News for hackers. Stuff that matters.
Re:GitHub mirror compromise incident report by justinclift on Wednesday July 04, 2018 @06:30PM (#17459766)
Putting "rm -rf /*" in every ebuild seems like a pretty clear indication of malicious intent.

Can't really picture anyone doing that as a "just trying to have fun" thing.

Re:GitHub mirror compromise incident report by Buge on Wednesday July 04, 2018 @07:40PM (#17460003)
Yes, but malicious intent for the purpose of having fun watching the reaction. Not malicious intent for the purpose of personal gain, long term access, or government intelligence.
Re:GitHub mirror compromise incident report by dalore on Wednesday July 04, 2018 @10:31PM (#17460531)
So chaotic neutral? If going by DnD.
Re:GitHub mirror compromise incident report by justinclift on Thursday July 05, 2018 @03:51AM (#17461566)
More chaotic evil. Personally I'm pretty close to chaotic neutral - varies over time, sometimes true neutral, sometimes chaotic good - and just outright attempting destruction of unknown third parties seems pretty far towards the "evil" side of things.
Re:GitHub mirror compromise incident report by dalore on Thursday July 05, 2018 @06:40AM (#17462166)
I would say destroying random things for laughs is chaotic neutral. You do random chaotic things not for pleasure or pain. He isn't doing it for a specific reason but because he can. That's neutral.

A chaotic evil would be destroying out of greed or hate.

Re:GitHub mirror compromise incident report by justinclift on Thursday July 05, 2018 @09:31AM (#17463088)
Hmmm, dunno. The only evidence being reported is that they locked out the project admins then attempted to destroy everything they could.

To me, that's not a "neutral" thing. It seems like it was only luck that the rm-ing didn't work, else there would be a bunch more unhappiness.

People do run Gentoo on production systems. Though they obviously shouldn't pull straight from upstream without some real testing before deployment, in the real world it does get done.

Re:GitHub mirror compromise incident report by justinclift on Thursday July 05, 2018 @09:34AM (#17463106)
Hmmm, thinking about this bit more:

> He isn't doing it for a specific reason but because he can. That's neutral.

If the action is to just do something harmless ("echo 'Couldn't have rm -rf-d you there!", then sure it could be seen at neutral. But it was clearly an attempt to destroy other people's stuff or work. That really doesn't seem very neutral to me. :)

Re:GitHub mirror compromise incident report by justinclift on Thursday July 05, 2018 @03:49AM (#17461555)
Well, it's arguably still personal gain.

It's just of the transient "I had fun from it" kind, instead of something with more tangible rewards (as you mention).

If it was just someone having a lark, there are plenty of ways to do that other than literally attempting to destroy everything they can access. ;)

Re:GitHub mirror compromise incident report by ISL on Wednesday July 04, 2018 @10:05PM (#17460462)
It's the sort of "fun" that can land the malicious actor in prison.
Re:GitHub mirror compromise incident report by emn13 on Thursday July 05, 2018 @02:49AM (#17461313)
Almost anything can land you in prison for years, nowadays. But that doesn't mean there's no difference in impact. Gentoo can count themselves as extraordinarily lucky precisely because there is a difference, between getting hit by a troll rather than a white-collar criminal.
Re:GitHub mirror compromise incident report by Stratoscope on Wednesday July 04, 2018 @10:04PM (#17460457)
Having "fun" by ruining quite a few people's day.

Malicious is malicious.

Re:GitHub mirror compromise incident report by AlfeG on Thursday July 05, 2018 @02:11AM (#17461184)
Looks like a student joke. I just dont know how many files were deleted in such a jokes during education )
Re:GitHub mirror compromise incident report by giancarlostoro on Wednesday July 04, 2018 @06:38PM (#17459807)
forgot --no-preserve-root for it to really take effect properly.
Re:GitHub mirror compromise incident report by ryan-c on Wednesday July 04, 2018 @06:58PM (#17459886)
I believe rm -rf /* will work without --no-preserve-root
Re:GitHub mirror compromise incident report by IntelMiner on Wednesday July 04, 2018 @08:27PM (#17460149)
GNU rm I believe requires the --no-preserve-root flag these days, to prevent that command from happening by accident
Re:GitHub mirror compromise incident report by justinsaccount on Wednesday July 04, 2018 @08:49PM (#17460232)
The shell expands

/*

, not rm.

It expands to /bin /etc /lib and such and is not covered by the sanity check.