News for hackers. Stuff that matters.
Re:Security Notice: Linode Manager Password Reset by mh- on Friday April 12, 2013 @08:15PM (#5541934)
so every time someone tries to make unauthorized attempts to access a single customer's account.. all customers are to be required to reset their passwords?
Re:Security Notice: Linode Manager Password Reset by noarchy on Friday April 12, 2013 @08:18PM (#5541944)
That's the part that makes me wonder. The email that I received said, "We have found no evidence that any Linode data of any other customer was accessed."

I suspect that they aren't 100% sure, and that this is a precaution. I can live with it, but I hope that they keep their customers in the loop on things, where possible.

Re:Security Notice: Linode Manager Password Reset by tvon on Friday April 12, 2013 @08:38PM (#5541996)
Can you ever be 100% sure of such a thing?
Re:Security Notice: Linode Manager Password Reset by noarchy on Friday April 12, 2013 @09:00PM (#5542062)
Probably not. I do think that an effort can be made to follow the trail (logs, etc), and come to the best guess possible. I'm not saying they haven't done this, though.
Re:Security Notice: Linode Manager Password Reset by kbar13 on Friday April 12, 2013 @08:17PM (#5541937)
> We have been advised that law enforcement officials are aware of the intrusion into this customer’s systems.

I feel like this is probably more than just some dude's account.

Re:Security Notice: Linode Manager Password Reset by noarchy on Friday April 12, 2013 @09:01PM (#5542068)
I think this as well. Why did Linode describe themselves as being the ones advised, rather than Linode being the one to inform law enforcement of the breach?
Re:Security Notice: Linode Manager Password Reset by alex_doom on Friday April 12, 2013 @09:00PM (#5542066)
Right? I don't see how this helps.
Re:Security Notice: Linode Manager Password Reset by hobs on Saturday April 13, 2013 @01:22AM (#5542666)
It could be that they are restricted from providing more details due to the nature of the issue? It sounds like a cop-out and is, but if for instance it was under active investigation, and it was something big, they might be able to reset customer passwords while not identifying information to the attacker.

On the other hand, this type of action would give it away either way, so maybe even that excuse doesnt smell right.