[sf-lug] Website itself and others hosted on BALUG.org's VM?
Al
awsflug at sunnyside.com
Tue Dec 14 19:56:20 PST 2021
I am not having that problem.
The one I have problems with is svlug.{com,org} which seems to have
fallen off a cliff. I think Rick has already given a postmortem on this.
{sf[-]?lug.{org,com,net},balug.org} however is the subject of automated
testing from here (pings every 60 seconds, complicated analysis of NS
etc. every 10 minutes), and although I see reboots occasionally, I
haven't seen any access problems.
Here's a manual query over the AT&T Enterprise Network which is typical
of the response I get (I threw linuxmafia in for comparison):
time wget sf-lug.org -O - |& wc
89 607 5326
real 0m0.078s
user 0m0.004s
sys 0m0.004s
time wget balug.org -O - |& wc
363 2063 19213
real 0m0.121s
user 0m0.008s
sys 0m0.000s
time wget linuxmafia.com -O - |& wc
496 1836 41174
real 0m0.734s
user 0m0.008s
sys 0m0.000s
---------------------------------------------------------------------------------------------------------------------
Here is Comcast Business:
time wget sf-lug.org -O - |& wc
89 606 5321
real 0m0.092s
user 0m0.000s
sys 0m0.004s
time wget balug.org -O - |& wc
363 2064 19204
real 0m0.149s
user 0m0.000s
sys 0m0.004s
time wget linuxmafia.com -O - |& wc
496 1835 41174
real 0m0.717s
user 0m0.000s
sys 0m0.004s
I saw the Java problem in Log4j but don't have any information on it
except that it is reputedly serious.
I did get this posting since I'm on the Krebs mailing list:
https://krebsonsecurity.com/2021/12/microsoft-patch-tuesday-december-2021-edition/
It strikes me that one would have to expose this system to the outside
world (which apparently many do) or already have a problem inside one's
network, but I haven't looked into it.
On 12/14/2021 17:26, aaronco36 wrote:
> Anyone know what's happening with the unresponsiveness of
> www.sf-lug.{com}{org} itself?
>
> Over the last day or so, have unsuccessfully attempted to reach both
> the SF-LUG website, the BALUG website, and the BALUG
> offered_wanted_hardware_etc webpage that Michael posted in the lower
> half of [1] regarding the "Aruba Wi-Fi access points still being
> available as free giveaways - while they last".
>
> And on a (hopefully) completely-unrelated subject, are the recent
> announcements of this CVE-2021-44228 security flaw [2][3] in Apache's
> Log4j (a.k.a. "Log4Shell"[4][5]) yet more dubious alerts -- as was
> possibly/likely the reporting on the recent 'Malware on PyPI
> repository' thread here[6] ??
>
> -A
>
> =========================================
> REFERENCES/EXCERPTS
> =========================================
> [1]http://linuxmafia.com/pipermail/sf-lug/2021q4/015476.html
> [2]https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228
> [3]https://nvd.nist.gov/vuln/detail/CVE-2021-44228
> [4]https://techcrunch.com/2021/12/13/the-race-is-on-to-patch-log4shell-as-attacks-begin-to-rise/
>
> [5]https://www.zdnet.com/article/log4j-update-experts-say-log4shell-exploits-will-persist-for-months-if-not-years/
>
> [6]http://linuxmafia.com/pipermail/sf-lug/2021q4/015468.html
> =========================================
>
> aaronco36 at sdf.org
> ---
>
> _______________________________________________
> sf-lug mailing list
> sf-lug at linuxmafia.com
> http://linuxmafia.com/mailman/listinfo/sf-lug
> SF-LUG is at http://www.sf-lug.org/
More information about the sf-lug
mailing list