Hipchat has suffered an #infosec incident
https://blog.hipchat.com/2017/04/24/hipchat-security-notice/
They're blaming a "third party library" but, -extremely- annoyingly, have neglected to state which library it is - so be prepared to keep an eye out for other services having incidents in the future, if this isn't a case of hipchat having used something catastrophically out of date.
Update: this is third-hand information, but a contact of mine at a competing organization who is organizationally familiar with the matter has been informed that the library in question has not yet been patched.
So the wumpus is out there, and we'll likely end up seeing a patch in...something get pushed out relatively soon.
@maiyannah @munin Has anyone compiled a comprehensive list of /lower/ honours Cloudflare's bug bounty program doles out?
Binkies?
Soiled diapers?
Thongs? (Of any description.)
... ?
Munin, Keeper of Lore
Maiyannah Bishop
Dr. Edward Morbius ❌