Windows 8 and 8.1 Forums

Mozilla Developer Network Database Disclosure

  1. #1

    Posts : 21,860
    64-bit Windows 10

    Mozilla Developer Network Database Disclosure

    We have just concluded an investigation into a disclosure affecting members of Mozilla Developer Network. We began investigating the incident as soon as we learned of the disclosure. The issue came to light ten days ago when one of our web developers discovered that, starting on about June 23, for a period of 30 days, a data sanitization process of the Mozilla Developer Network (MDN) site database had been failing, resulting in the accidental disclosure of MDN email addresses of about 76,000 users and encrypted passwords of about 4,000 users on a publicly accessible server. As soon as we learned of it, the database dump file was removed from the server immediately, and the process that generates the dump was disabled to prevent further disclosure. While we have not been able to detect malicious activity on that server, we cannot be sure there wasn’t any such access.

    We are known for our commitment to privacy and security, and we are deeply sorry for any inconvenience or concern this incident may cause you.

    The encrypted passwords were salted hashes and they by themselves cannot be used to authenticate with the MDN website today. Still, it is possible that some MDN users could have reused their original MDN passwords on other non-Mozilla websites or authentication systems. We’ve sent notices to the users who were affected. For those that had both email and encrypted passwords disclosed, we recommended that they change any similar passwords they may be using.

    In addition to notifying users and recommending short term fixes, we’re also taking a look at the processes and principles that are in place that may be made better to reduce the likelihood of something like this happening again. If you have questions, please reach out to

    Stormy Peters
    Director of Developer Relations

    Joe Stevensen
    Operations Security Manager
    Source: MDN Database Disclosure

      My System SpecsSystem Spec

  2. #2

    Covington, La
    Posts : 1,181
    Windows 7 HP 64bit, Windows 8.1 Pro w/Media Center 64BIT

    Come on Man. It was FAILING for 30 days and they just now noticed. I though Mozilla was run by a bunch of software experts. A bunch of dumb ass geeks if you ask me.

      My System SpecsSystem Spec

  3. #3

    Hafnarfjörður IS
    Posts : 4,374
    Linux Centos 7, W8.1, W7, W2K3 Server W10

    Hi there

    I think this leads into another topic that is of concern to many people these days -- the security and reliability of Cloud services -- users of those services should read Brinks OP and perhaps look again at their strategy for employing Cloud storage and services.

      My System SpecsSystem Spec

Mozilla Developer Network Database Disclosure

Similar Threads
Thread Forum
Update for Works Database
I have some Microsoft Works Database files I'd like to continue using, although MS Works has long disappeared. Does anyone know of a conversion technique/program to make these DB files usable with Microsoft Office. Seems like a step backward to not allow some kind of conversion for these files. ...
Software and Apps
Can't Find my laptop model in Toshiba Driver database
:confused: Some one please help me to find out my laptop Driver, i m usng Windows 8.1 n my Laptop Model Toshiba Satellite L50-B905 Driver Downloads - Computers | Toshiba - Toshiba
Drivers & Hardware
Windows 8 update database continuously crashes
Good day, I have a new laptop which has Windows 8. I left it at work one day just screen locked and when I came back and entered my password, I saw that a wireless connection profile had been establihed under the name of "Iphone". I cleaned that profile but after that my laptop started to slow down...
Windows Updates & Activation
Spell - check database file location
Hi , could you help me to find the location of the building win.8.1 spell check database file ? I want to export it to correct/add the words inside. Checked user - app data - roaming - speller but the files inside are empty. .
General Support
Microsoft JET Database Engine error '80004005'
when I entered my roll number in the following site:- 20015 Then after pressing "submit",it showed following error:- 20016 plz help I want to see my marks
Network & Sharing
FULL Windows 8: System 32 Database (x64)
uploaded the ENTIRE system 32 folder for windows 8 for those who have missing dlc's. This also includes uxtheme and other .dlc patches for windows 8 optimization. Also includes shscs.dll ; shsxs.dll NOTE: This database atm is complete except for file: api-ms-win-obsolete-kernelbase-l1-1-0.dll...
General Support
Installation Windows 8 Developer Preview Developer DVD
Dear forum readers, I have a problem when trying to install: Windows 8 Developer Preview with developer tools English, 64-bit (x64) When using the DVD tool from Microsoft as explained in one of the tutorials in this forum, I receive the following error message: The disc does not have...
Installation & Setup

Eight Forums Android App Eight Forums IOS App Follow us on Facebook