[paul@linuxaudiosystems.com: [Jack-Devel] jackaudio.org website shut down due to hacking]
30 May
2014
30 May
'14
10 p.m.
Hi!
I'm sure there must be users out there who are familiar with web stuff
and are burning to help their favourite inter-application audio
framework. ;)
Step up, please.
PS: There is also a semi-complete move to GH-pages. If your're familiar
with github, you could be the ideal volunteer. ;)
Cheers
----- Forwarded message from Paul Davis <paul(a)linuxaudiosystems.com> -----
Date: Fri, 30 May 2014 11:56:02 -0400
From: Paul Davis <paul(a)linuxaudiosystems.com>
To: JACK <jack-devel(a)lists.jackaudio.org>
Subject: [Jack-Devel] jackaudio.org website shut down due to hacking
The malicious conscience-free leeches who push pharmaceutical spam managed
to hack into jackaudio.org in a very deep way. They had full access to
everything including the ability to fiddle with MySQL tables (some of
them). I don't consider any part of the Drupal site safe, so I have shut it
down and replaced it with a single static index.html file.
The source tarballs for JACK1 were uncorrupted (probably JACK2 also -
waiting for confirmation from Stephane on this), and I have put up a new
link to the most recent. I also referenced github for the source code
repository and issue tracker.
As someone said on IRC today
" It's a shame the lead dev has to waste his time coding, answering user
questions AND fixing drupal backdoors "
If someone else wants to volunteer to resurrect the roughly 60 pages of
content that were at jackaudio.org (and realistically, it is probably more
like 20 of real stuff that is needed), get in touch. I can give you full
access to everything you will need.
_______________________________________________
Jack-Devel mailing list
Jack-Devel(a)lists.jackaudio.org
http://lists.jackaudio.org/listinfo.cgi/jack-devel-jackaudio.org
----- End forwarded message -----
--
mail: adi(a)thur.de http://adi.thur.de PGP/GPG: key via keyserver
1 Jun
1 Jun
2:56 a.m.
On Sat, May 31, 2014 at 5:00 AM, Adrian Knoth <adi(a)drcomp.erfurt.thur.de>
wrote:
I'm sure there must be users out there who are
familiar with web stuff
and are burning to help their favourite inter-application audio
framework. ;)
Step up, please.
Well I certainly fit that description. I'm somewhat familiar with Drupal,
having worked with versions 4 through 7, and would love to help if
possible, but I'm hesitant to commit to something as I am somewhat time
constrained. Keep in mind I'm not a web pro, I'm a humble textbook editor
by trade. I'm also sensing some hesitance to stay with Drupal on your and
Paul's behalf. Ultimately my biggest question is how the attack happened.
Drupal does run quite securely on some very high profile sites, so I guess
the first step to fixing things if Drupal is retained is figuring out what
went wrong. If the issue is locking down the server, then long term it may
be more productive to avoid having to maintain a server at all and go with
github pages as suggested, effectively outsourcing security issues
entirely. Another thing to keep in mind is that with version 8, Drupal is
set to undergo some quite deep changes that as far as I can tell will make
it far less suited to a casually maintained site. So again, long term,
Drupal may not be the best solution.
So with those caveats in mind, if no one else steps up, and no other
solution is agreed upon, I'll cautiously put my hand up.
11:35 a.m.
On 05/30/2014 10:00 PM, Adrian Knoth wrote:
Hi!
I'm sure there must be users out there who are familiar with web stuff
and are burning to help their favourite inter-application audio
framework. ;)
Step up, please.
PS: There is also a semi-complete move to GH-pages. If your're familiar
with github, you could be the ideal volunteer. ;)
Cheers
Hi,
GitHub-pages means, some kind of static site generator may be used?
Sounds good to me, even tough I'm not a web developer, getting some
experience something doesn't sound that bad.
I'd like to evaluate what i can do, would you make a list of contents
and requirements for a new page?
I got this from the other list:
* the FAQ
* applications list
* API documentation
* stuff that was on trac.jackaudio.org (which is a wiki)
Is the Trac currently used as a Project-management tool and will it stay
as such, or is it just used as a wiki? Maybe it's time to go through the
Information on the site and throw out some old stuff during the process.
TL;DR
I'd like to take this on, but it will take some time, as i have to get
into these things and certainly won't be using Drupal ;)
-Markus
12:27 p.m.
On Sun, 1 Jun 2014, at 11:35, Markus Seeber wrote:
On 05/30/2014 10:00 PM, Adrian Knoth wrote:
yeah, github pages use jekyll.
https://help.github.com/articles/using-jekyll-with-pages
-w
Hi!
I'm sure there must be users out there who are familiar with web stuff
and are burning to help their favourite inter-application audio
framework. ;)
Step up, please.
PS: There is also a semi-complete move to GH-pages. If your're familiar
with github, you could be the ideal volunteer. ;)
Cheers
Hi,
GitHub-pages means, some kind of static site generator may be used?
Sounds good to me, even tough I'm not a web developer, getting some
experience something doesn't sound that bad. I'd like to evaluate what i can do, would you make
a list of contents
and requirements for a new page?
I got this from the other list:
* the FAQ
* applications list
* API documentation
* stuff that was on trac.jackaudio.org (which is a wiki)
Is the Trac currently used as a Project-management tool and will it stay
as such, or is it just used as a wiki? Maybe it's time to go through the
Information on the site and throw out some old stuff during the process.
TL;DR
I'd like to take this on, but it will take some time, as i have to get
into these things and certainly won't be using Drupal ;)
-Markus
_______________________________________________
Linux-audio-dev mailing list
Linux-audio-dev(a)lists.linuxaudio.org
http://lists.linuxaudio.org/listinfo/linux-audio-dev 
2 Jun
2 Jun
8:20 p.m.
Or even just use Jekyll on your own hosted server. No dynamic content
really helps reduce backdoors (to those in the HTTP server and lower
at least).
-- Paul
On Sun, Jun 1, 2014 at 6:27 AM, William Light <wrl(a)illest.net> wrote:
On Sun, 1 Jun 2014, at 11:35, Markus Seeber wrote:
On 05/30/2014 10:00 PM, Adrian Knoth wrote:
yeah, github pages use jekyll.
https://help.github.com/articles/using-jekyll-with-pages
-w
Hi!
I'm sure there must be users out there who are familiar with web stuff
and are burning to help their favourite inter-application audio
framework. ;)
Step up, please.
PS: There is also a semi-complete move to GH-pages. If your're familiar
with github, you could be the ideal volunteer. ;)
Cheers
Hi,
GitHub-pages means, some kind of static site generator may be used?
Sounds good to me, even tough I'm not a web developer, getting some
experience something doesn't sound that bad. I'd like to evaluate what i can do, would you
make a list of contents
and requirements for a new page?
I got this from the other list:
_______________________________________________
Linux-audio-dev mailing list
Linux-audio-dev(a)lists.linuxaudio.org
http://lists.linuxaudio.org/listinfo/linux-audio-dev * the FAQ
* applications list
* API documentation
* stuff that was on trac.jackaudio.org (which is a wiki)
Is the Trac currently used as a Project-management tool and will it stay
as such, or is it just used as a wiki? Maybe it's time to go through the
Information on the site and throw out some old stuff during the process.
TL;DR
I'd like to take this on, but it will take some time, as i have to get
into these things and certainly won't be using Drupal ;)
-Markus
_______________________________________________
Linux-audio-dev mailing list
Linux-audio-dev(a)lists.linuxaudio.org
http://lists.linuxaudio.org/listinfo/linux-audio-dev 
27 Jun
27 Jun
11:54 a.m.
Hi,
I could take this on in case there's still need for a volunteer. I'm a
professional web developer. I'm also in favour of gh-pages, that I use
quite a bit, as long as it's fine for it to be a static site. It's
simple, fast, free, made for open source project sites and it's git so
it works great when different people make changes to the site.
Of course I can't really spend more than about an hour per day on it,
what with my day job and all, but hopefully it's not a massive job and I
think I should be able to get it done in a finite amount of time.
Does this sound reasonable? If so, what would be the next steps?
Michał
On Fri, May 30, 2014, at 22:00, Adrian Knoth wrote:
Hi!
I'm sure there must be users out there who are familiar with web stuff
and are burning to help their favourite inter-application audio
framework. ;)
Step up, please.
PS: There is also a semi-complete move to GH-pages. If your're familiar
with github, you could be the ideal volunteer. ;)
Cheers
----- Forwarded message from Paul Davis <paul(a)linuxaudiosystems.com>
-----
Date: Fri, 30 May 2014 11:56:02 -0400
From: Paul Davis <paul(a)linuxaudiosystems.com>
To: JACK <jack-devel(a)lists.jackaudio.org>
Subject: [Jack-Devel] jackaudio.org website shut down due to hacking
The malicious conscience-free leeches who push pharmaceutical spam
managed
to hack into jackaudio.org in a very deep way. They had full access to
everything including the ability to fiddle with MySQL tables (some of
them). I don't consider any part of the Drupal site safe, so I have shut
it
down and replaced it with a single static index.html file.
The source tarballs for JACK1 were uncorrupted (probably JACK2 also -
waiting for confirmation from Stephane on this), and I have put up a new
link to the most recent. I also referenced github for the source code
repository and issue tracker.
As someone said on IRC today
" It's a shame the lead dev has to waste his time coding, answering
user
questions AND fixing drupal backdoors "
If someone else wants to volunteer to resurrect the roughly 60 pages of
content that were at jackaudio.org (and realistically, it is probably
more
like 20 of real stuff that is needed), get in touch. I can give you full
access to everything you will need.
_______________________________________________
Jack-Devel mailing list
Jack-Devel(a)lists.jackaudio.org
http://lists.jackaudio.org/listinfo.cgi/jack-devel-jackaudio.org
----- End forwarded message -----
--
mail: adi(a)thur.de http://adi.thur.de PGP/GPG: key via
keyserver
_______________________________________________
Linux-audio-dev mailing list
Linux-audio-dev(a)lists.linuxaudio.org
http://lists.linuxaudio.org/listinfo/linux-audio-dev
3:05 p.m.
On Fri, Jun 27, 2014 at 5:54 AM, Michał Koziarski <koshimazaki(a)fastmail.fm>
wrote:
Hi,
I could take this on in case there's still need for a volunteer. I'm a
professional web developer. I'm also in favour of gh-pages, that I use
quite a bit, as long as it's fine for it to be a static site. It's
simple, fast, free, made for open source project sites and it's git so
it works great when different people make changes to the site.
The new site is ready to go, but thanks for the offer.
30 Jun
30 Jun
7:30 p.m.
On 06/27/2014 11:54 AM, Michał Koziarski wrote:
Hi,
I could take this on in case there's still need for a volunteer. I'm a
professional web developer. I'm also in favour of gh-pages, that I use
quite a bit, as long as it's fine for it to be a static site. It's
simple, fast, free, made for open source project sites and it's git so
it works great when different people make changes to the site.
Of course I can't really spend more than about an hour per day on it,
what with my day job and all, but hopefully it's not a massive job and I
think I should be able to get it done in a finite amount of time.
Does this sound reasonable? If so, what would be the next steps?
Michał
Even tough the site is in fact on-line again, I feel the need for a
little bit of restructuring.
There are some pages, for example the front page and the download page,
that could benefit from a better Design, so I'd like to hear your
opinion about that from a web developers perspective.
Greetings
Markus
3796
days inactive
3827
days old
linux-audio-dev@lists.linuxaudio.org
7 comments
7 participants
participants (7)
-
Adrian Knoth -
Markus Seeber -
michael noble -
Michał Koziarski -
Paul Davis -
Paul G -
William Light