Digidelivery!!!

[TAFF]

Hi guys,

Did anyone get this email from Aspera this morning or yesterday

"November 30th, 2010

Dear DigiDelivery Administrator or Customer,

Today, we learned that there was likely a security breach of the DigiDelivery product.

While some of you may have requested to be taken off our mailing list, we felt it was an important communication for you to receive and apologize for any inconvenience.

It is CRITICAL that you IMMEDIATELY take the following actions: first, turn OFF CS access mode if you have it running on your DigiDelivery server. Then, change and strengthen your DigiDelivery admin password.

These 2 steps are described in further detail below:

1. Turn OFF CS access mode

Go to the DigiDelivery web administration interface
Click "Server Administration" on the left-hand side
Determine if CS access if ON or OFF:
If the choices on the right read "Turn CS Access mode OFF", then it is ON and you need to click to turn it OFF
If the choices on the right read "Turn CS Access mode ON", then it is OFF and you don't need to take any further action
When you are done, the choices should read "Turn CS Access mode ON"
2. Change and strengthen your DigiDelivery admin password

Make sure that you change the admin password on your DigiDelivery server to a new password AND that the new password is as strong or stronger than your current one. Do this as follows:

Go to the DigiDelivery web administration interface
Click "Account Information" on the left-hand side
Click "Change Password"
Enter the old password, the new password and the new password again
Be sure to pick a long and strong password, one that is resistant to brute force/guessing attacks
Click "Save"
Log out of the administration interface then back in again using the new password to verify
Please perform both steps described above IMMEDIATELY.

Please note that the DigiDelivery product is no longer manufactured and that Aspera will stop providing support on December 31, 2011. Please refer to the end-of-manufacturing announcement that was published by Aspera (the company that currently owns the product) and Avid (DigiDelivery's original manufacturer) on October 28, 2010:

End of manufacturing of DigiDelivery servers (Aspera website)

DigiDelivery pages (Avid website)

For more information and if you need help in making these changes or verifying that they have been performed correctly, please contact us at [email protected], using "DigiDelivery Security" in the subject field.

We hope that you will not be affected by this security breach and will inform you of any further developments.



Your Aspera Team"

A bit worrying eh or is a rogue email?

Let me know

Paul McFadden
Supervising Sound Editor
Doctor Who

www.bangpostproduction.com

[sunburst79]

Could you please crosspost this in the Aspera DigiDelivery Forum? Given the importance of this I think it should be in both forums to ensure maximun exposure.

Thanks

[TAFF]

Tis done sir

[shockwave2501]

yea I receieved the email regarding that. Also note that digidelivery is no longer supported as of Dec 31 2010.

[Rick Sanchez]

I also received the email from Aspera. It would be nice if they would tell us a bit more about how security was breached. Does not instill much confidence in "upgrading" to the new Aspera servers.

[sunburst79]

This sounds more like a "Hole" than a "Breach" to me. Sounds like perhaps some one found a back door.

[[email protected]]

I made a posting about this last evening on the Avid - Digi users forum:

There has been a security breach of the DIGIDELIVERY SERVER and it is very important that you take the measures described, and for details, contact us (a [email protected]). Because of the ongoing work to stop the perpetrator we could not give more details in email.

Thank you,
Michelle Munson