Debian Server Compromised
Security News writes "According to a post on the debian-devel-announce mailing list "Early this morning we discovered that someone had managed to compromise gluck.debian.org. We've taken the machine offline and are preparing to reinstall it. " gluck is a core development machine."
...everyone has moved to GNU/Ubuntu.
So if corporate America wants to trust a black box, let 'em. There's no convincing them anyway. I think differently. I think that if the debian team proves to be efficient and shows some sort of internal public retribution, that corporations will trust an honest mistake over coverups, exploits and scandals that Microsoft have proven itself. I believe that if we band together, we can educate and push open source forward. The open source community and open source developers are almost over the arrogance that once plagued the idea of open source, and now open source can be taken seriously in the enterprise. If you read the past five years of slashdot, and look back at open source, you will see a lot of matured and a lot has changed since then. It is time that we go to corporations and prove to them that university degrees do not prove intelligence in our field, and that a certification is not worth anything more than the paper it is worth. We have an open system (source forge) that will point a corporation to all the people they need for these IT and CS-related jobs. Lets push the University system down and bring the Open Source system to the top. We are seen as the smartest and best of the best. Lets train and educate our gamer friends, leet friends, geeksquad friends(mmm), and other lower tech people that will in turn teach the masses, and then corporations that open source contribution and involvement is an effective way to measure ones credibility. Maybe we will see more things like MaBell's bell labs where open source developers can be paid to work for a company to contribute to the software they use in the same spirit that Logitech funds Doug Engelbart to pursue his ambitions, but in mass.
Sig: I stole this sig.
I know it (or at least one of the servers in the cluster) has been defaced at least once by one of the first 'big' iis worms a few years ago. I know because I saw it
Of course a defacement(?) is completely different to a compromise that tries to be undetected, and I don't imagine that Microsoft would make any announcements about it if that happened to them, not until people spotted that they were downloading worms...