Page 1 of 1

access to forum with Firefox blocked due to password reset

Posted: 30 Jan 2011, 16:59
by palbarede
Hello,

today, I could not open the forum page
<https://sourceforge.net/apps/phpbb/mindboards/>
with Firefox 3.6.13 (error message about cookies),
although I could with Safari 5.0.3.

Indeed, the problem was related to Sourceforge passwords general reset, see
<https://sourceforge.net/blog/sourceforge-net-attack/>

After choosing a new password, OK.

Re: access to forum with Firefox blocked due to password reset

Posted: 30 Jan 2011, 19:53
by nxtreme
I've actually had a similar problem, where SF sends my browser into an "endless redirect". It says it might have something to do with cookies or cache, I clear them and all is fine. I normally clear all browsing data aside from actual history two or three times a month but when I don't, I notice that I get the same problem about once a month. I guess it's a problem with SF, not much we can do about it :).

Re: access to forum with Firefox blocked due to password reset

Posted: 30 Jan 2011, 20:44
by mightor
You all received a mail from SF telling you that your password needed to be reset due to a security breach.
Hello,

We recently experienced a directed attack on SourceForge infrastructure
(http://sourceforge.net/blog/sourceforge-net-attack/) and so we are
resetting all passwords in the sf.net database -- just in case. We're
e-mailing all sf.net registered account holders to let you know about this
change to your account.

Our investigation uncovered evidence of password sniffing attempts. We have
no evidence to suggest that your password has been compromised. But, what
we definitely don't want is to find out in 2 months that passwords were
compromised and we didn't take action.

So, as a proactive measure we've invalidated your SourceForge.net account
password. To access the site again, you'll need to go through the email
recovery process and choose a shiny new password:

https://sourceforge.net/account/registr ... ecover.php

If you need help with this, feel free to e-mail us:

[email protected]

We appreciate your patience with us as we work to respond to this attack.
We'll be working through the weekend to get things back to normal as
quickly as possible.

Watch for updates on the service outages on our blog:

http://sourceforge.net/blog/

Thank you,

The SourceForge Team