[Starlingx-discuss] IMPORTANT: Opendev gerrit hacked

[Scott Little]

Here is the latest update from the opendev infrastructure team on the 
gerrit outage.

http://lists.opendev.org/pipermail/service-announce/2020-October/000011.html

In short

- The gerrit service was taken offline for a time, but has since been 
restored.

- They ask that you review the activity logs 
<https://login.launchpad.net/activity> on your account. Check for access 
times or originating ip addresses that look wrong.

- They ask that you re-review the diffs for commits submitted since 
October first.  They have collected the diffs at 
https://static.opendev.org/project/opendev.org/gerrit-diffs/ . They are 
organized by repo and branch.  If you have submitted code, or you are a 
core reviewer that has approved a code merge, please take the time to 
re-review the submission.  Do you remember approving the submission? Has 
the submission been tampered with. If you are a code submitter and still 
have access to your local working git, perhaps generate your own diffs 
and compare it to the upstream diffs.

- Users (if any) of the Gerrit HTTP API will find that there old 
passwords have been purged.  You'll need to set a new password to regain 
access.

I think Bill has volunteered to set up some way to track that all the 
gits have been re-reviewed.


Scott Little

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20201021/97cd597d/attachment.html>