[pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide

[M.-A. Lemburg]

On 3/20/2020 6:41 PM, M.-A. Lemburg wrote:
> 
> 
> On 3/20/2020 6:35 PM, Mats Wichmann wrote:
>> On 3/20/20 11:17 AM, Skip Montanaro wrote:
>>> I no longer have access to my old wiki.python.org account but got a
>>> bounce message (via postmaster) today which related to an attachment
>>> added to the BeginnersGuide page:
>>>
>>> https://wiki.python.org/moin/BeginnersGuide
>>>
>>> The page history shows a deletion and addition of the attachment in
>>> quick succession. I don't know if the old one was bogus, but the new
>>> one certainly seems to be. It's a JPEG with a .pdf extension. Someone
>>> probably should check it out and perhaps restore the old attachment or
>>> remove it altogether.
>>>
>>> Skip
>> something's going on - these edits are credited to "111" which is not an
>> editor in the editors list.
>>
>> yesterday I got notification of another change made by "48" (actually
>> these numbers were part of IP addresses, why aren't they coming in under
>> a username) - that one left the page in a conflicted state.
>>
>> It looks like someone might be trying out a breakin?
> When hovering over "111" in the info page you get this information:
> 
> This suggests that someone without login (but the given IP address) is
> accessing the page. The IP address maps to Beijing, China.

It seems that all pages are editable without login... just tried a
few.

This is bad. Perhaps someone changed the server configuration.

-- 
Marc-Andre Lemburg
Python Software Foundation
http://www.python.org/psf/
http://www.malemburg.com/