RIP OpenRPN?

[.]

Either OpenRPN is dead, or their site has been hacked. Have a look

[Eric Smith]

My browser says it needs a plugin. I'm not about to install a plugin just for that; what does the site say?

[Arnaud Amiel]

It looks like the site was highjacked and I would certainly not download anything this site wants me to download. Nor give access to the dodgy signed java applet.

Arnaud

[Howard Owen]

It's Java it wants. On my i686 Firefox 1.5 on FC4 with the latest JRE, I get "Null Pointer Exception" so you are probably safe even with Java installed, Eric. 8)

[Hugh Evans]

Yes, the site has been hijacked... again. This happens from time to time. Everything should be up and running later today.

-Hugh

[Eric Smith]

What OS and web server are you running on your server?

[Les Bell]

Looks like:

Apache/2.0.49 (Unix) mod_perl/1.99_08 Perl/v5.8.0 mod_ssl/2.0.49 OpenSSL/0.9.7d PHP/4.3.4 DAV/2

running on Linux, to me. With PostNuke as the CMS. Postnuke has a long and dishonorable history of SQL injection, cross-site scripting, directory traversal and other vulnerabilities. Apache 2's mod_dav has had its own problems, too.

Best,

--- Les

[http://www.lesbell.com.au]

[Geir Isene]

PostNuke is a fork of PHPNuke (which has a remarkably bad security track - I used to have my Site on PHPNuke until I was defaced twice).

I would recommend moving to another CMS - like Typo3, Plone, EZ Publish or Wordpress (even Trac is suitable although it has a very different feature set).

[Eric Smith]

I agree. I've had good results with Plone (general CMS), Wordpress (blog), and MediaWiki (wiki), and they seem to have relatively few security problems.

I'm considering using Trac for a software-related site, but I need it to integrate with a remote Subversion server, and last I checked it could only use a local one.

[Geir Isene]

You are right about that:

trac-with-a-remote-subversion-repository?