Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-07-01 Thread Ilya Trukhanov
On 06/29/2018 10:47 AM, Ivan J. wrote: On Fri, Jun 29, 2018 at 03:12:15AM +0200, Francisco Blas Izquierdo Riera (klondike) wrote: El 29/06/18 a las 00:27, Mick escribió: On Thursday, 28 June 2018 22:54:45 BST Francisco Blas Izquierdo Riera (klondike) wrote: El 28/06/18 a las 23:15,

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread Mart Raudsepp
Ühel kenal päeval, L, 30.06.2018 kell 15:33, kirjutas Rich Freeman: > On Sat, Jun 30, 2018 at 12:50 PM Nikos Chantziaras > wrote: > > > > On 30/06/18 19:15, Rich Freeman wrote: > > > > > > If you are using git syncing I believe that portage will verify > > > that > > > the top commit (which is

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread Rich Freeman
On Sat, Jun 30, 2018 at 12:50 PM Nikos Chantziaras wrote: > > On 30/06/18 19:15, Rich Freeman wrote: > > > > If you are using git syncing I believe that portage will verify that > > the top commit (which is the only one that really matters) is using a > > trusted key if you put the following line

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread Dale
Francisco Blas Izquierdo Riera (klondike) wrote: > El 29/06/18 a las 17:11, Dale escribió: >> R0b0t1 wrote: >>> I can't help but notice this was moved to gentoo-user. Are posts to >>> gentoo-dev being moderated properly, or should I not bother submitting >>> anything? >>> >>> >> I suspect it was

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread zless
În ziua de sâmbătă, 30 iunie 2018, la 16:52:09 EEST, Francisco Blas Izquierdo Riera (klondike) a scris: > El 29/06/18 a las 17:11, Dale escribió: > > R0b0t1 wrote: > >> I can't help but notice this was moved to gentoo-user. Are posts to > >> gentoo-dev being moderated properly, or should I not

[gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread Nikos Chantziaras
On 30/06/18 19:15, Rich Freeman wrote: On Sat, Jun 30, 2018 at 9:54 AM Francisco Blas Izquierdo Riera (klondike) wrote: El 29/06/18 a las 18:33, Peter Humphrey escribió: On Thursday, 28 June 2018 22:15:36 BST Francisco Blas Izquierdo Riera (klondike) wrote: [...] Whilst the malicious code

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 17:11, Dale escribió: > R0b0t1 wrote: >> I can't help but notice this was moved to gentoo-user. Are posts to >> gentoo-dev being moderated properly, or should I not bother submitting >> anything? >> >> > I suspect it was done to let users know about the breach.  Otherwise, >

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-30 Thread Marc Joliet
Am Freitag, 29. Juni 2018, 17:11:36 CEST schrieb Dale: > git thingy Heh, a true Dale-ism if I ever saw one ;-) . -- Marc Joliet -- "People who think they know everything really annoy those of us who know we don't" - Bjarne Stroustrup signature.asc Description: This is a digitally signed

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-29 Thread Dale
R0b0t1 wrote: > > I can't help but notice this was moved to gentoo-user. Are posts to > gentoo-dev being moderated properly, or should I not bother submitting > anything? > > I suspect it was done to let users know about the breach.  Otherwise, anyone who syncs using the git thingy wouldn't know

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-29 Thread R0b0t1
On Fri, Jun 29, 2018 at 7:19 AM, Francisco Blas Izquierdo Riera (klondike) wrote: > El 29/06/18 a las 03:55, Duane Robertson escribió: >> On Thu, 28 Jun 2018 23:15:36 +0200 >> "Francisco Blas Izquierdo Riera (klondike)" wrote: >> >>> Hi! >>> >>> I just want to notify that an attacker has taken

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-29 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 03:55, Duane Robertson escribió: > On Thu, 28 Jun 2018 23:15:36 +0200 > "Francisco Blas Izquierdo Riera (klondike)" wrote: > >> Hi! >> >> I just want to notify that an attacker has taken control of the Gentoo >> organization in Github and has among other things replaced the

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-29 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 09:47, Ivan J. escribió: > On Fri, Jun 29, 2018 at 03:12:15AM +0200, Francisco Blas Izquierdo Riera > (klondike) wrote: >> El 29/06/18 a las 00:27, Mick escribió: >>> On Thursday, 28 June 2018 22:54:45 BST Francisco Blas Izquierdo Riera >>> (klondike) wrote: El 28/06/18 a

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-29 Thread Ivan J.
On Fri, Jun 29, 2018 at 03:12:15AM +0200, Francisco Blas Izquierdo Riera (klondike) wrote: > El 29/06/18 a las 00:27, Mick escribió: > > On Thursday, 28 June 2018 22:54:45 BST Francisco Blas Izquierdo Riera > > (klondike) wrote: > >> El 28/06/18 a las 23:15, Francisco Blas Izquierdo Riera

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-28 Thread R0b0t1
On Thu, Jun 28, 2018 at 8:55 PM, Duane Robertson wrote: > On Thu, 28 Jun 2018 23:15:36 +0200 > "Francisco Blas Izquierdo Riera (klondike)" wrote: > >> Hi! >> >> I just want to notify that an attacker has taken control of the Gentoo >> organization in Github and has among other things replaced

[gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-28 Thread Duane Robertson
On Thu, 28 Jun 2018 23:15:36 +0200 "Francisco Blas Izquierdo Riera (klondike)" wrote: > Hi! > > I just want to notify that an attacker has taken control of the Gentoo > organization in Github and has among other things replaced the portage > and musl-dev trees with malicious versions of the

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-28 Thread Francisco Blas Izquierdo Riera (klondike)
El 29/06/18 a las 00:27, Mick escribió: > On Thursday, 28 June 2018 22:54:45 BST Francisco Blas Izquierdo Riera > (klondike) wrote: >> El 28/06/18 a las 23:15, Francisco Blas Izquierdo Riera (klondike) escribió: >>> Hi! >>> >>> I just want to notify that an attacker has taken control of the

Re: [gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-28 Thread Mick
On Thursday, 28 June 2018 22:54:45 BST Francisco Blas Izquierdo Riera (klondike) wrote: > El 28/06/18 a las 23:15, Francisco Blas Izquierdo Riera (klondike) escribió: > > Hi! > > > > I just want to notify that an attacker has taken control of the Gentoo > > organization in Github and has among

[gentoo-user] Re: Hostile takeover of our github mirror. Don't use ebuild from there until new warning!

2018-06-28 Thread Francisco Blas Izquierdo Riera (klondike)
El 28/06/18 a las 23:15, Francisco Blas Izquierdo Riera (klondike) escribió: > Hi! > > I just want to notify that an attacker has taken control of the Gentoo > organization in Github and has among other things replaced the portage > and musl-dev trees with malicious versions of the ebuilds