Re: Fedora: Inaccurate and apparently-unsupervise d actions by agentic AI system under your control

nathan <[email protected]> Wed, 27 May 2026 21:22:15 +0200
Newsgroups	gmane.linux.redhat.fedora.testers
Message-ID	<AS8PR08MB6055AE3054B34F6A567AC95BCF082@AS8PR08MB6055.eurprd08.prod.outlook.com>
--===============6658757646637975022==
Content-Type: multipart/alternative;
 boundary=----5YWVPNNB6DZFBSBZGUPDBQ6QWD5BJ5
Content-Transfer-Encoding: 7bit

------5YWVPNNB6DZFBSBZGUPDBQ6QWD5BJ5
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi,

thank you for the update=2E I confirm that my credentials were compromised=
 earlier and that I was not the one performing the actions observed by the =
AI system=2E

Fortunately, I was able to regain access to both my GitHub and Fedora acco=
unts later in the evening, and I am currently securing and reviewing all in=
volved systems and credentials=2E

I will personally handle the verification and review process=2E To help id=
entify accounts and actions that have been directly verified by me, I will =
use the term =E2=80=9CNATCIOS=E2=80=9D to indicate anything I have personal=
ly verified=2E

Also, please note that my official GitHub account is nathangiovannini99=2E

Thank you all for your support and for the additional reviews=2E



Il 27 maggio 2026 21:15:44 CEST, Adam Williamson <adamwill@fedoraproject=
=2Eorg> ha scritto:
>On Wed, 2026-05-27 at 10:49 -0700, Adam Williamson wrote:
>> Hi, Nathan=2E I'm CCing devel@ and test@ so folks are aware this has be=
en
>> going on=2E
>
>Update on this: Nathan got back to me and says his credentials were
>compromised and he was not the one behind this AI system=2E Obviously we
>should therefore treat any actions it has taken with suspicion=2E I'm
>continuing to review the history of Nathan's Bugzilla account; I'll
>adjust the texts I'm posting to bugs and associated upstream PRs from
>now on, and review them even more aggressively=2E
>
>If folks can help look for other actions taken by Nathan's accounts and
>review them, that would be great=2E
>--=20
>Adam Williamson (he/him/his)
>Fedora QA
>Fedora Chat: @adamwill:fedora=2Eim | Mastodon: @adamw@fosstodon=2Eorg
>https://www=2Ehappyassassin=2Enet
>
>
>
>--=20
>_______________________________________________
>test mailing list -- test@lists=2Efedoraproject=2Eorg
>To unsubscribe send an email to test-leave@lists=2Efedoraproject=2Eorg
>Fedora Code of Conduct: https://docs=2Efedoraproject=2Eorg/en-US/project/=
code-of-conduct/
>List Guidelines: https://fedoraproject=2Eorg/wiki/Mailing_list_guidelines
>List Archives: https://lists=2Efedoraproject=2Eorg/archives/list/test@lis=
ts=2Efedoraproject=2Eorg
>Do not reply to spam, report it: https://forge=2Efedoraproject=2Eorg/infr=
a/tickets/issues/new

------5YWVPNNB6DZFBSBZGUPDBQ6QWD5BJ5
Content-Type: text/html;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"></=
head><body><div dir=3D"auto">Hi,<br><br>thank you for the update. I confirm=
 that my credentials were compromised earlier and that I was not the one pe=
rforming the actions observed by the AI system.<br><br>Fortunately, I was a=
ble to regain access to both my GitHub and Fedora accounts later in the eve=
ning, and I am currently securing and reviewing all involved systems and cr=
edentials.<br><br>I will personally handle the verification and review proc=
ess. To help identify accounts and actions that have been directly verified=
 by me, I will use the term =E2=80=9CNATCIOS=E2=80=9D to indicate anything =
I have personally verified.<br><br>Also, please note that my official GitHu=
b account is nathangiovannini99.<br><br>Thank you all for your support and =
for the additional reviews.<br><br></div><br><br><div class=3D"gmail_quote"=
><div dir=3D"auto">Il 27 maggio 2026 21:15:44 CEST, Adam Williamson &lt;ada=
[email protected]&gt; ha scritto:</div><blockquote class=3D"gmail_quo=
te" style=3D"margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204=
, 204); padding-left: 1ex;">
<pre class=3D"net-thunderbird-android__plain-text-message-pre"><div dir=3D"=
auto">On Wed, 2026-05-27 at 10:49 -0700, Adam Williamson wrote:<br></div><b=
lockquote class=3D"gmail_quote" style=3D"margin-bottom: 1ex; --net-thunderb=
ird-android__blockquote-default-border-color: #729fcf;"><div dir=3D"auto">H=
i, Nathan. I'm CCing devel@ and test@ so folks are aware this has been<br>g=
oing on.<br></div></blockquote><div dir=3D"auto"><br>Update on this: Nathan=
 got back to me and says his credentials were<br>compromised and he was not=
 the one behind this AI system. Obviously we<br>should therefore treat any =
actions it has taken with suspicion. I'm<br>continuing to review the histor=
y of Nathan's Bugzilla account; I'll<br>adjust the texts I'm posting to bug=
s and associated upstream PRs from<br>now on, and review them even more agg=
ressively.<br><br>If folks can help look for other actions taken by Nathan'=
s accounts and<br>review them, that would be great.<br></div></pre></blockq=
uote></div></body></html>=

------5YWVPNNB6DZFBSBZGUPDBQ6QWD5BJ5--

--===============6658757646637975022==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--===============6658757646637975022==--