This has been a long time coming, and only really got started again accidentally after a conversation in IRC.   You should read the official Infra team blog post, as there are currently a few limitations and known bugs.  These will be fixed in due course.

It is great that we can get this up and running before the forthcoming ASF members meeting, as this is usually a time when a lot of password resets are requested.

As always if you have any questions you should direct them to the infrastructure team.

Whilst your three why not take a look at the conference schedule and see which talks and meet ups you want to go to. You can even download the schedule as an ics file and import it unto your favourite calendar.

Go sign up now!

Looks like I will be missing badminton for at least one more month, which is a shame as i will likely miss the start of the season now.

No exertion of the arm either, means chaining my cycling position. Which is good as that will coincide with me wanting to get my new bicycle..

Bah humbug!

Enjoying book number 1 already.

Also, re-reviewing my photos from aperture – wow stunning screen to look at them on.

Yes i may be a fully paid up member of the Steve jobs gadget club, but i love each one of them for what they are.

Firstly the trackpad. What a revelation, way more comfortable than a mouse, and with all the gestures of the trackpad on my MacbookPro. Fantastic.

Now, the iPad. I bought it mainly for books, photos and web/mail without the need to get my big 17″ MBP out. Already added 28Gb (pre processing) of images. They look awesome.

Some of my iPhone games like angry bird are just as much fun.

Only time will tell to see just how much i use it for other things like video/iplayer et al.

Essentially what happened was; the server that hosted the apachecon.com website was compromised, and after a short while they discovered the SSH key that allowed them to gain shell access on people.apache.org. From here they placed files in the webroot of several websites.  These were then rsync’d to the US and EU website mirrors.

As most of our sites used CGI to offer ‘nearest mirror’ downlaod service, we had to support the use of ExecCGI.  This meant these scripts were executable.  The CGI scripts essentially allowed the attacker to gain remote shells (in the context of the webserver) sending command via HTTP POST commands.

There are no remaining residual effects, and all services have been restored.  The full report contains all the details.

How do I get mod_pony?
(1) svn checkout http://svn.rcbowen.com/svn/public/mod_pony/mod_pony.c /tmp
(2) /usr/local/apache/bin/apxs -cia /tmp/mod_pony.c
(3) edit your httpd.conf (or variant there of) and add

SetHandler pony

(4) /usr/local/apache2/bin/apachectl restart

Now open your browser, and goto  http://foo.example.com/pony  and you should see :–

If you have your servertokens set to ‘Full” then you will also see mod_pony listed there too.

Apache/2.2.10 (Unix) mod_ssl/2.2.10 OpenSSL/0.9.8b DAV/2 SVN/1.4.5 PHP/5.2.6 PONY!

However there are already rumours whizzing around that this is/was not the real ‘thing’. Whatever, it was a great BBC moment.

I am just on my way home now, after spending the last 7/8 hours with an old colleague, but more importantly a good friend.

This is the first time I have been back to our (beloved?) capital since I left it to work in Cambridge (much nearer to home). I realise that I loved working ‘in’ London but not getting there or getting about around town.

But most of all I realised I missed some of my old colleagues terribly. I had grown up with some of them, others were just fun to be in the company of. But that doesn’t change a thing I am incredibly happy in my curennt role with new challenges and different aspects to my career, but I can’t help realising how lucky I am to be working for one of the worlds mist prestigous academic institutes, with some incredibly bright folks (some are even active ASF committers )

Do I miss London? No not that much. I miss the people far more than the big smoke.