[jdev] missing files on jabberstudio?

[Peter Saint-Andre]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hal Rottenberg wrote:
> Are there outstanding issues on jabberstudio?  I was browsing some
> projects tonight and found that many had bad links to either websites
> (hosted @ js.o) or tarballs or web-cvs.

As mentioned last Friday, we discovered a backdoor on the webserver
machine, as a result of which large volumes of spam were being generated
(resulting, among other things, in 60,000+ error messages in my inbox,
which I can tell you Thunderbird did not like!). We shut that down and
cleaned the box, but have not yet re-enabled many of the project
websites, since some of them were using PHP (e.g., PMWiki, installation
of which was not authorized) and the planting of the backdoor seems to
have been caused by a PHP vulnerability.

<rant>

In general, I have to say that I am sick and tired of JabberStudio. If
we could host it on a different box (not tied to other JSF services in
any way) and I could find someone else to maintain it, then I would be
less annoyed. At this point I would just as soon point developers to
other project hosting options out there (Savannah, SourceForge, etc.)
and shut down JabberStudio, because it is one big unmaintained PITA. Not
that JabberStudio is mine to shut down since the domain is owned by
Thomas Muldowney and Ryan Eatmon...

</rant>

Peter

- --
Peter Saint-Andre
Jabber Software Foundation
http://www.jabber.org/people/stpeter.shtml

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEW3Q1NF1RSzyt3NURAkv6AJ9LMVOmqlBF4YYKmD5LRZ0WywkkYgCgt3TD
0MkzIDIZUO8ksGXdsKP4NCs=
=YBC1
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3641 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://www.jabber.org/jdev/attachments/20060505/50f50332/attachment-0002.bin>