| View previous topic :: View next topic |
| Author |
Message |
bobthebob1234 LXF regular

Joined: Thu Jan 03, 2008 9:38 pm Posts: 1356 Location: A hole in a field
|
Posted: Mon Jun 14, 2010 1:24 pm Post subject: Oops. Unreal IRC server has a backdoor. |
|
|
| Quote: | Hi all,
This is very embarrassing…
We found out that the Unreal3.2.8.1.tar.gz file on our mirrors has been replaced quite a while ago with a version with a backdoor (trojan) in it.
|
Source: http://www.zdnet.com/blog/bott/linux-infection-proves-windows-malware-monopoly-is-over/2206 _________________ For certain you have to be lost to find the places that can't be found. Elseways, everyone would know where it was |
|
| Back to top |
|
 |
ollie Moderator

Joined: Mon Jul 25, 2005 12:26 pm Posts: 2749 Location: Bathurst NSW Australia
|
Posted: Mon Jun 14, 2010 2:18 pm Post subject: |
|
|
That's not great news, but it is one program not "Linux".
The programmers and maintainers of UnrealIRC have just learnt some valuable lessons. There are reasons for MD5 checksums and PGP/GPG signing and using limited accounts with secure access to servers. If these methods aren't implemented then problems can occur. Notice that CVS and pre-compiled versions weren't affected, just a tarball replaced on the main server. |
|
| Back to top |
|
 |
M-Saunders Moderator

Joined: Mon Apr 11, 2005 1:14 pm Posts: 2881
|
Posted: Mon Jun 14, 2010 2:34 pm Post subject: |
|
|
That is indeed a rubbish headline. If it was a Firefox or OpenOffice.org binary shipped with Ubuntu, then it would be a big deal. But an IRC server? Something that only 0.001% of people ever use?
M |
|
| Back to top |
|
 |
| View previous topic :: View next topic |
|