Gentoo Github Hacked

[rcmaehl]

Source: Gentoo

 

Quote:

Quote

Today 28 June at approximately 20:20 UTC unknown individuals have gained control of the Github Gentoo organization

 

Summary:
It appears the Gentoo github was compromised by an unknown person. While repos were not affected if you were thinking about installing Gentoo... don't do it through the github. The assailant has edited the gentoo github to contain various explicit words and phrases and the github is still affected as of this post.

 

My Own Opinion:
I personally wonder if this was in light of a recent github exploit as seen here or if it was just a simple case of a reused password that was leaked. Anyway the Joke is supposed to be "Install" Gentoo, not "Hack" Gentoo.

[BachChain]

2 hours ago, rcmaehl said:

various explicit words

What, like "pre-compiled binaries" and "out-of-box experience"?

[suicidalfranco]

should have moved to gitlab

[rcmaehl]

Adding update:

The added code on github was basically an sudo rm -rf / --no-preserve-root. [Source] It appears the github repos has now been deleted/hidden by github. 

[Granular]

Well, that's a black mark against the dev team.

[Sniperfox47]

21 hours ago, Granular said:

Well, that's a black mark against the dev team.

How so? Nothing got compromised on the dev end. All of the signing keys are all intact so anyone validating signatures (which if you're using gentoo you should *really* be doing) are fine. Anyone using the official repositories are fine.

 

This makes me chuckle a bit solely because of the coincidence of it. Microsoft buys GitHub and then a couple weeks later the Gentoo account gets hacked Probably a total coincidence but still funny in my mind.

 

On 2018-06-28 at 6:07 PM, rcmaehl said:

My Own Opinion:

I personally wonder if this was in light of a recent github exploit as seen here or if it was just a simple case of a reused password that was leaked. Anyway the Joke is supposed to be "Install" Gentoo, not "Hack" Gentoo.

Honestly it's most likely just a social engineering thing. Gentoo being a mostly community driven project it probably wouldn't be very hard for a potential attacker to convince GitHub that theyre newly responsible for the GitHub page and nobody told them the password. Can I get a password reset please?