Re: [LAD] linuxaudio.org is back online!

From: Jonathan E. Brickman <jeb@email-addr-hidden>
Date: Sun Feb 18 2018 - 13:19:16 EET

Jeremy, our most profound thanks !!!
J.E.B.
On Sat, 2018-02-17 at 19:15 +0100, Jeremy Jongepier wrote:
> Dear all,
>
> We just enabled all mail services for linuxaudio.org again. All
> mailing
> lists are working again and mail can be sent and received for the
> linuxaudio.org domain.
>
> A short recap of what happened is that linuxaudio.org got compromised
> on
> January 29th, probably with a compromised private SSH key or password
> from an account with shell access. The attacker checked the kernel,
> saw
> that it was vulnerable to Dirty COW¹, pulled in an exploit and got
> root.
> This was quickly discovered by the IT department of Virginia Tech
> University that disconnected the server from the internet and started
> a
> forensic investigation procedure. As part of their IT security policy
> the server had to be reinstalled and everything had to be set up from
> scratch again. In the meanwhile I built an alternative setup and
> after
> some discussion we agreed on moving linuxaudio.org away from the
> Virginia Tech server.

-- 
Jonathan E. Brickman   jeb@email-addr-hidden   (785)233-9977
Hear us at http://ponderworthy.comcom -- CDs and MP3 now available!
Music of compassion; fire, and life!!!

_______________________________________________
Linux-audio-dev mailing list
Linux-audio-dev@lists.linuxaudio.org
https://lists.linuxaudio.org/listinfo/linux-audio-dev
Received on Mon Jun 18 21:47:04 2018

This archive was generated by hypermail 2.1.8 : Mon Jun 18 2018 - 21:47:04 EEST