Linux Mint Website Hacked

[bob_m_54]

I did a search and couldn't find it already posted but I may have missed it somewhere.
Linux Mint website was hacked in January and forum member details were stolen from the site, then a couple of days ago the site was again hacked and links to their Mint iso downloads were altered to point to altered isos containing a back door.

[lsemmens]

That is positively scary. Considering that most Linux users seem to think that they are invulnerable.

[Skepticist]

Hmmm this is the first I've heard of it

Might have to put off downloading any upgrade for my Mint 17 installation until this gets sorted out not that I use Linux for security reasons, I just like it more than MS products.

[bob_m_54]

Yeah, it was a website hack, not so much a Linux OS hack, and they said they have secured their site again. As long as you check the link is actually pointing to their site, and check the MD5 checksum against the reported number on their site, it should be OK. The site is available again now.

Really surprised this wasn't picked up by a forum member a couple of days ago when the news hit.

[Uncle Fester]

Odd why anybody would bother to do an attack on a Linux distro. Seeing there are so many distros around it is impossible to do any widespread damage.
I always thought these attacks were against the establishment, who would bother to annoy the few geeks that use Linux?

Perhaps a real Linux hater or got pissed off that the latest Mint distro didn't include their favourite app

[admin]

Perhaps a real Linux hater or got pissed off that the latest Mint distro didn't include their favourite app

*It was probably someone sick of reading how fantastic, unhackable and superior Linux is to Windows and decided to make a point
Chances are the server was also running on Linux

*I have nothing against Linux, but boy, does it get boring when people post windows problems and get replies to replace their entire operating system with Linux.

[bob_m_54]

Odd why anybody would bother to do an attack on a Linux distro. Seeing there are so many distros around it is impossible to do any widespread damage.
I always thought these attacks were against the establishment, who would bother to annoy the few geeks that use Linux?

Perhaps a real Linux hater or got pissed off that the latest Mint distro didn't include their favourite app

Yeah, I'd be more worried about the forum user database they scored on two occasions, that includes email addresses and hashed passwords. The passwords can be decrypted, not sure how easy, but it seems it's not that hard. And for people that use the same password on many different sites this could be a problem. But there have been many cases of user databases being downloaded from many other sites as well, so in the scheme of things???