Apache.org goes titsup.com | The Coffeehouse

AndyC

The Infrastructure Team of The Apache Software Foundation is currently investigating a potential compromise of one of our servers. For security reasons most apache.org services are therefore offline, but will be restored shortly. We apologies for any inconvenience this may cause.

Perhaps someone from Microsoft Marketing can sell them some IIS boxes? Tongue Out

blowdart
Peek-a-boo

10:42am UTC: Compromise was due to a compromised SSH Key, not due to any software
exploits in Apache itself.

Which leaves a lot of questions. Stolen laptop? Weak key generated by the buggy version of OpenSSL?

Ubuntu

Perhaps someone from Microsoft Marketing can sell them some IIS boxes?

Double standard - last time I made this kind of remark but about an M$ product my post was removed and I got a yellow card - Charles?

W3bbo
The Master of Baiters

In reply to Ubuntu

#Aug 28th @ 6:26 AM

He's being facetious, you weren't.

Ubuntu

In reply to W3bbo

#Aug 28th @ 6:36 AM

Because he added a smiley and I didn't? - even if he meant it as a joke it is still a flame war starting post and if I did that I would be accused of trolling at least 3 times already.

EDIT: And the thread title isn't any better and there is no smiley there.

W3bbo
The Master of Baiters

In reply to Ubuntu

#Aug 28th @ 6:50 AM

Look up "facetious", it doesn't mean "put a face next to it".

AndyC

In reply to Ubuntu

#Aug 28th @ 6:50 AM

Yes, it's called humour don't you know, not everything in life has to be totally serious all the time. And from what I recall, your yellow card stemmed rather more from personal insults than anything else.

Apache is an awesome web server. The real issue here, as Blowdart points out, is how exactly they got compromised. It's most reassuring to see it isn't a direct Apache vulnerability (but then it rarely is, usually compromised web sites are the result of site code rather than server code) but it's clearly not good for SSH keys to projects like this being leaked.

Ubuntu

In reply to W3bbo

#Aug 28th @ 7:27 AM

facetious - not meant to be taken seriously or literally: a facetious remark.

smiley - a sideways representation of a smiling face, :‑), or similar combination of symbols, as ;‑), a winking face, or :‑(, a sad face, created by keystrokes and used to communicate humor, sarcasm, sadness, etc., in an electronic message. Compare emoticon.

Proves my point doesn't it? Any more questions?

Ubuntu

In reply to AndyC

#Aug 28th @ 7:32 AM

Apache is an awesome web server.

I disagree - it's quite inefficient memory and throughput wise. Nginx is where you get the performance.

AndyC

In reply to Ubuntu

#Aug 28th @ 7:33 AM

The difference my dear old chap, is that putting a smiley at the end of a vitriolic comment doesn't take away the insult. Putting a smiley at the end of something which most probably is meant in jest and which, on its own, could cause no offence, just reinforces the tone which might otherwise have been lost in the medium of text.

Ubuntu

In reply to AndyC

#Aug 28th @ 7:39 AM

Titsup.com

What you need, when you need it

I get it - it's all relative.

PaoloM
Hypermediocrity

In reply to Ubuntu

#Aug 28th @ 6:26 AM

last time I made this kind of remark but about an M$ product my post was removed

I don't remember that, could you provide more details?

I don't think the Channel 9 team has EVER removed a post...

Ubuntu

In reply to PaoloM

#Aug 28th @ 8:20 AM

I don't think the Channel 9 team has EVER removed a post...

You are dead wrong about that: they have removed entire threads, all the posts of a user when he gets permanently banned etc.

Let me give you an example:

I have started the following thread, you cannot access it either from the Coffeehouse list of threads or from my profile and my initial post has been removed as well therefore it starts from a reply (thanks Charles):

http://channel9.msdn.com/forums/Coffeehouse/483942-Strong-Innovation-Story-With-IE8/

GoddersUK
I CAN has cheezburger and you CAN'T has stop me!

In reply to PaoloM

#Aug 28th @ 8:20 AM

They do remove spam.

Bar that I don't know.

@Ubuntu: iirc the non-clickable thing has been reported and acknowledged as a bug in the feedback forum.

CKurt
while( ( !succeed=try() ) ) { }

In reply to Ubuntu

#Aug 28th @ 8:30 AM

So they are still there, they were not removed. The thread was locked and disappear from the long list of threads. But the threads is there, can be accessed and indexed by search engines.

Ubuntu

In reply to CKurt

#Aug 28th @ 9:15 AM

Reading comprehension (back to school season):

PaoloM:

I don't think the Channel 9 team has EVER removed a post...

Ubuntu:

my initial post has been removed therefore it starts from a reply

PaoloM
Hypermediocrity

In reply to Ubuntu

#Aug 28th @ 9:20 AM

my initial post has been removed therefore it starts from a reply

WHO removed the post? Was it the Channel 9 team? Have you any evidence of this?

Ubuntu

In reply to PaoloM

#Aug 28th @ 9:38 AM

Have you any evidence of this?

You should change your avatar to that or become a detective. Or make it shorter like: "HAVE YOU EVIDENCE?"

I'm done talking to you troll.

PaoloM
Hypermediocrity

In reply to Ubuntu

#Aug 28th @ 9:50 AM

So you don't have evidence.

It's ok, just more proof that you're making stuff up.

Sven Groot
My name has 9 letters. Coincidence? I think not...

In reply to PaoloM

#Aug 28th @ 9:52 AM

Sorry Paolo, but he appears to be right here. Obviously the first post of that thread has been removed (I don't know if it was Ubuntu's or not). Who else but the C9 team could have done that?

PaoloM
Hypermediocrity

In reply to Sven Groot

#Aug 28th @ 10:17 AM

Does the button Mark as Spam work on posts or threads?

Sven Groot
My name has 9 letters. Coincidence? I think not...

In reply to PaoloM

#Aug 28th @ 10:25 AM

It works on threads. But I didn't think it was still automatic, I thought it just notified some C9 team members who removed it. I mean, the automatic version was pretty much a disaster last time around so I didn't think they'd do it again.

EDIT: And if that's it, you can hardly blame him for not knowing about that and reaching this conclusion instead.