Slashdot Mirror
Linux.org's DNS Got Hijacked (linux.org)
Linux.org reports:
Wednesday afternoon around 5pm EST someone was able to get into the registrar account for our domain and point DNS to another server -- as well as lock us out from changing it. They pointed the domain name to a pretty rude page for most of the evening until Cloudflare stepped in and blocked the domain for us.
After a lot of back and forth with our registrar, we were able to get things back under our control. I'd like to point out that our server environment was not touched so there are no worries about your data. We've gone over security protocols and are tightening things up that may have slipped through in the past. Thanks for your support!
Linux.org apparently pointed to a page exclaiming "G3T 0WNED L1NUX N3RDZ", which also included a NSFW picture, some abusive language, a shout-out to recently-deceased programmer Terry Davis, and a link to an article about Linus Torvalds' controversial apology for "his hostile behavior towards others in the community."
Long-time Slashdot reader Grady Martin says he also saw the page pointing to "presumably doxed info" about the creator of Linux's code of conduct, a fact confirmed by a report in the Register. "As for how it was hacked, [Linux.org owner Mike] McLagan blames the public Whois displaying his partner's email address -- presumably the hacker worked their way into the Yahoo email account listed as the admin of the site and from there requested a password change in her Network Solutions account to gain access to the domain."
After a lot of back and forth with our registrar, we were able to get things back under our control. I'd like to point out that our server environment was not touched so there are no worries about your data. We've gone over security protocols and are tightening things up that may have slipped through in the past. Thanks for your support!
Linux.org apparently pointed to a page exclaiming "G3T 0WNED L1NUX N3RDZ", which also included a NSFW picture, some abusive language, a shout-out to recently-deceased programmer Terry Davis, and a link to an article about Linus Torvalds' controversial apology for "his hostile behavior towards others in the community."
Long-time Slashdot reader Grady Martin says he also saw the page pointing to "presumably doxed info" about the creator of Linux's code of conduct, a fact confirmed by a report in the Register. "As for how it was hacked, [Linux.org owner Mike] McLagan blames the public Whois displaying his partner's email address -- presumably the hacker worked their way into the Yahoo email account listed as the admin of the site and from there requested a password change in her Network Solutions account to gain access to the domain."
It took 4 days for the hacking of one of the biggest tech community sites on the internet to land on /.? Really? We gunna see a story about the Falcon 9 water landing next Friday?
[Sorry, this signature is unavailable in your country/region]
Looks like social engineering attacks still work in 2018, and Linux / community is not immune to it. There is no organization or company that can't be fooled if they believe the person/email/account is legit. The email address of high access users is capable of lots of damage even if temporary
I'm sorry, if you still have a Yahoo email that controls anything of value, you're an idiot and this is well deserved.
Wow, it's almost as bad as having a hotmail account. I mean seriously, it's 2018. A yahoo email address? Did he get it so he could do email push with the iPhone 1?
Yahoo
Hotmail
Gmail
Which one really is safer?
#DeleteFacebook
Might still be better than gmail. I'm so happy keeping mail servers working is no longer a part of my work duties -- "can't send mail to site X" had X = gmail in at least 80% cases, as they invent a standards-defying policy once than a couple of months. And tossing ham into a spam box without a reject to the sender makes gmail unfit for your kid's kindergarten invites, much less some important stuff.
The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
Slashdot, fix the reply notifications... You won't get away with it...
https://web.archive.org/web/20181206232921im_/https://www.linux.org/asshole.jpg
I just want to give a shout out for Terry Davis, and hope he is working on his TempleOS in the sky. Also, f*ck glow in the dark CIA n1ggers.
Yahoo Hotmail Gmail
Which one really is safer?
Running a number of Sigs, my experience is that if someone is hacked, the odds that they are using a Yahoo email account is pretty overwhelming.
It does say something that the creator of Linux's Code of Conduct is using a Yahoo email address. That is the realm of the computer inept, the land of passwords like password1, or 1234567.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
It wasn't author of the CoC's email address that was used for the DNS records, it was the site owner.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
DNS hijacking has been a problen in the past, resulting in DNS registrars swearing blind that they'll never again change ownership without verfying ownership over the phone.
NS obviously broke that rule.
Easy solution - pull their business license for a year.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
Gmail, because it supports really good 2 factor auth. There is even an extra secure mode that blocks some normal Google account use and requires two FIDO keys.
Hotmail also supports 2 factor via a Microsoft account. Yahoo, I don't know.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
I'm not going to look at it, but the filename suggests it I can safely assume it's goatsex.
It wasn't author of the CoC's email address that was used for the DNS records, it was the site owner.
You are correct. That summary is just plain wrong.
I am a victim of assuming that there would be some relation between the site referenced and the Slashdot summary. But I should know better.
Mike McLagan is the administrator of Linux.org. not the owner as described in the summary.
Michelle McLagan is the owner of Linux.org. Not mentioned anywhere in the summary.
She - although unnamed - is called "his partner" in the summary. Whether this means Significant Other type partner or business partner is not immediately clear. Doesn't matter much, but another example of garbled writing.
But yes, the creator of the CoC is one Coraline Ehmke. Who is trying to get rid of meritocracy which she considers misogynist, and replacing it with credentials based on "humanity."
I was definitely incorrect, except that I stand by my assertion that a Yahoo email address is in itself a security risk. Mea culpas all around.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
G3T 0WNED L1NUX N3RDZ
Why isn't this child being supervised while on the internet?
If you want to see what it looked like, here you go (NSFW)
Is it wrong that I just laughed for 10 mins?
The manhunt is on for the owner of that hairy asshole.
One day such hack will redirect archive.ubuntu.org (or other) to a repository of hacked updates and millions of linux users will get massively hacked with no hope of cleaning up. As a linux user and admin I hope it won't happen, but I'm surprised it hasn't happened yet.
Non-Linux Penguins ?
After a lot of back and forth with our registrar, we were able to get things back under our control.
Right there lies the problem. The registrars do not know their clients and when the sh!+ hits the fan, they go all defensive, quote privacy at you and in effect side with the hackers who hijacked the site! Registrars need to be held to a much higher and stricter standard, worldwide. I lost a site I had for a decade because the host was being merged into a larger business, something went wrong and it seems they were internally hacked. Then they cut all access and emailing support went into robo-reply hell, only.
PS - libel laws need to be loosened so in the above I could freely name and shame the bastards.
Terry's TempleOS torn apart mind would have been better understood, if you'd knew about his childhood. For example his words about people 'They Glow In The Dark'. Terry A Davis lived among the Klux Klux Klan when he was a young child. That was in Texas. All people around a camp fire in the night glow. Especially people with a white costume, and the unfortunately soul, that the KKK ritually sacrifices in their beliefs. It forced his parents to move away from Texas and Dallas. With an open question, why did Terry return to the place as a homeless person anyway. Now Terry is dead officially. A little train accident.
https://youtu.be/qKptDKVpA7s
It does say something that the creator of Linux's Code of Conduct is using a Yahoo email address. That is the realm of the computer inept, the land of passwords like password1, or 1234567.
I think the problem (haven't yahooed in a long time) is the policy of password recovery and naivety of providing authentic answers to [hometown, school, first car, pet's name]. In the past my pet was always "password recovery dog".
Yahoo does 2FA now. Ironically, my 17-year-old Yahoo email isn't the one I'm getting sextortion emails on... that would be Gmail.
and from there requested a password change in her Network Solutions account
Why the fuck would you give anything of importance to a woman? They know shit about security or anything involving tech.
You did this to yourself you dumbfucks.
Anybody using Yahoo services in this day and age is foolish. Yahoo transmits your contacts in the clear, and their services are very poor. Using Yahoo services (any of them) is like being on a ship adrift at sea ... Do not do it.