A more appropriate comparison

In november 2003 we at Debian had a similar intrusion. It appeared evident that the archive was not compromised almost immediately, and the first announce about the issue was done in a few hours. What appears evident is that the news was diffused on the -private channel almost immediately at least to all DDs on-line, at the time. For sure, I suspect RH folks had to verify that RH archives and infrastructure were not compromised as well, before releasing to 'external' entities and general public the news, due to possible implications in their business. This is a fact IMHO. And the concerns about relationships among Fedora community and the RH company cannot be neglected. They should be considered and managed in a structured and well-tought/open way. And similar concerns can be probably expressed for Ubutu vs Canonical, if not Debian vs Canonical (some DDs are also Canonical employees).