Skip navigation.
home | news feeds | archives | search | forums | submit news
Home » view

Intrusion on GNOME Web Server

Submitted by stro on Wed, 2004-03-24 09:18. GNOME
GNOME

We've discovered evidence of an intrusion on the server
hosting www.gnome.org and other gnome.org websites.
After some research, we've found it unlikely that any GNOME
sources on our FTP site or source code repository have been
affected.

A number of services have been restored on a replacement
machine. Updates will be posted to the gnome-announce-list,
and found in our archives.
A quick status update on the situation:

* No additional damage has been discovered; at the current
time we are cautiously hopeful that the compromise was
limited in scope.

* ftp.gnome.org is back on now that we have additional
confidence in the integrity of the tarballs.

* We've now restored a number of services running on a
replacement machine

- Websites including www.gnome.org, and developer.gnome.org
are back up in limited service; dynamic content is still
off so some parts may be inaccessible.

- planet.gnome.org is again providing all your favorite
blogs and gossip.

- Bugzilla is in testing mode; we hope to restore general
access in the next day.

Thanks for your patience; we'll continue to provide updates
as we move back to fully operational status.

Re: Intrusion on GNOME Web Server

Submitted by Anonymous George on Wed, 2004-03-24 11:45.

Here is a thought. In the interests of keeping safe from such events, I suggest that the internet facing servers, i.e., the ones we download from, be made 'slaves' of sorts of some non internet facing servers. This way they are not the "official" sources, but are updated say everyday from the master server which cannot be hacked. This way, even if ftp.gnome.org is hacked, it can be replaced in a matter of hours, and we will know the sources are good. Then the CVS and the master sources server could be only visible to a select group, and hopefully be more hack-proof.

» parent