[TriLUG] Linux Mint Site Hacked

[tj via TriLUG]

ooops,  should DID not match,

On Mon, Feb 22, 2016 at 11:16 AM, tj <bimasakti at gmail.com> wrote:

> as I know, md5sum was not valid/did match . they changed the ISO downloan
> to Bulgaria :D.
>
> On Mon, Feb 22, 2016 at 11:11 AM, Thomas Delrue via TriLUG <
> trilug at trilug.org> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA512
>>
>> They didn't even do that. They replace the *links* to the good ISO's
>> with links to the hacker's machines containing bad ISO's.
>>
>> Goes to show though: sign everything with GPG and always validate sigs
>>
>> If anything, this was more an attack on the users rather than the OS...
>>
>> P.S.: Speaking of which, my key is 0x08B3FA4E...
>>
>> On 02/22/2016 10:59 AM, Christopher Blackmon via TriLUG wrote:
>> > It's not as if they attacked the OS itself... they hacked the web
>> > siteand replaced a .iso with a backdoored one. christopher
>> >
>> > From: tj via TriLUG <trilug at trilug.org> To: John Vaughters
>> > <jvaughters04 at yahoo.com>; Triangle Linux Users Group General
>> > Discussion <trilug at trilug.org> Sent: Monday, February 22, 2016 10:55
>> > AM Subject: Re: [TriLUG] Linux Mint Site Hacked
>> >
>> > Linux os not a toy anymore :)
>> >
>> > on my understanding, they attack Mints due on many users of Mints
>> > came for "user friendly" Windows, where to try windows alternative.
>> > They do not understand MD5SUM or checking after downlonding the ISO
>> > fie.  As I remember downloading ISO WINS 10, none told me to check
>> > MD5SUM :D
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v2.0.22 (GNU/Linux)
>>
>> iQIcBAEBCgAGBQJWyzM8AAoJEKosl9oIs/pOWm0QAI3/EPPSNExvtUd39GbKwyXc
>> rK2mwyYTAWQeqrGUl227csErNY7csTuf7nGEnXtJkLSGm0SaJueJavkIOYlEwSFM
>> EToK7vG/5/Q7IeVZ87nk1spSopWlN/cqhUSB/eZKBT6naWcBswR1XoRBarHk30xJ
>> 440drNfRYN2l+h9Hzh8qtoGDkgVQV9TYcpv0FXQKYGAPPN/YgxuK1Yve5IT5b5GQ
>> hrZhINUCAkbppcU/ywtboZzayep79rhlT/549WB2HlumicNgt67MHcnKZCsnx2Dv
>> 6N5Zf886gg/ACKI3zJ/y4FVswzqQk4RT0C1Ufe2nnxfKziFEuIXZCksNYW+NneiR
>> iz5lWnP+KibygSsYc7ogrUh19GQL1AIeMXho/Xq4ixXHp5NaQDoCjfj+tuBprySB
>> LoIDOmBZwUqbtVhkoeZtvS9FR9wF5gMrhdLexJ5RqpMhVxiyRxKackcn723U5wh6
>> FuUGR0ioJsZ+B8EB+hMxSSBWA1w3cCn2RqUehQlhYn6EA60kwGw0sr4NPz66+FJv
>> gxf7o/s5AHzKEKKKa5oXf7cRAhXB+IbcHn+GpnTzdcqqiv19G5tKckSvdbjdycp+
>> cp7K7HRh4FSnw5g7qga4F65EdF6kC8H2x4VA/sxBoLCtYUX70dGMKyOQeQe7cLke
>> dHQCUwqoV40f90x2YMh0
>> =B9cN
>> -----END PGP SIGNATURE-----
>> --
>> This message was sent to: fendy <bimasakti at gmail.com>
>> To unsubscribe, send a blank message to trilug-leave at trilug.org from
>> that address.
>> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
>> Unsubscribe or edit options on the web  :
>> http://www.trilug.org/mailman/options/trilug/bimasakti%40gmail.com
>> Welcome to TriLUG: http://trilug.org/welcome
>>
>
>