Gentoo rsync Server Compromised [updated]

costela writes "LWN points out that the Gentoo project fired out an alert about one compromised rsync server." From the message itself: "However, the compromised system had both an IDS and a file integrity checker installed and we have a very detailed forensic trail of what happened once the box was breached, so we are reasonably confident that the portage tree stored on that box was unaffected." Update: 12/03 22:54 GMT by T : One more damage report: gibson writes "The Free Software Foundation recently discovered that its software host site was compromised a month ago. The compromise appears to be the same as the recent attacks on the Debian servers. The site is shut down until Friday while they install replacement hardware and verify the authenticity of the hosted source code."

Comments

Re:The only reason this is news...

[gosand]

"If you hate your job you don't quit. Just get in there every day and do it really half-assed." -Homer Simpson

Yeah yeah, offtopic. But you have to fix your sig man. If you are going to quote, get it right. You are way off - it is "Lisa, if you don't like your job, you don't strike. You just go in every day and do it really half-assed. That's the American way."