US Vulnerability Database Yanked Over Malware Infestation 52
hypnosec writes "The US government's National Vulnerability Database (NVD) maintained by National Institute of Standards and Technology (NIST) has been offline for a few days because of malware infestation. The public-facing site has been taken offline because traces of malware were found on two of the web servers that house it. A post on Google+ containing an email from Gail Porter details the discovery of suspicious activity and subsequent steps taken by NIST. As of this writing the NVD website is still serving a page not found message."
Re: (Score:2)
Re: (Score:3)
Nope it is still funny. They couldn't put up a clean IIS install for the website down message in case it got infected as well.
Naturally they went for Apache.
I see the problem (Score:1)
Re:I see the problem (Score:4, Funny)
Way to sell yourself you arrogant prick. If you hire me, I'll help you with your image and this will never happen again.
Re: (Score:2)
why? you'd fax the db updates to people manually?
Baseline and STIG hosting (Score:4, Interesting)
For the unenlightened, the NVD is where the official NIST computer configuration baselines and DISA STIGs are hosted. For example, the USGCB (formerly FDCC) is also down.
Re:Baseline and STIG hosting (Score:5, Informative)
Re:Baseline and STIG hosting (Score:4, Informative)
Yes, sorry, I phrased that wrong.
NVD's search will reference the STIGs and then link to the .mil location. For us civilian types the NVD site is the gateway.
Re: (Score:2)
I can't post either.
Re:Baseline and STIG hosting (Score:4, Funny)
Damn it. Top Gear will never be the same.
Trust me. I'm from the government. (Score:3, Funny)
Re: (Score:2, Insightful)
Oh sweet... (Score:2)
Re: (Score:2)
Re: (Score:3)
...ironically...
Re: (Score:1)
But if we get the jokes out then the only way to express thoughts is to say it directly: this is a BS agency created to launder our tax money, while Indirectly subsidizing Microsoft (all gov agencies in US do).... but everyone already knew this. Can we go back to jokes now please?
Pay attention, Alanis... (Score:3)
...THIS is ironic!
Re: (Score:2)
You need to admit that the song does not have a single instance of actual irony in it.
I always figured that was why it was called Ironic. A song about irony, that didn't have any irony in it.
Not possible (Score:1)
I guess when Microsoft was screaming about Five 9s, they were referring to how often their platform would be down, not up.
We Apologise (Score:2)
Re: (Score:2)
Government employees cannot get fired for incompetence, only promoted to reduce the risk of a technical mistake being made.
That profile pic is awesome. (Score:2)
Really cool stuff. Wish I would have thought of it. Superimposing code on top of a picture of himself. Great stuff. Screams uber hacker. I don't even need to read the article to know that anyone with mad photoshop skills like that must know what he's doing.
DERP (Score:1)
we live in interesting times (Score:2)