- Site menu:
- Latest Discussions
- Latest Newswire
- Archives
- Submit Story
- Story HOWTO
- Syndicate
- E-mail Alerts
and what about that kernel.org breach?
|
| Author | Content |
|---|---|
| tuxchick Jan 04, 2014 12:54 PM EST |
So OpenSSL uses a shared hosting service, and kernel.org still hasn't released their promised report of the breach that took the whole works down for over a month. Not very reassuring. |
| hughesjr Jan 04, 2014 4:46 PM EST |
Well, a defaced website caused by weak passwords has nothing to do with the underlying git code. People hack into websites all the time. |
| tuxchick Jan 04, 2014 5:09 PM EST |
https://www.openssl.org/news/secadv_hack.txt Quoting: The OpenSSL server is a virtual server which shares a hypervisor with other customers of the same ISP. Our investigation found that the attack was made through insecure passwords at the hosting provider, leading to control of the hypervisor management console, which then was used to manipulate our virtual server. Sure, and what other holes is the host leaving open? |
Post a reply to this thread:
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post