Respository vandalism by root at ...fd.o

Egbert Eich e4t at freenet.de
Tue Nov 23 15:28:54 PST 2010


On Tue, Nov 23, 2010 at 10:56:52PM +0000, Alan Cox wrote:
> > It's on a separate branch, not master.   (Doesn't mean it's right, just
> > that it's not actually going to cripple anything or waste time for anyone
> > who doesn't ask for it.)
> 
> And how many other un-noticed commits did this person make ? Until you
> know that you have to assume a complete compromise.
> 

Alan, 

right! Even if this could be considered a less harmful thing that only
happened in a newly created branch it'd be easy for this person to play
lot more evil tricks somewhere else.
What would you suggest should be done next? Checking logs for traces
of this? Those which could reveal this information might be gone already.

Cheers,
	Egbert.


More information about the xorg-devel mailing list