hmm.. obviously a star trek fan.
Announcement
Collapse
No announcement yet.
Vandalizing Open-Source Drivers?
Collapse
X
-
Originally posted by libv View PostThis is not a security thing, it is a trust thing here. Those people with root access to the fd.o servers should be fully trusted, if not, they should not have such access rights. This event here clearly shows that one person should not have been given access rights, even when this person might have had this since right after the xfree86 fork.
Trust is a weakness. (C) introversion
Leave a comment:
-
Originally posted by crazycheese View PostI think the answer more about improving security based on happened attack vector(hacker way) rather than panic (girl way) or inductive criticism(bad politician way).
The event is a good training exercise for security.
Leave a comment:
-
Originally posted by libv View PostThe real question is: who would trust his code to fd.o after this?
The event is a good training exercise for security.
Leave a comment:
-
And even if rebasing published repositories is not recommended, in this case it is probably a good idea, there is no need to tolerate vandalism even if the project is not thriving.
Leave a comment:
-
Originally posted by libv View PostThe real question is: who would trust his code to fd.o after this?
Leave a comment:
-
Originally posted by Plombo View PostInterestingly, the email address comes from the website of Jerkcity. Jerkcity is a webcomic notable enough to have a Wikipedia page. One of the characters is named Spigot (the name of the committer). Spigot is even based on one of the authors of the strip.
Of course, it's likely that the vandal has nothing to do with Jerkcity, and simply spoofed his name and email address as a bad joke. He's already shown he's very good at covering up his tracks - as Luc noted, he disabled the update hook before his commit and re-enabled it afterward so that no email would be sent to the mailing list.
Leave a comment:
-
Interestingly, the email address comes from the website of Jerkcity. Jerkcity is a webcomic notable enough to have a Wikipedia page. One of the characters is named Spigot (the name of the committer). Spigot is even based on one of the authors of the strip.
Of course, it's likely that the vandal has nothing to do with Jerkcity, and simply spoofed his name and email address as a bad joke. He's already shown he's very good at covering up his tracks - as Luc noted, he disabled the update hook before his commit and re-enabled it afterward so that no email would be sent to the mailing list.
Leave a comment:
Leave a comment: