ocaml-tutorial.org is down

ocaml-tutorial.org is down

[Erik de Castro Lopo]

Hi all (and particularly Richard Jones),

The Ocaml tutorial site seems to be down.


Cheers,
Erik
-- 
----------------------------------------------------------------------
Erik de Castro Lopo
http://www.mega-nerd.com/

Re: [Caml-list] ocaml-tutorial.org is down

[Richard W.M. Jones]

On Mon, Dec 20, 2010 at 06:50:55AM +1100, Erik de Castro Lopo wrote:
> Hi all (and particularly Richard Jones),
> 
> The Ocaml tutorial site seems to be down.

Yup, sorry, we'll have it up in a few days.  Because of the recent
exim scare I thought it wise to rebuild that machine.

Rich.

-- 
Richard Jones
Red Hat

Re: [Caml-list] ocaml-tutorial.org is down

[oliver]

On Sun, Dec 19, 2010 at 11:47:18PM +0000, Richard W.M. Jones wrote:
> On Mon, Dec 20, 2010 at 06:50:55AM +1100, Erik de Castro Lopo wrote:
> > Hi all (and particularly Richard Jones),
> > 
> > The Ocaml tutorial site seems to be down.
> 
> Yup, sorry, we'll have it up in a few days.  Because of the recent
> exim scare I thought it wise to rebuild that machine.
[...]

Hmhhh what exim scare?
An exploit?

Why not just updateing the machine, or if no updates are available, just eremove exim?!

Ciao,
   Oliver

P.S.: No mirror available?

Re: [Caml-list] ocaml-tutorial.org is down

[Grant Olson]

On 12/19/10 8:03 PM, oliver@first.in-berlin.de wrote:
> 
> Why not just updateing the machine, or if no updates are available, just eremove exim?!
> 

If a machine has been compromised, or even if you suspect it has, you
can't trust anything about it anymore.

Someone could have used the exim exploit to install a rootkit, a version
of sshd with a backdoor, etc.  And sure, maybe you can take the sha of
sshd and compare it to a known source, but maybe sha256 has been
replaced with a version that tricks you.

So you patch exim, think you're good, and they come back to your machine
six months later.

You have to rebuild from scratch.

-- 
Grant

"I am gravely disappointed. Again you have made me unleash my dogs of war."

Re: [Caml-list] ocaml-tutorial.org is down

[Christophe Raffalli]

[-- Attachment #1.1: Type: text/plain, Size: 1289 bytes --]

Le 20/12/10 03:20, Grant Olson a écrit :
> On 12/19/10 8:03 PM, oliver@first.in-berlin.de wrote:
>> Why not just updateing the machine, or if no updates are available, just eremove exim?!
>>
> If a machine has been compromised, or even if you suspect it has, you
> can't trust anything about it anymore.
>
> Someone could have used the exim exploit to install a rootkit, a version
> of sshd with a backdoor, etc.  And sure, maybe you can take the sha of
> sshd and compare it to a known source, but maybe sha256 has been
> replaced with a version that tricks you.
>
> So you patch exim, think you're good, and they come back to your machine
> six months later.
>
> You have to rebuild from scratch.
Including a BIOS update ...

Cheers,
Christophe


-- 
Christophe Raffalli
Universite de Savoie
Batiment Le Chablais, bureau 21
73376 Le Bourget-du-Lac Cedex

tel: (33) 4 79 75 81 03
fax: (33) 4 79 75 87 42
mail: Christophe.Raffalli@univ-savoie.fr
www: http://www.lama.univ-savoie.fr/~RAFFALLI
---------------------------------------------
IMPORTANT: this mail is signed using PGP/MIME
At least Enigmail/Mozilla, mutt or evolution 
can check this signature. The public key is
stored on www.keyserver.net
---------------------------------------------


[-- Attachment #1.2: Christophe_Raffalli.vcf --]
[-- Type: text/x-vcard, Size: 310 bytes --]

begin:vcard
fn:Christophe Raffalli
n:Raffalli;Christophe
org:LAMA (UMR 5127)
email;internet:christophe.raffalli@univ-savoie.fr
title;quoted-printable:Ma=C3=AEtre de conf=C3=A9rences
tel;work:+33 4 79 75 81 03
note:http://www.lama.univ-savoie.fr/~raffalli
x-mozilla-html:TRUE
version:2.1
end:vcard


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 250 bytes --]

Re: [Caml-list] ocaml-tutorial.org is down

[Richard W.M. Jones]

On Mon, Dec 20, 2010 at 02:03:32AM +0100, oliver@first.in-berlin.de wrote:
> On Sun, Dec 19, 2010 at 11:47:18PM +0000, Richard W.M. Jones wrote:
> > On Mon, Dec 20, 2010 at 06:50:55AM +1100, Erik de Castro Lopo wrote:
> > > Hi all (and particularly Richard Jones),
> > > 
> > > The Ocaml tutorial site seems to be down.
> > 
> > Yup, sorry, we'll have it up in a few days.  Because of the recent
> > exim scare I thought it wise to rebuild that machine.
> [...]
> 
> Hmhhh what exim scare?
> An exploit?
> 
> Why not just updateing the machine, or if no updates are available, just eremove exim?!

The machine was not exploited, nor do we suspect that it was.  However
upgrading exim has necessitated removing the cocanwiki Debian package,
and now it has to be rebuilt.

Keep calm and carry on ...

Rich.

-- 
Richard Jones
Red Hat

[Caml-list] [was: ocaml-tutorial.org is down] mirror website

[Sylvain Le Gall]

Hi all,

On 19-12-2010, Erik de Castro Lopo <mle+ocaml@mega-nerd.com> wrote:
> Hi all (and particularly Richard Jones),
>
> The Ocaml tutorial site seems to be down.
>
>

I just realized that I have a backup of those two websites here:
http://mirror.ocamlcore.org/wiki.cocan.org/index.html
http://mirror.ocamlcore.org/ocaml-tutorial.org/index.html
(and while we are at it:
http://mirror.ocamlcore.org/caml.inria.fr/index.html)

They are snapshots taken at least 1 year ago, but the content is
complete. 

Maybe Richard can point wiki.cocan.org and ocaml-tutorial.org to this
location, during the setup of the their new hosts.

Regards,
Sylvain Le Gall

Re: [Caml-list] ocaml-tutorial.org is down

[Erik de Castro Lopo]

Richard W.M. Jones wrote:

> On Mon, Dec 20, 2010 at 06:50:55AM +1100, Erik de Castro Lopo wrote:
> > Hi all (and particularly Richard Jones),
> > 
> > The Ocaml tutorial site seems to be down.
> 
> Yup, sorry, we'll have it up in a few days.  Because of the recent
> exim scare I thought it wise to rebuild that machine.

Richard,

Any word on when that will be back? I'd like to point
a colleague at it.

Cheers,
Erik
-- 
----------------------------------------------------------------------
Erik de Castro Lopo
http://www.mega-nerd.com/

[Caml-list] Re: ocaml-tutorial.org is down

[Sylvain Le Gall]

On 14-01-2011, Erik de Castro Lopo <mle+ocaml@mega-nerd.com> wrote:
> Richard W.M. Jones wrote:
>
>> On Mon, Dec 20, 2010 at 06:50:55AM +1100, Erik de Castro Lopo wrote:
>> > Hi all (and particularly Richard Jones),
>> > 
>> > The Ocaml tutorial site seems to be down.
>> 
>> Yup, sorry, we'll have it up in a few days.  Because of the recent
>> exim scare I thought it wise to rebuild that machine.
>
> Richard,
>
> Any word on when that will be back? I'd like to point
> a colleague at it.
>

Try this one:
http://mirror.ocamlcore.org/ocaml-tutorial.org/index.html

Cheers,
Sylvain Le Gall
-- 
My company: http://www.ocamlcore.com
Linkedin:   http://fr.linkedin.com/in/sylvainlegall
Start an OCaml project here: http://forge.ocamlcore.org
OCaml blogs:                 http://planet.ocamlcore.org