Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Github seems to be experiencing security issues

github.com

Post reply on HN
Print view View original

31–40 of 59 posts

Re: Github seems to be experiencing security issues

#31

Post by turshija »

aram wrote: post #5

Very strange; I just checked my security history and see that there have been 5 unsuccessful login attempts from China/Venezuela to my account (last 14 hours). Everything before that is pretty clean and without fake logins. Does anyone have more information on this?

Same here,

  user.failed_login: Originated from 190.203.251.191 9 hours ago
  user.failed_login: Originated from 201.209.90.106 14 hours ago
  user.failed_login: Originated from 91.228.53.28 19 hours ago
  user.failed_login: Originated from 110.77.182.239 a day ago
  user.failed_login: Originated from 190.203.71.55 2 days ago

Re: Github seems to be experiencing security issues

#32

Post by schwuk »

awjr wrote: post #29
awjr wrote: post #25

I would strongly suggest people enable two factor authentication: https://github.com/settings/two_factor_authentication/config...

Just one foot note (as I have just taken my own advice and turned it on). Suddenly I couldn't push/pull through the git command line access as it would not accept my password. Took me a bit to work it out but you need to go here https://github.com/settings/applications and create personal access tokens.

You could try using SSH + keys. I only ever use my password for the site itself.

Re: Github seems to be experiencing security issues

#33

Post by bergie »

wgx wrote: post #13

The list of IPs from China (& Indonesia, etc) - that most are seeing on their page - making failed login attempts, looks like a botnet or automated bruteforce on the GitHub authentication service. Hit enough usernames with a dictionary attack and they'll get some accounts. I assume that GH are doing some basic rate-limiting or 'fail2ban' style blacklisting on these attempts. As anyone who's put an EC2 up without secu…

I wonder if this is related to the recent Adobe and vBulletin user database breaches. They might be trying those passwords on GH.

Re: Github seems to be experiencing security issues

#34

Post by lotsofcows »

wgx wrote: post #13

The list of IPs from China (& Indonesia, etc) - that most are seeing on their page - making failed login attempts, looks like a botnet or automated bruteforce on the GitHub authentication service. Hit enough usernames with a dictionary attack and they'll get some accounts. I assume that GH are doing some basic rate-limiting or 'fail2ban' style blacklisting on these attempts. As anyone who's put an EC2 up without secu…

Or attached any box directly to the internet.

This looks like bog standard background noise to me.

Re: Github seems to be experiencing security issues

#36

Post by invalidka »

aram wrote: post #5

Very strange; I just checked my security history and see that there have been 5 unsuccessful login attempts from China/Venezuela to my account (last 14 hours). Everything before that is pretty clean and without fake logins. Does anyone have more information on this?

9 hours ago user.failed_login: Originated from 190.203.197.244 15 hours ago user.failed_login: Originated from 190.205.229.170 2 days ago user.failed_login: Originated from 41.59.254.18 2 days ago user.failed_login: Originated from 190.207.188.99

Re: Github seems to be experiencing security issues

#38

Post by antr »

Same here

    6 hours ago user.failed_login: Originated from 190.237.42.139
    12 hours ago user.failed_login: Originated from 186.91.131.199
    16 hours ago user.failed_login: Originated from 91.226.79.82
    a day ago user.failed_login: Originated from 184.22.105.99
    a day ago user.failed_login: Originated from 190.205.97.211
    2 days ago user.failed_login: Originated from 189.43.19.210

Re: Github seems to be experiencing security issues

#40

Post by m4tthumphrey »

phpnode wrote: post #39
m4tthumphrey wrote: post #37

They should provide the password used to attempt to log in too.

no, they definitely shouldn't, for the same reason they don't store the real passwords in plain text. it would be a terrible security hole.

Sorry for being ignorant, but why is providing the passwords they guess/automate a security issue?
Post reply on HN