Kernel.org servers compromised
pastebin.com
Kernel.org servers compromised
1–7 of 7 posts
Re: Kernel.org servers compromised
#2sigh
Re: Kernel.org servers compromised
#3The main question to answer is how long ago did this happen.
Re: Kernel.org servers compromised
#4The official announcement on kernel.org: https://www.kernel.org/#news
And the HN story referencing that announcement: http://news.ycombinator.com/item?id=2947578
I have to wonder why someone felt the need to anonymously pastebin the original announcement to a private mailing list.
Re: Kernel.org servers compromised
#5Is it just their servers, or was the kernel distribution itself compromised? I can't tell from this.
Re: Kernel.org servers compromised
#6Is it just their servers, or was the kernel distribution itself compromised? I can't tell from this.
It's just the servers. The kernel repositories weren't modified, and even if they were, git makes it pretty impossible to modify history if you're paying attention -- the next push would fail as a non-fast-forward.
Re: Kernel.org servers compromised
#7Is it just their servers, or was the kernel distribution itself compromised? I can't tell from this.
It's just the servers. The kernel repositories weren't modified, and even if they were, git makes it pretty impossible to modify history if you're paying attention -- the next push would fail as a non-fast-forward.
Also, in the mailing list thread, someone actually went back and verified the contents of all the old tarballs and compared them to the bits from Git, since otherwise someone could have changed the tarball releases.