3 ms·
Kernel.org servers compromised
- baconhigh 15y agosigh
- pointyhat 15y agoThe main question to answer is how long ago did this happen.
- JoshTriplett 15y agoThe official announcement on kernel.org: https://www.kernel.org/#news https://www.kernel.org/#news And the HN story referencing that announcement: http://news.ycombinator.com/item?id=2947578 http://news.ycombinator.com/item?id=2947578 I have to wonder why someone felt the need to anonymously pastebin the original announcement to a private mailing list.
- mkr-hn 15y agoIs it just their servers, or was the kernel distribution itself compromised? I can't tell from this.
- cjbprime 15y agoIt's just the servers. The kernel repositories weren't modified, and even if they were, git makes it pretty impossible to modify history if you're paying attention -- the next push would fail as a non-fast-forward.
- JoshTriplett 15y agoAlso, in the mailing list thread, someone actually went back and verified the contents of all the old tarballs and compared them to the bits from Git, since otherwise someone could have changed the tarball releases.