A few points:
That is the ipad app, which is just a client that was uploaded yesterday.
There are already ubuntu packages for most of the stack
Most of the code is already in production either at NASA or Rackspace.
Could.com is joining and adopting openstack.
Perhaps more research before posting is in order.

What a load of misinformation. Both in the article and in the comments. Reading the comments, one would think that the core Ubuntu repositories were compromised, and that Canonical tried to hide it.

This was published in the Ubuntu Weekly News before it hit slashdot and Canonical held a public meeting about it. The freakin' article links to an official Ubuntu wiki.

This had nothing to do with the Security at Canonical, or Ubuntu Server, but everything to do with the processes around Canonical sponsorship of community servers.

Full Disclosure: I work for Canonical, but know nothing about this issue, except what has been made public. I speak only for myself and do not represent the opinions of Canonical.

Rick

Apart from the gossipy super, there's also a reference in the article to the phone number she'd obtained, and then a reference to calls made from that number to Utah and Canopy Group. If MOG wasn't making that up, she either went dumpster-diving for a phone bill or obtained a list of numbers dialed from the phone company through some other, even more shady, method. It's not like you can typically obtain someone's phone records just by calling the phone company - that kind of thing takes a court order.