Slashdot Mirror
More Info on Debian.org Security Breach
mbanck writes "James Troup (part of the Debian System administration team) has published more information on the recent compromise of four debian.org machines. The attack vector seemed to be a sniffed password of an unprivileged account, from which the attacker somehow managed to gain root and install the suckit rootkit and crack the other machines. As the machines were fairly uptodate with respect to security, an as-of-yet unknown local root exploit might be in the wild, so keep an eye on your boxen.Note that the main ftp archive running on a sparc machine was not compromised, so the exploit might not yet be ported to non-i386 architectures."
Random passphrase?
Repeat after me: The best password is the one that isn't stikie'd to the monitor and/or keyboard.
TODO: Something witty here...
If you call your computers "boxen", I hope they get cracked and rootkitted.
I say we cut out the user.
It's a perfectly good middle-english plural. Perhaps they just have rather olde boxen to develop on?
One line blog. I hear that they're called Twitters now.
Law #1: If Bill can persuade you to run his program on your computer, it's not your computer anymore.
Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore.
That's why I've been saying for years that all my computers are owned by Bill Gates.
Im sure glad my network runs on Windows!
Manipulate the moderator system! Mod someone as "overrated" today.