Not impossible at all, in my opinion. In what way would Fedora security be significantly
compromised by a short, non-specific statement explaining whether there is a chance that
packages that have been distributed to users have been compromised or not. Thats mainly what
people want to know.
In fact, if there is a chance that packages that have been distributed to users have been
altered by a third party, it is extremely troubling that Fedora has not gone public with this
information.
Posted Aug 21, 2008 11:18 UTC (Thu) by motk (subscriber, #51120)
[Link]
... then it's probably not an issue then, or else they would have done so.
One week of infrastructure issues
Posted Aug 22, 2008 9:27 UTC (Fri) by liljencrantz (subscriber, #28458)
[Link]
If that is the case, why have they not simply gone out and said that?
A simple statement along the lines of «We've had a major security breach, that we can not
disclose at this time. We have determined that packages distributed by the Fedora project have
not been compromised. You Fedora installation is not at risk. Please bare with us while we fix
this.» would put a lot of peoples mind at ease. Like the article said, this is a bit of a
failure to communicate from Fedoras leadership.