[Discuss] kernel.org

[jonathan at jonmasters.org (Jon Masters)]

On Sat, 2011-10-01 at 09:14 -0400, Edward Ned Harvey wrote:

> Kernel.org has been down for like 3 weeks.

It's back up now (well, the main archive).

> I know there was a security
> breach, but by not getting it back up, they're basically acknowledging they
> have no clue how it happened, and fear even with their best defenses up,
> it's just going to be hacked again.

Really? To me, it actually says that John (a personal friend), and Peter
(another personal friend) have been working day and night for weeks to
bring back a very complex set of services and overhaul the security
process at the same time. I know that law enforcement are involved, and
I'm sure they're not getting enough sleep. Let's give the benefit of the
doubt. It's not great that it's been down so long, but with only one
full time person supporting all that stuff, who could do any better?

> I just want to hear what others have to say.  I'm frustrated because 2 days
> after they went down, I tried to join and/or view the btrfs mailing lists,
> only to discover I couldn't.  Here it is, weeks later, I still can't.

Don't see how that's related. vger (mailing list server) is separate.

> As an IT person, when I've got something externally facing, which represents
> the reputation of the organization I'm supporting, and provides
> functionality for thousands or millions of people out there, if something
> like this goes down...   I enable some crazy monitoring and put it back up.
> If it goes down a second time, at least I'll be well equipped to figure out
> what happened a second time.  If it doesn't go down a second time, then
> clearly I've already done the right thing by putting it back up.

The Linux kernel development process is a highly complex machine. You
see kernel.org, but there is a lot behind that, as those of us who have
been using master (hera) happily for many years prior to this attest.

Jon.