News for hackers. Stuff that matters.

A comment on Matrix.org Security Incident. Parent comment

Re:Matrix.org Security Incident by deepwell on Friday April 12, 2019 @01:21AM (#19642182)
it was not, read again
[ Parent | on HN ]
Re:Matrix.org Security Incident by Perceptes on Friday April 12, 2019 @03:31AM (#19642788)
But it does seem to be the case that the same SSH key pair that was used to access Jenkins also provided access to the production infrastructure. Unless I'm misunderstanding the nature of the attack.
[ Parent | on HN ]
Re:Matrix.org Security Incident by zigara on Friday April 12, 2019 @04:18AM (#19643004)
It seems the issue was developers using SSH agent forwarding which was abused to access the production environment.
[ Parent | on HN ]