Two FreeBSD Project Servers Hacked 46
hypnosec writes "The FreeBSD project has suffered a security breach. Hackers have successfully compromised servers that were part of the infrastructure used to build third-party software packages. The Security team over at the FreeBSD project is of the opinion that hackers were able to gain access to the servers using legitimate SSH keys and not by exploiting any operating system vulnerabilities. Instances of intrusion were first detected on November 11. FreeBSD project, through a message on public announcements mailing list said that the security breach hasn't affected the project's core components like kernel or system libraries but, has affected third-party software packages being distributed by the project."
Re:Should have run on OpenBSD (Score:4, Insightful)
"Only two remote holes in the default install, in a heck of a long time!"
A security breech using legitimate authentication credentials is not a remote hole.