[LAD] linuxaudio.org is back online!

Jonathan E. Brickman jeb at ponderworthy.com
Sun Feb 18 12:19:16 CET 2018


Jeremy, our most profound thanks !!!
J.E.B.
On Sat, 2018-02-17 at 19:15 +0100, Jeremy Jongepier wrote:
> Dear all,
> 
> We just enabled all mail services for linuxaudio.org again. All
> mailing
> lists are working again and mail can be sent and received for the
> linuxaudio.org domain.
> 
> A short recap of what happened is that linuxaudio.org got compromised
> on
> January 29th, probably with a compromised private SSH key or password
> from an account with shell access. The attacker checked the kernel,
> saw
> that it was vulnerable to Dirty COW¹, pulled in an exploit and got
> root.
> This was quickly discovered by the IT department of Virginia Tech
> University that disconnected the server from the internet and started
> a
> forensic investigation procedure. As part of their IT security policy
> the server had to be reinstalled and everything had to be set up from
> scratch again. In the meanwhile I built an alternative setup and
> after
> some discussion we agreed on moving linuxaudio.org away from the
> Virginia Tech server.
-- 
Jonathan E. Brickman   jeb at ponderworthy.com   (785)233-9977
Hear us at http://ponderworthy.comcom -- CDs and MP3 now available!
Music of compassion; fire, and life!!!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.linuxaudio.org/archives/linux-audio-dev/attachments/20180218/52edc8e2/attachment.html>


More information about the Linux-audio-dev mailing list