YHK - yet another hacker news clone

Active incident at Dreamhost forcing password reset

53 points greenchair 5 hours ago 18 comments

whyage 1 hour ago | parent

What's going on with Dreamhost lately? Is it falling apart?

AznHisoka 28 minutes ago | parent

I havent seen anyone talk about it for the last 10-15 yrs. I would have guessed it fell apart already

PaulDavisThe1st 9 minutes ago | parent

They abandoned all support for email lists a couple of months back. Will likely move after 20+ years on DH.

forgotmypw17 27 minutes ago | parent

Working pretty well for me.

therein 54 minutes ago | parent

Now that's a blast to the past. What's next, Rapidshare.de is having issues?

duskwuff 41 minutes ago | parent

Reading the tea leaves: given that the outage started with "connectivity issues affecting the File Manager", which was an install of Monsta FTP [1] - a commercial PHP application - I suspect the file manager got popped by one of the recently published PHP vulnerabilities, and users' FTP credentials may have been exfiltrated.

[1]: https://www.monstaftp.com/

MuffinFlavored 35 minutes ago | parent

hopefully their hashed/salted passwords, right? not plaintext?

duskwuff 24 minutes ago | parent

Internally, sure. But the application that was (probably) compromised was an FTP client, so it would have received the plain text of those passwords from users as they logged in.

forgotmypw17 27 minutes ago | parent

Ah, I noticed this yesterday, figured it was just me.