forums.debian.net geschlossen

Auch ich habe den netten SPAM bekommen und ein wenig beim Admin nachgehakt. Dessen Account wurde zweckentfremdet von Jemanden, welcher SPAM an die ganzen User geschickt hatte. Leider wurde nicht bekannt, welche Lücke der nette Spammer genutzt hat um diese Massenmails zu versenden. Saimex war sein Name und er wies auf die Domain XXXXX hin, welche urheberrechtlich geschützes Material feil bietet. Wenisgtens war er so Klug nicht Windows-Anwendungen feil zu bieten. Traurigerweise bekam ich Heute per Mail die Nachricht, dass bis auf weiteres das Forum geschlossen ist:

forums.debian.net disabled
To: debian-project@lists.debian.org
Subject: forums.debian.net disabled
From: Peter Palfrader <weasel@debian.org>
Date: Sun, 19 Apr 2009 23:18:56 +0200
Message-id: <20090419211855.GB11196@intrepid.palfrader.org>
Mail-followup-to: Peter Palfrader <weasel@debian.org>, debian-project@lists.debian.org
forums.debian.net is a debian.net service run by a set of DDs for the
community.  It’s not an official Debian service run or maintained by
the project or DSA (then it would be forums.debian.org).

Nevertheless it was hosted on debian.org hardware since sometime last
year because the original system it was on was an under-the-desk kind of
„server“ that was falling apart and the forum admins wanted to continue to
provide this service.

DSA gave them access to tartini.debian.org, which was unused at the
time. Since then, this system has been dedicated to running
forums.debian.net; it was decided to not use tartini for any other
services due to security concerns.

This afternoon DSA received reports that forums.debian.net might have
been compromised: registered users had been email spammed from the
forums software.

forums.debian.net has therefore been disabled.

It is not known when or if or how forums.debian.net will return.

We currently have no reason to believe that tartini itself was
compromised.

For DSA,
Peter

Traurig, aber wahr….