![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
jmac.org down until at least Wednesday
Dec. 23rd, 2003 11:23 pmGiven the fact that one of its user accounts was compromised this morning, jmac.org is down for at least the overnight, on ![[livejournal.com profile]](https://www.dreamwidth.org/img/external/lj-userinfo.gif)
keimel's advice. Investigations'll be underway then.
In the meantime, if you need to mail me, use my work account <jason_mcintosh@hms.harvard.edu>. Phone also good. (Update... I rarely use this account and a brief test just now suggests uncertain reliability. That is, it's on a goofy server. Sigh, I don't know. Use phone first. If you need my number, ask someone else who knows, or reply to this post.)
Apologies to the users this inconveniences, but we have to assume the server's been rooted until it's been proven otherwise.
Side note: I am seriously considering giving up on running my own Linux server. I have no time or interest in being a sysadmin (this wasn't always true, but is now -- it's been true ever since I got my first Mac OS X laptop, actually), and my discovery today that a security failure on someone else's machine can cause mine to be taken down makes me feel quite frustrated, especially since I've been out of the sysadmin loop for so long that I always have to ask friends for help. (And I continue to very much appreciate all the help I get!!)
Not placing blame here, except on myself -- really, this is the latest in a string of occasional attacks and goofups that's knocked over jmac.org every now and again over the last couple of years, and mostly because I can't be bothered to follow the daily Linux sercurity news, and react to it. So I pay the price. And the price is not tasty meal.
undef'll come back up, but after that I'll have a think about its ultimate fate. I can't do anything rash since I use it for mail and have lots of webstuff on it, as do several friends (all of whom are probably reading these words). So, no worries. I'm not even upset, really. I'm just starting to feel that don't really have the authority to run a server, anymore.
keimel's advice. Investigations'll be underway then.In the meantime, if you need to mail me, use my work account <jason_mcintosh@hms.harvard.edu>. Phone also good. (Update... I rarely use this account and a brief test just now suggests uncertain reliability. That is, it's on a goofy server. Sigh, I don't know. Use phone first. If you need my number, ask someone else who knows, or reply to this post.)
Apologies to the users this inconveniences, but we have to assume the server's been rooted until it's been proven otherwise.
Side note: I am seriously considering giving up on running my own Linux server. I have no time or interest in being a sysadmin (this wasn't always true, but is now -- it's been true ever since I got my first Mac OS X laptop, actually), and my discovery today that a security failure on someone else's machine can cause mine to be taken down makes me feel quite frustrated, especially since I've been out of the sysadmin loop for so long that I always have to ask friends for help. (And I continue to very much appreciate all the help I get!!)
Not placing blame here, except on myself -- really, this is the latest in a string of occasional attacks and goofups that's knocked over jmac.org every now and again over the last couple of years, and mostly because I can't be bothered to follow the daily Linux sercurity news, and react to it. So I pay the price. And the price is not tasty meal.
undef'll come back up, but after that I'll have a think about its ultimate fate. I can't do anything rash since I use it for mail and have lots of webstuff on it, as do several friends (all of whom are probably reading these words). So, no worries. I'm not even upset, really. I'm just starting to feel that don't really have the authority to run a server, anymore.