[Discuss-gnuradio] Website security breach (gnuradio.org)

Hello,

Last week we discovered that the Wordpress installation of the website had been compromised. The compromise allowed access to the system to an unauthenticated, unprivileged
remote user for at least the past year.

In the worst case scenario it is possible that the website has been serving hostile scripts, but we can find no evidence of this having occured.
Due to the large security implications to the system running the website we have shut it down and are now serving a static snapshot of the website until further notice.
This compromise only affected the Wordpress website (gnuradio.org) and its MySQL database. The wiki, cgit repository, LiveDVD images, and everything else are not affected.

We are considering how best to improve the security of the website in the long run.

Cheers
Andrej

--
Andrej Rode
GPG Key: 750B CBBB 4A75 811A 4D5F 03ED 5C23 7FB8 9A7D A2AA