Comments on: Fedora Project servers compromised http://blog.rogeriopvl.com/archives/fedora-project-servers-compromised I like my coffee black, just like my macbook... Tue, 06 Jan 2009 07:18:47 +0000 http://wordpress.org/?v=2.7 hourly 1 By: Rui Miguel Silva Seabra http://blog.rogeriopvl.com/archives/fedora-project-servers-compromised/comment-page-1#comment-346 Rui Miguel Silva Seabra Sat, 23 Aug 2008 17:25:16 +0000 http://blog.rogeriopvl.com/?p=312#comment-346 If I'm not mistaken, Red Hat uses HSMs which hold the digital key. Since Fedora will be updating the key and Red Hat not, I'm willing to bet Fedora's key is not on an HSM. It is a big deal because it's the first time in it's long history that something like this happened, but looking at the announcements from a security point of view it is bad, but not the worst that could happen. If I’m not mistaken, Red Hat uses HSMs which hold the digital key. Since Fedora will be updating the key and Red Hat not, I’m willing to bet Fedora’s key is not on an HSM.

It is a big deal because it’s the first time in it’s long history that something like this happened, but looking at the announcements from a security point of view it is bad, but not the worst that could happen.

]]>