[Python-Dev] www.python.org defacement

[Barry Warsaw]

Some of you may have noticed that www.python.org got defaced today.  We
also believe that the site has been used for some time to trade warez,
but we do not think that it was rooted.  We believe we have closed the
holes and repaired the damage.  Access to some of the accounts on the
machine have been disabled, but those folks know who they are and how to
get them re-enabled.

I have verified by GPG signature all three Python 2.3.4 downloads (the
tgz, tar.bz2, and exe) and I don't believe they were trojaned.  I'll be
checking the other signed distros and will report if I smell anything
fishy.  If you find anything missing or notice anything hinky, please
let us know via the webmaster at python.org or pydotorg at python.org mailing
lists.

Send your derision to me, but send your thanks to Thomas, Skip, Andrew,
Michael and the other volunteer admins for the site, who stepped up
quickly and effectively to fix this, and verify and restore the content.

-Barry

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 307 bytes
Desc: This is a digitally signed message part
Url : http://mail.python.org/pipermail/python-dev/attachments/20040708/69f2fd14/attachment.pgp