It is currently Fri Jun 22, 2018 12:07 pm

ClassicShell, Audacity mirror downloads compromised

For game and non-game related chatter, links, and other goodies, go here.

ClassicShell, Audacity mirror downloads compromised

Postby Zancarius » Wed Aug 03, 2016 11:08 am

https://news.ycombinator.com/item?id=12215449

It turns out that some attackers managed to breach FossHub, uploading for a short time compromised copies of popular software. This doesn't mean the software itself is compromised, only the copies supplied via FossHub as a download mirror. Notably, ClassicShell and Audacity have been hit.

The attack appears to remove the partition table (MBR at this time; not sure about GPT) on infected systems requiring some effort to repair. Incorrectly repairing and replacing the partition table can destroy data. Be sure to keep backups.

As of this writing, ClassicShell is aware of the problem and has removed the FossHub mirrors. Although, it doesn't really matter--FossHub may still be offline.
I gave that lich a phylactery shard. Liches love phylactery shards.
User avatar
Zancarius
Site Admin
 
Posts: 3897
Joined: Wed Jul 05, 2006 3:06 pm
Location: New Mexico
Gender: Male

Return to General Chat

Who is online

Users browsing this forum: No registered users and 1 guest

cron