Language Selection

English French German Italian Portuguese Spanish

Sourceforge Attack: Full Report

Filed under
Security
Web

As we’ve previously announced, SourceForge.net has been the target of a directed attack. We have completed the first round of analysis, and have a much more solid picture of what happened, the extent of the impact, our plan to reduce future risk of attack. We’re still working hard on fixing things, but we wanted to share what we know with the community.

We discovered the attack on Wednesday, and have been working hard to get things back in order since then. While several boxes were compromised we believe we caught things before the attack escalated beyond its first stages.

Our early assessment of which services and hosts were impacted, and the choice to disable CVS, ishell, file uploads, and project web updates appears to have prevented any further escalation of the attack or any data corruption activities.

rest here




More in Tux Machines

Git 2.2.1 Released To Fix Critical Security Issue

Today's Git vulnerability affects those using the Git client on case-insensitive file-systems. On case-insensitive platforms like Windows and OS X, committing to .Git/config could overwrite the user's .git/config and could lead to arbitrary code execution. Fortunately with most Phoronix readers out there running Linux, this isn't an issue thanks to case-sensitive file-systems. Read more

Ubuntu 15.04 Alpha 1 For Its Various Flavors

While Ubuntu itself no longer puts out alpha/beta releases in favor of just testing out the daily Live ISOs, the various Ubuntu flavors still participating in the traditional release process have done their first alpha releases this afternoon for Ubuntu 15.04. Read more

Robolinux 7.7.1 LXDE Runs Windows Apps with Stealth VM

Robolinux 7.7.1, a fast and easy-to-use Linux distribution based on Debian has just received a new desktop environment, LXDE, making this the third second flavor of the distribution. Read more

Jolla's Sailfish OS Update 10 Is Now Available

The tenth update to Jolla's Sailfish mobile operating system is now available. This update is version 1.1.1.26 and is codenamed Vaarainjärvi. This latest update to Jolla's Sailfish OS includes the device lock now supporting alpha-numeric codes, copy-paste support between Android and native Sailfish apps, Mail app improvements, new overlays for maps, search improvements, unification to the accounts framework, new MMS settings, UI improvements, and an assortment of other improvements. Read more