Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message -- UPDATE

2019-04-01 Thread Martin Steigerwald
mett - 01.04.19, 05:38: > On 2019年4月1日 11:03:36 JST, Hendrik Boom wrote: > >On Mon, Apr 01, 2019 at 01:35:30AM +0200, KatolaZ wrote: > >> On Mon, Apr 01, 2019 at 12:21:58AM +0200, KatolaZ wrote: > >> > >> [cut] > >> > >> > Just to let you know that Devuan's caretakers got anonymous > >> > email

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message -- UPDATE

2019-03-31 Thread mett
On 2019年4月1日 11:03:36 JST, Hendrik Boom wrote: >On Mon, Apr 01, 2019 at 01:35:30AM +0200, KatolaZ wrote: >> On Mon, Apr 01, 2019 at 12:21:58AM +0200, KatolaZ wrote: >> >> [cut] >> >> > >> > Just to let you know that Devuan's caretakers got anonymous emails >> > from a group who identified thems

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message

2019-03-31 Thread Hendrik Boom
On Sun, Mar 31, 2019 at 12:55:34PM -0700, Mike Bird wrote: > On Sun March 31 2019 12:36:44 Tomasz Torcz wrote: > > You are over-reacting on April Fools joke. > > Whether or not a joke, all admins MUST assume the worst and > rebuild from trusted sources. Even if the jokers had not > intended a se

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message -- UPDATE

2019-03-31 Thread Hendrik Boom
On Mon, Apr 01, 2019 at 01:35:30AM +0200, KatolaZ wrote: > On Mon, Apr 01, 2019 at 12:21:58AM +0200, KatolaZ wrote: > > [cut] > > > > > Just to let you know that Devuan's caretakers got anonymous emails > > from a group who identified themselves as "Green Hat Hackers". They > > insisted on the l

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message -- UPDATE

2019-03-31 Thread Arnt Karlsen
On Mon, 1 Apr 2019 02:24:29 +0200, Arnt wrote in message <20190401022429.732563d4@sda3>: > On Mon, 1 Apr 2019 00:21:58 +0200, KatolaZ wrote in message > <20190331222158.ec7ingiwci4x3...@katolaz.homeunix.net>: > > > On Sun, Mar 31, 2019 at 09:12:39PM +0200, KatolaZ wrote: > > > > [cut] > > >

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message -- UPDATE

2019-03-31 Thread Arnt Karlsen
On Mon, 1 Apr 2019 00:21:58 +0200, KatolaZ wrote in message <20190331222158.ec7ingiwci4x3...@katolaz.homeunix.net>: > On Sun, Mar 31, 2019 at 09:12:39PM +0200, KatolaZ wrote: > > [cut] > > > > > Just an update on the current situation: it looks like the machines > > on which pkgmaster (the mai

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message -- UPDATE

2019-03-31 Thread KatolaZ
On Mon, Apr 01, 2019 at 12:21:58AM +0200, KatolaZ wrote: [cut] > > Just to let you know that Devuan's caretakers got anonymous emails > from a group who identified themselves as "Green Hat Hackers". They > insisted on the last line of the pwned website. If you have any clue, > let us know. > o

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message -- UPDATE

2019-03-31 Thread KatolaZ
On Sun, Mar 31, 2019 at 09:12:39PM +0200, KatolaZ wrote: [cut] > > Just an update on the current situation: it looks like the machines on > which pkgmaster (the main package repository server) and amprolla are > run are safe. They are on a separate piece of infrastructure and there > have not be

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message

2019-03-31 Thread Mike Bird
On Sun March 31 2019 12:36:44 Tomasz Torcz wrote: > You are over-reacting on April Fools joke. Whether or not a joke, all admins MUST assume the worst and rebuild from trusted sources. Even if the jokers had not intended a security compromise - which we don't know - we cannot assume that black h

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message

2019-03-31 Thread Tomasz Torcz
On Sun, Mar 31, 2019 at 11:55:57AM -0700, Mike Bird wrote: > On Sun March 31 2019 10:55:22 KatolaZ wrote: > > We know. Seems to be quite serious. No access to our infra. We are > > working on it, and we will post updates. :\ > > Assuming you still control your DNS you could immediately remove > an

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message -- UPDATE

2019-03-31 Thread KatolaZ
On Sun, Mar 31, 2019 at 11:55:57AM -0700, Mike Bird wrote: > On Sun March 31 2019 10:55:22 KatolaZ wrote: > > We know. Seems to be quite serious. No access to our infra. We are > > working on it, and we will post updates. :\ > > Assuming you still control your DNS you could immediately remove > an

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message

2019-03-31 Thread Mike Bird
On Sun March 31 2019 10:55:22 KatolaZ wrote: > We know. Seems to be quite serious. No access to our infra. We are > working on it, and we will post updates. :\ Assuming you still control your DNS you could immediately remove and later replace *.devuan.org to reduce the number of people accessing/d

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message

2019-03-31 Thread stanz via Dng
>>=== >>green hats? golinux wrote:: >Yeah, we know. Just happened. It sucks. Ok, well...guess we'll just sit back and wait for this to get sorted out. No way to help, huh?  Bummer :( signature.asc Description: OpenPGP digital signature ___ Dng ma

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message

2019-03-31 Thread KatolaZ
On Sun, Mar 31, 2019 at 05:40:27PM +, stanz via Dng wrote: > I got this redirect(?) today, trying to get to git. > I'm on the forum, using links there, all devuan.org. > > https://www.devuan.org/pwned.html > WE TURNED ALL DEVUAN'S SHITTY WEBSITES INTO PROPER GOPHERHOLES > > green hats

Re: [DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message

2019-03-31 Thread golinux
On 2019-03-31 12:40, stanz via Dng wrote: I got this redirect(?) today, trying to get to git. I'm on the forum, using links there, all devuan.org. https://www.devuan.org/pwned.html WE TURNED ALL DEVUAN'S SHITTY WEBSITES INTO PROPER GOPHERHOLES green hats? Yeah, we know. Ju

[DNG] *** DEVUAN.ORG HAS BEEN PWNED *** , message

2019-03-31 Thread stanz via Dng
I got this redirect(?) today, trying to get to git. I'm on the forum, using links there, all devuan.org. https://www.devuan.org/pwned.html WE TURNED ALL DEVUAN'S SHITTY WEBSITES INTO PROPER GOPHERHOLES green hats? signature.asc Description: OpenPGP digital signature _