[CentOS] Linux Australia breached, personal details leaked

2015-04-07 Thread m . roth
FYI, folks, Excerpt: Linux Australia discovered the breach on March 24 after it noticed conference management software it uses called Zookeepr started sending a large number of error reporting emails, Hesketh wrote. A server had been attacked two days prior. “It is the assessment of Linux

Re: [CentOS] Linux Australia breached, personal details leaked

2015-04-07 Thread Always Learning
On Tue, 2015-04-07 at 12:28 -0400, m.r...@5-cent.us wrote: “It is the assessment of Linux Australia that the individual utilized a currently unknown vulnerability to trigger a remote buffer overflow and gain root level access to the server,” Hesketh wrote. The attacker installed a remote

Re: [CentOS] Linux Australia breached, personal details leaked

2015-04-07 Thread John R Pierce
On 4/7/2015 3:20 PM, Always Learning wrote: Its stupid and unprofessional to store personal data on a public accessible server when there is no current public requirement for that data. um, this mail list server is a 'public accessible server' and it has our email addresses, and possibly

Re: [CentOS] Linux Australia breached, personal details leaked

2015-04-07 Thread Peter Lawler
On 08/04/15 08:20, Always Learning wrote: I would like to know what operating system was used and the method used to gain access. Maybe if you joined Linux Australia you could help out in the diagnosis. Meanwhile, on the *centos* list... P. ___