[Labs-l] [Labs-announce] abrupt tools login host changes

Mon Feb 22 01:40:09 UTC 2016

What kind of security incident are we talking about, discovered vulnerability, suspicious access logs, etc…?  Any brief details you can provide?  Did this allow access to everyone’s tools, and passwords as a result?

Cyberpower678
English Wikipedia Account Creation Team
ACC Mailing List Moderator
Global User Renamer

> On Feb 21, 2016, at 20:00, Brad Jorsch (Anomie) <bjorsch at wikimedia.org> wrote:
> 
> On Sun, Feb 21, 2016 at 5:16 PM, Andrew Bogott <abogott at wikimedia.org <mailto:abogott at wikimedia.org>> wrote:
> I've already moved all of the affected hostnames (e.g. tools-login.wmflabs.org <http://tools-login.wmflabs.org/>) so if you get kicked off of the bastion, just reconnect and all will be more-or-less as it was.
> 
> It seems that the grid doesn't know about the new tools-login, so I'm getting "host "tools-bastion-05.tools.eqiad.wmflabs" is no submit host." whenever I try to do much there.
> _______________________________________________
> Labs-l mailing list
> Labs-l at lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/labs-l

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20160221/d4acbfcf/attachment.html>