Joshua C. wrote: > Look at this article: > http://www.fudzilla.com/index.php?option=com_content&task=view&id=12958&Itemid=1 > > It describes what happened in 2008 but it's not clear from the title. > I know that journalist can write whatever they want but this is > misleading information which is not up to date. The title should be " > *** got hacked in 2008". Maybe someone from the "higher ranks" should > officially demand better clarification in this writing. "The hacker got access to the Fedora package signing key and used this to create modified versions of OpenSSH and RPM that would allow access to user passphrases on the build system to secure the package signing key." All that is completely wrong as well. The reference to OpenSSH might be a confusion with the Red Hat intrusion but the reference to RPM is just totally made up. CC'ing Paul Frields. Rahul -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines