  We have promptly taken the necessary steps
> to correct this situation.
>
> You have been contacted, because according to our log files, you have used
> SourceForge during the past week and may have used the system that was
> compromised.
>
> In order to complete the security fix, we are asking all users who used
> the system to change their password immediately.  We've reset your
> password to a randomly generated string.
>
> To prevent risk of SSH key data having been compromised, we have also
> removed any SSH key data you had previously posted to the SourceForge
> project CVS servers or shell servers, either directly or via the
> SourceForge website.  If you had not posted SSH key data to the
> SourceForge site or the shell or CVS servers, this paragraph may be
> disregarded.  We request that you review the SSH keys (authorized_keys)
> and use the 'Edit keys' link on your Account Maintenance page
> (https://sourceforge.net/account/editsshkeys.php) to post those public
> keys you are actively using.  It should be noted that both SSH1 and SSH2
> public key data (identity.pub/authorized_keys/authorized_keys2) may be
> posted via this interface.
>
> Below is a URL that will allow you to change your password.  Please go to
> web address and follow the instructions.
>
> http://sourceforge.net/account/lostpw.php
>
> ** Until you change your password, you will not be able to login to the
> SourceForge website, use the CVS server or the shell server. ***
>
> I know this is an inconvenience, but it is something we have to do to
> make SourceForge safe for all users.
>
> If you have any questions about this, please email
> support at sourceforge.net.
>
>
>




More information about the JDev mailing list