ViewVC Back Online
Sourceforge Writes
CVS is back online (rsync, pserver, SSH and ViewVC), with a few caveats:
- adminrepo via the Interactive Shell is temporarily offline
- due to a reduced number of installed libraries, some hook scripts may not function properly
- outbound email is not functional, so any script utilizing this will fail. If you need to send outbound email, a workaround would be to use curl and and external site or Project Web to send the email.
Sourceforge Passwords Reset
Sourceforge Writes:
Our investigation uncovered evidence of password sniffing attempts. We have no evidence to suggest that the sniffing attempt was completed successfully. But, what we definitely don’t want is to find out in 2 months that passwords were compromised and we didn’t take action.
Sourceforge Attacked – SVN Offline
SourceForge, is down today. Management claims they were attacked: 'We detected a direct targeted attack that resulted in an exploit of several SourceForge.net servers, and have proactively shut down a handful of developer centric services to safeguard data and protect the majority of our services.' Currently, CVS and SVN access to source code, even for reading, is unavailable, and there is no announced restoration time
more info on attack HERE
Attack Update HERE
Correction: The SVN is online, but the SVN web viewer is not available accessible. The code can still be downloaded and updated through other means such as tortoise SVN.
Forum Offline – 11:05am
Some of you may have noticed that the forum is giving SQL errors and is not accessible. This is site-wide for all the sourceforge forums and most-likely due to maintenance or upgrades to the forum software. It expected to be temporary and fixed within the hour.
Update: This has been fixed as of 11:15am. I told you it wouldn't be long!
Sourceforge Scheduled Downtime
Some of you may have noticed that some of our forum and wiki on sourceforge are offline. This is scheduled down time planned by sourceforge for network maintenance. You can read more about it at HERE
Backups Page Online
well, it seems that was a lot of fuss over what turned out to be only a minor inconvenience. The uploads site is now back online and I used the opportunity to upgrade everything to the latest versions as well. Many of the files are back up and I am working on uploading the last of the remaining files.
I would like to thank the perpetrators for helping me with some penetration testing. It is nice to see that someone else recognizes that you will never take out shareaza completely without going through me first. Unfortunately, you will have to do better then that next time - especially since I have made a secure backup of the entire site on CD and mailed it out to about 25 different people worldwide!
Never-the-less, I have taken measures to ensure that this never happens again. For now, the backups site requires a password while I finish securing the uploading mechanism. If you want to upload anything I will be happy to either give you the password (if I know you well) or upload the file for you(after inspecting it of course).
backups page offline
The backups section of sure-raza.com has been compromised and has therefore been removed to protect me, you, and the data. The rest of the site appears to be fine, but everyone should be on high alert and proceed with extreme caution. Backups have been made, so any losses will be minimal
Update Jan 9, 2010 @ 10:45am
The problem is resolved and everything seems to be back online.
This non-event serves as proof that we are serious about keeping you updated and that we are capable of giving up-to-the-minute information. It is also an important reminder that we need to be prepared for anything at anytime.
Update – January 9, 2010
It seems that sourceforge has removed our forums and wiki. When you try to access the site it gives the error "Group not found for name: shareaza". This does not appear to be an action taken specifically against shareaza since other projects using sourceforge's hosted apps service are also experiencing this problem. This is most-likely due to maintenance. We are looking into the situation and will try to keep you updated. If this problem persists a temporary forum and wiki will be set up right here at sure-raza.com.
If you have any further information feel free to post a comment on this blog.