Skip to main content

76,000 Mozilla Developers’ Email Addresses Compromised

A few days ago, members of Mozilla’s developer community were notified of the accidental leak of email addresses and encrypted passwords. This was a result of the failure of a “data ”sanitization process carried out by the company.
Mozilla is known worldwide for its Firefox Internet browser. The company coordinates the development of some open-source software projects via its Mozilla Developer Network.
From 23 June and for about 30 days, the company admits, data sanitization process had been failing. This caused the accidental disclosure of MDN email addresses of almost 76,000 users plus encrypted passwords of 4,000 users on a publicly accessible server. However, Mozilla said those passwords had been stored as salted hashes – an encryption process which rendered it computationally impossible to retrieve the original password in a readable format. The company also says that, by themselves, the passwords now can’t be used to authenticate with the MDN website.


Still, Mozilla added that some MDN users could have reused their original MDN passwords on other websites or authentication systems. Security experts confirmed that as soon as they learned of the leak, the database dump file was removed from the server immediately. In addition, the process generating the dump was disabled in order to prevent further disclosure. They also said that no malicious activity was detected on that server, but the experts admitted they can’t be 100% sure there wasn’t any such access.

In the meantime, the Mozilla Foundation recently named Chris Beard as the new permanent head of the corporation, after Brendan Eich resigned because of the controversy about his donations to a campaign against same sex marriage. At the time, the executive chairwoman of Mozilla Foundation said that they knew why people were hurt and angry, and they were right. She confirmed that Chris Beard was to stay on as Chief Executive Officer on a permanent basis, and pointed out that over the years he has led many of the company’s most innovative projects. Mozilla has relied on his judgment and advice for nearly ten years, and Beard is believed to have a clear vision of how to take Mozilla’s mission and turn it into industry-changing products and ideas.Perhaps, the new leader will have to start with apologies to all affected developers.

Comments

Popular posts from this blog

Here Are 7 Brilliant Cheat Sheets For Linux/Unix

There's nothing better than a cheatsheet when you are stuck and need a reference. So here bringing to you 7 brilliant free cheat sheets. 




1. Unix Tool Box: An incredibly exhaustive reference for all things Linux. This document is a collection of Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users.

2. One page Linux Manual: Great one page reference to the most popular Linux commands, it is a summary of useful Linux commands.

3. Linux Reference Card: One great reference published by FOSSwire.

4. Linux Command Line Cheat Sheet: This is an interestingly sorted and helpful cheat sheet by cheatography.

5. Linux Command Line Tips: This is a linux command line reference for common operations. Cleanly sorted and well described.

6. Treebeard’s Unix Cheat Sheet: A great reference that shows command comparisons with that of DOS. So if you are someone who was a DOS user and has switched to Linux, this is the best one too have!

7. Linux Shortcuts and Commands:…

WhatsApp is illegal, will soon banned in India : Government

WhatsApp could have accidentally entered into troubled waters here in India by enabling its end-to-end encryption for all. The new security feature by WhatsApp is not what is required by the Indian telecom rules and WhatsApp could face a ban, if the rules are not adhered to. But not yet.
In India, companies need to follow the country’s rules and adhere to specific types of encryption, which WhatsApp does not currently use. WhatsApp’s end-to-end encryption on its chat service means that WhatsApp or anyone else won’t be able to crack open its contents.  Only the sender and the recipient are able to read the encrypted data. WhatsApp uses a 256-bit key for encryption of all chat messages, which is only known to the sender and the recipient.
Why is it not possible for WhatsApp to help decrypt users’ messages? "No one can see inside that message. Not cybercriminals. Not hackers. Not oppressive regimes. Not even us," WhatsApp founders Jan Koum and Brian Acton wrote on their blog. How…

3 Mega Acquisitions in last week affects the Internet Space of India

Qihoo 360 buys Opera in $1.2 Billion Opera Software intends to accept a $1.2 billion acquisition offer from a group of Chinese companies. The Chinese consortium includes Internet security company Qihoo 360, Internet firm Beijing Kunlun (which invested roughly$93 millioninto Grindr earlier in the year) and investment group Golden Brick and Yonglian. According to Opera, the $1.2 billion is a 56 percent premium over Opera's share price during the last 30 trading days. Despiteclaiming350 million users, the company's browser has struggled in the oversaturated Western market. China could be a profitable arena for Opera, in part because Google's Chrome browserdoes not come preinstalled on Android phones in China like it does elsewhere. In addition, doing business in China without local partners is nigh impossible, but Opera could leverage the networks of Kunlun and Qihoo 360 if the deal goes through.


Snapdeal Buys Freecharge in $400Million e-commerce marketplace Snapdeal has acquired …