11–20 of 269 posts
Docker Hub being hacked was basically just a question of time. With how much of the internet blindly pulls images from it, the potential gain from hijacking just one high-profile one would be monumental.
I’m just hoping that I was using a password manager by then.
Any word as to the cause of this? Was something important stored in plaintext, etc.?
Well, this is pretty disappointing. Docker doesn’t let you install it without an account, so I registered and used it for maybe a day in all. And poof, there goes my account data. I’m just hoping that I was using a password manager by then. Any word as to the cause of this? Was something important stored in plaintext, etc.?
Well, this is pretty disappointing. Docker doesn’t let you install it without an account, so I registered and used it for maybe a day in all. And poof, there goes my account data. I’m just hoping that I was using a password manager by then. Any word as to the cause of this? Was something important stored in plaintext, etc.?
They say "accessed database," so I'm thinking SQLi.
Well, this is pretty disappointing. Docker doesn’t let you install it without an account, so I registered and used it for maybe a day in all. And poof, there goes my account data. I’m just hoping that I was using a password manager by then. Any word as to the cause of this? Was something important stored in plaintext, etc.?
Eh? Doesn’t let you use what without an account?
Anyone can pull images anonymously. An account is only for publishing.
I can't find an announcement of this anywhere besides HN? Will Docker be publishing info via official mediums?
I assume they will. I only just got the email and it looks like only a small subset of accounts are affected. Or at least that's what that PR spin is supposed to make you think.