- Site menu:
- Latest Discussions
- Latest Newswire
- Archives
- Submit Story
- Story HOWTO
- Syndicate
- E-mail Alerts
OpenSSL site defacement involving hypervisor hack rattles nerves (updated)
|
|
|
Comments (3)
So OpenSSL uses a shared hosting service, and kernel.org still hasn't released their promised report of the breach that took the whole works down for over a month. Not very reassuring.
Well, a defaced website caused by weak passwords has nothing to do with the underlying git code.
People hack into websites all the time.
People hack into websites all the time.
https://www.openssl.org/news/secadv_hack.txt
Sure, and what other holes is the host leaving open?
Quoting: The OpenSSL server is a virtual server which shares a hypervisor with other customers of the same ISP. Our investigation found that the attack was made through insecure passwords at the hosting provider, leading to control of the hypervisor management console, which then was used to manipulate our virtual server.
The source repositories were audited and they were not affected.
Sure, and what other holes is the host leaving open?
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post