Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <Stxf7uD1LjJmxOL-DkdzcA3oHbxkwaLOmu9L8OYFnmHvkncpim4uxgp6g9i3jlzCsW5WWnYFi4jvfiTlq7skw0NzNGL4FS6r_ZaYCbQfA04=@proton.me>
Date: Mon, 27 Nov 2023 18:05:05 +0000
From: lmqt771@...ton.me
To: nullplan@....net, musl@...ts.openwall.com
Subject: Re: possible malware link on musl community wiki

I did find the Github for the musl wiki and did a pull request to check all the links, but there's pull requests that are like five years old and still open, and only just a handful at that. So it appears maybe the maintainer has abandoned it. I could be wrong about that though. At the time I sent the email to the musl mailing list, I wasn't aware the musl wiki only takes contribs through Github and they're vetted. I just assumed random people could contribute, and then I thought great, what other links are like this? I know I didn't want to click around and find out after that. Thank goodness it was a near fresh install from a distro hop, so I just wiped the drive and started over just to be safe. I figured perhaps it was their official page that got abandoned and scraped up by a bot or something. On the IRC they said the wiki hasn't been maintained in a while.

-------- Original Message --------
On Nov 27, 2023, 12:29 PM, Markus Wichmann wrote:

> Am Mon, Nov 27, 2023 at 10:31:50AM +0000 schrieb lmqt771@...ton.me: > Hi, I just mentioned this on the irc chat and they suggested I send an > email here. I know the wiki is community maintened, but there's no > contact info for any maintainers. The link for Ataraxia Linux under > the section Projects using musl is very suspicious and possibly > malicious or some type of malware. It just cycles through shady > website after shady website at about one per second or so. Considering > the wiki is linked from the official musl website, I wanted to report > it immediately. If you need help maintaining the community wiki, let > me know and I'd be happy to help out if I can. > > mobius Considering the link in the Wiki is just the link to Ataraxia's github page, I'm guessing these guys got their github hacked. I did a bit of research and it appears they moved to gitlab instead. No clue what their homepage is now, though. Ciao, Markus
Content of type "text/html" skipped

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.