SourceForge attacked, resets 2 million account passwords to protect users
thenextweb.com
thenextweb.com
The passwords were potentially compromised. Changing the passwords for their users means the user accounts won't work with the (potentially) compromised passwords any more.
> If someone gained access to the passwords in their database, they're already out in the wild. Changing your password now has zero benefit to the user outside of protecting access to SF itself.
If the user is using one password for all websites that's a separate problem. This move is to protect SF users' accounts.
In short, I disagree with the wording of the title. This does nothing to protect users, it only protects SF.
... thinking the same thing. github is the new sourceforge.