Cynic says that this is just a way of making sure that mumsnet is in the news. "Oh noes, hackers have struck at us".
Parent gabfest Mumsnet hit by SSL bug: My heart bleeds, grins hacker
Twee UK parenting website Mumsnet is the second high-profile organisation to claim it has fallen victim to the infamous Heartbleed OpenSSL vulnerability. Hackers boasted they accessed Mumsnet users’ data via the password-leaking bug – which is present in HTTPS servers and other services and software running a OpenSSL 1.0.1 to …
-
Tuesday 15th April 2014 11:02 GMT Anonymous Coward
It'll turn out to be the work of a mumsnetter's gifted offspring, which will give their proud mother something else to discuss at length with her online friends: 'I had no idea Jonquil and Tarquin were so savvy, but their teacher always said she'd never met any other children quite like them, I mean their father can't even change a lightbulb, I don't know where...' etc... etc... etc...
-
Wednesday 16th April 2014 15:17 GMT Jim 59
Not sure if you are aware of Mumsnet's solid left-wing credentials, but founder Justine Roberts is married to Ian Katz, BBC Newsnight editor and ex deputy editor of the Guardian, the paper from which Newsnight takes its senior staff.
While at The Guardian, Katz (says wikipedia) oversaw a campaign to influence the outcome of elections in Clark County, Ohio to help swing the 2004 US Presidential election against Bush and in favour of Kerry. It was not successful and it was not popular with Clark County voters who, surprisingly, don't like foreigners interfering in their election process.
Roberts studied "PPE" (Politics, Philospohy and Economics) at Oxford, a fairly new subject also studied, at Oxford, by Labour MPs Angela Eagle, Maria Eagle, Ed Balls, Yvette Cooper, David Milliband as well as PM David Cameron.
Funny how many of our leaders went to the same school, lived in the same street, studied the same (slightly naff) subject at the same place, are in business together, living together, are related to each other, (often concealing the fact with maiden names). It perhaps explains how come much party policy, large swathes of the BBC, media public institutions are papered over with an unthinking groupthink so uniform you can't see the join. Sorry for the lengthy off topic rantathon.
-
Tuesday 15th April 2014 11:03 GMT Stuart 22
Selfies can be good.
The pain of getting, renewing and now revoking certificates is a complete and unwelcome pain. Actually most of our https stuff is between our servers and close clients. They trust us, they would trust our servers except for those big red screens Chrome et al throw up when they see a self signed certificate.
So we dutifully used proper ones. Whereas the old self-signed could be replaced instantly. Hence paradoxically our users were more secure with selfies.
And millions/billions of Wordpress users will have been exposing their usernames/passwords in plain text since Z80 Assembler ruled the world - mostly without incident. Its security with a hole that's really dangerous at attracting the hacking flies.
-
Tuesday 15th April 2014 19:58 GMT Wensleydale Cheese
Re: Selfies can be good.
"And millions/billions of Wordpress users will have been exposing their usernames/passwords in plain text since Z80 Assembler ruled the world - mostly without incident. Its security with a hole that's really dangerous at attracting the hacking flies."
I imagine that the number of folks with access to the network traffic containing those clear text usernames and passwords is quite limited. In contrast the OpenSSL bug lets world plus dog have a go.
-
Wednesday 16th April 2014 07:58 GMT Jamie Jones
Re: Selfies can be good.
"So we dutifully used proper ones. Whereas the old self-signed could be replaced instantly. Hence paradoxically our users were more secure with selfies."
Also, don't forget that with a 'selfie' there is no third party chain of trust above you that could be hacked/pwned by gchq/nsa/blackhat etc.
-
-
Tuesday 15th April 2014 11:03 GMT Mad Mike
Oh, how terrible.
This is really terrible news.............my heart bleeds.
The only thing funnier would be if they found their way into the extremist list of websense and started getting blocked as such!! Given some of the clangers that have happened in the past in this area, it could just happen.
-
-
Tuesday 15th April 2014 12:03 GMT Eradicate all BB entrants
Re: Karma is a female canine
Hey, give them a break. I don't think you can even guess at the workload of a Mumsnet user. Spending all day on the site then breaking every traffic law known to man, just so they can be first to park their BMW X6 diagonally across the road in front of their children's school, is very stressful.
I think you will also find it is the responsibility of the nanny to monitor the childs access to the internet, that's what they get paid £1.25 an hour for.
Geez, you would think in this day and age that they would be allowed to denigrate the fathers input into childcare without having to suffer criticism or hacking.
-
Tuesday 15th April 2014 12:16 GMT Anonymous Coward
Re: Karma is a female canine
Wonko, how dare you suggest such a thing! We have far more important things to do than supervise our own children - are you one of those old-fashioned reactionary types that thinks people should be accountable and responsible for their actions? Everyone knows that society as a whole is to blame for everything, except of course those accused being classes of offender (who should just be strung up, don't worry about the expense of a trial or anything, we have the Daily Fail front page for presenting all the evidence of their guilt, and a quarter of the back of a stamp for the balanced and equal coverage of their defence)
On the plus side, we have the fine example of the founder of Mumsnet actually taking responsibility for her own website and fixing the thing herself. Or perhaps not.
-
-
-
-
Tuesday 15th April 2014 11:36 GMT 45RPM
Re: Mumsnet: "By parents for parents"
I dunno, cos I haven't joined, but I think that there are dads on MumsNet. My wife assures me that there are, anyway. Honestly, though, I'm the worst dad in the world and I'd rather leave all the messy, worrying, stuff with her - and I'll do the playing with lego and reading stories to the kids bit.
Wasn't there some story on there about spaffing in a cup by the bed though? Or did I make that up? Not a very effective way of getting your girl preggers, I'd have thought.
-
-
Tuesday 15th April 2014 12:14 GMT squigbobble
Re: Mumsnet: "By parents for parents"
"Wasn't there some story on there about spaffing in a cup by the bed though?"
It was someone's story about her husband washing his nob in a glass of water post-boning. Not just once but as a matter of routine. It went viral.
PROBABLY NSFW, I DAREN'T CHECK.
http://www.mumsnet.com/Talk/mumsnet_classics/a1875847-Do-you-dunk-your-penis
...and the reactions
-
-
Tuesday 15th April 2014 15:03 GMT Destroy All Monsters
Re: Mumsnet: "By parents for parents"
Probably NSFW
OP starts off with:
I considered name changing for this, but, fuck it. We have a dedicated post-sex cleanup area on the bedside table. A box of tissues, a small bin, and a beaker of clean water for temporary cleaning/dunking while the bathroom is occupied by me. Apparently our penis beaker is strange and not the done thing. Does everyone else just lay there in a sticky post coital glow until morning? Really?
And someone answers:
Have never heard of this. And used to be quite the harlot, so really think I would have seen in, if it were a common thing. But maybe my tastes just run to the unwashed...?
My cow-orkers caught me while eye-bulging... I would rather be caught on 4chan, but I LOLLED!
-
-
-
-
-
-
-
Tuesday 15th April 2014 11:40 GMT Anonymous Coward
I have got children, in fact many of them. However, I think what pisses us off is the way the majority of the members of mumsnet try to make up for their feelings of inadequacy as parents by telling the rest of us what we can or cannot do. They seem to hope that this will make them appear to be important and be doing something for their children instead of actually doing something for their children.
I, for one, would feel a lot more sympathetic if they could accept that they make up a small part of society and that they are no more special and important than the rest of us.
-
Tuesday 15th April 2014 13:43 GMT Androgynous Cupboard
"... their feelings of inadequacy as parents by telling the rest of us what we can or cannot do..."
I'm afraid you do't need Mumsnet for that - the moment you have one child, you automatically get enough knowledge to advise anyone else on theirs. Sometimes it even works if your sister/colleague/neighbour has a child too, it's that powerful.
-
-
-
This post has been deleted by its author
-
-
-
Tuesday 15th April 2014 11:58 GMT Anonymous Coward
AC ("I have got children"), totally agree. I'd add that it's a very cliquey, childish place with their bizarre use of acronyms. It annoys me that I didn't vote for Justine Roberts yet she appears as a mouthpiece on various panel programmes apparently advising the government on things in which she has no expertise. Mumsnet also lobbys the government with various campaigns, and annoyingly they have traction because they do it in the name of thinking of the children.
If you want a real eye-opener try doing a google search for (not at work due to the language):
site:www.mumsnet.com cunt
and look at some of the worrying discussions that come back.
-
-
Tuesday 15th April 2014 12:25 GMT Anonymous Coward
I've just returned from the same search. Can't say I'm surprised.
My eyes were opened to what women were really like on their own when I was about 10.
My mum hosted a naughty nicker party and I hid upstairs before-hand. After it was underway I snuck down onto the landing to overhear the conversations they were having.
Bubble well and truly burst I can tell you. When a woman starts with the old 'poor me' stuff just to get their own way they seem to get very huffy when your buttons remain un-pressed. Proper takes the wind out of their sails. I only let my wife get away with it because I know she's doing it, and she knows I know she's doing it, so it's a bit of a joke. She hates that type of woman too, but they were all programmed to do it from an early age, just like lads are programmed to respond to crocodile tears etc.
Women stick together like shit to a blanket.
-
Tuesday 15th April 2014 12:51 GMT Mad Mike
@obnoxiousGit
You're making the mistake of bringing reason and thought into the process. Mumsnet is a place to self-obsessed, hypocritical tyrants. That's why they think they have the right to dictate to everyone else and being listened to, even though they know little about the topics on which they speak. They're hypocritical because they think it's acceptable to call men c**ts, but say that to a woman and the world ends!!
It's really the online equivalent of a hen do or womens trip to see men strippers. They all egg each other on and it all gets rather extreme and they all think they're so hard done by. After all, the government simply must control the internet, after all, I'm a mother and have enough to do already!!
God alone knows why some men join. Maybe they're just trolling, I don't know, but the name says it all. Another example of why women can be as sexist as they like, but men would get attacked for doing the same in reverse. If I tried creating a fathersnet, there would be uproar about sexism etc.etc. Same as how you get women only gym sessions, but I've yet to come across any men only sessions.
-
-
Tuesday 15th April 2014 12:43 GMT DaddyHoggy
My wife got an email (apparently) from mumsnet telling her to follow a link to change her password.
Problem is 1) following links in unsolicited emails that require you to change your password is obviously a big no-no 2) my wife doesn't recall ever joining Mumsnet...
Finding out today that Mumsnet really did send a blanket email to all 1.5M members telling them to follow a link to change their password leads to the following conclusions: 1) Mumsnet are silly for sending out the email this way 2) given that they did send out that type of email and that my wife got one from (apparently) Mumsnet even though she has never registered with them implies that the spammers/hackers have already started sending out spoof emails in an effort to exploit these mass panic email blasts from affected sites...
-
Tuesday 15th April 2014 13:35 GMT Camilla Smythe
No 'Link', per se, given for Reset..
The e-mail I received was...
"Dear Mumsnet user,
Following the recent security breach related to Heartbleed
we have removed the passwords of all users on www.mumsnet.com
To use the site you'll need to reset your password. You'll find
instructions and a link on the login page on how to do this.
Most importantly, if you use the same password on Mumsnet as elsewhere,
we strongly recommend you change your password on the other sites too.
Thanks,
Justine & the MNHQ team"
So the link is on the login page on the website and not in the e-mail. The above link to the homepage was not obfuscated. Less confusing/dodgy. I suppose they could/should have left even that one out or 'broke' it. Given your wife is not a member of Mumsnet it might be worth checking the e-mail again to make sure it really was not a phishing e-mail.
For myself I didn't twig that they had been 'hacked' and just thought they had discovered they were using a vulnerable version of OpenSSL and decided that it would be better to be safe than sorry and scrub everyone's passwords. It might have been better if they gave more details in the e-mail. I had to wait for the story here to discover what had apparently happened.
BTW I joined out of interest and it was a throw away account so I won't bother refreshing it... although it might be interesting to see what sort of method they do have in place. It would also be interesting to see how much has in fact been 'reset'. Would it have been wise to clean out all account details and throw away the e-mail addresses as well?
If anyone was active on the site they would try and log in and be presented with a 'whoopsie page' explaining what had happened and asked to recreate their accounts from scratch. Sure.. sounds like a bit of a pain but.....
-
-
Tuesday 15th April 2014 15:50 GMT JimmyPage
Penis beaker
surely we can't have a thread about Mumsnet without a penis beaker reminder ?
-
Wednesday 16th April 2014 08:42 GMT TopOnePercent
The trouble with mumsnet...
....aside from their all being swivvel eyed loons with as much connection to reality as your average hormonal teenager, is that they have very effective lawyers.
Pistonheads (biggest car web site on t'interwebs) had something of a cyber war with them at one stage, so they let loose the dogs of law. No sense of humour at all.
Its always amazed me that they don't understand how much of a parody they've become. Mumsnetter isn't a label any intelligent person would seek to acquire.