{"id":182028,"date":"2026-06-11T14:48:57","date_gmt":"2026-06-11T12:48:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij"},"modified":"2026-06-11T14:48:57","modified_gmt":"2026-06-11T12:48:58","slug":"v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","title":{"rendered":"Fedoras tuvastati kompromiteeritud osaleja asendamine AI-agendi poolt, et edendada kahtlaseid muudatusi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Adam Williamson Red Hatist, kes juhib kvaliteedikontrolli meeskonda projektis Fedora, m\u00e4rkis kahtlase tegevuse \u00fcle Nathan Giovannini, kes liitus Fedora projektiga 2016. aastal ja t\u00f6\u00f6tas m\u00f5nda aega Fedora Infrastructure Teamis. On v\u00f5imalik, et Nathan on viimase kahe kuu jooksul tegutsenud selle eesm\u00e4rgiga, et genereerida usaldusv\u00e4\u00e4rsust, kogudes muudatushistorit ja osaledes vigade parandamises, enne pahatahtlike tegevuste sooritamist, nagu juhtum xz paketi tagavaras.<\/p>\n

Kahtlust \u00e4ratas asjaolu, et varem mitte v\u00e4ga aktiivne arendaja hakkas mais aktiivselt osalema vigade aruteludes ja saatma pat\u0161e, samas kui sellise tegevuse juures oli m\u00e4rgata mustreid, mis viitasid AI kasutamisele. N\u00e4iteks kommentaarides olid AI abil loodud \u00fcldistused, mille j\u00e4rel paluti Nathanil mitte kuritarvitada AI-assistendi v\u00e4ljundeid. <\/p>\n

Lisaks on esinenud juhtumeid, kus Nathan on m\u00e4\u00e4ranud probleemide aruanded s\u00fcsteemides, kus ta ei ole toetuses, sealhulgas probleemide staatuse v\u00f5i prioriteedi muutmine, AI loodud soovituste avaldamine vigade raporti autoritele ja AI-patchide saatmine. Projekti reeglite rikkumise t\u00f5ttu su\u5173\u95edns Nathan probleemide aruanded kohe p\u00e4rast AI-patchide edastamist k\u00f5rgematele projektidele, ootamata nende vastuv\u00f5tmist, v\u00f5i lihtsalt su\u5173\u95edns need \"NOTABUG\" lipuga ja soovitusega probleemi edasise kontrollimise kohta.<\/p>\n

Adam Williamson tegi oletusi, et Nathan kasutas AI-agenti vigade parandamiseks Fedoras ning palus l\u00f5petada AI-agendi kasutamine iseseisvas re\u017eiimis. Nathan vastas, et see ei ole tema AI-agent, tema akrediteeringud on olnud kompromiteeritud ja keegi teine tegutseb tema nimel. Peale selle postitas Nathan s\u00f5numi, et ta on taastanud juurdep\u00e4\u00e4su oma kontodele Fedoras ja GitHubis, samuti
\nkirjutas, et tema ametlik GitHubi konto \u2014 \"nathangiovannini99\". <\/p>\n

S\u00f5num tekitas veelgi rohkem k\u00fcsimusi, kuna m\u00e4rgitud konto loodi tund enne kirja avaldamist ja GitHubis ilmus veel v\u00e4hemalt kaks kontot, mis olid seotud Nathaniga (leurus27-boop, nathan9513-aps). Ei v\u00e4listatud, et Fedora arendajatega suhtleb veel kurjategija, kes sai Nathanile kuuluvale e-posti aadressile ligip\u00e4\u00e4su. Nathani konto juurdep\u00e4\u00e4s Bugzilale oli blokeeritud ja tema tehtud muudatuste kontrollimine k\u00e4idi lahti.<\/p>\n

Selgus, et kahtlane tegevus algas 7. aprillil ja m\u00f5ned Nathanilt saadetud pat\u0161id lihtsalt tekitavad mulje, et vigu on parandatud. Samas v\u00f5eti sellised pat\u0161id vastu Anaconda installatsiooni osana ja need j\u00f5udsid Anaconda 45.5 versiooni. Anaconda hooldaja t\u00fchistas tehtud muudatused ja avaldas Anaconda 45.6 versiooni ilma nende pat\u0161ideta.<\/p>\n

Lisaks v\u00f5eti Nathani nime alt saadetud parandused vastu osc (openSUSE Commander) arendajatelt, mis on Open Build Service'i ehituss\u00fcsteemi k\u00e4surealiidese rakendamine. Veel \u00fcks pat\u0161 edastati lxqt-policykit paketti lisamiseks, mis seondus Fedora probleemi parandamisega, kuid Fedora arendajad suutsid juhendajat enne selle vastuv\u00f5tmist hoiatada. Pat\u0161ides ei toimunud kurjategija tegevust, kuid eeldatakse, et need v\u00f5isid olla ettevalmistused kahjulike muudatuste tegemiseks ehituss\u00fcsteemi komponentides ja teenuses, mis toetab privileege tegevusi. Nathani saadetud parandusi m\u00e4rgati ka projektides gwenview ja easyeffects.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u0434\u0430\u043c \u0423\u0438\u043b\u044c\u044f\u043c\u0441\u043e\u043d (Adam Williamson) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 F\u0435dora, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u041d\u0430\u0442\u0430\u043d\u0430 \u0414\u0436\u043e\u0432\u0430\u043d\u043d\u0438\u043d\u0438 (Nathan Giovannini), \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0443 Fedora \u0432 2016 \u0433\u043e\u0434\u0443 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Fedora Infrastructure Team. \u041d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0435\u043c\u0430\u044f \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u041d\u0430\u0442\u0430\u043d\u0430, \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182028","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fedoras tuvastati h\u00e4kitud osaleja asendamine AI-agendiga kahtlaste muudatuste edendamiseks | ProHoster","description":"Adam Williamson Red Hatist, kes juhib kvaliteedikontrolli meeskonda Fedora projekti raames, p\u00f6\u00f6ras t\u00e4helepanu Nathani Giovannini kahtlasele tegevusele, kes liitus.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0410\u0434\u0430\u043c \u0423\u0438\u043b\u044c\u044f\u043c\u0441\u043e\u043d (Adam Williamson) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 F\u0435dora, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u041d\u0430\u0442\u0430\u043d\u0430 \u0414\u0436\u043e\u0432\u0430\u043d\u043d\u0438\u043d\u0438 (Nathan Giovannini), \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043a.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-11T12:48:58+00:00","article:modified_time":"2026-06-11T12:48:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182028","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182028"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182028\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182028"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182028"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182028"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}