25 points GeoAtreides 1 hour ago 17 comments
peri-cl 1 hour ago | parent
mryijum 1 hour ago | parent
It'll be interesting to see the postmortem. I don't know much about their infrastructure.
mschuster91 1 hour ago | parent
Apparently they run bare metal that they own [2] so I'd assume their servers got compromised hard and they'll need to buy entirely new servers.
[1] https://www.reddit.com/r/AO3/comments/1xir586/comment/19rubn...
[2] https://www.reddit.com/r/AO3/comments/1xir586/comment/19ruc1...
anonymous908213 1 hour ago | parent
So much for that...
mschuster91 1 hour ago | parent
rafram 57 minutes ago | parent
mschuster91 47 minutes ago | parent
There aren't that many scenarios which make a restoration time of weeks inevitable, even after taking into account the AO3 people are volunteers - given the large intersection between nerds and fanfiction or a loooot of furries working in IT, I'd assume you'll find the most competent people working on it, so I doubt the cause is incompetence.
They say the data is safe, which implies an offsite backup with a different architecture (or a managed provider). They said in the past they had a secondary site which they could switch over to if needed, which implies that the issue is not related to hardware or datacenter problems (e.g. your usual backhoe related issue or a physical destruction of the datacenter).
And that leaves only two options: a) a former staff member went fully rogue and everything needs to be rebuilt because everything might be backdoored, but there is no indication of that, or b) they got compromised really hard by one of the multitude of the vulnerabilities that cropped up the last days and chose to rebuild from scratch for a similar reason.
(And as far as I know AO3, like FFN, is limited to text and stuff like cover art, so the dataset should be small and easy enough to restore from a backup)
Hamuko 59 minutes ago | parent
wmf 47 minutes ago | parent
altairprime 33 minutes ago | parent
Now that you’ve pictured AWS, GCP, DigitalOcean, et al. more fully, that rules them out as available options for a long-term fanfic-centric erotica archive site that has specific and unusual legal concerns and threats to its existence incompatible with skittish Redbox-style compute providers.
Was there a particular cloud provider you were thinking of, that is not a ‘good night, sleep well, perhaps we’ll kill you in the morning’ service provider incompatible with AO3?
Avamander 10 minutes ago | parent
mschuster91 47 minutes ago | parent
They say they have a second site, the chance of hardware failure taking out both sites at the exact same time is near zero.
Avamander 9 minutes ago | parent
Other than that 2-4 does sound more like hardware lead time rather than time it takes to resolve a security incident.
peri-cl 58 minutes ago | parent
Nvidia will serve you a free, high-speed half-terabyte download right now[0]. It's one with a cutoff date of 2020—but given that GPT-3 was released mid-2020, that's probably the one you actually want, for ML research.
ronsor 56 minutes ago | parent
TMWNN 1 hour ago | parent
ChrisArchitect 5 minutes ago | parent
Related:
Archive of Our Own
https://news.ycombinator.com/item?id=50128197
Fans are better than tech at organizing information online (2019)