Adam Williamson z firmy Red Hat, vedouc\u00ed t\u00fdmu kontroly kvality projektu Fedora, si v\u0161iml podez\u0159el\u00e9 aktivity Nathana Giovanniniho, kter\u00fd se p\u0159ipojil k projektu Fedora v roce 2016 a n\u011bjakou dobu byl sou\u010d\u00e1st\u00ed t\u00fdmu Fedora Infrastructure Team. Nen\u00ed vylou\u010deno, \u017ee \u010dinnost prov\u00e1d\u011bn\u00e1 v posledn\u00edch dvou m\u011bs\u00edc\u00edch jm\u00e9nem Nathana byla zam\u011b\u0159ena na z\u00edsk\u00e1n\u00ed d\u016fv\u011bry prost\u0159ednictv\u00edm hromad\u011bn\u00ed historie p\u0159ijat\u00fdch zm\u011bn a \u00fa\u010dasti na oprav\u00e1ch chyb p\u0159ed proveden\u00edm \u0161kodliv\u00fdch akc\u00ed, jako v incidentu se zaveden\u00edm backdooru do bal\u00ed\u010dku xz.<\/p>\n
Podez\u0159en\u00ed vzbudilo to, \u017ee d\u0159\u00edve m\u00e1lo aktivn\u00ed v\u00fdvoj\u00e1\u0159 se v kv\u011btnu za\u010dal aktivn\u011b pod\u00edlet na diskuz\u00edch o chyb\u00e1ch a zas\u00edlat patche, p\u0159i\u010dem\u017e v jeho aktivit\u011b se objevovaly vzory typick\u00e9 pro pou\u017eit\u00ed AI. Nap\u0159\u00edklad v koment\u00e1\u0159\u00edch se objevily shrnut\u00ed vytvo\u0159en\u00e1 pomoc\u00ed AI, po nich\u017e byl Nathan po\u017e\u00e1d\u00e1n, aby se vyvaroval nadm\u011brn\u00e9ho kop\u00edrov\u00e1n\u00ed v\u00fdstup\u016f od AI asistenta. <\/p>\n
Krom\u011b toho byly zaznamen\u00e1ny bezv\u00fdznamn\u00e9 p\u0159eassignace report\u016f o probl\u00e9mech v podsyst\u00e9mech, kde Nathan nen\u00ed spr\u00e1vcem (1, 2, 3), zm\u011bny stavu nebo priority oprav probl\u00e9m\u016f (1, 2), publikace doporu\u010den\u00ed vytvo\u0159en\u00fdch prost\u0159ednictv\u00edm AI autor\u016fm chybov\u00fdch zpr\u00e1v (1, 2, 3) a odes\u00edl\u00e1n\u00ed generovan\u00fdch AI patch\u016f. Obch\u00e1zen\u00edm pravidel projektu Nathan uzav\u00edral chybov\u00e9 reporty ihned po p\u0159ed\u00e1n\u00ed AI patch\u016f do nad\u0159azen\u00fdch projekt\u016f, ani\u017e by \u010dekal na jejich p\u0159ijet\u00ed, nebo je jednodu\u0161e uzav\u00edral se \u0161t\u00edtkem \u201eNOTABUG\u201c a doporu\u010den\u00edm zkontrolovat projev probl\u00e9mu.<\/p>\n
Adam Williamson se domn\u00edval, \u017ee Nathan vyu\u017eil AI agenta k oprav\u00e1m chyb ve Fedo\u0159e a po\u017e\u00e1dal o zastaven\u00ed pou\u017e\u00edv\u00e1n\u00ed AI agenta v offline re\u017eimu. Nathan odpov\u011bd\u011bl, \u017ee to nen\u00ed jeho AI agent, jeho \u00fadaje byly kompromitov\u00e1ny a n\u011bkdo ciz\u00ed jednaj\u00ed jm\u00e9nem jeho. N\u00e1sledn\u011b Nathan zve\u0159ejnil zpr\u00e1vu, \u017ee obnovil p\u0159\u00edstup ke sv\u00fdm \u00fa\u010dt\u016fm ve Fedo\u0159e a GitHubu, a tak\u00e9
\nnapsal, \u017ee jeho ofici\u00e1ln\u00ed \u00fa\u010det na GitHubu \u2014 \u201enathangiovannini99\u201c. <\/p>\n
Zpr\u00e1va vzbudila je\u0161t\u011b v\u00edce ot\u00e1zek, jeliko\u017e ozna\u010den\u00fd \u00fa\u010det byl vytvo\u0159en hodinu p\u0159ed zve\u0159ejn\u011bn\u00edm dopisu a na GitHubu se objevily minim\u00e1ln\u011b dva dal\u0161\u00ed \u00fa\u010dty spojen\u00e9 s Nathanem (leurus27-boop, nathan9513-aps). Nelze vylou\u010dit, \u017ee s v\u00fdvoj\u00e1\u0159i Fedory i nad\u00e1le komunikuje \u00fato\u010dn\u00edk, kter\u00fd z\u00edskal p\u0159\u00edstup k Nathanovu e-mailu. P\u0159\u00edstup Nathanova \u00fa\u010dtu k Bugzille byl zablokov\u00e1n a byla zah\u00e1jena kontrola v\u0161ech jeho proveden\u00fdch zm\u011bn.<\/p>\n
Zjistilo se, \u017ee podez\u0159el\u00e1 \u010dinnost za\u010dala 7. dubna a n\u011bkter\u00e9 patche zaslan\u00e9 Nathanem pouze vytv\u00e1\u0159ely dojem opravy. Tyto patche byly p\u0159itom p\u0159ijaty do instal\u00e1toru Anaconda a byly sou\u010d\u00e1st\u00ed vyd\u00e1n\u00ed Anaconda 45.5. Spr\u00e1vce Anacondy zru\u0161il proveden\u00e9 zm\u011bny a publikoval vyd\u00e1n\u00ed Anaconda 45.6 bez t\u011bchto patch\u016f.<\/p>\n
Krom\u011b toho byly opravy zaslan\u00e9 jm\u00e9nem Nathana p\u0159ijaty v\u00fdvoj\u00e1\u0159i n\u00e1stroje osc (openSUSE Commander), kter\u00fd realizuje rozhran\u00ed p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku pro syst\u00e9m sestaven\u00ed Open Build Service. Dal\u0161\u00ed patch byl p\u0159ed\u00e1n k zahrnut\u00ed do bal\u00ed\u010dku lxqt-policykit s vazbou na opravu probl\u00e9mu v Fedo\u0159e, ale v\u00fdvoj\u00e1\u0159i Fedory stihli upozornit spr\u00e1vce p\u0159ed jeho p\u0159ijet\u00edm. Patche neobsahovaly \u0161kodliv\u00e9 akce, ale p\u0159edpokl\u00e1d\u00e1 se, \u017ee mohly b\u00fdt p\u0159\u00edpravou k proveden\u00ed \u0161kodliv\u00fdch zm\u011bn v komponent\u00e1ch syst\u00e9mu sestaven\u00ed a slu\u017eb\u011b, kter\u00e1 zaji\u0161\u0165uje prov\u00e1d\u011bn\u00ed privilegovan\u00fdch operac\u00ed. Opravy zaslan\u00e9 Nathanem byly tak\u00e9 zaznamen\u00e1ny v projektech gwenview a easyeffects. \u0410\u0434\u0430\u043c \u0423\u0438\u043b\u044c\u044f\u043c\u0441\u043e\u043d (Adam Williamson) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 F\u0435dora, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u041d\u0430\u0442\u0430\u043d\u0430 \u0414\u0436\u043e\u0432\u0430\u043d\u043d\u0438\u043d\u0438 (Nathan Giovannini), \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0443 Fedora \u0432 2016 \u0433\u043e\u0434\u0443 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Fedora Infrastructure Team. \u041d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0435\u043c\u0430\u044f \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u041d\u0430\u0442\u0430\u043d\u0430, \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182028","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V Fedo\u0159e byla odhalena v\u00fdm\u011bna hacknut\u00e9ho \u00fa\u010dastn\u00edka AI agentem pro prosazen\u00ed pochybn\u00e9ho v\u00fdvoje | ProHoster","description":"Adam Williamson z Red Hat, vedouc\u00ed t\u00fdmu kontroly kvality v projektu Fedora, si v\u0161iml podez\u0159el\u00e9 aktivity Nathana Giovanniniho.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0410\u0434\u0430\u043c \u0423\u0438\u043b\u044c\u044f\u043c\u0441\u043e\u043d (Adam Williamson) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 F\u0435dora, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u041d\u0430\u0442\u0430\u043d\u0430 \u0414\u0436\u043e\u0432\u0430\u043d\u043d\u0438\u043d\u0438 (Nathan Giovannini), \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043a.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-11T12:48:58+00:00","article:modified_time":"2026-06-11T12:48:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/182028","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=182028"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/182028\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=182028"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=182028"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=182028"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"