Back

Did they stole the data?

  • 0
  • Databases
GAZOCAR5
14 Nov, 2024, 18:29

Hi, I think everyone is aware that the server is giving error due an external attack. But I wanted to know if the data is safe and not stolen. More than the question if it got deleted, I'm scared if passwords were captured by a third party. I'm still developing my software so I didn't implement hashing methods, but still inputed some passwords of friends and mine.

Just to know if I should change all of my passwords. Best regards and hopeful for the platform to be up again soon.

TL;DR
Developers are concerned about the safety of their data after an external attack on the server. The developers assure that Appwrite hashes passwords with the Argon2 algorithm, so passwords are encrypted. The issue is being resolved, and there is no indication of data theft. Changing passwords is recommended as a precautionary measure.
D5
14 Nov, 2024, 18:29

What kind of error due to an external attack?

GAZOCAR5
14 Nov, 2024, 18:31

Saw in another post that this error in the database was due to a DDoS attack, wanted to know if there was any other kind of attack that we should be worried about.

GAZOCAR5
14 Nov, 2024, 18:31

Or was that a past issue with appwrite?

Nishant
14 Nov, 2024, 18:31

Don't worry. I believe the data is safe. It's just an internal bug that occurred I suppose.

D5
14 Nov, 2024, 18:31

It's a different issue

GAZOCAR5
14 Nov, 2024, 18:31

Perfect then, thanks for the clarification.

D5
14 Nov, 2024, 18:32

Also DDoS attacks don't compromise the data or it's integrity but availability/reach

GAZOCAR5
14 Nov, 2024, 18:32

Yes I understand, but I've seen that they use different methods at the same time to add layers of issues to the system.

D5
14 Nov, 2024, 18:33

So basically once the attack stops everything is back again

GAZOCAR5
14 Nov, 2024, 18:33

But now it's just a matter of time till everything is up again

D5
14 Nov, 2024, 18:33

Yes. Anyways the recent issue is not related to the attack

D5
14 Nov, 2024, 18:33

As it was a past thing

D5
14 Nov, 2024, 18:34

They are working on solving the database issue and then restore the data. They paused temporarily databases in order to prevent inconsistencies, etc

D5
14 Nov, 2024, 18:42

Also, wanted to add: Appwrite hashes passwords by default with Argon2 algorithm so even if someone access the databases, they will not be able to get the passwords directly as they are encypted

Reply

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more