linuxaudio.org compromised - 2018-01-29

Check this forum for important info regarding the site.

Moderators: MattKingUSA, khz

User avatar
autostatic
Established Member
Posts: 1728
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Contact:

linuxaudio.org compromised - 2018-01-29

Postby autostatic » Wed Jan 31, 2018 11:30 am

Dear all,

January 29th the linuxaudio.org was compromised. Someone managed to pull in a privilege escalation exploit, probably through a reverse shell and got root. This was discovered by the Virginia Tech IT department and they cut the server off from the network. Their policy dictates that compromised servers have to be wiped and reinstalled. Because we didn't have an option to try cleaning up things we have to build everything up from scratch again. Since it's a very small team that keeps this server up (basically 2 persons including myself) rebuilding is going to take some time. Data loss should be minimal as we have backups. So please bear with us, I will keep you posted on the progress.

Best,

Jeremy

finotti
Established Member
Posts: 288
Joined: Thu Sep 01, 2011 9:07 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby finotti » Wed Jan 31, 2018 2:14 pm

Thanks for the information and all your work maintaining (and now fixing) this great resource to the community!

ssj71
Established Member
Posts: 1262
Joined: Tue Sep 25, 2012 6:36 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby ssj71 » Wed Jan 31, 2018 3:44 pm

Huge thanks for your generous work to keep it maintained! I certainly miss it already (I check the planet daily), but however long it takes I appreciate you offering your skills to the community.
_ssj71

music: https://soundcloud.com/ssj71
My plugins are Infamous! http://ssj71.github.io/infamousPlugins
I just want to get back to making music!

User avatar
falkTX
Established Member
Posts: 6646
Joined: Sat Jan 09, 2010 3:04 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby falkTX » Wed Jan 31, 2018 4:31 pm

Yeah, thanks for your work here!
Really appreciated.

TheAxeMan
Established Member
Posts: 3
Joined: Wed Jan 31, 2018 10:10 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby TheAxeMan » Wed Jan 31, 2018 10:15 pm

Yes, thank you for your service!

Just when I was looking for some info... Your content has helped me greatly in switching from Windows to Linux with my little "home studio".

folderol
Established Member
Posts: 745
Joined: Mon Sep 28, 2015 8:06 pm
Location: Here, of course!
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby folderol » Thu Feb 01, 2018 3:39 pm

I'm seriously impressed Jeremy!
I knew it was a small operation, but didn't realise it was that small.

Thanks for all your work.

User avatar
autostatic
Established Member
Posts: 1728
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby autostatic » Thu Feb 01, 2018 5:19 pm

Thanks everybody for the kind words! Current status is that the hack is being investigated and that some static sites are responding again. But no clear indication of how things will progress. We' not sitting still though, in the meanwhile we're thinking about what other options we have and we might start preparing for a plan B.

User avatar
autostatic
Established Member
Posts: 1728
Joined: Wed Dec 09, 2009 5:26 pm
Location: Beverwijk, The Netherlands
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby autostatic » Fri Feb 02, 2018 5:10 pm

I'd like to point out that information in this thread on the outage of linuxaudio.org is leading. So please refrain from speculating, thanks in advance!

Current status is that we have access to the current server again so we can start recovering data. Hopefully we can make some good progress this weekend. Priorities are mail and LAC2018 submissions. Then Libremusicproductions.com and kxstudio.linuxaudio.org (including the repo's). More to come so keep an eye on this thread!

And if there are any questions, PM me on IRC or send me a mail.

Jeremy

jCandlish
Posts: 2
Joined: Mon Jun 20, 2016 8:17 pm
Location: Switzerland

Re: linuxaudio.org compromised - 2018-01-29

Postby jCandlish » Fri Feb 02, 2018 6:29 pm

Thanks for your hard work, and sorry about your weekend.

raffguitar++
Established Member
Posts: 19
Joined: Sun Jun 12, 2016 5:55 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby raffguitar++ » Fri Feb 02, 2018 7:55 pm

Aaahh, so that's why LMP is down! (One of my all time favorite sites). Just recently told a friend who is new to Linux about it, figures :roll:

Anyway, very sorry to hear about this incident. And thank you very much for all of your hard work! I will stay tuned and check in now and then.

User avatar
gennargiu
Established Member
Posts: 200
Joined: Sun Dec 18, 2016 9:56 pm

Re: linuxaudio.org compromised - 2018-01-29

Postby gennargiu » Fri Feb 02, 2018 8:14 pm

Many thanks for your works and best regards :wink:

gennaro
Hp Elite 8200 3,1 Ghz - 16 Giga Ram Hd 2 Terabyte - Av Linux 64 (Debian Stretch 9 based + Repo kxstudio) - Ardour 5,12 - Mixbus 5
Asus X54c - Debian Stretch+Repo kx Studio-Ardour 5.12- Mixbus 5-RPI3 + Raspbian Stretch

User avatar
SLCBagpiper
Established Member
Posts: 13
Joined: Mon Jul 13, 2015 3:07 am
Location: Salt Lake City, UT
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby SLCBagpiper » Sat Feb 03, 2018 12:12 am

Thanks for all of your hard work.
"If it's stupid, but it works, then it's not stupid."
---Art. III, Murphy's Military Law

GraysonPeddie
Established Member
Posts: 589
Joined: Sun Feb 12, 2012 11:12 pm
Location: Altha, FL
Contact:

Re: linuxaudio.org compromised - 2018-01-29

Postby GraysonPeddie » Sat Feb 03, 2018 12:16 am

I am CompTIA A+ certified, but not Linux+ certified despite having lots of experience with Linux at home. It would be nice if I could be of help, but I'm from Florida. I took the exams at World Services for the Blind and got a 795 for CompTIA A+ 220-901 and 803 for A+ 220-902.

Anyway, I hope all the Linux Musician-related websites will be up and fully operational soon.
--Grayson Peddie

Music Interest: New Age w/ a mix of modern smooth jazz, light techno/trance & downtempo -- something Epcot Future World/Tomorrowland-flavored.

Drazen
Established Member
Posts: 17
Joined: Sun Nov 13, 2016 8:30 am

Re: linuxaudio.org compromised - 2018-01-29

Postby Drazen » Sat Feb 03, 2018 8:49 am

Thanks for your hard work.
Best
Drazen

elerale
Established Member
Posts: 20
Joined: Sat Nov 19, 2016 4:45 am

Re: linuxaudio.org compromised - 2018-01-29

Postby elerale » Sat Feb 03, 2018 8:56 am

Hello,

Thanks for everything !

Cheers
Erwan


Return to “Announcements”

Who is online

Users browsing this forum: No registered users and 2 guests