Security Notification and Linode Manager Password Reset

Re:Security Notification and Linode Manager Password Reset by technion on Tuesday January 05, 2016 @05:11PM (#10846451)

    MySQL server that allowed anonymous logins

Has anyone got more information on this? Various Google searches keep pointing me at the other four hacks.

[ Parent | on HN ]

Re:Security Notification and Linode Manager Password Reset by ryanlol on Tuesday January 05, 2016 @05:17PM (#10846486)

They try to downplay it pretty hard.

[ Parent | on HN ]

Re:Security Notification and Linode Manager Password Reset by technion on Tuesday January 05, 2016 @08:15PM (#10847656)

Thanks for this link. Although it talks about:

    database accessed using old forum credentials

So I'm not sure "anonymous login" would be an entirely accurate description.

[ Parent | on HN ]

Re:Security Notification and Linode Manager Password Reset by ryanlol on Tuesday January 05, 2016 @08:27PM (#10847721)

The server would in fact accept any credentials as it had been started with --skip-grant-tables. Tested it myself.

[ Parent | on HN ]