Debian Investigation Report after Server Compromises
Posted on: 12/02/2003 01:53 PM
Martin Schulze has published an Investigation Report. Thanks Greg.
The Debian administration team and security experts are finally able to pinpoint the method used to break-in into four project machines. However, the person who did this has not yet been uncovered.Read more
The package archives were not altered by the intruder.
The Debian administration and security teams have checked these archives (security, us, non-us) quite early on in the investigation and re-installation process. That's why the project was able to open up the security archive again and confirm that the stable update (3.0r2) wasn't compromised.