3 ms·
You eliminated step one, which clearly states: [X] Put services online using backup, except for password-based ones (e.g. the web interface) The other step yo
by lukeschlather 16y ago
You eliminated step one, which clearly states:
[X] Put services online using backup, except for password-based ones (e.g. the web interface)
The other step you omitted is the one where they allow people to log in after fixing the vulnerability.
As for the audit, there's no such thing as a complete security audit, and there's no reason to keep the site down in fear of hypothetical holes.
- viraptor 16y agoSorry, my mistake. I got the website<->other services restoration time backwards. Thanks for correcting :) Re. audit - of course you cannot be sure, but once you get taken over and your system is offline anyways, it might be a good idea to at least grep the sources for queries and quickly check for obvious stuff. Which is what I assume they're doing.