Domain: serverfault.com
Stories and comments across the archive that link to serverfault.com.
Stories · 7
-
That Man Who 'Deleted His Entire Company' With a Line of Code? It Was a Hoax (pcworld.com)
An anonymous reader writes: As many Slashdot readers speculated, the story about a man deleting his entire company with a line of code was a hoax. Marco Marsala, the owner of a Web hosting company claimed on a forum earlier this week that he deleted all the data on his company's server. Stack Overflow, which runs the forum, says that the post was a hoax, and pointed to an article on an Italian news outlet, which describes this whole fiasco as a "marketing effort" (in Italian) to promote Marsala's company. "It was just a joke," Marsala told the paper. -
Man Deletes His Entire Company With One Line of Bad Code (independent.co.uk)
Reader JustAnotherOldGuy writes: Marco Marsala appears to have deleted his entire company with one mistaken piece of code. By accidentally telling his computer to delete everything in his servers, the hosting provider has seemingly removed all trace of his company and the websites that he looks after for his customers. Marsala wrote on a Centos help forum, "I run a small hosting provider with more or less 1535 customers and I use Ansible to automate some operations to be run on all servers. Last night I accidentally ran, on all servers, a Bash script with a rm -rf {foo}/{bar} with those variables undefined due to a bug in the code above this line. All servers got deleted and the offsite backups too because the remote storage was mounted just before by the same script (that is a backup maintenance script)." The terse "rm -rf" is so famously destructive that it has become a joke within some computing circles, but not to this guy. Can this example finally serve as a textbook example of why you need to make offsite backups that are physically removed from the systems you're archiving?"Rm -rf" would mark the block as empty, and if the programmer hasn't written anything new, he should be able to recover nearly all of the data. Something about the story feels weird. -
Extra Leap Second To Be Added To Clocks On June 30
hcs_$reboot writes: On June 30 this year, the day will last a tad longer — one second longer, to be precise — as a leap second is to be added to clocks worldwide. The time UTC will go from 23:59:59 to 23:59:60 in order to cope with Earth's rotation slowing down a bit. So, what do you intend to do during that extra second added to that day? Well, you may want to fix your systems. The last time a leap second was added, in 2012, a number of websites, Java and even Linux experienced some troubles. Leap seconds can be disruptive to precision systems used for navigation and communication. Is there a better way of dealing with the need for leap seconds? -
The Leap Second Is Here! Are Your Systems Ready?
Tmack writes "The last time we had a leap second, sysadmins were taken a bit by surprise when a random smattering of systems locked up (including Slashdot itself) due to a kernel bug causing a race condition specific to the way leap seconds are handled/notified by ntp. The vulnerable kernel versions (prior to 2.6.29) are still common amongst older versions of popular distributions (Debian Lenny, RHEL/CentOS 5) and embedded/black-box style appliances (Switches, load balancers, spam filters/email gateways, NAS devices, etc). Several vendors have released patches and bulletins about the possibility of a repeat of last time. Are you/your team/company ready? Are you upgraded, or are you going to bypass this by simply turning off NTP for the weekend?" Update: 07/01 03:14 GMT by S : ZeroPaid reports that this issue took down the Pirate Bay for a few hours. -
Should Developers Have Access To Production?
WHiTe VaMPiRe writes "Kyle Brandt recently wrote an editorial exploring the implications of providing developers access to the production servers of a Web site. He explores the risk introduced by providing higher level access as well as potential compromise solutions." -
Searching For Backdoors From Rogue IT Staff
WHiTe VaMPiRe writes "When IT staff are terminated under duress, there is often justification for a complete infrastructure audit to reduce future risk to a company. Here is an exploration of the steps necessary to maintain security." Of course the first piece of advice is to basically assume you've been rooted. Ouch. -
Why PyCon 2010's Conference Wi-Fi Didn't Melt Down
jafo writes "There's been a lot of teeth gnashing going on recently about broken wireless at conferences. We just wrapped up PyCon 2010, with around 600 (out of 1,000) attendees simultaneously accessing the volunteer-run network, and response has been fairly positive. 2.4GHz (802.11b/g) continues to be problematic, but most users were on 5.2GHz (using 802.11n) and associating at 130mbps, with a 100mbps link to the net (though after the fact we found that 35mbps would have sufficed). My PyCon 2010 wrap-up reveals all the secrets of how we did it, including pretty bandwidth and user graphs."