[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [ecf-dev] ecf2.osuosl.org

On 11/29/2010 07:31 PM, Scott Lewis wrote:
> Hi Folks,
> This morning the OSU Open Source lab is apparently experiencing an ssh
> attack (i.e. to all machines *.osuosl.org).
> One of the machines in that domain is ecf2.osuosl.org.  ecf2 was
> formerly our build machine...about two weeks ago Markus K completed the
> move of ecf2.osuosl.org to the new machine [1] and [2].
> Since ecf2 is a fairly old system, it is probably somewhat more
> vulnerable to compromise from this ssh attack (older OS version)...so we
> are going to ask that if the OSU OSL admins want to, that they can shut
> this machine down temporarily.  This is only temporary, but it may be a
> while (e.g. week) before ecf2.osuosl.org is back up.  It will, however,
> be back up eventually.
> Please let everyone know via this list if this creates a problem for
> you.  In general, everyone should be migrating over to using [2] for
> accessing ECF build artifacts, but I realize that some may not have
> completed such a changeover.

As a precaution, ecf2.osuosl.org has been taken down now. Nothing
indicated a security break in, but we want to be on the safe side.

It's going to take a while before the machine is going to be online
again. The OSU admins have to find time to reinstall the box with a
recent Linux (Gentoo).