Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:51727 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 29158 invoked from network); 18 Mar 2011 15:24:44 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 18 Mar 2011 15:24:44 -0000 Authentication-Results: pb1.pair.com header.from=tyra3l@gmail.com; sender-id=pass; domainkeys=bad Authentication-Results: pb1.pair.com smtp.mail=tyra3l@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.214.170 as permitted sender) DomainKey-Status: bad X-DomainKeys: Ecelerity dk_validate implementing draft-delany-domainkeys-base-01 X-PHP-List-Original-Sender: tyra3l@gmail.com X-Host-Fingerprint: 209.85.214.170 mail-iw0-f170.google.com Received: from [209.85.214.170] ([209.85.214.170:44254] helo=mail-iw0-f170.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 6E/32-11885-C39738D4 for ; Fri, 18 Mar 2011 10:24:44 -0500 Received: by iwn3 with SMTP id 3so4298819iwn.29 for ; Fri, 18 Mar 2011 08:24:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; bh=+ddu3fxWHV2tyQ6x2WRCMygbvcRIN+XEX4Oct/J7IBA=; b=ZEHwqrf78UFqaXmA3RgOdzy3g3py2uaWjN5fzEws+j2jD+fNHDi8ekT8fBn1Mp3eZh DNJ4iXBSN+Wl5f0ewjD5jHpdxKxv61PMdbF3rH/pghUuNEWCqKaEUoQOa50uEEmH7C/T +jlK67lVPp/we0tRnT/SfPdff147HiyGjyK3Y= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; b=RrhExC9v0VDC5rS1j7gBKAQ7ijlbwPdiE2dZiBB04gfL2WWphiYhdApvykE5qPPipe X/uDkmX75rEET+QFvqOuNHyFElx/5+MbXoPIziTWo0m7s82QxDUNKcj1uGzeCdKSqwst hyWjAaGI/xyPcx/wkj+ERfn97sW2VJs1M26qA= MIME-Version: 1.0 Received: by 10.43.66.11 with SMTP id xo11mr1734422icb.207.1300461881652; Fri, 18 Mar 2011 08:24:41 -0700 (PDT) Sender: tyra3l@gmail.com Received: by 10.42.75.132 with HTTP; Fri, 18 Mar 2011 08:24:41 -0700 (PDT) In-Reply-To: References: Date: Fri, 18 Mar 2011 16:24:41 +0100 X-Google-Sender-Auth: tcF5hBqbAAT1nMf8At94GruKIfs Message-ID: To: Dinh Cc: Internals Content-Type: multipart/alternative; boundary=bcaec51a834a7ff612049ec360f8 Subject: Re: [PHP-DEV] php.net hacked From: info@tyrael.hu (Ferenc Kovacs) --bcaec51a834a7ff612049ec360f8 Content-Type: text/plain; charset=UTF-8 nope I hope there will be an announcement soon, but from the publicly available info, the wiki was the source of the intrusion. and that was taken down for security reasons, and this vulnerability was the cause/related to this issue: http://bjori.blogspot.com/2010/12/php-project-and-code-review.html next time send the security releated emails to security@php.net Tyrael On Fri, Mar 18, 2011 at 4:12 PM, Dinh wrote: > It is rumored that php.net has been hacked. The attacker said they have > changed PHP source code as well. Is it a false announcement? > > http://www.devquotes.com/2011/03/18/php-net-compromise-possible-backdoor/ > > Regards, > > Dinh > --bcaec51a834a7ff612049ec360f8--