web and industry news

Mozilla Posts File with Names, E-mail Addresses, and Passwords

· by John Ponio

Today Mozilla sent out an e-mail to registered users of addons.mozilla.org alerting them that they accidentally posted a file to a publicly-available server that contained data from their database of users that includes first and last names, e-mail addresses, and an md5 hash representation of user passwords. Luckily, the only accounts using md5-based were inactive, because current accounts use SHA-512-based passwords. Those accounts affected had their passwords deleted, rendering them disabled. The information posted contained information regarding some 44,000 accounts. If you’re interested, you can read the e-mail they sent out here.