Re: secure-tunnel.com status?

notrom_at_nym.cryptofortress.com
Date: 10/27/04

  • Next message: Concertina: "Re: secure-tunnel.com status?" 
    Date: 26 Oct 2004 20:41:23 -0400

    Concertina <none@none.com> wrote:
    : notrom@nym.cryptofortress.com wrote in
    : news:1098796735_11390@216.128.74.13:
    :
    :> I spoke with one of their support guys on Monday. His statement to me
    :> was that their firewall had crashed. He sounded pretty frazzled at the
    :> time. It looks like they are completely cut off from the 'net. I did
    :> not ask him if this was an attack or simple hardware failure.
    :>

    : Tuesday afternoon by about 2PM EDT, the SSH service was back up, as was
    : their web front page, but the members area accessed via HTTPS was still
    : down and that's where they usually post 'We're moving this server, so
    : expect a new key' type messages or 'Server such and such is down due to
    : a powerfailure'.

    : I'd expect this kind of issue to get at least a mention, since the
    : company makes its money on providing a secure service. I know that I'd
    : like to know:

    : 1. Was the company attacked by a 3rd party or was a hardware failure
    : responsible for the outage?

    : 2. If the company was attacked, what kind of attack was it? Was it a
    : DDOS or did someone root the SSH server? If so, was any confidential
    : data stolen? Logs, subscriber records, etc?

    : 3. What's the status on the member's HTTP info page?

    : I feel bad for the guys, but they've got a responsibility to be
    : forthcoming about everything that went on.

    This came in the mail tonight

         Starting late Sunday evening, Secure-Tunnel experienced a catastrophic
            firewall failure that led to the long down times. A new upgraded
               firewall has been installed that has corrected the issue.

        We sincerely apologize for the interruption in service. We take pride in
         the fact that our service has never had a major failure until now. In
            the coming weeks, we will begin installing completely redundant
        firewalls, servers & networking hardware to ensure we never repeat this
                                        outage.

        If you have any questions regarding this, or any other issue, please do
                  not hesitate to contact our technical support staff.

                        http://www.secure-tunnel.com/support.htm

                                       Sincerely,
                                 Secure-Tunnel.com Team

  • Next message: Concertina: "Re: secure-tunnel.com status?"

    Relevant Pages

    • Re: secure-tunnel.com status?
      ... > not ask him if this was an attack or simple hardware failure. ... expect a new key' type messages or 'Server such and such is down due to ... What's the status on the member's HTTP info page? ... I feel bad for the guys, but they've got a responsibility to be ...
      (comp.security.ssh)
    • [NT] Web Browsers Vulnerable to the Extended HTML Form Attack
      ... inject HTML scripts, which makes use of the same method described in the ... The Original HTML form attack: ... server 7 open ...
      (Securiteam)
    • [UNIX] DoS Attack Against FreeRADIUS (Other RADIUS Servers Affected)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... to create a high-performance and highly configurable GPL'd RADIUS server. ... program with failed requests causing a denial of service attack. ... Access-Request to the RADIUS server, ...
      (Securiteam)
    • Re: I was hacked
      ... > I have a Windows 2000 server that is current w/ the latest patches from MS. ... > It is running an IIS server that is configured w/ Microsoft's URLScan tool. ... > It is also running Terminal Services w/ 128 bit encryption turned on. ... > the first visible process of the attack. ...
      (alt.computer.security)
    • Re: I was hacked
      ... > I have a Windows 2000 server that is current w/ the latest patches from MS. ... > It is running an IIS server that is configured w/ Microsoft's URLScan tool. ... > It is also running Terminal Services w/ 128 bit encryption turned on. ... > the first visible process of the attack. ...
      (microsoft.public.inetserver.iis.security)