Security Issues concerning Onto Wiki

During the last time there were massive unauthorized Anonymous actions on several Onto Wiki instances, in particular also on the Onto Wiki System Configuration. Here is a list of such issues

• http://leipzig-data.de/Data
  • 2014–05-10T14:46:15 – Onto Wiki System Configuration, statements added. 2014–05–11 hgg: fixed
  • 2014–04-15T17:30:26 – Onto Wiki System Configuration, statements added
  • 2014–04-13T05:47:42 – Onto Wiki System Base and other models, statements deleted
• http://leipzig-data.de/ldsn – no issues so far
• http://symbolicdata.org/Data
  • 2014–05-02T18:10:59 – Onto Wiki System Configuration, statements added
  • 2014–04-09T16:21:18 – Onto Wiki System Configuration, statements added
• http://symbolicdata.org/casn
  • 2014–05-08T13:21:59 – Onto Wiki System Configuration, statements added
• http://od.fmi.uni-leipzig.de

• http://pcai003.informatik.uni-leipzig.de/kosemnet – no issues so far

All instances are configured without Admin account and Anonymous having only read access to all “normal” models. Default User Group has no edit rights either.

• robots.txt in operation since 2014–05–11.
• 2014–05–12: All instances switched to debug mode

More details from Fabian and the apache log files. We got a log file from a crawler at Hannover University, I put it into a git repo. Access upon request — hgg