Friday, May 3, 2024
15
rated 0 times [  15] [ 0]  / answers: 1 / hits: 864  / 2 Years ago, fri, february 4, 2022, 10:58:36

I honestly can't remember what I used to login to Ubuntu Forums, but I am quite sure it was OpenID. Should I be concerned?


More From » ubuntu-forums

 Answers
7

Since OpenID login is always processed on the issuer side (for example, if you use OpenID you got from Launchpad, then Forums will contact Launchpad and it is Launchpad who processes your authentication), the Forums do not keep your OpenID password (they don't need it at all).



Therefore, all the attackers can get is your OpenID login, but not the password, since it's not actually there.



Also, just for completeness, according to this official announcement, only the Forums are affected, no other services are.


[#30221] Saturday, February 5, 2022, 2 Years  [reply] [flag answer]
Only authorized users can answer the question. Please sign in first, or register a free account.
splenueak

Total Points: 448
Total Questions: 118
Total Answers: 110

Location: Vanuatu
Member since Mon, Oct 3, 2022
2 Years ago
;