mozdev Downed by Denial of Service Attack
Saturday July 5th, 2003
Pete Collins of mozdev wrote in to tell us why the site has been unavailable since yesterday. It appears that mozdev was hit with a massive denial of service attack targetting the Bugzilla and CVSweb CGI scripts. Pete and the mozdev team are working hard to bring the site back up and they plan to report this incident to the FBI. If anyone has any information about the attack, get in touch with Pete at email@example.com.
Update! Pete writes in: "People are coming forward to help out from all over the globe. Some are providing some tips about the attackers, others analysis of the logs and possible exploit used. Once again the community rises up to help out.
"In the mean time I have mozdev here in my basement and am working on getting the data over to the new server which we just purchased w/ donations the community has given mozdev.
"The worst case scenario is I'll have mozdev back up in days (I hope) w/ CVS and some other minimal services. We can't use the old system anymore. It is running an OS that is very old and is the root of our problems."
#13 Don't let the bastards grind you down
Sunday July 6th, 2003 2:54 PM
You are replying to this message
The best you can do in a situation like this is draw the lessons to stop it happening again. I'm quite a newbie with computers, we only got this at christmas, so I don't know the ins and outs of how to make a server more secure or whatever, but I know what I like, and I like Firebird. It seems to me that the strength of Mozilla is that it's not monolithic, its more amorphous in nature. There's a world wide community that can help, not just by sending money, though that's obviously a good idea, but perhaps people could mirror parts of the so it isn't all gone if one server is taken down.