Posted October 13, 2011
If you're on WineHQ you probably already got an e-mail about this yesterday, but I thought I would share this just in case. Since there is nothing else of value, it seems they were after e-mail addresses and possibly user names/passwords in the hopes people used the same user name/password or e-mail/password combo on other sites or e-mail accounts where they could hack and gain access to more ... sensitive information.
We are sorry to report that recently our login database for the
WineHQ Application Database was compromised. We know that the entire
contents of the login database was stolen by hackers. The password
was encrypted, but with enough effort and depending on the quality
of your old password, it could be cracked.
We have closed the hole in our system that allowed read access to
our database tables.
To prevent further damage we have reset your password to what is shown
below. We strongly suggest that if you shared your AppDB password on
any other sites that you change that password as soon as possible.
http://www.winehq.org/pipermail/wine-users/2011-October/097753.htmlWineHQ Application Database was compromised. We know that the entire
contents of the login database was stolen by hackers. The password
was encrypted, but with enough effort and depending on the quality
of your old password, it could be cracked.
We have closed the hole in our system that allowed read access to
our database tables.
To prevent further damage we have reset your password to what is shown
below. We strongly suggest that if you shared your AppDB password on
any other sites that you change that password as soon as possible.