On Thu, 2011-02-03 at 07:20 -0800, Mike Noyes wrote:
> On Wed, 2011-02-02 at 06:49 -0800, Mike Noyes wrote:
> > On Wed, 2011-02-02 at 06:40 -0800, Mike Noyes wrote:
> > > On Tue, 2011-02-01 at 07:17 -0800, Mike Noyes wrote:
> > > > On Sun, 2011-01-30 at 05:27 -0800, Mike Noyes wrote:
> > > > > On Sun, 2011-01-30 at 05:18 -0800, Mike Noyes wrote:
> > > > > > On Fri, 2011-01-28 at 17:13 -0800, Mike Noyes wrote:
> > > > > > > On Fri, 2011-01-28 at 07:56 -0800, Mike Noyes wrote:
> > > > > > > > On Thu, 2011-01-27 at 07:52 -0800, Mike Noyes wrote:
> > > > > > > > > Everyone,
> > > > > > > > > SF was attacked and exploited.
> > > > > > > > > 
> > > > > > > > > Service downtime due to exploit
> > > > > > > > > http://sourceforge.net/apps/wordpress/sourceforge/2011/01/27/service-downtime/
> > > > > > > > 
> > > > > > > > SourceForge.net Attack Update
> > > > > > > > http://sourceforge.net/apps/wordpress/sourceforge/2011/01/27/sourceforge-net-attack-update/
> > > > > > > 
> > > > > > > SourceForge.net passwords reset
> > > > > > > http://sourceforge.net/blog/sourceforge-net-global-password-reset/
> > > > > > 
> > > > > > Sourceforge Attack: Full Report
> > > > > > http://sourceforge.net/blog/sourceforge-attack-full-report/
> > > > >         CVS
> > > > >         CVS service is one of SourceForge.net’s oldest services and, 
> > > > > due
> > > > >         to limitations in CVS itself, cannot readily live on our
> > > > >         scalable network storage solution. Validation of this data is
> > > > >         going to require several days and we anticipate that this
> > > > >         service will be restored sometime in the later part of week. 
> > > > >         
> > > > >         We are also considering the end-of-life of the CVS service and
> > > > >         hope to have user support in migrating CVS users to Subversion
> > > > >         in coming months. Subversion generally provides parity to CVS
> > > > >         commands, and many of our users have made this transition
> > > > >         successfully in the past.
> > > > >         
> > > > >         From SVN, projects can move to Git if desired.
> > > > 
> > > > Changed email address notifications
> > > > http://sourceforge.net/apps/wordpress/sourceforge/2011/01/31/changed-email-address-notifications/
> > > 
> > > Update on the SourceForge.net attack
> > > http://sourceforge.net/blog/update-on-the-sourceforgenet-attack/
> > >         SCM data validation is in-progress. CVS service and ViewVC (web
> > >         browsing of SCM) service remain offline pending completion of
> > >         data validation activities.
> > 
> > 2011-02-01: File uploads back online
> > 2011-02-01: New SSH key fingerprints for frs and web
> > http://p.sf.net/sourceforge/sshfp
> 
> Update: SourceForge.net Attack
> http://sourceforge.net/blog/update-sourceforgenet-attack/
>         CVS data
>         CVS servers were compromised, so we are taking extra time with
>         this data. CVS requires the significant validation effort, and
>         its configuration made it harder to get the data we needed to
>         start validation. The good news is that comparisons are running
>         now against backup data.
>         
>         We still expect this to be one of the last services restored,
>         but are committed to making that happen as quickly as possible.
>         ViewVC (web-based SCM access) for CVS will be brought online as
>         we ship the updated SCM servers.

http://sourceforge.net/blog/update-on-services/
CVS service restore has been time-consuming due to the design of that
service. CVS data is housed on direct-attached storage on a small pool
of servers. Data restore from backups is in-progress and reload of
machines is in-progress as of today (Monday). We intend to have CVS
service online by the end of the week.

-- 
Mike Noyes <mhnoyes at users.sourceforge.net>
http://sourceforge.net/users/mhnoyes/
SF.net Projects:  leaf, sourceforge/sitedocs


------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb

_______________________________________________
leaf-devel mailing list
leaf-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to