There has been a small problem with the acls on some of the CVS directories. It seems to have to do with default permissions when I moved the sources to the new server.
I'm looking into it. So far, it seems some people have saved directory listings, but I'm not sure if any actual source has been compromised.
Edit: You won't be able to access viewcvs at all right now; I've turned off all access in case there's something I've missed.
Edit2: To admins; Don't delete any posts about it, just cut out any links. I want to be able to compare the IP's of posters to the IIS log files.
Well, the CVS is currently secure. It's possible that only the directory listings were accessible and not the file contents, but unfortunately I fixed the acls a bit too quick so I can't go back and look.
I haven't matched up any file downloads to forum ips yet either, but there are some unknowns, so ... If you have a login and have been downloading source files, tell me your IP so I can strike it off.
Hmm, might want to check mine. At work, I'm:
IP address: 207.161.144.152
Host name: w152.merlin.mb.ca
Ah, makes sense now. It should have only displayed the link to CVS for NTLM authenticated vL users, but on my new page, default2.asp, I am told the link showed up without requiring a user to be logged in as a member. I fixed it almost immediately upon being told, but will have to check the IIS logs to see if anyone noticed.
Sorry. I had a couple nights with only about 3 hours sleep due to work, school, and more work.
Edit: Thanks for the help Adron.
Strange this problem looks like something i talked about on the post i made about some idiot who left it like that i wonder !
Try looking for the ip 12.231.104.35 maybe it will give you idiots some clue
Quote from: Denial on March 29, 2004, 02:20 PM
Strange this problem looks like something i talked about on the post i made about some idiot who left it like that i wonder !
Try looking for the ip 12.231.104.35 maybe it will give you idiots some clue
Bah.
Quote from: Adron on March 29, 2004, 03:04 PM
Bah.
Could someone translate what that means in english?
Analysis?
Quote from: Yoni on March 29, 2004, 04:19 PM
Analysis?
How about this for a analysis
http://www.fallenarms.com/newlogon.htm
Gibberish.
How mature.
I dont get this topic.........
Except this isn't April...or is it?
It was when this happened.
And besides, there was a small problem with the permissions due to the default permissions when I moved the files to the new server.