Re: OK, may be not a hoax... (was Re: Hoax: Re: What up with www.debian.org ?)
On Fri, 21 Nov 2003 02:00:35 -0800,
Brian Nelson <firstname.lastname@example.org> wrote in message
> "Karsten M. Self" <email@example.com> writes:
> > on Fri, Nov 21, 2003 at 01:30:36AM -0800, Karsten M. Self
> > (firstname.lastname@example.org) wrote:
> > > on Fri, Nov 21, 2003 at 01:07:20PM +0530, Raghavendra Bhat
> > > (email@example.com) wrote:
> > > > Jerome posts:
> > > >
> > > > > > What happens to www.debian.org ?
> > > >
> > > > Someone has cracked all the servers of the Debian Project.
> > > > There has been a severe security mishap and guys should
> > > > uninstall all stuff downloaded and installed in the past 2
> > > > days. Please do not apt-get anything right now! Please wait
> > > > till an `official' release happens!
> > >
> > > Hoax.
> > OK, possibly not.
> > I've got no verified information, but I've got several usually
> > reliable sources backing this story.
> I'm not in any position to make an official announcement (I barely
> know anything more than you guys), but I know enough to state this
> story is an quite an exaggeration. Please remain calm, nothing (much)
> to see here. ;) There's no evidence to suggest any Debian packages
> have been trojaned or anything of that nature.
..depending on what you use Debian for, you may want
to _Always!_, be able to prove it _is_ safe.
> > There should be an official announcement one way or the other soon.
> Yes, within the next hour.
..www.debian.org and debian.org are both up, but still no statement at
Fri Nov 21 14:27:28 CET 2003.
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
Scenarios always come in sets of three:
best case, worst case, and just in case.