Re: [gentoo-user] Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 18:33, Peter Humphrey escribió: > On Thursday, 28 June 2018 22:15:36 BST Francisco Blas Izquierdo Riera > (klondike) wrote: >> Hi! >> >> I just want to notify that an attacker has taken control of the Gentoo >> organization in Github and h

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 17:11, Dale escribió: > R0b0t1 wrote: >> I can't help but notice this was moved to gentoo-user. Are posts to >> gentoo-dev being moderated properly, or should I not bother submitting >> anything? >> >> > I suspect it was done to let users know about the breach.  Otherwise, >

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-29 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 03:55, Duane Robertson escribió: > On Thu, 28 Jun 2018 23:15:36 +0200 > "Francisco Blas Izquierdo Riera (klondike)" wrote: > >> Hi! >> >> I just want to notify that an attacker has taken control of the Gentoo >> organization in

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-29 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 09:47, Ivan J. escribió: > On Fri, Jun 29, 2018 at 03:12:15AM +0200, Francisco Blas Izquierdo Riera > (klondike) wrote: >> El 29/06/18 a las 00:27, Mick escribió: >>> On Thursday, 28 June 2018 22:54:45 BST Francisco Blas Izquierdo Riera >>> (klo

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-28 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 00:27, Mick escribió: > On Thursday, 28 June 2018 22:54:45 BST Francisco Blas Izquierdo Riera > (klondike) wrote: >> El 28/06/18 a las 23:15, Francisco Blas Izquierdo Riera (klondike) escribió: >>> Hi! >>> >>> I just want to no

[gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-28 Thread Francisco Blas Izquierdo Riera (klondike)
El 28/06/18 a las 23:15, Francisco Blas Izquierdo Riera (klondike) escribió: > Hi! > > I just want to notify that an attacker has taken control of the Gentoo > organization in Github and has among other things replaced the portage > and musl-dev trees with malicious versions

[gentoo-user] Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-28 Thread Francisco Blas Izquierdo Riera (klondike)
as is and GitHub has now removed the organization, please don't use any ebuild from the GitHub mirror ontained before 28/06/2018, 18:00 GMT  until new warning. Sincerely, Francisco Blas Izquierdo Riera (klondike) Gentoo developer. signature.asc Description: OpenPGP digital signature

Re: [gentoo-user] Re: Flexibility and robustness in the Linux organisim

2013-09-30 Thread Francisco Blas Izquierdo Riera (klondike)
El 30/09/13 00:47, Volker Armin Hemmann escribió: Am 29.09.2013 18:41, schrieb Francisco Blas Izquierdo Riera (klondike): El 29/09/13 18:03, Volker Armin Hemmann escribió: Am 29.09.2013 17:12, schrieb Greg Woodbury: On 09/29/2013 07:58 AM, Volker Armin Hemmann wrote: things were broken way

Re: [gentoo-user] Re: Flexibility and robustness in the Linux organisim

2013-09-29 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/09/13 18:03, Volker Armin Hemmann escribió: Am 29.09.2013 17:12, schrieb Greg Woodbury: On 09/29/2013 07:58 AM, Volker Armin Hemmann wrote: things were broken way before that. As much as I hate systemd, it is not the root cause of the problem. The problems were caused by people saying

Re: [gentoo-user] USE=jpeg not part of hardened/linux/x86 profile

2012-06-27 Thread Francisco Blas Izquierdo Riera (klondike)
El 27/06/12 04:38, Alecks Gates escribió: On Tue, Jun 26, 2012 at 8:48 PM, Francisco Blas Izquierdo Riera (klondike) klond...@gentoo.org wrote: Hello, First sorry for taking this long to answer this, somehow this mail slipped through my radar and couldn't find it when somebody moved

Re: [gentoo-user] USE=jpeg not part of hardened/linux/x86 profile

2012-06-26 Thread Francisco Blas Izquierdo Riera (klondike)
Hello, First sorry for taking this long to answer this, somehow this mail slipped through my radar and couldn't find it when somebody moved it to the gentoo-hardened list, add to that an... interesting live and we are set. And now let's get answers: First the Gentoo Hardened team DOES support

Re: [gentoo-user] Pay for a hardened VM image

2012-03-04 Thread Francisco Blas Izquierdo Riera (klondike)
El 04/03/12 17:35, Tanstaafl escribió: Hmmm... I used to be subscribed, but I seem to recall unsubscribing because it seemed essentially dead... We tend to be shy and not very active since we have many things to focus on, but this also means posts hardly go by unread, so please don't confuse

Re: [gentoo-user] Pay for a hardened VM image

2012-03-03 Thread Francisco Blas Izquierdo Riera (klondike)
El 04/03/12 01:26, Michael Orlitzky escribió: On 03/03/2012 03:21 PM, Tanstaafl wrote: On 2012-03-02 3:51 PM, Tanstaafltansta...@libertytrek.org wrote: Would anyone here be interested in being paid to create a hardened VM image for me that will run on a Microsoft Hyper-V host? If so, what

Re: [gentoo-user] S.O.P.A and P.I.P.A and the blackout.

2012-01-18 Thread Francisco Blas Izquierdo Riera (klondike)
El 19/01/12 00:55, Chris Walters escribió: I am truly surprised that Gentoo, and more GNU/Linux and *BSD sites did not join in the 'blackout'. The only one I saw that did was opensuse.org . Some of us did support the movement on our ways, for example the Gentoo Hardened team didn't twit the

Re: [gentoo-user] Why no love for amd64 hardened?

2011-11-02 Thread Francisco Blas Izquierdo Riera (klondike)
El 03/11/11 06:41, Pandu Poluan escribió: Why amd64 hardened stage3 never got any updates? I've checked here: http://distfiles.gentoo.org/releases/amd64/autobuilds/current-stage3-amd64-hardened/ And here:

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-22 Thread Francisco Blas Izquierdo Riera (klondike)
El 22/09/11 22:07, Manuel McLure escribió: On Sep 21, 2011 9:13 PM, Francisco Blas Izquierdo Riera (klondike) klond...@gentoo.org wrote: Well deprecated version removal tends to happen because we are not going to aim for those versions stabilization AND there is a newer version available

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-22 Thread Francisco Blas Izquierdo Riera (klondike)
El 22/09/11 22:30, Alan McKinnon escribió: On Wed, 21 Sep 2011 16:09:14 +0200 Francisco Blas Izquierdo Riera (klondike) klond...@gentoo.org wrote: I wish people wouldn't just remove stuff without full details. If there's an issue with that code, there should be a bug at b.g.o

Re: [gentoo-user] hardened-sources...what?

2011-09-22 Thread Francisco Blas Izquierdo Riera (klondike)
El 22/09/11 22:20, Michael Mol escribió: My question is...what kinds? Well mainly the PaX and the grsecurity patches. I also heard there is a WIP in bringing RSBAC back again too. For what reason is there a set of makes it more secure patches that aren't integrated into the mainline kernel?

Re: [gentoo-user] hardened-sources...what?

2011-09-22 Thread Francisco Blas Izquierdo Riera (klondike)
El 23/09/11 01:02, Mike Edenfield escribió: On 9/22/2011 5:51 PM, Francisco Blas Izquierdo Riera (klondike) wrote: El 22/09/11 22:20, Michael Mol escribió: My question is...what kinds? Well mainly the PaX and the grsecurity patches. I also heard there is a WIP in bringing RSBAC back again

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-21 Thread Francisco Blas Izquierdo Riera (klondike)
El 21/09/11 15:48, Alan McKinnon escribió: On Wed, 21 Sep 2011 19:34:36 +0700 Pandu Poluan pa...@poluan.info wrote: On Wed, Sep 21, 2011 at 19:26, Alan McKinnon alan.mckin...@gmail.com wrote: On Wed, 21 Sep 2011 12:15:02 +0700 Pandu Poluan pa...@poluan.info wrote: Hmm, just ran eix-sync

Re: [gentoo-user] hardened-sources reverted to 2.6.39-r8 :(

2011-09-21 Thread Francisco Blas Izquierdo Riera (klondike)
El 21/09/11 18:39, Pandu Poluan escribió: On Sep 21, 2011 9:13 PM, Francisco Blas Izquierdo Riera (klondike) klond...@gentoo.org mailto:klond...@gentoo.org wrote: Well deprecated version removal tends to happen because we are not going to aim for those versions stabilization

Re: [gentoo-user] {OT} Can I retrieve my SSL key?

2011-08-17 Thread Francisco Blas Izquierdo Riera (klondike)
El 18/08/11 03:37, Grant escribió: I just accidentally overwrote my SSL certificate key. Is there any way to retrieve it? Possibly some sort of export since I haven't restarted apache2 yet? What, exactly, did you do that caused the overwrite? I generated a new key but used the wrong

Re: [gentoo-user] Where be the hardened Stage3?

2011-06-06 Thread Francisco Blas Izquierdo Riera (klondike)
El 03/06/11 15:28, Pandu Poluan escribió: Anyone knows why current-stage3/ no longer has the hardened stage3 tarballs? Rgds, There have been some issues generating them last week. AFAIK the Hardened team is working with the autobuilds team to fix them. signature.asc Description: OpenPGP