[LINK] Wikileaks mirrors, recap and update

[Ben McGinnes]

On 7/12/10 6:12 PM, Rick Welykochy wrote:
> Gentle Linkers,
> 
> In a matter of three days, over 500 Wikileaks mirror sites have
> been created by concerned citizens the world over.
> 
> http://wikileaks.ch/mirrors.html
> 
> If you have the balls and 2 GB of spare server space, you can
> easily create a mirror in minutes on a LAMP system running Debian.

It's worth reminding anyone considering this that the WikiLeaks
preferred method of updating these mirror sites involves creating a
shell account on this system.  There is no statement from either
Assange or WikiLeaks saying that use of these accounts will be limited
to updating the mirror site.

Providing a user shell account could allow any WikiLeaks employee or
volunteer with access to the wwwsync at wikileaks.org secret key full
user level access to a system.  This could be used for a number of
unintended purposes, such as tunneling other WikiLeaks data through
these systems.

Server administrators should think *very* carefully about the
implications of doing this before proceeding.


Regards,
Ben


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: OpenPGP digital signature
URL: <https://mailman.anu.edu.au/pipermail/link/attachments/20101207/e90d9ac6/attachment.sig>