Security Breach
Global Rank: 254
Totalscore: 87262
Posts: 1642
Thanks: 1340
UpVotes: 887
Registered: 16y 96d
Last Seen: 17h 20m
The User is Offline
Security Breach
Aug 23, 2021 - 14:38:04 (2y 271d)
Aug 23, 2021 - 14:38:04 (2y 271d)
Dear challengers,
ogon found out that /etc/.git is world readable on the warchall box.
We use git to track changes to the machine config.
Any warchall user password might be affected by that read. (No time to investigate)
If you re-use your warchall password somewhere else, f.e. on wechall.net, it is a good idea to change it.
Thanks go out to ogon for letting us know!
Happy Challenging!
- gizmore
ogon found out that /etc/.git is world readable on the warchall box.
We use git to track changes to the machine config.
Any warchall user password might be affected by that read. (No time to investigate)
If you re-use your warchall password somewhere else, f.e. on wechall.net, it is a good idea to change it.
Thanks go out to ogon for letting us know!
Happy Challenging!
- gizmore
The geeks shall inherit the properties and methods of object earth.
Global Rank: 187
Totalscore: 110523
Posts: 88
Thanks: 78
UpVotes: 91
Registered: 9y 250d
Last Seen: 31d 19h
The User is Offline
RE: Security Breach
Aug 23, 2021 - 16:49:04 (2y 271d)
Aug 23, 2021 - 16:49:04 (2y 271d)
Congratz ogon... and thank you...
Thank you Gizmore, too
Thank you Gizmore, too
Global Rank: 7681
Totalscore: 1175
Posts: 1
Thanks: 1
UpVotes: 1
Registered: 2y 273d
Last Seen: 2y 271d
The User is Offline
RE: Security Breach
Aug 24, 2021 - 04:24:15 (2y 271d)
Aug 24, 2021 - 04:24:15 (2y 271d)
Is it a good idea to change our password now? Or are you still working on fixing it?
Global Rank: 10202
Totalscore: 442
Posts: 1
Thanks: 1
UpVotes: 1
Registered: 2y 283d
Last Seen: 1y 274d
The User is Offline
RE: Security Breach
Sep 01, 2021 - 04:12:58 (2y 263d)
Sep 01, 2021 - 04:12:58 (2y 263d)
Congratz ogon! Thanks!!!
Thank you Gizmore!!
Thank you Gizmore!!
Global Rank: 254
Totalscore: 87262
Posts: 1642
Thanks: 1340
UpVotes: 887
Registered: 16y 96d
Last Seen: 17h 20m
The User is Offline
RE: Security Breach
Sep 03, 2021 - 08:47:15 (2y 261d)
Sep 03, 2021 - 08:47:15 (2y 261d)
Quote from endpointAug 24, 2021 - 04:24:15
Is it a good idea to change our password now? Or are you still working on fixing it?
I had set the /etc/.git permissions to be not world readable anymore.
So you can change your password.
Also note that this only affects your warchall password, not the wechall one.
The geeks shall inherit the properties and methods of object earth.
endpoint, quangntenemy, TheHiveMind, Z, balicocat, Ge0, samuraiblanco, arraez, jcquinterov, hophuocthinh, alfamen2, burhanudinn123, Ben_Dover, stephanduran89, braddie0, JanLitwin17, SwolloW, dangarbri, kalungmas have subscribed to this thread and receive emails on new posts.
1 people are watching the thread at the moment.
This thread has been viewed 5186 times.
1 people are watching the thread at the moment.
This thread has been viewed 5186 times.