Linked by Jordan Spencer Cunningham on Mon 14th Jun 2010 23:58 UTC
Bugs & Viruses Recently, the Linux version of UnrealIRCd was discovered to have had a Trojan worm its way into the source code. Even more embarrassing for the developers of Unreal is that the Trojan's been holding open the backdoor in the source code since November of 2009-- not very recently. And, of course, bloggers and press in general are taking the opportunity of another breach in Linux security to point out doomsday devices that don't really exist.
Thread beginning with comment 430046
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: Comment by lemur2
by lemur2 on Tue 15th Jun 2010 03:19 UTC in reply to "RE: Comment by lemur2"
Member since:

Distributor don't read the source code every time they package a software. Most of them just update the content of the "src" folder with the new code and and edit the debian/changelog file. It does not prevent infected software from going in, signed or not.

Unless you can provide a real-life instance of something remotely like this ever happening, you are just blowing wind (and seriously insulting distribution maintainers while you are at it, BTW).

Good luck trying to find such an example.

PS: For most changes, only the "diffs" need to be examined, not the entire source code.

Edited 2010-06-15 03:28 UTC

Reply Parent Score: -1