[Macgpg-devl] SF security alert

[Gordon W. <re...@rb...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I didn't get an e-mail about this, but I used the system in the 
affected time frame.  Regarless of what everyone is saying, everyone 
should change their passwords NOW!  It's probably better to use the 
lost password form to do this, since login may no longer be safe. 
Here's the message, as seen on Slashdot:

"Dear SourceForge User,

"The SourceForge team takes security very seriously. This week, one 
of our systems was compromised. We have promptly taken the necessary 
steps to correct this situation.

"You have been contacted, because according to our log files, you 
have used SourceForge during the past week and may have used the 
system that was compromised. In order to complete the security fix, 
we are asking all users who used the system to change their password 
immediately. We've reset your password to a randomly generated 
string."

Part of the reason for doing this project on Sourceforge is that they 
are really good about security, but sometimes even their process 
fluxes.  Let's help them finish the fix.  :-)
- -- 
Gordon Worley
http://www.rbisland.cx/
mailto:re...@rb...
PGP Fingerprint:  C462 FA84 B811 3501 9010  20D2 6EF3 77F7 BBD3 B003

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOxLfs27zd/e707ADEQKAsACg3LJuHPMXUtvzujf6VnbtQdeLl+kAniOB
dc4cfsjXU+Zm9H4gJg9yjnfO
=Tfj+
-----END PGP SIGNATURE-----