Windows 8 and 8.1 Forums


Mozilla Developer Network Database Disclosure

  1. #1


    Posts : 22,582
    64-bit Windows 10

    Mozilla Developer Network Database Disclosure


    We have just concluded an investigation into a disclosure affecting members of Mozilla Developer Network. We began investigating the incident as soon as we learned of the disclosure. The issue came to light ten days ago when one of our web developers discovered that, starting on about June 23, for a period of 30 days, a data sanitization process of the Mozilla Developer Network (MDN) site database had been failing, resulting in the accidental disclosure of MDN email addresses of about 76,000 users and encrypted passwords of about 4,000 users on a publicly accessible server. As soon as we learned of it, the database dump file was removed from the server immediately, and the process that generates the dump was disabled to prevent further disclosure. While we have not been able to detect malicious activity on that server, we cannot be sure there wasn’t any such access.

    We are known for our commitment to privacy and security, and we are deeply sorry for any inconvenience or concern this incident may cause you.

    The encrypted passwords were salted hashes and they by themselves cannot be used to authenticate with the MDN website today. Still, it is possible that some MDN users could have reused their original MDN passwords on other non-Mozilla websites or authentication systems. We’ve sent notices to the users who were affected. For those that had both email and encrypted passwords disclosed, we recommended that they change any similar passwords they may be using.

    In addition to notifying users and recommending short term fixes, we’re also taking a look at the processes and principles that are in place that may be made better to reduce the likelihood of something like this happening again. If you have questions, please reach out to security@mozilla.org.

    Thanks,
    Stormy Peters
    Director of Developer Relations

    Joe Stevensen
    Operations Security Manager
    Source: MDN Database Disclosure

      My System SpecsSystem Spec

  2. #2


    Covington, La
    Posts : 1,184
    Windows 7 HP 64bit, Windows 8.1 Pro w/Media Center 64BIT


    Come on Man. It was FAILING for 30 days and they just now noticed. I though Mozilla was run by a bunch of software experts. A bunch of dumb ass geeks if you ask me.

    Jim
      My System SpecsSystem Spec

  3. #3


    Hafnarfjörður IS
    Posts : 4,376
    Linux Centos 7, W8.1, W7, W2K3 Server W10


    Hi there

    I think this leads into another topic that is of concern to many people these days -- the security and reliability of Cloud services -- users of those services should read Brinks OP and perhaps look again at their strategy for employing Cloud storage and services.

    Cheers
    jimbo
      My System SpecsSystem Spec

Mozilla Developer Network Database Disclosure
Related Threads
Solved Update for Works Database in Software and Apps
I have some Microsoft Works Database files I'd like to continue using, although MS Works has long disappeared. Does anyone know of a conversion technique/program to make these DB files usable with Microsoft Office. Seems like a step backward to not allow some kind of conversion for these files. ...
:confused: Some one please help me to find out my laptop Driver, i m usng Windows 8.1 n my Laptop Model Toshiba Satellite L50-B905 Driver Downloads - Computers | Toshiba - Toshiba
Windows 8 update database continuously crashes in Windows Updates & Activation
Good day, I have a new laptop which has Windows 8. I left it at work one day just screen locked and when I came back and entered my password, I saw that a wireless connection profile had been establihed under the name of "Iphone". I cleaned that profile but after that my laptop started to slow down...
Hi , could you help me to find the location of the building win.8.1 spell check database file ? I want to export it to correct/add the words inside. Checked user - app data - roaming - speller but the files inside are empty. .
when I entered my roll number in the following site:- 20015 Then after pressing "submit",it showed following error:- 20016 plz help I want to see my marks
uploaded the ENTIRE system 32 folder for windows 8 for those who have missing dlc's. This also includes uxtheme and other .dlc patches for windows 8 optimization. Also includes shscs.dll ; shsxs.dll NOTE: This database atm is complete except for file: api-ms-win-obsolete-kernelbase-l1-1-0.dll...
Dear forum readers, I have a problem when trying to install: Windows 8 Developer Preview with developer tools English, 64-bit (x64) When using the DVD tool from Microsoft as explained in one of the tutorials in this forum, I receive the following error message: The disc does not have...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook