WARNING !

Discuss recent changes, make suggestions, etc.
Post Reply
User avatar
Uncle Al
Moderator
Posts: 4258
Joined: Tue Oct 21, 2003 10:07 pm
Location: Duncanville, TX USA

WARNING !

Post by Uncle Al »

All members beware :!:

The Cafe' may have been HACKED.
This might have occurred at the hosting site server.
I was able to log into the Cafe', but am unable to log in
on the Admin page. Our Master Barista is, somehow, locked out :twisted:

Will update this post IF/WHEN a resolution is found.

(Nasty buggers :!: )

Uncle Al
:mrgreen: :ugeek: :mrgreen:
Kilted Organist/Musician
Grand Musician of the Grand Lodge, I.O.O.F. of Texas 2008-2025
When asked 'Why the Kilt?'
I respond-The why is F.T.H.O.I. (For The H--- Of It)
User avatar
crfriend
Master Barista
Posts: 15152
Joined: Fri Nov 19, 2004 9:52 pm
Location: New England (U.S.)
Contact:

Re: WARNING !

Post by crfriend »

Uncle Al wrote: Tue Feb 25, 2025 11:03 pmOur Master Barista is, somehow, locked out :twisted:

Will update this post IF/WHEN a resolution is found.
The situation seems to have self-resolved -- which as a old-school technician I hate -- but I'm logged in now and can access the administrative stuff.

It MAY be related to an overloaded server, or possibly a new version of PHP that got installed behind the scenes. The situation is still evolving.
User avatar
crfriend
Master Barista
Posts: 15152
Joined: Fri Nov 19, 2004 9:52 pm
Location: New England (U.S.)
Contact:

Re: WARNING !

Post by crfriend »

Note: There are still problems afoot, my latest attempt to update the ant-spam stuff failed with a "shell request failed on channel 0" error which points out that the server is still overloaded. I have no idea when (or if) this condition is going to clear properly.

This error is particularly damning: "-bash: fork: Resource temporarily unavailable".
Retrocomputing -- It's not just a job, it's an adventure!
User avatar
Uncle Al
Moderator
Posts: 4258
Joined: Tue Oct 21, 2003 10:07 pm
Location: Duncanville, TX USA

Re: WARNING !

Post by Uncle Al »

If you're logged in, DO NOT LOG OUT!
I logged out on my laptop and can't log back in.
I'm still logged in on my cellphone and I'm not
changing anything until this is cleared up.

At this point, indications are that the problem
is at the host site.


Uncle Al
:mrgreen: :ugeek: :mrgreen:
Kilted Organist/Musician
Grand Musician of the Grand Lodge, I.O.O.F. of Texas 2008-2025
When asked 'Why the Kilt?'
I respond-The why is F.T.H.O.I. (For The H--- Of It)
User avatar
crfriend
Master Barista
Posts: 15152
Joined: Fri Nov 19, 2004 9:52 pm
Location: New England (U.S.)
Contact:

Re: WARNING !

Post by crfriend »

Uncle Al wrote: Wed Feb 26, 2025 2:45 amAt this point, indications are that the problem is at the host site.
All available evidence points to that, and it's entirely likely system resource exhaustion, and we're seeing the result of that.

I was able to get into a command-line prompt this morning, and into the database, and reset everybody's login-attempt-counters that had essentially locked them out. I do not know whether the situation is corrected or will reoccur. I was able to grab a copy of the database image from yesterday and pull it into my lab. That won't give me the root cause, but it will allow me to try and develop evasion tactics so there's less damage done by this mess.

Ultimately, I think the answer is going to be the painful option of, "waiting it out".

If this keeps up, I'll contact the Barista Emeritus and seek guidance and leverage. I remain in close contact with the other US-based staff (but lack an international plan on my mobile, so haven't been in touch with Denimini).
Retrocomputing -- It's not just a job, it's an adventure!
User avatar
crfriend
Master Barista
Posts: 15152
Joined: Fri Nov 19, 2004 9:52 pm
Location: New England (U.S.)
Contact:

Re: Achtung! (baby?)

Post by crfriend »

Well, it looks like we're out of the woods with our last upset. Web access seems normal, and I have seen restored shell-level access, which is a massive improvement. Thus, my conclusion is "resource starvation on the shared host, possibly by one of the containers thereon that got cracked, that the hosting company finally discovered and fixed".

If everything holds for the next 24 hours I'll release some of the "emergency tactics" I put in place temporarily.

If anybody still has login issues, please e-mail me directly at the address just below the masthead on each page. At last look (seconds ago) everyone listed as active users are OK from problems.
Retrocomputing -- It's not just a job, it's an adventure!
Post Reply