<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<font face="Courier New, Courier, monospace">I am the one who added
the Noisebridge <br>
item on the SF-LUG web page. <br>
<br>
</font><br>
<div class="moz-cite-prefix">On 5/23/19 9:01 PM, Michael Paoli
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20190523180100.305424ec3euc0va8@webmail.rawbw.com">
<blockquote type="cite">From: jim <a class="moz-txt-link-rfc2396E" href="mailto:jim@well.com"><jim@well.com></a>
<br>
Subject: Re: [sf-lug] Who done it? ; -) Re: updated: Re: Status
of SF-LUG / Linux meeting(s) @ Noisebridge? & SF-LUG web
site (mis?)information thereof
<br>
Date: Thu, 23 May 2019 12:49:58 -0400
<br>
</blockquote>
<br>
<blockquote type="cite">as far as i know, i am the only person
<br>
who has ever edited the SF-LUG web page.
<br>
</blockquote>
<br>
Well, as I'd also edited it (at least once now?), that'd be at
least
<br>
two persons who'd edited it - at minimum - thus far.
<br>
<a class="moz-txt-link-freetext" href="http://linuxmafia.com/pipermail/sf-lug/2019q2/014118.html">http://linuxmafia.com/pipermail/sf-lug/2019q2/014118.html</a>
<br>
<br>
Anyway, the folks that have access to edit it, and other
information,
<br>
listed here:
<br>
<a class="moz-txt-link-freetext" href="https://www.wiki.balug.org/wiki/doku.php?id=sf-lug:resources_etc">https://www.wiki.balug.org/wiki/doku.php?id=sf-lug:resources_etc</a>
<br>
<br>
And ... I was kind'a curious, and to show as "exercise", if I
could
<br>
reasonably easily determine who - or who likely - last changed the
<br>
contents of the SF-LUG web page ... and likewise as to who first
added
<br>
the Noisebridge mention(s)/link(s) on that web page; and firstly
what
<br>
could be determined of that as a mere mortal user (not superuser,
UID 0,
<br>
"root") on that host, ... and if/where that weren't sufficient,
what
<br>
relevant data beyond that I might have of have access to
(including via
<br>
superuser, backups, etc.).
<br>
<br>
"Who done it" is generally easier to determine if it's more
recent,
<br>
and/or logs and/or backups are retained longer (also including
backups),
<br>
and/or more data is logged (and potentially securely and remotely
so, or
<br>
also so).
<br>
<br>
<blockquote type="cite">On 5/23/19 1:42 AM, Michael Paoli wrote:
<br>
<blockquote type="cite">
<blockquote type="cite">From: "Michael Paoli"
<a class="moz-txt-link-rfc2396E" href="mailto:Michael.Paoli@cal.berkeley.edu"><Michael.Paoli@cal.berkeley.edu></a>
<br>
Subject: updated: Re: [sf-lug] Status of SF-LUG / Linux
meeting(s) @ Noisebridge? & SF-LUG web site
(mis?)information thereof
<br>
Date: Wed, 22 May 2019 21:40:53 -0700
<br>
</blockquote>
<br>
<blockquote type="cite">$ TZ=GMT0 stat index.php
<br>
File: index.php
<br>
Size: 3902 Blocks: 8 IO Block: 4096
regular file
<br>
Device: fe02h/65026d Inode: 166014 Links: 1
<br>
Access: (0644/-rw-r--r--) Uid: (22035/sflugwww) Gid:
(22035/sflugwww)
<br>
Access: 2019-05-23 04:26:15.533244867 +0000
<br>
Modify: 2016-07-18 16:18:38.521393742 +0000
<br>
Change: 2016-07-18 16:18:38.521393742 +0000
<br>
Birth: -
<br>
$
<br>
</blockquote>
<br>
So, who made or likely made the earlier edits?
<br>
<br>
$ last | tail -n 1
<br>
wtmp begins Thu May 9 20:26:58 2019
<br>
$ ls -ltr /var/log/wtmp*
<br>
-rw-rw-r-- 1 root utmp 17664 Apr 30 10:25 /var/log/wtmp.1
<br>
-rw-rw-r-- 1 root utmp 8832 May 12 17:35 /var/log/wtmp
<br>
$
<br>
<br>
Okay, wtmp data not saved back that far (and I'm not going to
bother
<br>
to pull it from backups) ...
<br>
$ lastlog | fgrep -v '**Never logged in**' | sort -k 9,9bnr -k
5,5Mr -k 6,6br -k 7,7r
<br>
mpaoli pts/0 198.144.194.235 Sun May 12 17:35:25
-0700 2019
<br>
rick pts/9 198.144.195.186 Tue Apr 30 09:57:34
-0700 2019
<br>
kdavalos pts/3 50.1.57.152 Fri Dec 14 07:39:29
-0800 2018
<br>
jstockford pts/9 173-13-130-174-s Thu Jul 28 21:20:37
-0700 2016
<br>
thawley pts/8 104-244-27-45.pu Thu Jan 14 22:05:40
-0800 2016
<br>
sdubois pts/0 c-76-103-152-134 Sun Mar 9 17:27:01
-0700 2014
<br>
grantbow pts/8 173-8-189-243-sf Sun Apr 28 13:50:11
-0700 2013
<br>
root ttyS0 Tue Feb 28 23:12:31
-0800 2012
<br>
Username Port From Latest
<br>
$
<br>
Looks like last edit was probably by jstockford ... though
that may or may
<br>
not have been or included any changes related to or addition
of
<br>
Noisebridge bits in there.
<br>
Let's see ...
<br>
$ wget -q -O -
'<a class="moz-txt-link-freetext" href="https://web.archive.org/web/20090702064445id_/http://www.sf-lug.org:80/">https://web.archive.org/web/20090702064445id_/http://www.sf-lug.org:80/</a>'
| wc
<br>
77 594 4310
<br>
$ wget -q -O -
'<a class="moz-txt-link-freetext" href="https://web.archive.org/web/20090702064445id_/http://www.sf-lug.org:80/">https://web.archive.org/web/20090702064445id_/http://www.sf-lug.org:80/</a>'
| fgrep -i noisebridge
<br>
$ wget -q -O -
'<a class="moz-txt-link-freetext" href="https://web.archive.org/web/20100305103628id_/http://www.sf-lug.org:80/">https://web.archive.org/web/20100305103628id_/http://www.sf-lug.org:80/</a>'
| wc
<br>
95 770 5299
<br>
$ wget -q -O -
'<a class="moz-txt-link-freetext" href="https://web.archive.org/web/20100305103628id_/http://www.sf-lug.org:80/">https://web.archive.org/web/20100305103628id_/http://www.sf-lug.org:80/</a>'
| fgrep -i noisebridge
<br>
<li>Support the Noisebridge Linux Discussion meeting on
Wednesday evenings, from 6:00 PM to 8:00 PM (or so) in the
Turing classroom.</li>
<br>
<li>Come to the Linux system administration
certification study group from 3:00 PM to 6:00 PM in the
Turing classroom at Noisebridge.</li>
<br>
Noisebridge is located at 2169 Mission Street, very near 18th
Street, in San Fraicisco. <A
href=<a class="moz-txt-link-rfc2396E" href="http://www.noisebridge.net">"http://www.noisebridge.net"</a>>Noisebridge</A>
<br>
$
<br>
... so, though it's changed some since then, looks like
Noisebridge
<br>
probably first hit the SF-LUG web page in the range between
<br>
approximately 2009-07-02 and 2010-03-05 ... my lastlog data -
and possibly
<br>
that (virtual) host itself, probably doesn't go back (quite)
that far.
<br>
There might be some old backup(s)/data of predecessor host(s)
... but I'm
<br>
not going to bother checking.
<br>
<br>
Looking over some log history
<br>
<a class="moz-txt-link-freetext" href="file:/var/local/log/log">file:/var/local/log/log</a>
<br>
2015-08-20 Michael Paoli
<br>
qemu-kvm balug host on physical host vicki found to be down or
inaccessible,
<br>
likewise for physical host vicki (presumably physical host
disconnected
<br>
from network and/or power at colo or removed from colo)
<br>
<br>
2015-08-22 Michael Paoli
<br>
Completed restoration of backup to newly created balug
qemu-kvm VM residing
<br>
atop a different physical host, reconfigured network and DNS
for new IPv4
<br>
location.
<br>
applied stable security/critical/important bug fix update(s):
<br>
<br>
So ... any (earlier) details on that would've been on the
(prior) sflug VM,
<br>
as once colo stuff was "lost" (network disconnected), the
SF-LUG relevant
<br>
stuff was restored onto a new balug VM. Ye olde sflug VM is
(probably)
<br>
still on vicki and/or I might have old backup copy(/ies) of it
... but
<br>
not gonna check at present.
<br>
</blockquote>
</blockquote>
<br>
<br>
_______________________________________________
<br>
sf-lug mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:sf-lug@linuxmafia.com">sf-lug@linuxmafia.com</a>
<br>
<a class="moz-txt-link-freetext" href="http://linuxmafia.com/mailman/listinfo/sf-lug">http://linuxmafia.com/mailman/listinfo/sf-lug</a>
<br>
SF-LUG is at <a class="moz-txt-link-freetext" href="http://www.sf-lug.org/">http://www.sf-lug.org/</a>
</blockquote>
<br>
</body>
</html>