Fedora System Compromised, But No Changes Made

win32sux · 01-25-2011, 08:02 PM

Quote:

The infrastructure of the Fedora Project was compromised over the weekend and an account belonging to a Fedora contributor was taken over by an attacker. However, Fedora officials said they don't believe that the attacker was able to push any changes to the Fedora package system or make any actual changes to the infrastructure.

The attack appears to have targeted one specific user account, which had some high-value privileges. The attacker was able to compromise the account externally, and then had the ability to connect remotely to some Fedora systems. The attacker also changed the account's SSH key, Fedora officials said.

Complete Article

Hangdog42 · 01-26-2011, 07:20 AM

What I like is that the Fedora team is posting the results of their investigations. At least they are telling people what they are, and are not, finding.

anomie · 01-26-2011, 10:28 AM

Agreed - I appreciate the open communication. I found the "attack" details very odd. (Either an amateur with a lucky break, or a very clever person whose goals were/are not yet discovered or understood.)