Somebody probably noticed that the server went down early Friday morning. Some fuck face exploited a vulnerability in order to upload a script that connected back to him, giving him an interactive shell. He/she used this shell to launch a UDP flood attack on a server in Romania. My provider pulled the plug after they clocked 41GB of traffic coming from the server and destined for a single IP. After I talked to my provider, I backed up the system and erased the disk so the server could be re-imaged.

I managed to restore email service by Saturday afternoon, but I would not bring the websites back up until I figured out exactly how the scumbags had uploaded their script (I'm not interested in a sequel of this event). After scouring the logs I finally fit the last piece of the puzzle in place Sunday night. I instituted some new security measures before bringing the websites and blogs back online Monday afternoon.
Everything should be back to normal now, but let me know if something is broken or out of place.

Posted by ra at 23:38 | Comments (0) | Trackbacks (0)

"We don't have a problem with people disseminating information about BART,"
Allison said. "We do have a problem with people pirating information that is
incorrect," he said.

WTF is that supposed to mean? It is ok to share up-to-date information, however sharing out-of-date information from the same source = piracy? I think PR2d2 just thought it would be cool to work the word "piracy" in there to make it sound like somebody was doing something really bad.

Posted by ra at 16:33 | Comments (0) | Trackbacks (0)