Gentoo GitHub Organization hacked | Hacker News Reader

Gentoo GitHub Organization hacked

archives.gentoo.org

210 pointsryanlol45 comments

What kind of a dick would do this to Gentoo, who makes everything available to everyone? I don't understand the world sometimes.

gentoo is the poster child (real or tongue in cheek, doesn't matter) of the tech forum on 4chan.

What do you mean? Also I haven’t noticed a tech board on 4chan...

http://knowyourmeme.com/memes/install-gentoo

4chan has many boards, including /g/, the technology board. Sarcastically (and sometimes non-sarcastically) recommending new users to install Gentoo is a longstanding tradition on the board, alongside other gentoo-related memes. For instance: https://wiki.installgentoo.com/index.php/Main_Page

I sincerely hope 4chan users aren't responsible for this, though.

>I sincerely hope 4chan users aren't responsible for this, though.

If there is a severe security issue either in GitHub infrastructure or in the Gentoo Foundation's procedures which would allow this kind of breach, having them revealed by a stupid prank is one of the best outcomes you can hope for.

/g/ is fairly calm and civil at least when put into perspective of the rest of 4chan.

Some of them have been deleted. Some of them were text-only and didn’t show up on the main index.

He's referring to /g/

Someone who wants to steal crypto for example. Being able to inject a crypto stealer in a major distribution surely motivates a lot of people to try.

Someone with such long term goals would most likely not do it as noisy and destructive as this attack seems to be (delete all files, rename the Github org, etc.).

I suspect white teen, under 17. See incident report: 20:34:xx Malicious commit to gentoo/gentoo, 73b72409->fdd8da2e

    adds readme.me file with text niggers.

source: https://wiki.gentoo.org/wiki/Github/2018-06-28

I am a long term Gentoo user, but honestly I feel Gentoo's security stance is pretty bad, for example https://bugs.gentoo.org/show_bug.cgi?id=597804

Their high friction contribution process with essentially requisite 'accredited developer' status is a major contributing factor.

Edit: Hah! Posting here got the bug updated within 10 minutes :)

Have you considered Funtoo yet? It's a fork of Gentoo, led by the creator of Gentoo.

Seems than the person replaced ebuilds in portage with versions that are supposed to delete all files but that don't actually work. https://archives.gentoo.org/gentoo-dev/message/03df77a347ec7...

What was the modified version of the GitHub page?? Looks like it was taken down before I could get there.

Crossing my fingers they added jokes about Stallman and muh freedums.

The title read: Linux For N____es

The N word being _that_ N word.

The logo was also changed to something that implied watermelon eating.

then ... wouldn't it be "...ers"? Otherwise, I have no idea what _that_ N word is.

EDIT: Using the archive link below, it's the one ending "...roes"

Is "negroes" supposed to be a super offensive word now?

For many, now and for quite awhile.

You don't get to decide what words are offensive for some people unless you are part of the subject group of said people. Anything would be a misunderstanding of the word "offensive".

*Anything else

https://archive.is/NSKrT

GNAA and wiki.installgentoo.org referenced

Some systemd hate. Modified ebuilds to rm -rf /*.

side note -- there is another FOSS org that was repeatedly, specifically attacked around the end of 2015, but they chose not to publicize it.. made worse because the volunteer community around the server admin was immediately far outside their comfort zone to implement fixes and recovery. The MediaWiki instance as well as raw servers were affected. No discussion in public about likely perpetrators. but what can you say ? How can you prove it? Commercial vendor rivals, nation-state actors, mean junkies, all of the above? Harsh and UN-necsessary .. everything was volunteer and above-board at the FOSS group, just too valuable ?

You can't just tell that story w/o namedropping....

Probably talking about FSF.

Employees of backconnect.com including Tucker Preston and Marshall Webb DDoSed them for a while to land them as clients for their DDoS protection service.

https://krebsonsecurity.com/2016/09/ddos-mitigation-firm-has... (ctrl-f FSF)

Was probably opal

Who is opal?

Famous IRC artist.

yeah you don't want opal on your IRC network

> yeah you don't want opal on your IRC network

One of these "DCC 0 0 0" spammers getting people with crappy firewall middleboxes disconnected?

No,a PM/channel troll&spammer. but his persistence and discipline really merits the title of an artist.

Don’t glorify misbehaviour.

Opal is a beautiful girl and tends to be quite vocal about the fact. I'm not sure why you felt it necessary to misgender them.

Great, now everyone knows.

The DCC 0 0 0 trick was already old a decade ago, by now literally everyone using IRC should have heard of it...

What changes were made?

Apparently the Github organization title and logo was changed, along with a couple of packages edited to contain scripts that were supposed to erase all files on user computers.

The Github repos are just backups of the main package archives, so it would only affect users manually downloading packages from there (which is not the case if you haven't explicitly changed your system config to use those repos for some reason).

Wait... did they not use 2FA?!

Dammit... l0de can’t keep getting away with it. I recommend you call him during his radio hour.

Who is l0de? Are you implying they are the ones who did this?

l0de doesnt actually do anything except smoke meth and live off donations from his sycophant army on Efnet. It was probably one of his followers/listeners though because this had been announced weeks before on his radio show

Reply on news.ycombinator.com