This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro.org

Hi Everyone,

we've been planning a migration to a newer and more capable forum site for some time now, and were just a few weeks away from kicking off this process. Unfortunately, a recent vulnerability has appeared in the wild, affecting vBulletin, the software we were using for the astaro.org communities site. Astaro.org was not compromised from this vulnerability, but as a precaution, we did take the site down, to protect our users. 

The site used a number of add-ons, and some custom plugins, which would need weeks of effort to convert and replace, if we were to upgrade the site and apply fixes for this vulnerability. As we were planning to migrate by that time anyway, we've made the decision to cut immediately to the new communities site, which has been running successfully for other Sophos products. To that end, we've spun up two forums quickly, where astaro.org users can again congregate. unfortunately, it will still take some time to complete the migration, so user accounts, and previously posted content has not yet been migrated. This process will take a matter of weeks to complete. In the interim, we will create a static view of the astaro.org, so content there will still be accessible. This should be completed later today.

This certainly wasn't the introduction we wanted for our new communities site, but we are excited about the new platform, and its capabilities. Please be patient as we step through this transition as quickly as we can. There will be some pain, but we will try our best to minimize it for you. 

Thanks everyone for your patience, and understanding!

Alan Toews

Technical Product Manager, Network Security, Sophos



This thread was automatically locked due to age.
Parents
  • I guess i'm somewhat against the grain here. I (so far) like the new forums potential (clearly we need more topics). In fact I was going to post about needing more topics and it graciously advised me there was already a post related to new topics (thank you). I originally came to find the Up2Date post that we usually see from the community on Astaro.org to determine whether or not the update should be applied in our production systems. Because of the lack of topics, I simply typed the version number and it showed all articles related to 9.351 (quickly too). I don't really care if there is a like button or not. I also think the answered posts save time (especially in long threads). So while the method wasn't desired, Sophos acted in a way to protect my data. To be honest when i joined Astaro.org I wasn't sure if the site was even legitimate or even maintained any more. 

    I suspect that if the DB and site were all in a read only mode everything would have been a little more accepting to the Astaro.org Community. Strip user information from the tables of course injecting dummy data in it's place since it's probably the key? There is a plethora of data that we all used that seems to be in shambles at the moment. :-/

    Just to point this out, the site appears to be working just fine to 'discuss' this topic. ;) lol

    Maybe I'm missing something, but that's my current opinion. I sure as hell am not going to abandon the product for a change in forum software. That's obnoxious to me. Support on the other hand... different thread...

    Action Items?

    • Add more topics, soon!
    • Restore Astaro.org to the way it was. Read Only Mode DB and Files and remove personal data from tables. This mitigates all the risk right? It also leaves the links as they were for SE results and makes all the mods and regulars who put in a lot of effort over the many years, happy (hopefully)
    • Add Upload button on the new 'forum'? It's buried in rich text i believe.
    • Eventually, attempt the painful process of migrating from one forum to another? Not sure if it would even be possible with the SSO in place.
Reply
  • I guess i'm somewhat against the grain here. I (so far) like the new forums potential (clearly we need more topics). In fact I was going to post about needing more topics and it graciously advised me there was already a post related to new topics (thank you). I originally came to find the Up2Date post that we usually see from the community on Astaro.org to determine whether or not the update should be applied in our production systems. Because of the lack of topics, I simply typed the version number and it showed all articles related to 9.351 (quickly too). I don't really care if there is a like button or not. I also think the answered posts save time (especially in long threads). So while the method wasn't desired, Sophos acted in a way to protect my data. To be honest when i joined Astaro.org I wasn't sure if the site was even legitimate or even maintained any more. 

    I suspect that if the DB and site were all in a read only mode everything would have been a little more accepting to the Astaro.org Community. Strip user information from the tables of course injecting dummy data in it's place since it's probably the key? There is a plethora of data that we all used that seems to be in shambles at the moment. :-/

    Just to point this out, the site appears to be working just fine to 'discuss' this topic. ;) lol

    Maybe I'm missing something, but that's my current opinion. I sure as hell am not going to abandon the product for a change in forum software. That's obnoxious to me. Support on the other hand... different thread...

    Action Items?

    • Add more topics, soon!
    • Restore Astaro.org to the way it was. Read Only Mode DB and Files and remove personal data from tables. This mitigates all the risk right? It also leaves the links as they were for SE results and makes all the mods and regulars who put in a lot of effort over the many years, happy (hopefully)
    • Add Upload button on the new 'forum'? It's buried in rich text i believe.
    • Eventually, attempt the painful process of migrating from one forum to another? Not sure if it would even be possible with the SSO in place.
Children
No Data