Linked by Jordan Spencer Cunningham on Mon 14th Jun 2010 23:58 UTC
Thread beginning with comment 430051
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
News
Linked by Thom Holwerda on 06/19/13 23:02 UTC, submitted by M.Onty
Linked by Thom Holwerda on 06/19/13 22:28 UTC
Linked by Thom Holwerda on 06/18/13 22:33 UTC
Linked by Anonymous on 06/18/13 22:26 UTC
Linked by Thom Holwerda on 06/18/13 22:25 UTC
Linked by Thom Holwerda on 06/18/13 17:45 UTC
Linked by Thom Holwerda on 06/18/13 17:32 UTC, submitted by poundsmack
Linked by Thom Holwerda on 06/17/13 17:58 UTC
Linked by Thom Holwerda on 06/17/13 17:52 UTC
Linked by Thom Holwerda on 06/14/13 21:03 UTC
More News »
Sponsored Links



Member since:
2007-02-17
http://www.itworld.com/open-source/110930/trojaned-app-demonstrates...
The team also admitted to not checking all of the mirrored files as often as they should have. Which means that while the true source code (in CVS) was clean as a whistle, the source archive files that people downloaded were not clean for a very long time.
This is all very unfortunate, but the general feeling in the broader open source community is that this was a sharp lesson in what not to do with handling software downloads. To their credit, the Unreal team owned up to their mistakes.
BTW, the means that the way the Unreal3.2.8.1.tar.gz file was distributed, (that is a unsigned binary file which one was supposed to just download from a website and install without checking) ... is far more reminiscent of the typical means of installing Windows applications on users systems.
This is the way that Windows systems often handle software downloads. An example of what not to do.
I'd bet that the malware authors were rubbing their hands in glee when they found this one.
Edited 2010-06-15 04:56 UTC