Apache.org hit by targeted XSS attack

Apache.org hit by targeted XSS attack, passwords compromised.

The long and short of security ... you can try your best, but ultimately "if man maketh, man can breaketh ". As we have advised time and time again in the forums, their is no 100 percent protection. The above breach started as a "social engineered attack" from "server A" witch led them to "server B and beyond ". As with all breaches, we learn and correct our mistakes and the war continues. Unfortunately their are many causalities in these battles. The reasons I backup data and create timely image's of my OS drive ... Security and/or hardware/software failure. All of my passwords are encrypted (3rd party program). For very vital password access, such as banking I use a 20 alpha/numeric password . ... plus I watch my bank account daily.