May 31st, 2001

lung

The story of my day...

I woke up a little late this morning. Well, no, that's not true. I woke up on time, but I made the mistake of reading my email instead of getting ready. So we left a little late. I got the kids and went downstairs, and first off dropped off my suit at the dry-cleaner's. Two old ladies, who of course were instantly enthralled by the sight of my children*.
Collapse )
  • Current Music
    No Doubt - Home Now
lung

A note.

I post several posts a day that are friends-only posts. If you're a friend, and you aren't logged in, you're missing them.

If you aren't a friend, and want to be, send donations (cash only, please) to...
  • Current Music
    No Doubt - Dark Blue
lung

Oh man...

...had one of those nights. Packed up the kids' stuff, and redid the finances once again. Had a huge scare about not being able to find any checks (wouldn't that be ironic, to finally have money in my back account and not be able to use it?).

The problem is I was growing increasingly tired the entire time and so got less and less done as time went on. Spent around 4 hours doing it when I could've done it all in an hour, maybe an hour and a half if I had been fully conscious and productive the entire time. Kept drifting... losing track of what I was doing... on my 2nd wind now, which is pointless as I'm going to sleep now. Sigh.

G'nite all.
lung

Apache Software Foundation Server compromised, resecured.

Earlier this month, a public server of the Apache Software Foundation
(ASF) was illegally accessed by unknown crackers. The intrusion into
this server, which handles the public mail lists, web services, and
the source code repositories of all ASF projects was quickly
discovered, and the server immediately taken offline. Security
specialists and administrators determined the extent of the intrusion,
repaired the damage, and brought the server back into public service.

The public server that was affected by the incident serves as a source
code repository as well as the main distribution server for binary
release of ASF software. There is no evidence that any source or binary
code was affected by the intrusion, and the integrity of all binary
versions of ASF software has been explicitly verified. This includes
the industry-leading Apache web server.

Specifically: on May 17th, an Apache developer with a sourceforge.net
account logged into a shell account at SourceForge, and then logged
from there into his account at apache.org. The ssh client at
SourceForge had been compromised to log outgoing names and passwords,
so the cracker was thus able get a shell on apache.org. After
unsuccessfully attempting to get elevated privileges using an old
installation of Bugzilla on apache.org, the cracker used a weakness in
the ssh daemon (OpenSSH 2.2) to gain root privileges. Once root, s/he
replaced our ssh client and server with versions designed to log names
and passwords. When they did this replacement, the nightly automated
security audits caught the change, as well as a few other trojaned
executables the cracker had left behind. Once we discovered the
compromise, we shut down ssh entirely, and through the serial console
performed an exhaustive audit of the system. Once a fresh copy of the
operating system was installed, backdoors removed, and passwords
zeroed out, ssh and commit access was re-enabled. After this, an
exhaustive audit of all Apache source code and binary distributions
was performed.

The ASF is working closely with other organizations as the investigation
continues, specifically examining the link to other intrusion(s), such
as that at SourceForge (http://sourceforge.net/) [ and php.net
(http://www.php.net/). ]

Through an extra verification step available to the ASF, the integrity
of all source code repositories is being individually verified by
developers. This is possible because ASF source code is distributed
under an open-source license, and the source code is publicly and freely
available. Therefore, the ASF repositories are being compared against
the thousands of copies that have been distributed around the globe.
While it was quickly determined that the source code repositories on the
ASF server were untouched by the intruders, this extra verification step
provides additional assurance that no damage was done.

As of Tuesday, May 29, most of the repository has been checked, and as
expected, no problems have been found. A list of verified modules
will be maintained, and is available here:
http://www.apache.org/info/hack-20010519.html

Because of the possible link of the ASF server intrusion to other
computer security incidents, the investigation is ongoing. When
complete, the ASF will offer a complete and public report.

The Apache Software Foundation strongly condemns this illegal
intrusion, and is evaluating all options, including prosecution of the
individual(s) responsible to the fullest extent of the law. Anyone
with pertinent information relating to this or other related events
should contact root@apache.org. Anyone from the media with further
interest should contact press@apache.org.

Thanks.

Brian Behlendorf
President, Apache Software Foundation


=======================


I like the Apache Software Foundation.
lung

:)

Brings a tear to my eye...

Edit ports/sysutils/p5-LJ-TextMessage/Makefile
Edit ports/sysutils/p5-LJ-TextMessage/distinfo
lung

Went for a walk.

It's been a while since I went for a walk like that. It doesn't happen often, especially with two kids to care for.

Back when I was in college I used to get dolled up and go for a stroll*, but I haven't done anything like that recently. I realized all of a sudden that I didn't have the kids tonight, that I had a bit of freedom, and so, once again, I got ready and took a walk**.

I went downstairs and for the hell of it, went out through The Restaurant. Yes, there's a restaurant and bar in my building, and it's named The Restaurant. The deli next to it is named The Gourmet Pantry. Apparently they grow them real creative out here. I walked through the bar part of The Restaurant on my way out, and passed a bunch of 30-somethings all drinking and smoking and laughing. Part of it appealed, but most of it didn't. Try as I might I don't fit in with that crowd. I walked out the front door and headed down the street.

At the corner I saw a cute girl walking her dog across the street. I turned down and walked down my side of the street, hoping she'd walk down her side so that at some point I might be able to cross over... and then all I could imagine myself doing was tripping over her dog, injuring it, and walking away very quickly while she cursed at me. I suck with women even in my imagination. ;)

So I walked down the street, passing a baptist church where they were apparently wrapping up a funeral. I knew suddenly that I wanted to find that big stone building, possibly a church, or temple, or mosque, or something, that I had seen from my balcony. I strode onwards, down the street.

I passed a bunch of houses, a few random people, an electrically lit park with some kids playing basketball... no big stone edifice, though.

At one point it occurred to me the demeanor of my surroundings had changed. I was standing in front of a gas station, an auto-body shop across the street from me, a few cars driving down the street. The signs in the windows read things like "room for rent" and "no loitering".

I turned down the street and started heading back up to the street I live on, in a roundabout sort of way. I wanted to get back home but not immediately.

So I finished my walk, walking a few blocks up the street, and then a few blocks down my street until I got back to my building.

I spent a lot of time thinking but not about anything in particular. I kind of miss those times. I wish I had a big hill or something that I could climb up and sit on the peak of and just stare at the sky. I wish the building I lived in had an observation deck - it's an 18 story apartment building, the view from the top must be jaw-droppingly gorgeous. The view from my balcony is impressive as-is. I'll post some photos later.

It's a nice idea, though. Someplace quiet, and isolated, but open, up high, the sky unfolding above you... sigh.



* - This is sarcasm. I'd put on my beaten up pair of black leather boots, a pair of black jeans, a black shirt, and throw my long black leather coat and a scowl on top of that and go stalking through the streets of New York City at 3 am. Did I mention I used to hang with the goth crowd?

** - A little different this time, but not all that much. Black Docs (as in Martins), navy slacks, navy button down shirt, long black wool coat. Very similar effect, albeit with extremely different looking clothes.
  • Current Music
    Robbie Williams - Rock DJ