I first saw word of this on the #centos. A city manager for Tuttle, OK accused Johnny Hughes of CentOS fame of hacking their city sites. His proof? A default Apache post-installation page included in CentOS installations when the website is unconfigured. That’s right, the default post-installation web page for Apache. Email after email with Johnny Hughes being more polite than I ever could be with the city manager (who claimed “22 years in computer systems engineering and operation”).
Read some of the stories yourself: