Bad news on Piece, which definitely has security holes in it. I think I
know where they are, and it would be nice to get it back on the network.
But it's not high priority. It does mean we can't access the PHP version
of Deme over the web, just locally. I'll look at Piece and see if we can
run locally.

Todd

Todd Davies *** email: davies@stanford.edu
Symbolic Systems Program *** phone: 1-650-723-4091
Stanford University *** fax: 1-650-723-5666
Stanford, CA, 94305-2150 *** web: www.stanford.edu/~davies
USA *** office: 460-040C

---------- Forwarded message ----------
Date: Thu, 30 Jun 2011 11:56:53 -0700
From: Martin Frost <me@cs.Stanford.EDU>;
To: dru@stanford.edu, Todd Davies <tdavies@csli.stanford.edu>;
Cc: action@cs.stanford.edu, security-nr@stanford.edu,
net2staff@mailman.stanford.edu, it-operations-center@mailman.stanford.edu
Subject: Re: piece.stanford.edu in MJH involved in DDOS, off the network now.

Drew, I'm forwarding your message to Todd Davies who takes care of
piece.

Martin

> From: Drew Saunders <dru@stanford.edu>;
> Date: Thu, 30 Jun 2011 09:20:16 -0700
>
> Action@CS,
>
> Piece.stanford.edu, 171.64.42.68, in MJH, was involved in a DDOS (likely =
> the target) this morning that caused a service interruption for all =
> hosts on the POZ firewall and router. As a result, we've had to block it =
> by MAC address on the local switch. Please take it offline and determine =
> if it has been compromised, and then we can remove the block.
>
> Thanks,
>
> Drew
> _______________
> Drew W. Saunders
> ITS Departmental Network Engineering
> 650-723-1282
> http://www.stanford.edu/~dru