Re: [Python-Dev] FYI - wiki.python.org compromised

2013-01-10 Thread Stephen J. Turnbull
Robert Whitney writes: > I believe the exploit in use on the Python Wiki could have > been the following remote arbitrary code execution exploit that > myself and some fellow researchers have been working with over the > past few days. AFAIK, Python has a security policy. One point of t

Re: [Python-Dev] FYI - wiki.python.org compromised

2013-01-10 Thread Paul Boddie
Robert Whitney wrote: > To Whoever this may concern, > > I believe the exploit in use on the Python Wiki could have been the > following remote arbitrary code execution exploit that myself and some > fellow researchers have been working with over the past few days. I'm > not sure if this has

Re: [Python-Dev] FYI - wiki.python.org compromised

2013-01-10 Thread Robert Whitney
To Whoever this may concern, I believe the exploit in use on the Python Wiki could have been the following remote arbitrary code execution exploit that myself and some fellow researchers have been working with over the past few days. I'm not sure if this has quite been reported to the Moin de

Re: [Python-Dev] FYI - wiki.python.org compromised

2013-01-07 Thread Aluísio Augusto Silva Gonçalves
Can this possibly be related to the exploit on the Debian wiki ( http://lwn.net/Articles/531726/ )? On Tue, Jan 8, 2013 at 1:38 AM, Brian Curtin wrote: > > On December 28th, an unknown attacker used a previously unknown remote > code exploit on http://wiki.python.org/. The attacker was able to