Subscribe to this blog in Radio:
Didn't find what you were looking for?
E-mail this blog's author, Bruce Umbaugh: 
|
|
 |
Friday, November 07, 2003 |
Attempted attack on Linux kernel foiled, by Robert Lemos, CNET News.com.
An unknown intruder attempted to insert a Trojan horse program
into
the code of the next version of the Linux kernel, stored at a publicly
accessible database.
Security features of the source-code repository, known as BitKeeper,
detected the illicit change within 24 hours, and the public database
was shut down, a key developer said Thursday. The public database was
used only to provide the latest beta, or test version, of the Linux
kernel to users of the Concurrent Versions System (CVS), a program
designed to manage source code.
The changes, which would have introduced a security flaw to the
kernel, never became a part of the Linux code and, thus, were never a
threat, said Larry McVoy, founder of software company BitMover and
primary architect of the source code database BitKeeper.
This never got close to the development tree, he said. BitKeeper is
really paranoid about integrity, and it turns out that was key to
finding this Trojan horse.
12:28:20 PM
|
|
uiweb: The myth of discoverability. You have limited screen real estate, users have limited attention spans, and abilities to perceive or understand things. Therefore, all design for people is a zero-sum game: tradeoffs must be made and priorities must be set if there's any hope of a good outcome for customers. [Tomalak's Realm]
7:28:22 AM
|
|
|