The debian-private mailing list leak, part 1. Volunteers have complained about Blackmail. Lynchings. Character assassination. Defamation. Cyberbullying. Volunteers who gave many years of their lives are picked out at random for cruel social experiments. The former DPL's girlfriend Molly de Blanc is given volunteers to experiment on for her crazy talks. These volunteers never consented to be used like lab rats. We don't either. debian-private can no longer be a safe space for the cabal. Let these monsters have nowhere to hide. Volunteers are not disposable. We stand with the victims.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

FW: Master.Debian.Org Under Attack!

[ Sorry if you saw this already... ]

Those of you who were totally cut off tonight - I am sorry!  Here is what
went on;

Those who read my complaint about File Descriptors exhaustion - Read Why!

Bruce alerted me to a high number of users, all doing anon ftp, all after
the same package.  THANK YOU BRUCE!!!

Someone infiltrated our ftp server, using the pub/Incoming directory and 
another directory with ftp-adm.ftp 0775 ownership permission to upload
many, many megabytes (over 100 at last count) of M$ software, setup shop,
complete with directory structure, user guides, info files and whathaveyou.
It appears to have started in the last few days, around the 27th or so.

We were filled to capacity with anonymous FTP of active trading.  At least 
60, up to 100 anonymous FTP users.

I talked to Michael Deisher, he had similar experience in Arizona State Uni.
The group calls itself (?) WaReZ or some such thing.

Further investigation revealed hundreds of FTP transactions to match, many,
many with invalid or illegal IP addresses, quite few spoofing attempts, some
DNS spoofing attempts.  A whole circus of lowlifes leaching on others.

Considering that we charge honest customers only $1/MB/month storage and 
$75/GB/month for traffic, I see not much point in the sneaky behavior.

So, please be on the alert.  The Debian developers among you; please check
your accounts, your archives, etc. and report any security hole to me and
Mike Neuffer.  CERT was alerted.  A full report will be filed in the
morning.


Sincerely Yours,           (Sent on 05/01/96, 02:42:44 by XF-Mail)

Simon Shapiro
Director of Technology     i-Connect.Net, a Division of iConnect Corp.
Shimon@i-Connect.Net       13455 SW Allen Blvd., Suite 140 Beaverton OR 97008