News for hackers. Stuff that matters.

A comment on Security Notice: Linode Manager Password Reset. Parent comment

Re:Security Notice: Linode Manager Password Reset by mintplant on Friday April 12, 2013 @11:45PM (#5542463)
> Out of an abundance of caution, however, we have decided to implement a Linode Manager password reset. In so doing, we have immediately expired all current passwords.

In other words, better safe than sorry.

[ Parent | on HN ]
Re:Security Notice: Linode Manager Password Reset by JshWright on Saturday April 13, 2013 @12:26AM (#5542530)
If the compromise was a brute force, then there's no need to reset my password.

If the compromise was due to a flaw in Linode's system (potentially exposing other accounts) then a global password reset makes sense.

Can you imagine if every service you used reset everyones passwords every time one of their users got brute forced? You'd do nothing but reset your passwords all day...

[ Parent | on HN ]