Jeremy, our most profound thanks !!!
J.E.B.
On Sat, 2018-02-17 at 19:15 +0100, Jeremy Jongepier wrote:
> Dear all,
>
> We just enabled all mail services for linuxaudio.org again. All
> mailing
> lists are working again and mail can be sent and received for the
> linuxaudio.org domain.
>
> A short recap of what happened is that linuxaudio.org got compromised
> on
> January 29th, probably with a compromised private SSH key or password
> from an account with shell access. The attacker checked the kernel,
> saw
> that it was vulnerable to Dirty COW¹, pulled in an exploit and got
> root.
> This was quickly discovered by the IT department of Virginia Tech
> University that disconnected the server from the internet and started
> a
> forensic investigation procedure. As part of their IT security policy
> the server had to be reinstalled and everything had to be set up from
> scratch again. In the meanwhile I built an alternative setup and
> after
> some discussion we agreed on moving linuxaudio.org away from the
> Virginia Tech server.
-- Jonathan E. Brickman jeb@email-addr-hidden (785)233-9977 Hear us at http://ponderworthy.comcom -- CDs and MP3 now available! Music of compassion; fire, and life!!!
_______________________________________________
Linux-audio-dev mailing list
Linux-audio-dev@lists.linuxaudio.org
https://lists.linuxaudio.org/listinfo/linux-audio-dev
Received on Mon Jun 18 21:47:04 2018
This archive was generated by hypermail 2.1.8 : Mon Jun 18 2018 - 21:47:04 EEST