@cedric I used unique password for this account. Might be a false positive. With unique pass, I wonder. Was there many other people?
@cedric @c00kie Hi. I went to investigate if there's any traces of unauthorized access on the server but found nothing. Passwords are bcrypt-hashed so even if something leaked you wouldn't be able to get plain-text password unless you had modified code on the server intercepting them live. I found no modified code. Tried saving my own mastodon.online password into the Apple Passwords app, it's not reporting any issue. Is there any more information you can give me to investigate this?
@Gargron @c00kie Thank you very much !
Actually on my side it's fine.
I just asked because a friend also got a notification from the Apple Password manager today (I do not know which Mastodon instance he is using). It might be a false positive. A little strange coincidence...
Anyway, thanks for the feedback!
Fosstodon is an English speaking Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.