{"id":182028,"date":"2026-06-11T14:48:57","date_gmt":"2026-06-11T12:48:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij"},"modified":"2026-06-11T14:48:57","modified_gmt":"2026-06-11T12:48:58","slug":"v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","title":{"rendered":"Fedora's AI agent has been flagged for substituting a compromised participant to push dubious changes.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Adam Williamson from Red Hat, who leads the quality control team for the Fedora project, noted suspicious activity from Nathan Giovannini, who joined the Fedora project in 2016 and was briefly part of the Fedora Infrastructure Team. It is suspected that activities carried out in Nathan's name over the past two months aimed to gain trust by accumulating a history of accepted changes and participating in bug fixes before executing malicious actions, similar to the backdoor insertion incident in the xz package.<\/p>\n

The suspicion arose because a previously inactive developer became actively involved in bug discussions and submitted patches in May, displaying patterns typical of AI usage. For instance, AI-generated summaries were noted in comments, after which Nathan was asked not to abuse copying AI assistant outputs. <\/p>\n

Lisaks on olnud ka aruannete, mis ei sisalda mingeid t\u00e4hendusi, \u00fcmbernimetamise juhtumeid probleemide alams\u00fcsteemides, kus Nathan ei ole toega seotud (1, 2, 3), probleemi lahendamise staatuse v\u00f5i prioriteedi muutmine (1, 2), AI abil loodud soovituste avaldamine veateadete autoritele (1, 2, 3) ning AI-s loodud plaastrite saatmine. Projekti reegleid rikkudes sulges Nathan veateateid kohe p\u00e4rast AI plaastrite saatmist k\u00f5rgematesse projektidesse, ootamata nende vastuv\u00f5tmist, v\u00f5i sulges lihtsalt «NOTABUG» lipuga ja soovitusega probleemi t\u00f5endusmaterjali uuesti kontrollida.<\/p>\n

Adam Williamson teatas, et Nathan kasutas vea parandamiseks Fedora jaoks AI-agenti ning palus katkestada AI-agendi kasutamine iseseisvalt. Nathan vastas, et see ei ole tema AI-agent, tema volitused on olnud kompromiteeritud ja keegi kolmas toimib tema nimel. Peale seda avaldas Nathan s\u00f5numi, et ta on taastanud juurdep\u00e4\u00e4su oma kontodele Fedora ja GitHubis, samuti
\nkirjutas, et tema ametlik GitHubi konto on «nathangiovannini99». <\/p>\n

Teade tekitas veel rohkem k\u00fcsimusi, kuna m\u00e4rgitud konto loodi tund enne selle kirja avaldamist ja GitHubis ilmus veel v\u00e4hemalt kaks kontot, mis olid seotud Nathaniga (leurus27-boop, nathan9513-aps). Ei olnud v\u00e4listatud, et Fedora arendajatega suhtleb j\u00e4tkuvalt pahatahtlik isik, kes oli p\u00e4\u00e4senud Nathani e-posti kontole. Nathani konto Bugzillas on lukustatud ja k\u00f5igi tema tehtud muudatuste \u00fcle on k\u00e4imas kontroll.<\/p>\n

Selgus, et kahtlane tegevus algas 7. aprillil ja m\u00f5ned Nathanilt saadetud pat\u0161id l\u00f5id vaid vale mulje parandamisest. Samal ajal v\u00f5eti sarnased pat\u0161id Anaconda installija juurde ja need l\u00e4ksid Anaconda 45.5 versiooniga kaasa. Anaconda hooldaja t\u00fchistas tehtud muudatused ja avaldas Anaconda 45.6 versiooni ilma nende pat\u0161ideta.<\/p>\n

Lisaks sellele, Nathani nimel saadetud parandused v\u00f5eti vastu osc (openSUSE Commander) utiliidi arendajate poolt, kes rakendasid k\u00e4surea liidest Open Build Service'i monitoreerimiss\u00fcsteemile. Veel \u00fcks patch edastati lxqt-policykit paketti kaasamiseks, seostades selle probleemi lahendamisega Fedoras, kuid Fedora arendajad suutsid eelnevalt informeerida hooldajat enne selle vastuv\u00f5tmist. Patches ei sisaldanud kahjulikke tegevusi, kuid eeldatakse, et need v\u00f5isid olla ettevalmistuseks kahjulike muudatuste tegemiseks ehitus\u00fcsteemi ja teenuse komponentides, mis tagavad priviligeeritud toimingute teostamise. Nathani saadetud parandusi m\u00e4rgati ka projektides gwenview ja easyeffects.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u0434\u0430\u043c \u0423\u0438\u043b\u044c\u044f\u043c\u0441\u043e\u043d (Adam Williamson) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 F\u0435dora, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u041d\u0430\u0442\u0430\u043d\u0430 \u0414\u0436\u043e\u0432\u0430\u043d\u043d\u0438\u043d\u0438 (Nathan Giovannini), \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0443 Fedora \u0432 2016 \u0433\u043e\u0434\u0443 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Fedora Infrastructure Team. \u041d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0435\u043c\u0430\u044f \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u041d\u0430\u0442\u0430\u043d\u0430, \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182028","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fedora's compromised contributor was replaced by an AI agent to promote dubious changes | ProHoster","description":"Adam Williamson Red Hatist, kes juhib kvaliteedikontrolli meeskonda Fedora projektis, juhtis t\u00e4helepanu Nathani Giovannini kahtlasele tegevusele, kes liitus Fedora projektiga 2016. aastal ja osales m\u00f5nda aega Fedora Infrastructure Team'i t\u00f6\u00f6s. Ei v\u00e4listata, et Nathani nimel viimase kahe kuu jooksul toimunud tegevus on olnud suunatud","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0410\u0434\u0430\u043c \u0423\u0438\u043b\u044c\u044f\u043c\u0441\u043e\u043d (Adam Williamson) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 F\u0435dora, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u041d\u0430\u0442\u0430\u043d\u0430 \u0414\u0436\u043e\u0432\u0430\u043d\u043d\u0438\u043d\u0438 (Nathan Giovannini), \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0443 Fedora \u0432 2016 \u0433\u043e\u0434\u0443 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Fedora Infrastructure Team. \u041d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0435\u043c\u0430\u044f \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u041d\u0430\u0442\u0430\u043d\u0430, \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-11T12:48:58+00:00","article:modified_time":"2026-06-11T12:48:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182028","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182028"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182028\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182028"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182028"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182028"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}