EH-Net

Ethical Hacking Discussions and Related Certifications => Incident Response => Topic started by: timmedin on April 07, 2009, 08:52:29 PM

Title: Fedora Intrusion Revealed.
Post by: timmedin on April 07, 2009, 08:52:29 PM

This is a good explanation of the intrusion into Fedora's systems. For those of you wanting to get into this area this should whet your appetite

https://www.redhat.com/archives/fedora-announce-list/2009-March/msg00010.html

Quote

This communication provides additional information on the Fedora
infrastructure intrusion first reported on August 14, 2008. In part
this communication reiterates information provided in previous
announcements.

Title: Re: Fedora Intrusion Revealed.
Post by: Ketchup on April 07, 2009, 10:11:30 PM

Thanks for the post. I found this particularly funny:

Quote

The compromise was not the result of a software vulnerability, and as
we have previously stated, our investigation has revealed no such
vulnerabilities.

I also found it interesting that it appears they decided to conduct their own investigation. Does Fedora employ Incident Response and Forensics people?

Title: Re: Fedora Intrusion Revealed.
Post by: phreakre on April 08, 2009, 03:19:48 PM

Quote from: Ketchup on April 07, 2009, 10:11:30 PM

I also found it interesting that it appears they decided to conduct their own investigation. Does Fedora employ Incident Response and Forensics people?

.. probably not, which is why they didn't find anything. ^^