Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Monday April 01 2019, @02:12PM   Printer-friendly
from the I-want-a-pwny! dept.

The Devuan website looks hacked. Given the timing, it's probable that it is an April's Fools Joke, though it's not clear if it's the Devuan devs' April's Fools joke or the hackers' April's Fools Joke. In any case, it's probably better for any Devuan users to avoid updating their packages and keep an eye out for signs of compromise.

If it is a joke by the devs, then they are taking it pretty far since official channels of communication say that the hack is real (but package are not compromised): https://lists.dyne.org/lurker/message/20190331.191104.169aaf9a.en.html

In any case, it's a warning about taking Devuan too seriously; either they don't know how to secure their servers, or they don't know what it means to take a joke too far.

https://www.devuan.org/ redirects to https://www.devuan.org/pwned.html which displays:

                                 _           _                       THE WEB SUCKS -- JAVASCRIPT SUCKS -- BROWSERS SUCK
          _  ___ ___  ___ ___   | |    _ _  | |
        / _`|  _| -_)  -_)   \  |  \ / _` ||  _|                         GOPHER IS THE WAY -- GOPHER IS THE FUTURE
        \__,|_| \___|\___|_|_|  |_|_|\__,_| \__|
        ___/_              _
           | |    _ _  __ | |_  ___  ___  ___               ********************************************************************
           |  \ / _` |/ _|| | // -_)|  _|(_-<                        ******       DEVUAN.ORG HAS BEEN PWNED       ******
           |_|_|\__,_|\__||_\_\\___||_| (___/               ********************************************************************
           .................................
         ...........##...#...#####............                 WE TURNED ALL DEVUAN'S SHITTY WEBSITES INTO PROPER GOPHERHOLES
        ...........###...#.##########............
       ...........####....###.......##............          ********************************************************************
     ............#############......##..............
    ............#######################..............            ***  STOP THE MADNESS -- GET YOURSELF A GOPHER CLIENT  ***
   .............#######################...............
  .............#######################.................                 WWW   ->   gopher://www.devuan.org
  .............#####################.....#.............                 GIT   ->   gopher://git.devuan.org
...............###############.........######..........                ISOS  ->   gopher://files.devuan.org
........######.##############.........#########........                INFO  ->   gopher://pkginfo.devuan.org
.......######################.......############.........               BTS   ->   gopher://bugs.devuan.org
......########################################...........               STATS ->   gopher://popcon.devuan.org
.......#####################################.............
........#################################................      ***  GOPHER IS STILL ALIVE AND KICKING -- JUST CHECK IT OUT  ***
..........###########################....................
.............##################..........................         gopher://gopherproject.org -- gopher://gopher.floodgap.com
......................................#####..............    gopher://bitreich.org - gopher://sdf.org - gopher://gopherpedia.com
...............................###########.............             gopher://circumlunar.space -  gopher://gopher.quux.org
.............................###########...............
  .............########################.....#######....        ***  KISS PORT 80 GOODBYE -- JOIN THE REVOLUTION ON PORT 70  ***
  .............#####....###############...#########....
   ............#####.....############################.      *******************************************************************
    .######.....####################################.
     .#######....##################################.               WE KNOW YOU -- WE FOLLOW YOU -- WE OWN YOUR COMPUTERS
      ..#######...###############################..
        ..######..#############################..                        *****    ANY RESISTANCE IS FUTILE    *****
          ...###############################...
             ...#########################...                   WE ARE GREEN HAT HACKERS: WE CAME, WE SAW, WE KICKED YOUR ASS
                ......#############......
                  .....................                     *******************************************************************

                                                                 IF YOU LUSER CAN'T USE A GOPHER CLIENT, USE THE PROXY AT:
                                                                           https://gopher.floodgap.com/gopher/gw

                                                                       BOTH 7779847 AND 1554080659 ARE PRIME NUMBERS


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Informative) by hendrikboom on Monday April 01 2019, @11:16PM (1 child)

    by hendrikboom (1125) Subscriber Badge on Monday April 01 2019, @11:16PM (#823311) Homepage Journal

    The culprit has confessed. He is a core developer who has been with the project from the beginning. He apologized, says the joke went too far, certainly was taken far beyond what he expected. He tells us he has learned from the experience, and will never do anything like it again. He further point out that no critical Devuan infrastructure was tampered with in any way -- all that happened was an html redirect of the main page to an alternative server with the fake page.

    I'm told that the gopher links on the fake front page actually did point to valid Devuan infrastructure, though I haven't been able to check this myself.

    -- hendrik

    Starting Score:    1  point
    Moderation   +1  
       Informative=1, Total=1
    Extra 'Informative' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   3  
  • (Score: 2) by NotSanguine on Tuesday April 02 2019, @04:31AM

    I'm told that the gopher links on the fake front page actually did point to valid Devuan infrastructure, though I haven't been able to check this myself.

    I checked. And they did.

    --
    No, no, you're not thinking; you're just being logical. --Niels Bohr