I first received notification of the flaw monday morning. I opened a support ticket with the hosting provider and requested that my server be updated. I was told that CentOS has not released an update.

Tuesday morning I received another email saying that an update had been released - so I notified the hosting provider to update and restart the server.

Somewhere in the following hour and 34 minutes my server was hacked.

Article about the linux security flaw - http://www.zdnet.co.uk/news/security...ines-40090177/

I think its pretty sad that the whole world knows about the security issue, and website owners do not even have a fix.

Nope, i dont run 64bit linux.

disaster preparedness

Obviously you were prepared for it though

I don't do 64 bit either, just 32 bit with PAE kernel

Originally Posted by ThailandForum

Obviously you were prepared for it though

I think the situation could have been handled a little better on my part. Its been several months since I backed up the html root. The last time I downloaded the database to my home computer was 3 weeks ago. I have a backup script that backs up the database everynight, but I try to download the backup file at least twice a month.

Originally Posted by justinp

I don't do 64 bit either, just 32 bit with PAE kernel

By running a 32 bit OS, your only using 1/2 of modern day 64 bit processors.

And how do you get around processes only being able to address 4 gigs of memory?