Typo3, info ou intox?

[baulet]

bonjour,

je viens de recevoir ceci :

-------------------------------------------------------

This is an important security warning. You are receiving it because your email

address is registered on the TYPO3.org website.

We have to inform you that an unauthorized person has gained administrative

access to the TYPO3.org website.

The offender had access to website user details including their passwords, and

there have been reports of this data being used to access other websites.

It also has to be expected that the data may have been disclosed to third

parties.

The attacker has been identified, and the TYPO3 Association has started to

take legal action on the issue.

Important!

IF YOU HAVE USED THE SAME PASSWORD ON ANY OTHER SITE, PLEASE CHANGE IT

IMMEDIATELY!

In a first step, all login accounts on TYPO3.org have been locked and will

require a new password. We are currently working on an improved login

procedure and will let you know when this is ready. Until then, you will not

be able to log into the Community section of TYPO3.org.

We have set up an FAQ page at http://typo3.org/about/faq/t3org-issue/

The page may be updated with new questions from time to time, so make sure to

check back before replying to this mail.

We apologize for the inconveniences and troubles that this might cause to you.

TYPO3 Association

-------------------------------------------------------

qu'en pensez vous?

merci

edit:

rien n'est signalé sur leur site? bizarre

Modifié 14 Novembre 2008 par baulet

[captain_torche]

J'ai eu le même message (je suis enregistré sur leur site et leur forum). Sachant que les mots de passe frontend ne sont pas hashés sur typo3, c'est tout à fait plausible.

Ils en parlent tout de même sur le site : http://typo3.org/about/faq/t3org-issue/

[baulet]

très bien...enfin façon de parler

merci captain !