On Wed, Sep 14, 2011 at 2:01 AM, Miklos Vajna <[email protected]> wrote: > On Wed, Sep 14, 2011 at 12:36:23AM -0600, Marius Cirsta <[email protected]> > wrote: >> What I do wonder though is who might have wanted to hack a Frugalware >> server and why. It does have a pretty good internet connection I >> suppose and some CPU power but still .... And with the recent >> kernel.org attacks taking place at about the same time, it kind of >> makes you wonder. >> I think that we do download the kernel straight from kernel.org, >> right ? It's just speculation but maybe this is how they knew about FW >> machines. > > Possible. Don't spend too much time on it, probably it was just a > kiddie, needing a bootstrap machine, we don't have a bit enough market > share to be interesting in this aspect. ;) >
True but I don't really believe in coincidences that much. And it does sound very similar to what happened at kernel.org. Another concern I have here is are we sure they didn't alter anything on the build machines or something like that ? I don't want to be paranoid but there's a lot that can be done to compromise the repos and all ( compiler modification would be one thing ). I'm new around here and not really an expert but I'm just asking. > _______________________________________________ > Frugalware-devel mailing list > [email protected] > http://frugalware.org/mailman/listinfo/frugalware-devel > > _______________________________________________ Frugalware-devel mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-devel
