What happened to the Skolkovo Foundation website in brief

It all started with a post habrayuzera oyaso , in which he compared the amount of money pledged for the site development innovation fund "Skolkovo" and the result obtained in the form of site i-gorod.com

The information below is recommended reading for journalists, aides sorts of leaders of different ranks and those who are too lazy to read interesting comments on the original post.


In a matter of hours, the topic attracted enormous attention of both the habro-community and the Internet as a whole. It quickly became clear that:

• The site was assembled hastily on the UMI content management system, to which a cheap template was purchased without redemption of copyrights (i.e. it can be reused by anyone who wants it).
• The site was hosted on an old version of the server software without updates that were vulnerable to attacks and launched on the Apache web server, which was not adapted to high loads.

This led to the expected result, which is called " Habraeffect ". This is when the readers of habrahabr.ru click on an interesting link to overload and crash the mentioned server.

However, the habra effect was only the beginning. Inquisitive researchers found holes in the site through which source codes were obtained, as well as passwords to the administrative panel and database. Be careful not to die of laughter! Password for admin panel: 1

Clones of the i-gorod.com site began to appear like mushrooms on the network with witty and not very edits, and the source codes are available to everyone.

http://j-gorod.com/
http://www.skolkoffo.ru/
http://www-i-gorod-com.dyndns.org:8000/

Another discovery was that the site’s corporate mail was hosted on gmail.com . Yes, on the very same enemy gmail that a senior FSB officer recently wanted to ban. I like gmail in that you can get 50 email accounts there absolutely free. Apparently the same people liked the Skolkovo Fund.

Very quickly the alleged executor of the site was found, it turned out to be also a habrayuzer. The world is small, alas. The poor fellow instantly threw cons into karma. I think that is not entirely fair, maybe he worked for the amount that was paid?

It smelled fried!

As a result, site administrators began to take steps to save the situation - they changed passwords, rearranged the system, and began installing the frontend server. However, other than this is definitely the right work, was taken by the official announcement, which states:
Официальный сайт Фонда "Сколково" в настоящее время подвержен массированной DDOS-атаке, в связи с чем к нему затруднён доступ пользователей.
And the media carried the news of the mysterious enemies of innovation.

A person representing the Skolkovo Foundation promptly appeared, asked to write questions and suggestions, and promised to give answers to questions. I wrote him a letter, warned about this post and wanted to ask and discuss questions. Alas, my appeal remained unanswered. I hope that he was busy with urgent business to restore the site and will be able to answer later. I post questions here.

1. When the i-gorod website was made, how much time was spent on its development and how much did the direct developer pay?
2. How are 3 million rubles allocated from the budget spent on creating the site?
3. What hosting options were before the fall and now? Have you planned a high attendance of the project or was it made for show?
4. What conclusions are drawn from the situation?
5. Do you still consider the Habra community to be evil hackers who are a DDOS site? If so, do you plan to file a complaint with the police, and if not, will a press release be posted with the error acknowledged?
6. Are you ready to thank the habrayuzer who made you an excellent advertisement and did a great load test?

In conclusion, I would like to separately mention the initiative of the habrasociety to create socially significant projects by public forces.

People want to exert their strength and change society for the better, rather than pulling money. I wonder if they will find a place in the current modernization programs?

And the last request. People, it’s not worthwhile to determine the site www.skolkovo.ru for distribution . It is at least consonant with the name and is also “terribly far from the people”, but it has nothing to do with our topic.

This post will be updated if information is received from representatives of the Skolkovo Foundation, or if there are burning questions from the people that will be chosen by traditionally adding comments.


Update1. Unfortunately, as of 18:00 on April 13, we did not see any information from the administration of the Skolkovo Foundation. Therefore, we are trying to figure it out on our own. Link to the template for CMS Joomla on which the site is running. Price from 65 $

store.templatemonster.com/joomla-templates/28038.html

I was personally impressed by the green fields and windmills.

Update2. We read the answers: habrahabr.ru/blogs/internet/117452