[Pdbwiki-devel] Security of PDBWiki
dan.bolser at gmail.com
Wed Oct 6 10:57:41 EDT 2010
Did you upgrade the disk space on bifx.org yet? I seem to remember
that it was in the pipeline.
We'd like to mirror the PDB and host a PDB relational database
(probably much less than 200 Gb).
On 6 October 2010 15:42, Jose M. Duarte <jose.m.duarte at gmail.com> wrote:
> Absolutely it is time to go back to bifx.org. I haven't got so much time
> this week, but from next week I can help to start moving things.
> One issue is the pdbase database. If I recall well we still depend on it but
> the servers at MPI are going to be gone some time soon I guess. We could try
> to have it in bifx.org but maybe that's asking for too much space. Another
> thing we could do relatively easily is do without pdbase and use directly
> the cif files but of course that still requires a local PDB copy. In any
> case the update pipeline itself runs still from the MPI servers and it's
> something we would need to move too.
> Ok that's probably too many things for now, let's try to do one at a time ;)
> On 6 October 2010 12:14, Dan Bolser <dan.bolser at gmail.com> wrote:
>> Yup we should move back to bifx.org.
>> I believe that MW is quite solid security wise, with security being
>> improved all the time (i.e. we should upgrade MW when we move).
>> However, extensions are another matter. One of the main reasons the
>> MediaWiki Foundation sites carry so few extensions is that each one
>> needs a security audit before it is allowed.
>> The best we can do is to make sure we have up to date versions of all
>> the extensions that we use and that the apache / php installs are also
>> 'locked down' as best as possible.
>> I'll start looking at migration this weekend.
>> All the best,
>> On 6 October 2010 09:59, Henning Stehr <stehr at molgen.mpg.de> wrote:
>> > Some new user 'Bololoikak2' created pages with hidden links to russian
>> > websites and uploaded obscure jpg files. At best, he is a spammer. To
>> > me it looks like it could even be a hacking attempt.
>> > I blocked the user and deleted his pages but this made me worry a bit
>> > about security of the server. Does anyone know how bullet proof
>> > MediaWiki is? Going from nobody to root is not such a big deal
>> > (believe me).
>> > Would that be a good opportunity to move server again? We'll have to
>> > do that soon anyways.
>> > _______________________________________________
>> > Pdbwiki-devel mailing list
>> > Pdbwiki-devel at bioinformatics.org
>> > http://www.bioinformatics.org/mailman/listinfo/pdbwiki-devel
>> > http://www.pdbwiki.org
>> Pdbwiki-devel mailing list
>> Pdbwiki-devel at bioinformatics.org
More information about the Pdbwiki-devel