log in

CMS Servers are up again


Advanced search

Message boards : News : CMS Servers are up again

Author Message
ivan
Volunteer moderator
Project administrator
Project developer
Project tester
Volunteer tester
Project scientist
Avatar
Send message
Joined: 20 Jan 15
Posts: 100
Credit: 639,324
RAC: 27
Message 21478 - Posted: 24 Oct 2016, 15:50:59 UTC

I have just been informed (and confirmed) that the servers we use at RAL have been shut down due to the CVE-2016-5195 "Dirty COW" Linux kernel vulnerability. They will remain down until a patch is available and applied.
It would be prudent to suspend the CMS application in BOINC until the servers are restarted.
____________

Profile MAGIC Quantum Mechanic
Avatar
Send message
Joined: 1 Mar 11
Posts: 853
Credit: 10,059,956
RAC: 7,574
Message 21480 - Posted: 24 Oct 2016, 21:10:02 UTC
Last modified: 24 Oct 2016, 21:12:39 UTC

Thanks for the info Ivan

I only had one of mine that had been running those and it actually returned a couple earlier today.

The best way is not letting the server send them out because it is pretty obvious that most members don't even check the news here until they happen to notice their computers having a problem and long time members figure if they have the pc's running they don't even have to take a look at them all day or every day since they aren't all home computers.

https://www.neowin.net/news/dirty-cow-flaw-lets-hackers-gain-control-of-linux-systems-every-single-time

Ummmm I could start the never ending debate again since I am a Microsoft guy since 1995 and have always been told how much better Linux is (and those other versions) when in reality it depends on that MAIN OS......the person running that machine.
____________

desk
Send message
Joined: 22 Aug 16
Posts: 1
Credit: 17,130
RAC: 0
Message 21482 - Posted: 26 Oct 2016, 10:34:27 UTC - in response to Message 21480.

How are you going with these patches and updates? I've just done my Linux devices, but luckily my web-facing machines are all FreeBSD - time saved there. :)

Will you be pushing out new virtual machines, or a binary patch to the system disk in the VM?

N.

Profile Ben Segal
Project administrator
Project developer
Project tester
Project scientist
Send message
Joined: 1 Nov 10
Posts: 1228
Credit: 264
RAC: 0
Message 21483 - Posted: 26 Oct 2016, 10:43:49 UTC - in response to Message 21482.

How are you going with these patches and updates? I've just done my Linux devices, but luckily my web-facing machines are all FreeBSD - time saved there. :)

Will you be pushing out new virtual machines, or a binary patch to the system disk in the VM?

N.

For the machines at RAL Ivan will reply. For the CernVM virtual machines we run on vLHCathome, these get automatically patched when they reboot between BOINC tasks.

Profile tullio
Send message
Joined: 28 Nov 10
Posts: 1611
Credit: 1,560,230
RAC: 2
Message 21484 - Posted: 26 Oct 2016, 10:46:06 UTC

SuSE has sent me new kernels both on the 32-bit laptop with 13.2 and the 64-bit with Leap 42.1.
Tullio

computezrmle
Send message
Joined: 16 Dec 11
Posts: 45
Credit: 813,135
RAC: 5
Message 21485 - Posted: 27 Oct 2016, 12:46:40 UTC

Got a job.
CMS seems to be back.

ivan
Volunteer moderator
Project administrator
Project developer
Project tester
Volunteer tester
Project scientist
Avatar
Send message
Joined: 20 Jan 15
Posts: 100
Credit: 639,324
RAC: 27
Message 21486 - Posted: 27 Oct 2016, 13:24:06 UTC - in response to Message 21485.

Got a job.
CMS seems to be back.

Yes, the servers are back up again.
____________

Kristian Epäilys
Send message
Joined: 23 Nov 13
Posts: 1
Credit: 64,709
RAC: 1
Message 21515 - Posted: 29 Oct 2016, 21:16:18 UTC - in response to Message 21486.

Where is the text appearing in the BOINC Notifications tab defined? The title says "VirtualLHC@home: CMS Servers are up again", but the paragraph content is the old one stating that the servers had to be taken down.

ivan
Volunteer moderator
Project administrator
Project developer
Project tester
Volunteer tester
Project scientist
Avatar
Send message
Joined: 20 Jan 15
Posts: 100
Credit: 639,324
RAC: 27
Message 21517 - Posted: 29 Oct 2016, 23:50:32 UTC - in response to Message 21515.

Where is the text appearing in the BOINC Notifications tab defined? The title says "VirtualLHC@home: CMS Servers are up again", but the paragraph content is the old one stating that the servers had to be taken down.

I just edited the title as the most-recent messages in the thread contained the news; I didn't want to clutter the forum with Yet Another New News Message.
____________

ZUBR-2016
Send message
Joined: 6 Nov 16
Posts: 11
Credit: 854
RAC: 1
Message 21548 - Posted: 6 Nov 2016, 15:29:40 UTC
Last modified: 6 Nov 2016, 15:32:40 UTC

How do you all hard. Put Virtual Box and received in a message boink "VirtualLHC @ home: Notice from the server VirtualBox is not installed."! And why? It should be the same ..
Why do so wisely, not all volunteers are educated as you))

Wrote to just "the server is down, wait for the message" and all is clear. )

ZUBR-2016
Send message
Joined: 6 Nov 16
Posts: 11
Credit: 854
RAC: 1
Message 21549 - Posted: 6 Nov 2016, 17:12:52 UTC
Last modified: 6 Nov 2016, 17:14:18 UTC

Vulnerability dirty cow? Вот придумают так придумают название))
Well, we wish you soon to wash all your cows)

Profile MAGIC Quantum Mechanic
Avatar
Send message
Joined: 1 Mar 11
Posts: 853
Credit: 10,059,956
RAC: 7,574
Message 21550 - Posted: 6 Nov 2016, 17:55:44 UTC - in response to Message 21549.

Vulnerability dirty cow? Вот придумают так придумают название))
Well, we wish you soon to wash all your cows)



https://www.neowin.net/news/dirty-cow-flaw-lets-hackers-gain-control-of-linux-systems-every-single-time

Cows are easy to clean when you put them inside of the LHC so that is already taken care of.

But on another note.......I have expected that to happen since waaaaay back when it was just the Classic Seti and even more with all the Boinc projects we have........hackers love messing with things like this.
____________

ZUBR-2016
Send message
Joined: 6 Nov 16
Posts: 11
Credit: 854
RAC: 1
Message 21585 - Posted: 12 Nov 2016, 12:20:54 UTC

So when everything is working?
I put VirtualBoks. how to configure it, to accept jobs with the project?

ZUBR-2016
Send message
Joined: 6 Nov 16
Posts: 11
Credit: 854
RAC: 1
Message 21586 - Posted: 12 Nov 2016, 12:30:47 UTC - in response to Message 21550.
Last modified: 12 Nov 2016, 12:31:41 UTC

So why not work on windose once luniks so weak? maybe luniks was originally designed to penetrate?
Hackers, this harmful substance))
They must catch and "flask" plant, forever .....)
The best punishment for the hacker, is to give in his hands instead of a saw to cut the PC and send the taiga ...))

Message boards : News : CMS Servers are up again