LXer: Fedora site hacked

LXer · 01-27-2011, 10:50 PM

Published at LXer:

An attacker stole the account credentials of a contributor to the Fedora Linux project and accessed Fedora servers on Jan. 22. The attack follows other recent cyber-invasions of open source projects, including hacks reported on the Free Software Foundation and ProFTPD.

Read More...

dugan · 01-27-2011, 11:19 PM

And, of course, the attack on Sourceforge.

disturbed1 · 01-28-2011, 12:11 AM

Quote:

Originally Posted by dugan

And, of course, the attack on Sourceforge.

This was not a vulnerability on Fedora's end though.

Quote:

The account information was "compromised externally," and the "Fedora Infrastructure was not subject to any code vulnerability or exploit," Smith wrote. He reminded contributors of the importance of choosing a strong password and to not reuse their Fedora password on other websites or accounts.

prodev05 · 01-28-2011, 12:43 AM

The attacker compromised the repository account to acquire the source. Lucky the attacker didn't make any potential damage which causes heavy impact. This has been rectified and alternate login credentials have been provided. Not Fedora is safe. But still the analysis is going on to find a solution to prevent it from happening again. This is information is provided by the fedora project manager.