Matrix.org hacked

#1

Post by nektro » Fri, Apr 12, 2019, 6:47 AM UTC

Re: Matrix.org hacked

#2

Post by m_b » Fri, Apr 12, 2019, 6:55 AM UTC

For a bit of context: Matrix.org infrastructure has been hacked a second time in 24h, after restoring everything they went down again, story developing here: https://twitter.com/matrixdotorg/status/1116304867683905537

Re: Matrix.org hacked

#3

Post by perttir » Fri, Apr 12, 2019, 7:51 AM UTC

They had root account activated in hebe? Am i reading this right? He got an passlist of 5 million users?

Re: Matrix.org hacked

#4

Post by GrumpyNl » Fri, Apr 12, 2019, 7:52 AM UTC

Everything gets hacked, period. They have to remove this from there slogan, "An open standard for decentralised secure communication."

Re: Matrix.org hacked

#5

Post by cjslep » Fri, Apr 12, 2019, 7:56 AM UTC

I believe this is meant to show that it is a targeted attack on the project lead:

https://news.ycombinator.com/user?id=Arathorn

Unfortunately I don't have any background context for possible reasons why "actual transparency" on the top line is the issue chosen by the attacker, but makes it seem ideologically driven.

Re: Matrix.org hacked

#6

Post by zaarn » Fri, Apr 12, 2019, 7:57 AM UTC

Doesn't surprise me that much, Matrix doesn't seem to be too concerned with security, more with security theatre (considering you can still not easily disable read receipts in your client, a major privacy leak IMO, among other issues).

Re: Matrix.org hacked

#7

Post by tsukurimashou » Fri, Apr 12, 2019, 8:04 AM UTC

GrumpyNl wrote: post #4

Everything gets hacked, period. They have to remove this from there slogan, "An open standard for decentralised secure communication."

Nice try NSA

Re: Matrix.org hacked

#8

Post by [deleted] » Fri, Apr 12, 2019, 8:07 AM UTC

[deleted]

Re: Matrix.org hacked

#9

Post by meruru » Fri, Apr 12, 2019, 8:07 AM UTC

zaarn wrote: post #6

Doesn't surprise me that much, Matrix doesn't seem to be too concerned with security, more with security theatre (considering you can still not easily disable read receipts in your client, a major privacy leak IMO, among other issues).

Disabling read receipts is a client feature. Yes, the currently most mature client doesn't have that feature, but nothing in Matrix precludes it.

Re: Matrix.org hacked

#10

Post by johnchristopher » Fri, Apr 12, 2019, 8:07 AM UTC

GrumpyNl wrote: post #4

Everything gets hacked, period. They have to remove this from there slogan, "An open standard for decentralised secure communication."

Really ? That's a bold claim. Can this string be hacked ? $6$WqQvgIwr$/BA/19FRJZf.z4buUwX5Sbls07ovv/lVZJ3V2En7VgTR4Skdpz98hFNuq3VX4nIaiSDKObO9jKbkPb5tdt7zY1