Linux RedHat/Fedora get totally "pwned"

Status
Not open for further replies.

vishalrao

Global Moral Police
Luminary
("pwned" being the kind of diction you only get from the eloquently elite)

But check out: https://www.redhat.com/archives/fedora-announce-list/2008-August/msg00012.html and rhn.redhat.com | Red Hat Support

Last week we discovered that some Fedora servers were illegally accessed.

...

One of the compromised Fedora servers was a system used for signing Fedora packages.

...

In connection with the incident, the intruder was able to sign a small number of OpenSSH packages relating only to Red Hat Enterprise Linux 4 (i386 and x86_64 architectures only) and Red Hat Enterprise Linux 5 (x86_64 architecture only).

I always get annoyed whenever a Fedora ambassadroid/marketroid/fanboid sneers at Ubuntu for this n that - like the recent OpenSSL random number entropy problem - but it looks like some Ubuntu fanboi script kiddie managed to compromise RedHat/Fedora servers. A little egg on their faces please kthxbye.
 
Heh, edited the post to highlight the "able to sign" part :ohyeah: That is some serious total pwnage. I think now any time any envious Fedora whiner tries to pass a smart comment about Ubuntu all I need to do is point them to this minor event to shut them up.

I love it how they write "only" a "small number" of OpenSSH packages were signed by the intruder...
 
Oh I wrote "looks like some Ubuntu fanboi", wishful thinking, should have been "would be cool (funny) if it turned out to be an Ubuntu fanboi"
 
I must say ,that it is not with distro ,but the server admin guys who needs to get the beatings for that !.
 
(re: "not with distro")

note that im not saying fedora sux and ubuntu rox etc. even tho i use ubuntu and i think it rox better than fedore :P. fedora is a perfectly good distro... its just that reading the fedora member blogs on the "fedora people" server you see the irritating snarky post against ubuntu now and then from a developer/contributor/ambassador.
 
fedora too improved quiet a lot in package management.currently got FC9 64 on my pc.

I use Debian Sid as primary and ubuntu hardy ,fedora 9 also on my hdd.but ,I must say ,if you think deb+apt means best package management ,go see what pacman offers(archlinux).
 
Ouch. I have used RHEL5 and even though I am no pro, I found it more secure than Windows, which is nothing new. But these hacks...lol. I wouldn't blame the distro though, it's the administrator fault.
 
lol no corporate will ever take up Ubuntu for worstations rest assured :rofl:...even if support also is made phreee !

Flame wars come on :D
 
Status
Not open for further replies.