Live data from Hacker News

Tell HN: Bash.org is no more

news.ycombinator.com

51–60 of 344 posts

Re: Tell HN: Bash.org is no more

#52

There were also national versions, e.g. http://bash.hu is still online. Would love to have a collection, there is far too little sociological/folklore research about the net.

bash.im, the Russian version, was replaced with a "NO WAR" message for a while, and now it's gone.

Re: Tell HN: Bash.org is no more

#53

Earlier quoted context omitted.

So you're saying the server pings but nobody knows where it's at?

Host resolves, packets are dropped (ICMP timeouts, but nothing is "unreachable"). My sysadmin gut says that the server is there, behind a firewall, and the webserver is down/stopped, or the firewall is killing everything. The IP is not shared. It reverse-resolves, too. So, it's not dismantled and thrown to side. Looks like the hosting provider, Idologic, got bought by Stablepoint. Maybe they have somehow blocked the…

One of the most famous quotes was about a server that is online and pings, but the sysadmin doesn't know anymore where it physically is.

Re: Tell HN: Bash.org is no more

#55

Earlier quoted context omitted.

far better off as an independent entity beyond those centralised place's ever changing rules.

Is it? It was its own private entity and now it's offline probably forever. Edit: I think it'd be far better off on Wikipedia than Twitter

Yes, for the reason mentioned but also because it has a longer lifespan than Wikipedia and Twitter to date.

Re: Tell HN: Bash.org is no more

#56
post #49

Earlier quoted context omitted.

Even if it's a static HTML, you need to patch your webserver, OS, and migrate the whole stack to newer versions. This is why I'm scaling down my home infrastructure to SBCs and run everything on Debian with stock package repositories. It reduces tons of burden to something very manageable.

Non-sysadmin here. For static HTML, why is server patching/OS needed if things are locked down?

A webserver like Apache and NGINX are way more complex than they look. It's sometimes possible to exploit bugs with benign/simple requests, even if you don't run advanced stacks on them. See [0] for example.

If you're not running strict firewall rules to limit your SSH access and if you expose other services outside, they also need constant patching against newer attacks.

Lastly, security standards evolve. Your SSH and SSL layers need to be kept up to date to patch holes and add newer algorithms while deprecating others, further reducing the attack surface [1].

[0]: https://www.exploit-db.com/exploits/50383

[1]: https://lists.mindrot.org/pipermail/openssh-unix-announce/20...

Re: Tell HN: Bash.org is no more

#57
post #49

Earlier quoted context omitted.

Even if it's a static HTML, you need to patch your webserver, OS, and migrate the whole stack to newer versions. This is why I'm scaling down my home infrastructure to SBCs and run everything on Debian with stock package repositories. It reduces tons of burden to something very manageable.

Non-sysadmin here. For static HTML, why is server patching/OS needed if things are locked down?

Because no software is perfect, which means every lock has weaknesses that sooner or later get found out. Chances are that, say, a Linux 2.x server that was considered "very secure" in 2005 would now be pwned in a few hours.

Re: Tell HN: Bash.org is no more

#58
post #49

Earlier quoted context omitted.

Even if it's a static HTML, you need to patch your webserver, OS, and migrate the whole stack to newer versions. This is why I'm scaling down my home infrastructure to SBCs and run everything on Debian with stock package repositories. It reduces tons of burden to something very manageable.

Non-sysadmin here. For static HTML, why is server patching/OS needed if things are locked down?

Because both the Linux kernel and whatever SSL and web server stack you use regularly have their remotely exploitable vulnerabilities.

Re: Tell HN: Bash.org is no more

#59
post #53

Earlier quoted context omitted.

Host resolves, packets are dropped (ICMP timeouts, but nothing is "unreachable"). My sysadmin gut says that the server is there, behind a firewall, and the webserver is down/stopped, or the firewall is killing everything. The IP is not shared. It reverse-resolves, too. So, it's not dismantled and thrown to side. Looks like the hosting provider, Idologic, got bought by Stablepoint. Maybe they have somehow blocked the…

One of the most famous quotes was about a server that is online and pings, but the sysadmin doesn't know anymore where it physically is.

Ah, I probably missed it because we had the following dialogue at the office.

     Hey bayindirh, is the log server up?
     *SSHs to server* Yes, it's up and running nicely.
     Where's that thing in the system room?
     *Scratches head* Umm, I don't know?
     Go find it, we'll upgrade it to newer HW.
     Uh, OK. *leaves desk to dig the system room*.
P.S.: I'm the one who installed that server physically and configured it in the first place. :D

Re: Tell HN: Bash.org is no more

#60
post #42

There were also national versions, e.g. http://bash.hu is still online. Would love to have a collection, there is far too little sociological/folklore research about the net.

https://warpdrive.se/ is a Swedish variant.

That reminds me about the time when I used to run a similar website but focused on quotes from the IRC run by Flashback Forum (one of the larger/the largest? discussion forums in the Nordics).

Apparently I put the source for the site on GitHub (https://github.com/victorb/Flashback-Citat [12 year old PHP code!]) but I cannot find any actual archive of any of the quotes nor the running website, sadly :/

Post reply on HN