2010/09/28

HKCERT web outage

In the current issue of HKCERT newsletter, HKCERT stated the incident of its web outage happened on 4 August.

The web server and the firewall were working normally.  However, the firewall could not connect to the Trust Source to verify incoming IP addresses and as a result, all visiting IP addresses were untrustworthy.  Thus, the firewall denied all access to the web server.

I applaud the gust of HKCERT in releasing the sensitive information and let all readers learn from the incident.  If the same happens in bank or any other public organizations, I doubt whether such details can be made known to the public.

No comments: