{"id":182028,"date":"2026-06-11T14:48:57","date_gmt":"2026-06-11T12:48:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij"},"modified":"2026-06-11T14:48:57","modified_gmt":"2026-06-11T12:48:58","slug":"v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","title":{"rendered":"U Fedori je otkrivena zamjena hakiranog \u010dlana AI agentom koji promi\u010de sumnjive promjene","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Adam Williamson iz tvrtke Red Hat, koji vodi tim za kontrolu kvalitete u projektu Fedora, primijetio je sumnjivu aktivnost Nathana Giovanninija, koji se pridru\u017eio projektu Fedora 2016. godine i neko vrijeme sudjelovao u radu tima Fedora Infrastructure Team. Ne isklju\u010duje se mogu\u0107nost da je aktivnost koja se odvijala u posljednja dva mjeseca u ime Nathana bila usmjerena na stjecanje povjerenja kroz akumulaciju povijesti prihva\u0107enih promjena i sudjelovanje u ispravljanju gre\u0161aka, prije nego \u0161to su izvr\u0161ene zlonamerne radnje, kao u incidentu s postavljanjem baga u paket xz.<\/p>\n

Sumnja je izazvana \u010dinjenicom da je ranije slabo aktivni programer u svibnju po\u010deo aktivno sudjelovati u raspravama o gre\u0161kama i slati zakrpe, pri \u010demu su se u takvoj aktivnosti primijetili obrasci tipi\u010dni za kori\u0161tenje AI. Na primjer, u komentarima su se nalazila op\u0107enja stvorena putem AI, nakon \u010dega su zamolili Nathana da ne zloupotrebljava kopiranje zaklju\u010daka od AI asistenta. <\/p>\n

Osim toga, zabilje\u017eena su ponovna dodjeljivanja izvje\u0161taja o problemima u pod-sustavima za koje Natan nije odgovoran (1, 2, 3), promjene statusa ili prioriteta rje\u0161avanja problema (1, 2), objavljivanje preporuka koje su kreirane putem AI-a autorima izvje\u0161taja o gre\u0161kama (1, 2, 3) i slanje generiranih AI zakrpa. U obradi pravila projekta, Natan je zatvarao izvje\u0161taje o gre\u0161kama odmah nakon \u0161to je poslao AI zakrpe vi\u0161im projektima, ne \u010dekaju\u0107i njihovo prihva\u0107anje, ili ih jednostavno zatvarao s oznakom «NOTABUG» i preporukom za provjeru ponovnog pojavljivanja problema.<\/p>\n

Adam Williamson je sugerirao da je Nathan koristio AI agenta za ispravak gre\u0161aka u Fedori i zamolio ga da prestane koristiti AI agenta u offline modu. Nathan je odgovorio da to nije njegov AI agent, da su njegovi ra\u010duni kompromitirani i da netko drugi djeluje u njegovo ime. Nakon toga, Nathan je objavio poruku da je obnovio pristup svojim ra\u010dunima na Fedori i GitHubu, a tako\u0111er
\nnapisao je da je njegov slu\u017ebeni ra\u010dun na GitHubu — «nathangiovannini99». <\/p>\n

Poruka je izazvala jo\u0161 vi\u0161e pitanja, budu\u0107i da je ozna\u010deni ra\u010dun stvoren sat vremena prije objavljivanja pisma, a na GitHubu su se pojavila jo\u0161 najmanje dva ra\u010duna povezana s Nathanom (leurus27-boop, nathan9513-aps). Nije se isklju\u010divalo da je zlonamjernik koji je imao pristup Nathanovom e-mailu nastavio komunicirati s programerima Fedore. Pristup Nathanovom ra\u010dunu na Bugzilli bio je blokiran i pokrenuta je provjera svih njegovih izmjena.<\/p>\n

Otkriveno je da je sumnjiva aktivnost po\u010dela 7. aprila i neki od zakrpa koje je Nathan poslao samo su stvorili privid ispravke. U me\u0111uvremenu, takve su zakrpe prihva\u0107ene u instalacijski program Anaconda i uklju\u010dene u izdanje Anaconda 45.5. Prate\u0107i programer Anaconde obustavio je napravljene izmjene i objavio izdanje Anaconda 45.6 bez tih zakrpa.<\/p>\n

Osim toga, ispravke poslane u Nathanovo ime prihva\u0107ene su od strane programera alata osc (openSUSE Commander) s implementacijom su\u010delja naredbenog retka za sustav gradnje Open Build Service. Jo\u0161 jedna zakrpa je predana za uklju\u010divanje u paket lxqt-policykit vezano uz ispravak problema u Fedora, ali su programeri Fedore uspjeli obavijestiti pratitelja prije nego \u0161to je ona prihva\u0107ena. Zakrpe nisu uklju\u010divale zlonamjerne aktivnosti, ali se pretpostavlja da su mogle biti priprema za implementaciju zlonamjernih izmjena u komponente sustava gradnje i servisa koji osigurava izvr\u0161avanje privilegiranih operacija. Ispravke koje je Nathan poslao tako\u0111er su zabilje\u017eene u projektima gwenview i easyeffects.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0410\u0434\u0430\u043c \u0423\u0438\u043b\u044c\u044f\u043c\u0441\u043e\u043d (Adam Williamson) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 F\u0435dora, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u041d\u0430\u0442\u0430\u043d\u0430 \u0414\u0436\u043e\u0432\u0430\u043d\u043d\u0438\u043d\u0438 (Nathan Giovannini), \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0443 Fedora \u0432 2016 \u0433\u043e\u0434\u0443 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0435\u0433\u043e \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Fedora Infrastructure Team. \u041d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0435\u043c\u0430\u044f \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u041d\u0430\u0442\u0430\u043d\u0430, \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182028","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47U Fedori je otkrivena zamjena hakiranog sudionika AI-agentom za promicanje sumnjivih izmjena | ProHoster","description":"Adam Williamson iz Red Hata, koji vodi tim za kontrolu kvalitete u projektu Fedora, primijetio je sumnjivu aktivnost Nathana Giovanninija, koji se pridru\u017eio.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0410\u0434\u0430\u043c \u0423\u0438\u043b\u044c\u044f\u043c\u0441\u043e\u043d (Adam Williamson) \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Red Hat, \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 F\u0435dora, \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u041d\u0430\u0442\u0430\u043d\u0430 \u0414\u0436\u043e\u0432\u0430\u043d\u043d\u0438\u043d\u0438 (Nathan Giovannini), \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043a.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/v-fedora-vyyavlena-podmena-vzlomannogo-uchastnika-ai-agentom-dlya-prodvizheniya-somnitelnyh-izmenenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-11T12:48:58+00:00","article:modified_time":"2026-06-11T12:48:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/182028","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=182028"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/182028\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=182028"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=182028"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=182028"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}