925dk

Traffic to Route 53 was rerouted to an alternative DNS server. But that has nothing to do with my question re. AWS calling out Google in particular in their status update.

Why do AWS http://status.aws.amazon.com say that only Google resolvers were affected?

Between 4:05 AM PDT and 5:56 AM PDT, some customers may have experienced elevated errors resolving DNS records hosted on Route 53 using DNS resolvers 8.8.8.8 / 8.8.4.4. This issue was caused by a problem with a third-party Internet provider. The issue has been resolved and the service is operating normally.

By whom?

By the way, HipChat still has no two-factor authentication.

It's sitting right next to the emoji team.

"This weekend our Security Intelligence Team detected" ...

"Security Intelligence Team" ... yeah, because that team actually exists.

Why are they force resetting everyone's password if they are bcrypt'ed?

They now confirm https://blog.hipchat.com/2017/04/24/hipchat-security-notice/

Seems fixed now.

This was dedicated servers (root servers they call them) - and I'm from Europe.

Yes seriously, here is what they asked me on first order with them:

"Since you're a new customer with Hetzner, we ask you for a scan of your passport or ID card (authenticity check). It's only necessary for your first order with us.

Please send the scan by fax or as an email attachment."

When they say they delete it after 21 days, as they did in the mail I've just received, I trust them. I find their communication on this matter, as well as previous matters, open and serious.

Here is the (english) mail they sent to customers back in October 2011 on the previous intrusion:

http://pastebin.com/uJhG5aLS

As part of the registration process with hetzner.de, you have to send them scans of personal documents (such as passport, drivers license or similar).

I asked them just now if these systems were compromised and they promptly replied:

"The system that stores scans of ids, credit cards and so on was not compromised. In addition to that, we delete that information after 21 days."

Million of Danish Personal Identification numbers and driver license data was downloaded. 10.000 police email accounts "hacked" - as well as access to SIS data (Schengen registers).