Kernel.org servers compromised (opens in new tab)

(pastebin.com)

40 pointsddbbcc14y ago6 comments

6 comments

JoshTriplett14y ago

The official announcement on kernel.org: https://www.kernel.org/#news

And the HN story referencing that announcement: http://news.ycombinator.com/item?id=2947578

I have to wonder why someone felt the need to anonymously pastebin the original announcement to a private mailing list.

mkr-hn14y ago

Is it just their servers, or was the kernel distribution itself compromised? I can't tell from this.

cjbprime14y ago

It's just the servers. The kernel repositories weren't modified, and even if they were, git makes it pretty impossible to modify history if you're paying attention -- the next push would fail as a non-fast-forward.

JoshTriplett14y ago

Also, in the mailing list thread, someone actually went back and verified the contents of all the old tarballs and compared them to the bits from Git, since otherwise someone could have changed the tarball releases.

pointyhat14y ago

The main question to answer is how long ago did this happen.

_hnwo14y ago

sigh

j / k navigate · click thread line to collapse