Programmers read code: GitHub brute force attack-GitHub-IT information Programmers read code: GitHub brute force attack

GitHub's report, the attacker uses about 40,000 different IP addresses to launch brute force attacks, took turns trying to crack weak passwords used by customers. GitHub, it has been reset to crack the password for the user account, personal access token and OAuth authentication and SSH keys altogether. Other attacks but did not break the user's password has been reset.

GitHub says it is investigating if sources are found or unauthorized activity on sensitive user information, it will immediately notify the user. It is recommended that users use strong passwords, and enable two step certification.

程序员看住代码：GitHub遭遇暴力破解攻击 - GitHub - IT资讯
程序员看住代码：GitHub遭遇暴力破解攻击

GitHub报告，攻击者利用约4万个不同IP地址发动暴力破解攻击，轮番尝试破解用户使用的弱密码。GitHub表示，它已经重置了被破解的用户帐号密码，个人访问令牌、OAuth认证和SSH密钥全部撤销。其它受攻击但未被破解的用户密码也被重置。

GitHub表示它正展开调查，如果发现源代码或敏感用户信息相关的未授权活动，将会立即通知用户。它建议用户使用强密码和启用二步认证。