Mint got hacked because it was low-hanging fruit for nefarious types. They did not make it easy to verify GPG signatures or encourage people to, and the key wasn't in the web of trust. They did not update WordPress or their server software. They also create a mess of free and nonfree packages, so to stop things breaking they held back security updates from the repositories, and did not issue security disclosures. They did not have the resources to have their own distribution. They should have just produced packages for distributions.
It was their own idiocy.
This spam was just spam. Unrelated.

Reply via email to