Difference between revisions of "Main Page"

From SciNet Users Documentation
Jump to: navigation, search
Line 23: Line 23:
 
|}
 
|}
 
<!-- Current Messages: -->
 
<!-- Current Messages: -->
 +
 +
<b>Security Incident at Cedar; implications for Niagara users</b>
 +
 +
Last week, it became evident that the Cedar GP cluster had been
 +
comprimised for several weeks.  The passwords of at least two
 +
Compute Canada users were known to the attackers. One of these was
 +
used to escalate privileges on Cedar, as explained on
 +
https://status.computecanada.ca/view_incident?incident=423.
 +
 +
These accounts were used to login to Niagara as well, but Niagara
 +
did not have the same security loophole as Cedar (which has been
 +
fixed), and no further escalation was observed on Niagara.
 +
 +
Reassuring as that may sound, it is not known how the passwords of
 +
the two user accounts were obtained. Given this uncertainty, the
 +
SciNet team *strongly* recommends that you change your password on
 +
https://ccdb.computecanada.ca/security/change_password, and remove
 +
any SSH keys and regenerate new ones (see
 +
https://docs.scinet.utoronto.ca/index.php/SSH_keys).
  
 
<b> SciNet/Niagara Downtime Announcement, May 20-21, 2020</b>
 
<b> SciNet/Niagara Downtime Announcement, May 20-21, 2020</b>

Revision as of 14:20, 20 April 2020

System Status

Niagara HPSS SOSCIP GPU Mist
Teach Jupyter Hub Scheduler File system
Login Nodes External Network Globus Burst Buffer

Security Incident at Cedar; implications for Niagara users

Last week, it became evident that the Cedar GP cluster had been comprimised for several weeks. The passwords of at least two Compute Canada users were known to the attackers. One of these was used to escalate privileges on Cedar, as explained on https://status.computecanada.ca/view_incident?incident=423.

These accounts were used to login to Niagara as well, but Niagara did not have the same security loophole as Cedar (which has been fixed), and no further escalation was observed on Niagara.

Reassuring as that may sound, it is not known how the passwords of the two user accounts were obtained. Given this uncertainty, the SciNet team *strongly* recommends that you change your password on https://ccdb.computecanada.ca/security/change_password, and remove any SSH keys and regenerate new ones (see https://docs.scinet.utoronto.ca/index.php/SSH_keys).

SciNet/Niagara Downtime Announcement, May 20-21, 2020

All resources at SciNet will undergo a two-day maintenance shutdown on May 20th and 21st 2020, starting at 7 am EDT on Wednesday May 20th. There will be no access to any of the SciNet systems (Niagara, Mist, HPSS, Teach cluster, or the file systems) or systems hosted at the SciNet data centre. We expect to be able to bring the systems back online the evening of May 21st.

QuickStart Guides

Tutorials, Manuals, etc.