User Help for Mozilla Firefox
Is this some kind of tricky chit, or legit?
nobody at mozilla.org
Important notice about your addons.mozilla.org account
Dear addons.mozilla.org user,
The purpose of this email is to notify you about a possible disclosure
of your information which occurred on December 17th. On this date, we
were informed by a 3rd party who discovered a file with individual user
records on a public portion of one of our servers. We immediately took
the file off the server and investigated all downloads. We have
identified all the downloads and with the exception of the 3rd party,
who reported this issue, the file has been download by only Mozilla
staff. This file was placed on this server by mistake and was a partial
representation of the users database from addons.mozilla.org. The file
included email addresses, first and last names, and an md5 hash
representation of your password. The reason we are disclosing this event
is because we have removed your existing password from the addons site
and are asking you to reset it by going back to the addons site and
clicking forgot password. We are also asking you to change your password on other sites in which you use the same password. Since we have effectively erased your password, you don't need to do anything if you do not want to use your account. It is disabled until you perform the password recovery.
We have identified the process which allowed this file to be posted
publicly and have taken steps to prevent this in the future. We are also
evaluating other processes to ensure your information is safe and secure.
Should you have any questions, please feel free to contact the
infrastructure security team directly at infrasec at mozilla.com. If you
are having issues resetting your account, please contact
amo-admins at mozilla.org.
We apologize for any inconvenience this has caused.
Director of Infrastructure Security
I got the same thing... also not clear about its authenticity.
I got it too, I smell something fishy about the whole thing. Do you need a password to use the addons website anyway??? Maybe to review or comment about a particular addon?
Did you start a dialog via those email addy's?
A mind is a terrible thing to waste. Mine has wandered off and I'm out looking for it.
I also got this email. Can't find any info about it. What does it mean to us? Is it phishing?
I didn't want to even touch that email with a 10' pole. (-:
Ever thought about asking on Sumo?
What sort of man would put a known criminal in charge of a major branch of government? Apart from, say, the average voter.
If I knew what sumo is besides a sport maybe...
clouserw on IRC says the following:
[21:52] <clouserw> KWierso: it's legitimate
the security team is writing a blog post that will be published shortly
where you can ask more questions if you'd like
Yeah, it's a tricky chit to find out your Email address. Cunning devils.
They even more cunningly expect you to find the Addons site yourself, rather than providing a phishing fake link to one. The nerve of these people!
Er, yes, if you want to leave a 'review'.
No, just kidding, it's legit.
However I think https://forums.mozilla.org/addons/ would be more applicable.
(Also placed a working link. http://blog.mozilla.com/security/2010/1 ... isclosure/ )
Thanks for posting this KWierso. Looks like it isn't a big deal. Retitled and made into a 5 day sticky.
"Given this sequence of events, the argument is like the thirteenth chime of a clock: you not only know it's wrong, but it causes you to wonder about everything you heard before. "
Who is online
Users browsing this forum: Google Adsense [Bot] and 8 guests