[NSC-users] System status

[Leif Nixon]

Dear NSC users,

The last couple of weeks have not been the most fun in my professional
life.

We have seen multiple intrusions on our systems. Then we had an
unplanned system outage due to a thunderstorm. Then, just a couple of
hours later, another wave of intrusions.

In addition, we have not been able (for a number of reasons) to keep
the information flow to our users at an acceptable level, and I know
many of you have been wondering what was going on. Please accept our
apologies.

So, a short summary of the current status:

The SGI3k machine will be back in service shortly. However, for
security reasons all users will be issued new passwords by paper mail
*again*. Those letters have been mailed today.

For Monolith the timeplan is not yet clear. The system is still down
for analysis and verification following the last intrusion, and will
also go through a hardening process. It will likely remain unavailable
for the rest of this week, at least. You will receive further information
as we have it.

Other systems will be handled on a case-by-case basis, as we get to
them.

Further security information:

The attackers have used trojaned ssh clients at a number of academic
sites to steal passwords, which then have been used to gain entry to
the targetted systems. Please be alert for signs of intrusions on your
own systems. See, for example, the following page from the CS
department at Umeå University:

  http://support.cs.umu.se/security/

-- 
Leif Nixon                                    Systems expert
------------------------------------------------------------
National Supercomputer Centre           Linkoping University
------------------------------------------------------------