There are pretty strong indications that the reactos.com box was cracked. It took part in a DDoS attack. As a consequence, it was isolated from the network. Unfortunately, I'm on vacation right now so I don't have physical access to the box and am unable to fix/reinstall. For the moment, I've moved the mailing lists to a backup box. I am not moving the website, since it seems the attack was carried out via the website (a vulnerability in one of the php script packages we use). I'll put up a dummy page informing visitors. Not sure how far along the release of 0.2.7 is, but I'd like to suggest to put it off for at least another week, until I'm back and can sort things out.
Apologies for the inconvenience, Ge van Geldorp.
Hi Ge
--- Ge van Geldorp gvg@reactos.com wrote:
Apologies for the inconvenience, Ge van Geldorp.
No apologies needed, these things are a fact of life. I think this is a good time for the web team to look at some sort of CMS system that uses generated static content to handle slashdotting and maybe reduce the chance of a future compromise.
Thanks Steven
____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs
Ge van Geldorp gvg@reactos.com wrote: Apologies for the inconvenience, Ge van Geldorp.
Steven Edwards steven_ed4153@yahoo.com wrote: No apologies needed, these things are a fact of life. I think this is a good time for the web team to look at some sort of CMS system that uses generated static content to handle slashdotting and maybe reduce the chance of a future compromise.
Hi!
The last two weeks I spent a lot of time to make the homepage building process a big step forward. I have written a simple, effectiv and tiny CMS (called "RosCMS") that is able to generate the static xhtml/html files in less then one second. The generator also has the ability to generate the pages in different languages at the same time.
I implemented my homepage (design) suggestion with this system, and it works great! Please try the example page. To login to the CMS interface use: username: test password: test
http://frik85.fr.funpic.de/reactos/
I also integrated the new version of the compatibility database and combined it with the package manager database (-> one programm tree and easier navigation). Note: the support (the new version) will go online soon. I also will import the compatibility data from my ReactOS Fansite.
The generator change all links in the pages to provide a great interface and link all pages together, also in the static pages. So it is possible to change the language on every static page without javascript or a server side script (like php, asp, etc.). Only static html or xhtml pages are used.
Please also read the mail (abou the same topic) I wrote about one week ago.
I hope we can use the RosCMS system.
Best regards, Klemens Friedl
P.S.: Should I call for a vote (RosCMS vs. other solutions (Mambo, etc.))?