Unknown gets admin rights of Ethereum Classic Github
The official Ethereum Classic github has been taken over by some unknown person. This has been confirmed by Anthony, director of ETC Cooperative.
Here is what happened – someone took admin control of Ethereum Classic community with Classic Geth and has removed all other administrators.
This, as you can understand, is an important security issue, but so far the intruder has not done any damage to any repositories.
We are in contact with GitHub and working to regain control. The user who took ownership has not made any changes to any repositories as of the time of this tweet.
However, as the note indicates, please proceed with caution. https://t.co/ZrJdoyol0S
— Anthony Ȼlassic (@pyskell) November 30, 2018
Igor Artamonov, Founder and CTO of ETC Dev recommends users to not download Classic Geth until this issue is resolved.
Interestingly, Anthony does mention that Igor did give admin control to krykoder, another Github user, so it could be Krykoder who has deleted all other admins.
He adds that ETC Cooperative team is trying to establish the identity of this Github user without alerting krykoder. This is his tweet.
We were attempting to do this without alerting krykoder so that he wouldn’t up and delete the repository or engage in other nefarious action. We’ve tried to establish communication with Igor and coordinate regarding this but received little response.
We have backups of all repos
— Anthony Ȼlassic (@pyskell) November 30, 2018
Ethereum Classic blockchain is not affected by this since blockchain does not runs on the github (duh). It is the github that has been attacked. We are mentioning this since there are rumors brewing that ETC has been attacked.
The team has reassured that they have backups of all repositories.
Update – Anthony has tweeted that ownership of previous people has been restored and no damage was done. The new owners has given back admin rights to ex-admins.
Looks like all is fine. There was a misunderstanding in ownership of the organization. The issue will be fixed now that the user is aware. https://t.co/WsrFKxqddP
— Anthony Ȼlassic (@pyskell) November 30, 2018