That's what I'm afraid of, and I tried to download it but it said the service was down which is why I'm wondering if it was safe of me to even go there and try either via wget or by internet browser.
|
Since I read about this security breach I examine the security level of my desktop. Actually I downloaded and compiled the latest kernel from kernel.org at 31.Aug.
Because its only my desktop with no important data on it (instead of reinstall) I started to read my logs from the network logging system. Even if my kernel should be somehow tampered (with some hidden processes) I cannot find any suspicious traffic on network level. So maybe this can show that the kernel source was not Tampered. (?) I mean any malicious (modified) part of the kernel which should serve to take control or use my system somehow requires network activity. |
Panic is not the option, here.
Again, Open Source will prevail...because it's "all over the place" so a single attack will not make more that a (serious) dent. By the way, it shows where we stand against the "other" one...if there is an attack, we dont cover up and pretend our noses bleed... :) As a future note: let's all meditate on how to strengthen the "system" and what with (software, package signing, hashes, what have you)...and flush the ideas around to let them mature... Hey, I just got wind of this because I needed to recompile a kernel...so... Thor |
git seems pretty resilient, so that may be the safe way to get the kernel source in the future. As can be seen from this example the local checksums weren't helpful.
|
Quote:
Edit...ehrm...any manuals out there? I've heared/read about it, but never considered it... (noob as I am) Edit 2 : IXquick was my friend...sorry for my earlier panic attack :D |
There is a 'man git'. Usually you'll be using 'git clone' and 'git pull'.
|
Thanks...
man, it gives me a creepy feeling...let's hope the stuff is back on-line soon... |
Linux Security is a forum that deals with facts, not fiction. Conjecture, giving voice to vague ideas just don't belong. Please keep this thread factual and on topic.
|
Gottit...sorry. Straightening up now...
|
One fact-question (no speculations):
Does anyone know when kernel.org and Linux.com will be back? Or, has the output been moved elsewhere and I'm not (yet) aware of it. Sorry for a doofy question... Thanks Thor |
Quote:
|
Thanks Nylex
|
For those looking to update from Linus Torvald's kernel tree it is on github now.
https://github.com/mirrors/linux https://github.com/mirrors/linux.git Read Linus' message https://lkml.org/lkml/2011/9/4/92 and substitute the above for the replaced: https://github.com/torvalds/linux.git If you already have a cloned tree you can change your remote with: git remote set-url origin https://github.com/mirrors/linux.git |
|
The site is back up but it's not possible to download anything right now.
|
All times are GMT -5. The time now is 12:12 AM. |