我的Evernote被强制更改密码

晕，官网贴出了被安全告示：
http://evernote.com/corp/news/password_reset.php



Security Notice: Service-wide Password Reset

Evernote's Operations & Security team has discovered and blocked suspicious activity on the Evernote network that appears to have been a coordinated attempt to access secure areas of the Evernote Service.

As a precaution to protect your data, we have decided to implement a password reset. Please read below for details and instructions.

所有的用户都被重置密码了。

@keelii
官网通告专门提到了哈希加盐的事情
我有理由怀疑他们的哈希被盗取了。。。

@EricBox
"The operations and security team is keen to point out that there is no evidence that any stored notes and content was accessed, but that some user information -- including passwords and emails -- were. The data breached does benefit from one-way encryption (hashed and salted), but the firm is issuing a site-wide password reset just in case."

@ranye
官方的回复通常是很小心谨慎的。

原来如此，我说怎么密码总也不对，web登录被强制改密码了。。。

如果密码不是明文保存，怕什么呢？

@ccming md5可以暴力破解出来.

中国区的貌似不受影响？

- -还好我的密码加不加salt都暴力不出来

@mtglichking 中区没必要，直接后门接入

@mtglichking 中国区确实没必要，直接搬走服务器。

@kappa @leavic。。幽默。。我的意思是中国区数据中心不是独立于国际区的吗？帐户信息应该不是互通的吧？至于政府审查。。。我也明白

我收到的发件人很奇怪，这么重要的邮件是代发的：
发件人：Evernote Team <team@email.evernote.com>
(由 v-fhbgdb_hlailepan_eahbofp_eahbofp_a@bounce.evernote.mkt5371.com 代发)

呵呵，要是 印象笔记 被黑了，又要被喷成渣了

@Winny
我至今没有收到他们的邮件.

难怪的，还以为帐户被盗了。。虚惊

嗯，我的又被强制修改了。

我登录网页说我密码过期，要求设置新密码，但我的手机没要求我重新输入密码呢，直接就能用。