I wanted to write about some cool thing that I did Sunday evening, because I had a lot of ideas of what I wanted to do. There were so many different cool things for this cute little Dalmatian girl to choose from: Writing! Sketching! The software projects that have personal relevance to me, instead of the ones I work on for money! Reading a book! Gaming!
Nope. It started horribly: Parallels stopped, Docker stopped, and I received a Critical Notification from System, all because my personal Mac – the 1 TB Mac – had a full system volume.
I don’t even know what made it full. I deleted a 5 GB ISO out of ~/Downloads and suddenly had 61 GB free. Whatever works, I guess, but I haven’t written any data to it since and I’m already back down to 46.
So, after spending 30 minutes trying to fix that crisis and restart Docker (most of it trying to make Docker Desktop take any command at all), I foolishly opened Telegram. And waiting for me was a message from a good friend of mine:
[11/10 18:52] Jaguar: someone is bruting your gitlab
Well, the bots finally won. Or lost, I guess, since they won’t have access to our GitLab instance any more. Of course, that means everyone else lost access to it, as well. I’ll have to dust off the WTI blog for more, but for now, the scraper bots have simply done too much damage to our infrastructure. We can’t afford to keep GitLab online any more.
No data was compromised, and everything is safe and secure. But the brute-force attacks are consuming all the disk, RAM, and CPU time on a server that frankly has better things to do. This simply isn’t sustainable.
Then Jaguar managed to gently nudge me into reading the latest Apache CVEs and I spent the next hour upgrading every server I have access to, ensuring they all have the latest security patches. Because the last thing I need is for one of those bots to actually be malicious, instead of just behaving maliciously.
And then it was bedtime.
So much for fun. The mean compute box took it all away.