Forgot your password?
typodupeerror
Security Unix IT BSD

FreeBSD Project Discloses Security Breach Via Stolen SSH Key 86

Posted by timothy
from the happy-transparency dept.
An anonymous reader writes "Following recent compromises of the Linux kernel.org and Sourceforge, the FreeBSD Project is now reporting that several machines have been broken into. After a brief outage, ftp.FreeBSD.org and other services appear to be back. The project announcement states that some deprecated services (e.g., cvsup) may be removed rather than restored. Users are advised to check for packages downloaded between certain dates and replace them, although not because known trojans have been found, but rather because the project has not yet been able to confirm that they could not exist. Apparently initial access was via a stolen SSH key, but fortunately the project's clusters were partitioned so that the effects were limited. The announcement contains more detailed information — and we are left wondering, would proprietary companies that get broken into so forthcoming? Should they be?"
This discussion has been archived. No new comments can be posted.

FreeBSD Project Discloses Security Breach Via Stolen SSH Key

Comments Filter:

Nothing succeeds like success. -- Alexandre Dumas

Working...