I have the full story on that incident. It is actually really funny.<p>If the guy who did it wants to come forward, that is his decision. [edit: I won't name names.]<p>He did provided me the full story. He told me with the understanding that the story would go public, so I will dig it up and post it.<p>I also interviewed the sysadmins who were running the box at the time.<p>1. it was not an NSA operation, it was done by a hacker.<p>2. it was discovered by accident, not because of clever due diligence.<p>Basically, there was a developer who had a flakey connection and one time his commits didn't go through. To detect this in future he had a script that would download the entire tree from the server and compare it against his local copy to make sure that his changes had been committed.<p>It was discovered because of the discrepancy between his local working copy and the upstream copy. Which was checked not for security reasons, but because sometimes the two were out of sync. That's all. Just dumb luck.<p>The sysadmins are still quite bitter about it. I know how it feels when your box is hacked and you really take it personally.<p>The code wasn't added by hacking the CVS, as far as I remember, but rather through a hacked developer with commit rights.<p>that's the story as I was told