Author Topic: withgusto Networks - Status Updates and Discussion (Read 59394 times)

Juju · « **Reply #90 on:** June 27, 2014, 01:22:43 pm »

Quote from: Eeems on June 27, 2014, 11:48:18 am

Quote from: Juju on June 27, 2014, 11:12:52 am
I checked, there was only those 3 files.
Did you look inside the php file though?
http://nothing-to-see-here-please-go-away-bye-now.withg.org/nothing-to-see-here-please-go-away-bye-now.php?number=123456789

Yes

pimathbrainiac · « **Reply #91 on:** June 27, 2014, 04:29:22 pm »

ftp://nothing-to-see-here-please-go-away-bye-now.withg.org/incoming/

I can't see the text file here. Imma try to login with filezilla and download.

EDIT: darn it. I can't download anonymously and I can't find the file when I'm logged in to sftp://nothing-to-see-here-please-go-away-bye-now.withg.org

EDIT2: Wait a sec, that's unrelated

I'm stuck on this one after:

"Cloudy days reveal open skies with great shifts in imagery."

alberthrocks · « **Reply #92 on:** June 27, 2014, 06:23:58 pm »

Quote from: pimathbrainiac on June 27, 2014, 04:29:22 pm

"Cloudy days reveal open skies with great shifts in imagery."

That's the hidden clue! Not telling anyone what it means...

Eeems · « **Reply #93 on:** June 27, 2014, 10:23:06 pm »

Quote from: pimathbrainiac on June 27, 2014, 04:29:22 pm

ftp://nothing-to-see-here-please-go-away-bye-now.withg.org/incoming/

I can't see the text file here. Imma try to login with filezilla and download.

FTP is a rabbit trail. ftp://withg.org/incoming/ contains the same file, which after some digging, is just a test upload file.

Juju · « **Reply #94 on:** June 27, 2014, 10:27:47 pm »

FTP do not have the concept of hosts like HTTP has.

Also, something about cloud computing? With pictures? img.ourl.ca gets in the cloud?

Sorunome · « **Reply #95 on:** June 28, 2014, 10:04:58 am »

Quote from: Juju on June 27, 2014, 10:27:47 pm

FTP do not have the concept of hosts like HTTP has.

Also, something about cloud computing? With pictures? img.ourl.ca gets in the cloud?

img.ourl.ca is on my server o.o

alberthrocks · « **Reply #96 on:** August 25, 2014, 12:35:16 pm »

Just FYI, if you haven't noticed, we've posted a new migration plan for withgusto! If you get a chance, PLEASE take a look and respond!

http://www.omnimaga.org/web-programming-and-design/withgusto-migration-let%27s-do-it-right!/

Latest update:
http://www.omnimaga.org/web-programming-and-design/withgusto-migration-let%27s-do-it-right!/msg392119/#msg392119

alberthrocks · « **Reply #97 on:** September 05, 2014, 08:49:06 pm »

SSL + Migration Plan Update - 09/05/2014
Importance: IMPORTANT Author: albert Date: Friday, September 5th, 2014 at 5:30:16 PM PDT Blog post: http://withg.org/blog/index.php?post=1409963416 SSL + Migration Plan Update ====================================== Migration Delays ---------------- We are working on trying to find a new provider to consolidate our servers to. One of the providers that we approached had a great price of around $15/month. However, they have suddenly changed their policy to not allow hosting a IRC server, which we wish to continue to provide to the community as part of the OmniNET network. As an alternative, we are thinking about moving to a different provider. The alternative provider has been in the industry for a long time (much longer than the $15/mo provider), and offers a similar configuration for around $20/month. What do you think? Would you be willing to contribute to that? (For reference, the old server costs would total around $36.10/month.) Let us know! Go here: http://ourl.ca/21452 SSL Certificate Update ---------------------- Many companies and developers out there are announcing plans to end SHA-1 SSL certificate support, including Microsoft, Symantec, and most recently, Google. The new recommended standard is SHA-256. That said, we decided to take the initiative and upgrade our SSL security from SHA1 to SHA-256. Both HTTPS and ZNC have been upgraded to SHA-256 signatures. What changes? Nothing much - just better security, that's all! If you look at your browser's security page when on https://withg.org/, you may notice that a SHA-256 section now exists! With ZNC, you may also notice this change with Hexchat/XChat, with the following message: Public key algorithm: rsaEncryption (2048 bits) Sign algorithm sha256WithRSAEncryption The important part is the "sha256WithRSAEncryption", indicating our new shiny SSL certificate! For reference, this was the old one: Public key algorithm: rsaEncryption (2048 bits) Sign algorithm sha1WithRSAEncryption Reeks of bad security, eh? That's it! ---------- Make sure to respond to our proposal above! http://ourl.ca/21452 Let us know if anything breaks, or just comments/suggestions in general!

alberthrocks · « **Reply #98 on:** September 11, 2014, 10:09:17 pm »

Migration Plan Update - 09/11/2014
Importance: IMPORTANT Author: albert Date: Thurs, September 11th, 2014 at 7:06:33 PM PDT Blog post: http://withg.org/blog/index.php?post=1410487593 Migration Plan Update ===================== Provider Survey --------------- As we mentioned before, we are working on trying to find a new provider to consolidate our servers to. One of the providers that we approached had a great price of around $15/month. However, they have suddenly changed their policy to not allow hosting a IRC server, which we wish to continue to provide to the community as part of the OmniNET network. As an alternative, we are thinking about moving to a different provider. The alternative provider has been in the industry for a long time (much longer than the $15/mo provider), and offers a similar configuration for around $20/month. Regarding our future provider, we've posted finally a new survey! PLEASE, PLEASE FILL IT OUT! https://docs.google.com/forms/d/1tpUUqALTvsiA9tYYVW0PAI1GT_vrBlMfQV9pHXs2F10/viewform Migration Survey ---------------- We've noticed that not many of our user base have filled out our migration survey. While you're at it, if you haven't filled out our migration survey, PLEASE FILL IT OUT! https://docs.google.com/forms/d/1tDwSGjn_qul5_TsffkAdVn5SwZspgTGORTeVOkW3sT8/viewform Let us know if anything breaks, or just comments/suggestions in general!

alberthrocks · « **Reply #99 on:** September 19, 2014, 01:48:58 pm »

Migration Plan Update - 09/19/2014
Importance: IMPORTANT Author: albert Date: Fri, September 19th, 2014 at 10:44:02 AM PDT Blog post: http://withg.org/blog/index.php?post=1411148642 Migration Plan Update ===================== Provider Survey - Final Round! ------------------------------ We've narrowed down the list of providers to a select few, and we need your help in determining our final provider! PLEASE, PLEASE FILL IT OUT! https://docs.google.com/forms/d/12vydTaZe4MPW4Cf-mlWkbMHAJa5Fajf6EDXj50yuz60/viewform This will be the last survey before the migration begins. Migration Survey ---------------- We've noticed that not many of our user base have filled out our migration survey. While you're at it, if you haven't filled out our migration survey, PLEASE FILL IT OUT! https://docs.google.com/forms/d/1tDwSGjn_qul5_TsffkAdVn5SwZspgTGORTeVOkW3sT8/viewform Let us know if anything breaks, or just comments/suggestions in general!

alberthrocks · « **Reply #100 on:** September 19, 2014, 02:12:09 pm »

Important Survey for Active Users - 09/19/2014
Importance: IMPORTANT - URGENT Author: albert Date: Fri, September 19th, 2014 at 11:09:13 AM PDT Blog post: http://withg.org/blog/index.php?post=1411150153 Important Survey for Active Users ================================= In order to make the migration efficient and increase security, we are asking active users to take this survey to simply say "I'm alive/active"! We've noticed that there's a LOT of old user accounts (some of which are long since inactive), and we want to clean them up in preparation for migrating to the new server. (No worries - in the future, inactivity will be handled differently.) Please fill out the survey here to declare your activity: https://docs.google.com/forms/d/1Cw1VSGm7Vq-SQKcryLwA1rs63pwGrXYaL4ckRTvGIOk/viewform Note that if your name is not on this survey, your account on withgusto (including ZNC, shell, email, etc.) is at risk of being DISABLED and archived. So please fill it out! Let us know if anything breaks, or just comments/suggestions in general!

alberthrocks · « **Reply #101 on:** September 25, 2014, 03:42:48 am »

Major Security Updates - 09/25/2014
Importance: URGENT Author: albert Date: Thurs, September 25th, 2014 at 12:38:03 AM PDT Blog post: http://withg.org/blog/index.php?post=1411630683 Major Security Updates ====================== Major BASH Bug Patch -------------------- In case you were asleep (you probably were), a very scary BASH bug appeared! For those in the security world, the bug is CVE-2014-6271. Take a peek at it! For those who know a bit of BASH, here's a good article about it (and admittingly, the way I found out about this bug): http://arstechnica.com/security/2014/09/bug-in-bash-shell-creates-big-security-hole-on-anything-with-nix-in-it/ All - I repeat - ALL withgusto servers were affected and immediately patched. At this time, no known attacks have been spotted. You do NOT need to restart BASH to get the fix. The new BASH will close the security hole automatically due to the nature of the bug. We tested this ourselves: albert@withgusto2:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test albert@withgusto2:~$ sudo su ..... (logging in here) root@withgusto2:/home/albert# sudo aptitude ..... (updating here) Processing triggers for python-support ... Press return to continue. root@withgusto2:/home/albert# env x='() { :;}; echo vulnerable' bash -c "echo this is a test" bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' this is a test root@withgusto2:/home/albert# exit albert@withgusto2:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' this is a test albert@withgusto2:~$ If users are using BASH in a web connected application, shame on you (and me**) - this fix is for you. Now stop using BASH! (This applies even if you don't call BASH directly - for instance, if you are running a command in a shell environment, like with Python's subprocess + 'shell=True'.) Bottom line - do NOT use shell in a web connected application! Avoid it if possible! ** In the past, the owner wrote some questionable things... now, those things are no more! The BASH Security Bug --------------------- From the article, there's a really easy way to check if your system is at risk: env x='() { :;}; echo vulnerable' bash -c "echo this is a test" If the system is vulnerable, the output will be: vulnerable this is a test An unaffected (or patched) system will output: bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' this is a test Other Security Patches ---------------------- At this time, we also discovered that Debian 6.x (squeeze) security updates were moved to a different repository - a official LTS (Long-Term Support) repository on Debian's server. (Shamefully...) Rather than going crazy with not knowing about this repository, we decided to go ahead and update the server with the latest security updates from that repository. There may have been downtime during this update, so we apologize for any inconvenience! If you are experiencing any issues, restart the application. This should fix the problem. If you are still having issues, please notify the admins ASAP so that we can get it fixed! Needless to say, this was done on all servers, so we are 99% updated. We hope to make it 100% once we migrate to new servers (and Debian 7)! IMPORTANT SURVEYS ----------------- We are moving servers, and we REALLY NEED YOUR INPUT!!! Fill out the next few surveys, if you haven't already. For those who have already filled them out, we apologize for spamming you with needless survey form requests, and we thank you for doing them! This is a community supported server, and we really appreciate your input in making withgusto a better place! URGENT - "I'm Alive" Survey --------------------------- In order to make the migration efficient and increase security, we are asking active users to take this survey to simply say "I'm alive/active"! We've noticed that there's a LOT of old user accounts (some of which are long since inactive), and we want to clean them up in preparation for migrating to the new server. (No worries - in the future, inactivity will be handled differently.) Please fill out the survey here to declare your activity: https://docs.google.com/forms/d/1Cw1VSGm7Vq-SQKcryLwA1rs63pwGrXYaL4ckRTvGIOk/viewform Note that if your name is not on this survey, your account on withgusto (including ZNC, shell, email, etc.) is at risk of being DISABLED and archived. So please fill it out! Provider Survey - Final Round! ------------------------------ We've narrowed down the list of providers to a select few, and we need your help in determining our final provider! PLEASE, PLEASE FILL IT OUT! https://docs.google.com/forms/d/12vydTaZe4MPW4Cf-mlWkbMHAJa5Fajf6EDXj50yuz60/viewform This will be the last survey before the migration begins. Migration Survey ---------------- We've noticed that not many of our user base have filled out our migration survey. While you're at it, if you haven't filled out our migration survey, PLEASE FILL IT OUT! https://docs.google.com/forms/d/1tDwSGjn_qul5_TsffkAdVn5SwZspgTGORTeVOkW3sT8/viewform

Juju · « **Reply #102 on:** September 25, 2014, 01:01:02 pm »

I use zsh on my computer, hehe

alberthrocks · « **Reply #103 on:** October 13, 2014, 02:16:41 am »

SSL Certificate Update - 10/12/2014
Importance: IMPORTANT Author: albert Date: Sun, October 12th, 2014 at 11:13:51 PM PDT Blog post: http://withg.org/blog/index.php?post=1413180831 SSL Certificate Update ======================= We noticed that the SSL certificate was expiring soon. Rather than let it expire (and wreak havoc on everybody using this server!), we renewed it again for another year, and installed the renewed certificate! ZNC and HTTPS should now use the new certificate. The new expiration date should be in October 27, 2015. Please check to make sure that this is indeed the case! If you have any issues after the SSL update, please let us know!

DJ Omnimaga · « **Reply #104 on:** October 16, 2014, 01:24:31 am »

How much did renewal cost?

Author Topic: withgusto Networks - Status Updates and Discussion (Read 59394 times)

Juju

Re: withgusto Networks - Status Updates and Discussion

pimathbrainiac

Re: withgusto Networks - Status Updates and Discussion

alberthrocks

Re: withgusto Networks - Status Updates and Discussion

Eeems

Re: withgusto Networks - Status Updates and Discussion

Juju

Re: withgusto Networks - Status Updates and Discussion

Sorunome

Re: withgusto Networks - Status Updates and Discussion

alberthrocks

Re: withgusto Networks - Status Updates and Discussion

alberthrocks

Re: withgusto Networks - Status Updates and Discussion

alberthrocks

Re: withgusto Networks - Status Updates and Discussion

alberthrocks

Re: withgusto Networks - Status Updates and Discussion

alberthrocks

Re: withgusto Networks - Status Updates and Discussion

alberthrocks

Re: withgusto Networks - Status Updates and Discussion

Juju

Re: withgusto Networks - Status Updates and Discussion

alberthrocks

Re: withgusto Networks - Status Updates and Discussion

DJ Omnimaga

Re: withgusto Networks - Status Updates and Discussion