[PHP-DEV] Re: Update on git.php.net incident

2021-04-12 Thread Jan Ehrhardt
"Christoph M. Becker" in php.internals (Mon, 12 Apr 2021 14:23:33 +0200): >On 12.04.2021 at 13:51, Jan Ehrhardt wrote: > >> Nikita Popov in php.internals (Tue, 6 Apr 2021 20:28:03 +0200): >>> * Existing passwords were reset (use main.php.net/forgot.php to generate a >>> new one). >> >> The Wiki

[PHP-DEV] Re: Update on git.php.net incident

2021-04-12 Thread Christoph M. Becker
On 12.04.2021 at 13:51, Jan Ehrhardt wrote: > Nikita Popov in php.internals (Tue, 6 Apr 2021 20:28:03 +0200): >> * Existing passwords were reset (use main.php.net/forgot.php to generate a >> new one). > > The Wiki has another password reset link: > https://wiki.php.net/start?do=resendpwd > > It

[PHP-DEV] Re: Update on git.php.net incident

2021-04-12 Thread Jan Ehrhardt
Nikita Popov in php.internals (Tue, 6 Apr 2021 20:28:03 +0200): > * Existing passwords were reset (use main.php.net/forgot.php to generate a >new one). The Wiki has another password reset link: https://wiki.php.net/start?do=resendpwd It sends a new password (in plain text), but that password

[PHP-DEV] Re: Update on git.php.net incident

2021-04-07 Thread Jan Ehrhardt
Nikita Popov in php.internals (Tue, 6 Apr 2021 20:28:03 +0200): >Something I was not aware of at the time is that git.php.net >(intentionally) supported pushing changes not only via SSH (using the >gitolite infrastructure and public key cryptography), but also via HTTPS. >The latter did not use