Comprometimento no Cluster da FreeBSD.org
Postado por gondim | Categoria FreeBSD, Segurança | Dia 17-11-2012
Tags:security
3
No dia 11/11 uma intrusão foi encontrada em 2 máquinas do Cluster da FreeBSD.org, elas foram colocadas offline para análise e como medida preventiva outras máquinas também foram postas offline para averiguação.
Até o momento não existe confirmação de risco para nós, usuários finais, mas eles nos aconselham à olhar e acompanhar esse link que estará sendo atualizado pelo Sec Team. Abaixo a notícia na íntegra:
On Sunday 11th of November, an intrusion was detected on two machines within the FreeBSD.org cluster. The affected machines were taken offline for analysis. Additionally, a large portion of the remaining infrastructure machines were also taken offline as a precaution. We have found no evidence of any modifications that would put any end user at risk. However, we do urge all users to read the report available at http://www.freebsd.org/news/2012-compromise.html and decide on any required actions themselves. We will continue to update that page as further information becomes known. We do not currently believe users have been affected given current forensic analysis, but we will provide updated information if this changes. As a result of this event, a number of operational security changes are being made at the FreeBSD Project, in order to further improve our resilience to potential attacks. We plan, therefore, to more rapidly deprecate a number of legacy services, such as cvsup distribution of FreeBSD source, in favour of our more robust Subversion, freebsd-update, and portsnap models. More information is available at http://www.freebsd.org/news/2012-compromise.html
Comprometimentos já aconteceram (e acontecem muitas vezes sem ninguém saber) com outros sistemas também, como o kernel.org (kernel do Linux) em 2011, de maneira semelhante. Mas o lado bom é ver que o time do FreeBSD está tratando do problema de forma exemplar, com rapidez, eficiência e transparência. Isso só reforça a boa imagem do Projeto FreeBSD e por consequência de todo o sistema operacional junto aos seus usuários. Continue assim FreeBSD!
Hello! I know this is somewhat off topic but I was wondering which blog platform are you using for this website? I’m getting sick and tired of WordPress because I’ve had issues with hackers and I’m looking at alternatives for another platform. I would be great if you could point me in the direction of a good platform.
Hi,
I’m using WordPress running on FreeBSD 9.1-RELEASE.
The problem is not with WordPress but the person who is managing your system. 🙂