Re:Gentoo GitHub Organization hacked
by kchr on Friday June 29, 2018 @12:13PM
(#17425363)
Someone with such long term goals would most likely not do it as noisy and destructive as this attack seems to be (delete all files, rename the Github org, etc.).
Re:Gentoo GitHub Organization hacked
by aroman on Thursday June 28, 2018 @05:58PM
(#17420832)
4chan has many boards, including /g/, the technology board. Sarcastically (and sometimes non-sarcastically) recommending new users to install Gentoo is a longstanding tradition on the board, alongside other gentoo-related memes. For instance: https://wiki.installgentoo.com/index.php/Main_Page
I sincerely hope 4chan users aren't responsible for this, though.
Re:Gentoo GitHub Organization hacked
by zyx321 on Thursday June 28, 2018 @06:21PM
(#17420958)
>I sincerely hope 4chan users aren't responsible for this, though.
If there is a severe security issue either in GitHub infrastructure or in the Gentoo Foundation's procedures which would allow this kind of breach, having them revealed by a stupid prank is one of the best outcomes you can hope for.
Re:Gentoo GitHub Organization hacked
by kchr on Friday June 29, 2018 @12:34PM
(#17425539)
You don't get to decide what words are offensive for some people unless you are part of the subject group of said people. Anything would be a misunderstanding of the word "offensive".
Re:Gentoo GitHub Organization hacked
by mistrial9 on Thursday June 28, 2018 @06:15PM
(#17420931)
side note -- there is another FOSS org that was repeatedly, specifically attacked around the end of 2015, but they chose not to publicize it.. made worse because the volunteer community around the server admin was immediately far outside their comfort zone to implement fixes and recovery. The MediaWiki instance as well as raw servers were affected. No discussion in public about likely perpetrators. but what can you say ? How can you prove it? Commercial vendor rivals, nation-state actors, mean junkies, all of the above? Harsh and UN-necsessary .. everything was volunteer and above-board at the FOSS group, just too valuable ?
Re:Gentoo GitHub Organization hacked
by jooV1Bei on Thursday June 28, 2018 @07:05PM
(#17421188)
Probably talking about FSF.
Employees of backconnect.com including Tucker Preston and Marshall Webb DDoSed them for a while to land them as clients for their DDoS protection service.
Re:Gentoo GitHub Organization hacked
by kchr on Friday June 29, 2018 @12:21PM
(#17425437)
Apparently the Github organization title and logo was changed, along with a couple of packages edited to contain scripts that were supposed to erase all files on user computers.
The Github repos are just backups of the main package archives, so it would only affect users manually downloading packages from there (which is not the case if you haven't explicitly changed your system config to use those repos for some reason).
Re:Gentoo GitHub Organization hacked
by neur0h on Tuesday July 03, 2018 @01:18AM
(#17447725)
l0de doesnt actually do anything except smoke meth and live off donations from his sycophant army on Efnet. It was probably one of his followers/listeners though because this had been announced weeks before on his radio show
I sincerely hope 4chan users aren't responsible for this, though.
If there is a severe security issue either in GitHub infrastructure or in the Gentoo Foundation's procedures which would allow this kind of breach, having them revealed by a stupid prank is one of the best outcomes you can hope for.
Their high friction contribution process with essentially requisite 'accredited developer' status is a major contributing factor.
Edit: Hah! Posting here got the bug updated within 10 minutes :)
Crossing my fingers they added jokes about Stallman and muh freedums.
GNAA and wiki.installgentoo.org referenced
The N word being _that_ N word.
The logo was also changed to something that implied watermelon eating.
EDIT: Using the archive link below, it's the one ending "...roes"
Employees of backconnect.com including Tucker Preston and Marshall Webb DDoSed them for a while to land them as clients for their DDoS protection service.
https://krebsonsecurity.com/2016/09/ddos-mitigation-firm-has... (ctrl-f FSF)
One of these "DCC 0 0 0" spammers getting people with crappy firewall middleboxes disconnected?
The Github repos are just backups of the main package archives, so it would only affect users manually downloading packages from there (which is not the case if you haven't explicitly changed your system config to use those repos for some reason).