半夜提示我多了一个ssh key。
我有私有repo 啊。。。
我有私有repo 啊。。。
This topic created in 4731 days ago, the information mentioned may be changed or developed.
 |
cloudqqNov 20, 2013
1
我表示怀疑，获取你私有项目有啥意义。
|
 |
humiaozuzuNov 20, 2013
2
擦 我也是！
今天把所有能开启两步验证的全开了，密码全换不同的强密码了 被日了果然才知道不安全 LOL |
 |
Ray2EXNov 20, 2013
3
楼上太毒了
|
|
humiaozuzuNov 20, 2013
4
昨天 HN 上头条就是 Github is exp security issues，没想到今天自己就被日了。。。
|
 |
5
怀疑什么？他无聊把我的项目公开呢，搞个什么10w个github repo bt。
我不好交代啊 |
 |
LU35Nov 20, 2013 via Android
6
半夜收到邮件提示密码被更改，还在想是什么情况。晚上就收到官方邮件，据说是受到adobe泄漏的影响。
|
 |
c19Nov 20, 2013
7
|
|
c19Nov 20, 2013
8
https://github.com/settings/security
看看是不是被试密码了。。 |
 |
9
@c19 看了一下，果然很多尝试失败的记录，幸好我是强密码~
a day ago user.failed_login: Originated from 186.14.6.207 a day ago user.failed_login: Originated from 190.79.142.40 2 days ago user.failed_login: Originated from 183.89.16.23 2 days ago user.failed_login: Originated from 190.72.6.251 2 days ago user.failed_login: Originated from 202.101.96.154 4 days ago user.failed_login: Originated from 200.84.65.94 4 days ago user.failed_login: Originated from 190.39.14.235 4 days ago user.failed_login: Originated from 93.61.60.10 4 days ago user.failed_login: Originated from 186.46.160.188 4 days ago user.failed_login: Originated from 201.210.49.168 4 days ago user.failed_login: Originated from 46.149.222.114 4 days ago user.failed_login: Originated from 201.211.85.139 4 days ago user.failed_login: Originated from 186.88.167.21 4 days ago user.failed_login: Originated from 186.92.91.46 4 days ago user.failed_login: Originated from 78.58.57.41 4 days ago user.failed_login: Originated from 186.95.160.168 4 days ago user.failed_login: Originated from 186.95.64.36 4 days ago user.failed_login: Originated from 182.253.48.86 4 days ago user.failed_login: Originated from 175.141.33.131 4 days ago user.failed_login: Originated from 197.210.255.150 4 days ago user.failed_login: Originated from 186.94.149.202 4 days ago user.failed_login: Originated from 190.207.170.157 4 days ago user.failed_login: Originated from 200.192.215.138 4 days ago user.failed_login: Originated from 190.207.0.10 4 days ago user.failed_login: Originated from 190.203.78.224 4 days ago user.failed_login: Originated from 82.79.66.19 4 days ago user.failed_login: Originated from 118.99.114.199 4 days ago user.failed_login: Originated from 186.94.246.28 |
1 |
FrankFang128Nov 20, 2013 via Android
10
你们的密码是不是很弱
|
 |
greenmoon55Nov 20, 2013
11
two_factor_authentication.enabled:
a day ago user.failed_login: Originated from 190.36.202.117 a day ago user.failed_login: Originated from 114.32.114.10 a day ago user.failed_login: Originated from 78.46.250.85 2 days ago user.failed_login: Originated from 1.64.139.71 2 days ago user.failed_login: Originated from 186.95.46.139 2 days ago user.failed_login: Originated from 190.207.233.235 |
 |
mlc880926Nov 20, 2013
12
user.failed_login: Originated from 201.211.5.166
a day ago user.failed_login: Originated from 190.73.130.185 a day ago user.failed_login: Originated from 182.253.32.15 2 days ago user.failed_login: Originated from 41.46.80.107 2 days ago user.failed_login: Originated from 190.73.235.26 2 days ago user.failed_login: Originated from 190.79.222.225 我也有不少 |
 |
suziewongNov 20, 2013
13
我也有，这个是什么情况呀
|
 |
ChoutreemanNov 20, 2013
14
把两步验证打开啊
|
 |
16
能两步验证的都打开了的
|
 |
dorentusNov 20, 2013
17
我这里只有两条，五小时前的 IP 是国外的，八天前的 IP 是阿里云的……
user.failed_login: Originated from 188.251.253.106 5 hours ago user.failed_login: Originated from 115.29.148.201 8 days ago |
 |
fftsNov 20, 2013
18
我的也是诶...
还是改密码吧... |
 |
airylandNov 20, 2013
19
我也是！！
|
 |
20
很明显这是想用 github 帐号从 ripple 搞钱的人干的
|
 |
familyNov 20, 2013
21
我的密码也被修改了...
|
 |
GitFreeNov 20, 2013
24
早上一起床就收到了github的提醒邮件。
|
 |
avelineNov 20, 2013
25
擦，我的也是... 24 位隨機密碼也能進來居然。
趕緊換了個密碼。 |
 |
zouchaoNov 20, 2013
27
我也遭殃了！擦！！不过我是8位数数字密码！用了几年了~~~
|
 |
lijinmaNov 20, 2013
28
上网搜了一下，发现确实是因为ripple利益的驱动，每个账号2020XRP现在在中国值140块左右。
不过，今天 Ripple 已经取消对github的giveaway，所以说哪里有价值哪里就会不安全。 |
|
humiaozuzuNov 20, 2013
29
@aveline 貌似是 adobe 事件泄露？我的密码也是不会穷举出来的那种。。。
|
 |
soulgainNov 20, 2013
30
我也是，各位出现问题的github账号的密码是不是跟ripple的wallet密码相同？
|
|
avelineNov 20, 2013
31
@humiaozuzu 我每個網站密碼都不一樣的，和 Adobe 沒關係。
|
 |
hustlzpNov 20, 2013
32
user.failed_login: Originated from 201.243.46.125
2 days ago user.failed_login: Originated from 186.47.228.241 2 days ago user.failed_login: Originated from 190.205.214.143 2 days ago user.failed_login: Originated from 182.253.50.253 3 days ago user.failed_login: Originated from 110.138.216.157 4 days ago user.login: Originated from 211.69.194.179 9 days ago user.failed_login: Originated from 8.35.200.38 9 days ago user.failed_login: Originated from 8.35.200.37 9 days ago user.failed_login: Originated from 8.35.200.36 9 days ago user.failed_login: Originated from 8.35.200.36 12 days ago user.failed_login: Originated from 220.137.34.240 这...好多... |
 |
zghcx99Nov 20, 2013
33
这 如何是好
|
 |
4BVL25L90W260T9UNov 20, 2013
34
user.failed_login: Originated from 190.37.46.96
2 days ago user.failed_login: Originated from 201.208.14.161 2 days ago oauth_access.create: gittip 2 days ago user.failed_login: Originated from 190.206.251.108 3 days ago user.failed_login: Originated from 182.253.35.252 5 days ago oauth_access.create: GistBox 5 days ago user.failed_login: Originated from 8.35.201.35 14 days ago user.failed_login: Originated from 115.29.195.54 的确好多 |
 |
chunchuNov 20, 2013
35
我的也被攻破了，已经修稿密码，开启两步验证了
|
 |
MuyouSomeNov 20, 2013
36
看了下，我也有。。。我去
|
 |
yylzcomNov 20, 2013
37
keepass生成的密码暂时未被攻破
= =# 虽然经常在其他人电脑上输入密码有困难 |
 |
danzwlNov 20, 2013
38
user.failed_login: Originated from 186.89.182.64
a day ago user.failed_login: Originated from 86.120.196.242 2 days ago user.failed_login: Originated from 111.221.1.110 2 days ago user.failed_login: Originated from 190.36.88.191 3 days ago user.failed_login: Originated from 190.207.31.129 1Password生成的密碼…… |
 |
jonNov 20, 2013
39
@humiaozuzu 提醒了我，keepass还差了github这个账户呢
|
 |
sdysjNov 20, 2013
41
ssh key都不分开用吗？真勇敢。
|
 |
tingxuerenNov 20, 2013
42
赶紧改密码，最近密码泄露太多了吧，看来需要全部开启两步验证，真麻烦
|
 |
sivacohanNov 20, 2013
43
为毛线我的就没人进来……是不屑吗？
|
 |
cyberscorpioNov 20, 2013
44
说明这些网站一直都有漏洞被别人攥在手里，这次因为 github 的账户可以赚比特币，所以就被拿出来用了。说到底还是利益使然。
|
 |
lazygunnerNov 20, 2013
45
看来这么多人也被搞了。。。
早上没看邮件，发现push不上去，登录网站才发现不妙。。 |
 |
siwNov 20, 2013
46
user.failed_login: Originated from 190.204.106.53
2 days ago user.failed_login: Originated from 222.124.123.28 3 days ago user.failed_login: Originated from 190.73.173.143 3 days ago user.failed_login: Originated from 84.2.238.34 哈哈我的密码只有和用户名很类似。。。 |
 |
picasso250Nov 20, 2013
47
user.failed_login: Originated from 200.109.44.249
2 days ago user.failed_login: Originated from 190.203.146.148 2 days ago user.failed_login: Originated from 186.90.120.120 2 days ago user.failed_login: Originated from 110.139.155.95 3 days ago user.failed_login: Originated from 186.88.103.204 |
 |
F0urNov 20, 2013
48
8 hours ago user.failed_login: Originated from 190.173.31.217
3 days ago user.failed_login: Originated from 180.94.69.66 3 days ago user.failed_login: Originated from 190.200.215.14 5 days ago user.failed_login: Originated from 106.187.101.212 6 days ago user.failed_login: Originated from 115.29.195.54 10 days ago user.failed_login: Originated from 8.35.200.38 好可怕。。 |
 |
xiaketNov 20, 2013
49
|
 |
gullonNov 20, 2013
50
好吧，我也打过 github 的主意， 你们懂的。
有很多思路。。 https://github.com/USERNAME --->判断用户是否存在，这里不限制请求。 USERNAME 和 EMAIL 都可以用来登录帐号。 如何拿用户名呢？ 有很多地方是可以获取到用户的 github 主页地址的。 例如，遍历 v2ex 的所有用户， 获取他的 github 地址。http://www.v2ex.com/t/55360 那密码呢？ 你想到了 CSDN 的百万密码库了么？ 邮箱，帐号，密码都有。 除了 CSDN，还有很多库呢。。 那如何尝试登录呢？ 最简单的方法有木有：http://developer.github.com/v3/auth/#basic-authentication 表单提交也可以（虽然还要获取一个authenticity_token, 麻烦点而已） 再麻烦点的， 使用 http 协议clone 一个 repo，再尝试登录，输入帐号密码（有可能绕过限制哦） ip 限制？ 你去搜搜淘宝上卖代理的。 去试试 Tor？ 甚至是，有一大批肉鸡？ 最后因为太忙了，没坚持折腾。 仅分享。 |
 |
jianghu52Nov 20, 2013
51
吼吼。所以说用古诗拼音外带大小写区分是非常有用的。关键是一首诗能用四个地方呢。
|
 |
SemidioNov 20, 2013
55
a day ago user.failed_login: Originated from 115.124.92.254
2 days ago user.failed_login: Originated from 190.206.237.133 2 days ago user.failed_login: Originated from 117.36.50.52 2 days ago user.failed_login: Originated from 190.78.188.7 3 days ago user.failed_login: Originated from 186.94.91.65 |
 |
hui314Nov 20, 2013
56
果然我也有...
a day ago user.failed_login: Originated from 190.203.241.16 2 days ago user.failed_login: Originated from 190.75.49.190 2 days ago user.failed_login: Originated from 82.196.169.249 3 days ago user.failed_login: Originated from 201.242.126.249 3 days ago user.failed_login: Originated from 201.74.150.247 |
|
avelineNov 20, 2013
58
|
 |
nsaNov 20, 2013
59
GitHub XRP Giveaway使用后就有这个
a day ago user.failed_login: Originated from 192.116.149.58 a day ago user.failed_login: Originated from 93.84.16.150 a day ago user.failed_login: Originated from 201.242.76.149 a day ago user.failed_login: Originated from 117.59.224.58 a day ago user.failed_login: Originated from 117.59.224.58 |
 |
biaobiaoqiNov 20, 2013
60
@gullon
细思恐极-，- |
 |
xingzwNov 20, 2013
61
8天前头脑一热改用LastPass生成一站一密！
2 days ago user.failed_login: Originated from 190.142.115.200 2 days ago user.failed_login: Originated from 190.74.83.70 2 days ago user.failed_login: Originated from 121.35.57.28 3 days ago user.failed_login: Originated from 201.221.131.70 3 days ago user.failed_login: Originated from 190.206.175.123 8 days ago user.login: Originated from 58.243.78.201 8 days ago user.change_password: Originated from 58.243.78.201 |
 |
XrongNov 21, 2013
62
正在把LastPass密码迁移至1Password, 然后再全部设置成一站一密...同样已被尝试暴力登录...想想如果lastpass被暴，那才叫恐慌...
|
 |
tywtyw2002Nov 21, 2013
64
@aveline 为啥我的 10位密码一直没有被攻破呢？ 我怀疑是有啥bug吧
|
|
tywtyw2002Nov 21, 2013
65
@haisua 嗯 我lastpass直接启动了 yubikey去验证，估计他们是破解不了了。。。
|
 |
faceairNov 21, 2013
66
2 days ago user.failed_login: Originated from 190.38.177.245
2 days ago user.failed_login: Originated from 175.139.212.253 3 days ago user.failed_login: Originated from 186.93.203.162 3 days ago user.failed_login: Originated from 190.207.238.230 一站一密，虽然不是随机。。 |
 |
vietorNov 21, 2013
67
为什么没人搞我的帐号？难道是，没价值？咳
|
 |
gkiwiNov 21, 2013
68
被攻破了...keePass了~~
|
 |
railgunNov 21, 2013
69
|
|
railgunNov 21, 2013
70
不过这次只是弱口令攻击，楼主的密码太简单了吧→_→
|
 |
raptorNov 21, 2013
71
说明你们都是红人……我就没有被攻击的记录……
|
 |
iptuxNov 21, 2013
72
同没被搞帐号。。。
|
 |
delongNov 21, 2013
75
>_< github怎么被攻破的
|
 |
wanjunNov 21, 2013
77
弱口令，暴破，我的简单密码也被破了。
|
 |
dreaskyNov 21, 2013
78
tshwangq 121815wq
|
 |
prightNov 21, 2013
79
我也收到邮件了，不过倒是没有楼上的那些提示信息
|
 |
binyuJNov 21, 2013
80
user.failed_login: Originated from 186.219.154.247 2 days ago
user.failed_login: Originated from 59.148.249.150 3 days ago user.failed_login: Originated from 67.184.194.122 3 days ago user.failed_login: Originated from 186.88.203.246 3 days ago user.failed_login: Originated from 121.8.248.202 4 days ago ps.之前收到好几封搞ripple的邮件，不过不知道是什么所以没理会 |
 |
CrazyApiNov 21, 2013
81
还好重要账号一直都是强密码
user.failed_login: Originated from 190.200.219.140 user.failed_login: Originated from 177.68.25.33 user.failed_login: Originated from 189.3.25.146 user.failed_login: Originated from 103.12.114.147 user.failed_login: Originated from 190.203.70.47 |
 |
deyu260Nov 21, 2013
82
2 days ago user.failed_login: Originated from 190.72.151.75
3 days ago user.failed_login: Originated from 119.148.8.122 4 days ago user.failed_login: Originated from 186.95.201.126 4 days ago user.failed_login: Originated from 217.150.86.136 在cubieboard那边也看到35块人民币换一个github支持 这价格不和国际接轨 |
 |
tiooverNov 21, 2013
83
3 days ago user.failed_login: Originated from 103.12.114.147
3 days ago user.failed_login: Originated from 190.39.64.237 3 days ago user.failed_login: Originated from 190.36.93.31 3 days ago user.failed_login: Originated from 46.40.109.4 4 days ago user.failed_login: Originated from 190.38.93.201 4 days ago user.failed_login: Originated from 79.33.238.111 20 days ago user.failed_login: Originated from 74.126.176.138 22 days ago user.failed_login: Originated from 8.35.201.103 23 days ago user.failed_login: Originated from 171.213.55.27 23 days ago user.failed_login: Originated from 171.213.55.27 丧心病狂 |
 |
zonyitooNov 21, 2013
84
3 days ago user.failed_login: Originated from 41.178.213.151
3 days ago user.failed_login: Originated from 180.248.5.15 3 days ago user.failed_login: Originated from 182.253.49.250 3 days ago user.failed_login: Originated from 190.95.243.35 4 days ago user.failed_login: Originated from 201.242.72.225 4 days ago user.failed_login: Originated from 180.254.65.142 Github出事了 |
Select Language