Search found 1725 matches

by autostatic
Sat Feb 17, 2018 8:12 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

https://planet.linuxaudio.org/ is pulling in updates again. The template we used doesn't seem to work at the moment but I'll fix that too.
by autostatic
Sat Feb 17, 2018 6:48 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

Hi Rui, a pertinent question ;) though if one or everyone should have to do just that that would be really disgusting and quite frankly it would sentence the death of it all :/ from my standing pov.: none of the LA(A|D|U) mail-lists seems to work at all; mails sent just seem to fall into the void: n...
by autostatic
Sat Feb 17, 2018 6:40 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

jonetsu wrote:Is there a need to subscribe again to the list ?
No, we restored the complete Mailman setup from the compromised server. That includes all subscriptions, no need to subscribe again.
by autostatic
Sat Feb 17, 2018 6:39 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

Dear all, We just enabled all mail services for linuxaudio.org again. All mailing lists are working again and mail can be sent and received for the linuxaudio.org domain. A short recap of what happened is that linuxaudio.org got compromised on January 29th, probably with a compromised private SSH ke...
by autostatic
Fri Feb 09, 2018 10:52 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

For those interested, the setup is now as follows: - GlusterFS server with 1TB storage, on a private VLAN, no public IP, 2vCPU, 4GB RAM - Web server with GlusterFS mount with public IP 185.54.115.200 (web1.linuxaudio.cyso.net), 4vCPU, 8GB RAM - Mail server with public IP 185.54.115.210 (mail1.linuxa...
by autostatic
Fri Feb 09, 2018 10:37 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

The mailing list archives are back online too. Most of the LAC pages work again. This weekend we'll get mail working too. Almost there!
by autostatic
Fri Feb 09, 2018 9:29 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

@scacinto, please open a new thread for this in the appropriate forum section, thanks!
by autostatic
Fri Feb 09, 2018 2:31 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

This is going to take some time as it is a huge amount of work. All Apache configs will have to be updated to 2.4 standards (we came from 2.2), PHP code that doesn't work with PHP7 has to be traced down and updated and all database users have to be set up again. The following sites are back online: ...
by autostatic
Wed Feb 07, 2018 10:25 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

There might be some issues with SSL certificates, I revoked them all and renewed a few ones. We weren't using HSTS yet so the sites that are up should be accessible to everyone.

Tomorrow we'll move on and hopefully we can also get the mailing lists back online again.
by autostatic
Wed Feb 07, 2018 9:31 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

First sites are starting to work again:
  • kxstudio.linuxaudio.org
  • kokkinizita.linuxaudio.org
  • download.linuxaudio.org
  • lac.linuxaudio.org/2018
by autostatic
Wed Feb 07, 2018 2:44 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

So far the progress is slow. We have to deal with a timezone difference, I'm in CET while the current server and the Virginia Tech department hosting the server are in EST, and also the communication itself is not optimal. And then there's a another time issue, I can't put all my available time into...
by autostatic
Sun Feb 04, 2018 3:17 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

Hi everyone, please stay on topic, thanks in advance!
by autostatic
Sat Feb 03, 2018 11:43 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

We're in the process of rebuilding everything on alternate servers as the forensics procedure at Virginia Tech simply takes too long. So hopefully tomorrow or beginning of next week we can flick the DNS switch. Short recap, someone or something (this was probably an automated attack) probably got a ...
by autostatic
Fri Feb 02, 2018 5:10 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

I'd like to point out that information in this thread on the outage of linuxaudio.org is leading. So please refrain from speculating, thanks in advance! Current status is that we have access to the current server again so we can start recovering data. Hopefully we can make some good progress this we...
by autostatic
Thu Feb 01, 2018 5:19 pm
Forum: Announcements
Topic: linuxaudio.org compromised - 2018-01-29
Replies: 64
Views: 15865

Re: linuxaudio.org compromised - 2018-01-29

Thanks everybody for the kind words! Current status is that the hack is being investigated and that some static sites are responding again. But no clear indication of how things will progress. We' not sitting still though, in the meanwhile we're thinking about what other options we have and we might...

Go to advanced search