-- Start log: Wednesday, April 9, 2014 8:33:31 pm ASI Meeting Server time-- 
dcarson says, "helo" PhilipC says, "It is now 8:33 pm EDT. I am having a
preliminary conversation on the new Program Management Plan." PhilipC says,
"Hello" AlanSteinberg has arrived. PhilipC says, "Ok, as we've discussed so
far in previous months' MC meetings, we'll be focusing a lot more on
teleoperations" PhilipC says, "Hi Alan" AlanSteinberg says, "Hi" PhilipC
says, "I'd like for us to have 2 new programs, which act as an umbrella for
a variety of projects" PhilipC says, "The first one will be the Lunar
Teleoperations Research Program. And the second will be our Political
Program." PhilipC says, "For the teleoperations program, I see the need for
9 major projects:" PhilipC says, "1) Location Research, 2) Site Structures,
3) Network Infrastructure, 4) Teleoperations Interface Protocol, 5)
Operational Robotics, 6) Planetary Science Research, 7) Materials
Processing Research, 8) Industrial Process Research, and 9) Electronic
Components Research" PhilipC says, "I've spent the last 2-3 months
developing long lists of project deliverables but my latest research on
program management plans says that it's better to focus on outcomes rather
than deliverables. So I've been working furiously in the last week to
revise everything to be more outcome based." PhilipC says, "Just to quickly
summarize: " PhilipC says, "Before I go into the individual projects, there
will also need to be management support" PhilipC says, "These will be a 1)
Project Manageemnt Office, 2) Strategic Management, 3) Liaison Office, 4)
Communications, 5) Regulatory Compliance, 6) Financial Support, 7) Human
Resources/Recruiting Support, 8) Training, and 9) Security" PhilipC says,
"Now to explain the purpose of each of the projects:" PhilipC says, "1) The
location research project will provide real estate research and set-up
appointments for the Liaison Office" PhilipC says, "2) The Site structures
project is responsible for both the overall facility within which research
operations take place and in the development of nested facilities (a
structure built indoors)." PhilipC says, "3) The Network Infrastructure
Project will build networks, ensures ultra-fast and reliable connections,
and develop admin policies to manage traffic and provide security. "
PhilipC says, "4) The Teleoperations Interface Protocol. Teleoperations
involves the integration of Augmented and Virtual Reality with hardware
control systems. The purpose of this project is not to focus on developing
applications so much as it is to identify the interconnection requirements
of teleoperations, and to develop a standard that allows for the interface
of digital hardware into a seamless AR/VR user experience. Using the OSI
Reference Model, this project will likely focus on the Session,
Presentation, and Application layers" PhilipC says, "and involve auditing
language efficacy and possibly new development." PhilipC says, "5) The
Operational Robotics Project will focus on developing anthropomorphic
robots for remote users (expands our audience participation) and in
developing a robotics "sandbox" to give people an opportunity to play with
robotics, and understand basic capabilities and platforms." PhilipC says,
"6) The Planetary Science Research Project will serve as a reference on
lunar geology and the lunar surface environment (includes space weather),
and in replicating those conditions as best as is technologically
possible." PhilipC says, "7) The Materials Process Research Project. The
industrial revolution was a highly iterative and evolutionary process of
adaptation to the natural environment. The project will focus on refining
lunar regolith and in applying or substituting processing methods for
industrial commodities (metals, glass, ceramics, fibers, solvents,
lubricants, adhesives, etc.)." PhilipC says, "8) The Industrial Process
Research Project will focus on adapting existing industrial/manufacturing
technology for the lunar environment, and in researching process tolerances
for commodity level products." PhilipC says, "9) The Electronics Components
Research Project will focus on the manufacturing of commodity-level
electronics parts (wires, boards, batteries, resistors, capacitors,
switches, motors, etc.) using lunar materials." PhilipC says, "Without
going any further into the Management Support, what do you think of these
topic areas so far?" PhilipC says, "I think that with the budget we have, a
baseline telerobotics capability, a suitable location, and a little
equipment, we can recruit plenty of people to work on these projects"
PhilipC says, "The first three areas require fairly common technical skills
" PhilipC says, "The last 6 areas require more advanced specialized skills"
PhilipC says, "I would also imagine doing a lot of our recruiting at
universities that focus in the more advanced areas" PhilipC says, "What do
you guys think so far?" dcarson says, "anthropomorphic seems to add a lot
of extra engineering, the state of the art in that is expensive and
minimal" AlanSteinberg says, "Sounds like a lot of stuff for us to try to
do or even think about" PhilipC says, "I'm thinking that in the short term,
we'll start off very small" dcarson says, "yes, we need a much smaller and
focused next step, as the overall goal is worth aiming at" PhilipC says,
"Maybe 1-2 arm + hand robots while using teleoperations" PhilipC says,
"Just to give a proof-of-concept" Scottyg-1 has arrived. PhilipC says,
"We'll use it for recruiting and will focus on producing more" dcarson
says, "hi Scotty" pjbanyai has arrived. PhilipC says, "Hi Scotty and Paul"
pjbanyai says, "Hi everyone" PhilipC says, "We got started with some
preliminary discussions on the program management plan I've been working
on" PhilipC says, "Before I finalize it, I'd like to discuss it with
everyone here, which will also save me some time" PhilipC says, "I suggest
you two go back and review the recorder" PhilipC says, "It's 9 pm now and
there are five of us here. I suggest we get started and when one more
person arrives, we'll have quorum." PhilipC says, "The management committee
meeting is now called to order. It is 9:02 pm EDT." PhilipC says, "Will all
who are present please state your name and position for attendance."
dcarson says, "Dana Carson, Treasurer" PhilipC says, "Philip Crume,
Chairman" AlanSteinberg says, "Alan Steinberg, Director" Scottyg-1 says,
"scotty Gammenthaler, Assistant Treasurer" pjbanyai says, "Paul Banyai,
Vice President" PhilipC says, "Ok, that's all who are here." PhilipC says,
"Since we don't have quorum and since James didn't send us the minutes for
last month's meeting, we'll table that for next month" PhilipC says, "I'll
leave the floor open for 2 minutes to give everyone a chance to add
something to the agenda if they'd like" PhilipC says, "So far, we'll likely
be talking about the program management plan." PhilipC says, "If Ken comes
in, he can give us an update on the logo contract. " PhilipC says, "We can
also have time to discuss the website." PhilipC says, "I suggest we put all
of those in reverse order since the program management plan will likely
take up the most time" pjbanyai says, "Possible topics of discussion https
security, Facebook updates, and setting up Google Apps email/forums."
PhilipC says, "Sure" PhilipC says, "We can include that as part of the
website discussion" PhilipC says, "So for now, we have: 1) Website
discussion, 2) Logo contract update, and 3) Program Management Plan"
PhilipC says, "Sound good?" pjbanyai says, "yes" PhilipC says, "Ok, let's
get started." PhilipC says, "Does anyone here have access to the membership
numbers?" dcarson says, "at the moment the site is shutdown because of a
database problem, probably the resut of a DOS attack" Lunadyne has arrived.
PhilipC says, "Hi Ken" Lunadyne says, "Howdy everyone!" PhilipC says, "Let
the record show that Ken is here and we now have quorum" PhilipC says, "We
were just discussing the agenda" PhilipC says, "So far we have:" PhilipC
says, "So for now, we have: 1) Website discussion, 2) Logo contract update,
and 3) Program Management Plan" pjbanyai says, "We currently have 133
members." PhilipC says, "Thank you Paul" PhilipC says, "Any discussion?"
Lunadyne says, "I have a mOON dAY REQUEST" PhilipC says, "Sure, we can put
that between the website discussion and the logo contract update" PhilipC
says, "Ken, if you go back on the recorder, there are some pre-meeting
comments you're going to want to read" Lunadyne says, "I'd like to use my
discretionary budget to get a Moon Society banner, maybe some supplies."
PhilipC says, "Let's get the new logo first. " Lunadyne says, "How do I go
back and read the stuff?" pjbanyai says, ""play current on recorder""
dcarson says, "play current on recorder" PhilipC says, "Ok, that's all for
the membership committee report. Dana, do you have a treasurer's report?"
Lunadyne says, "Got it." dcarson says, "sent of some reimbursement checks,
have not heard back from the logo artist yet will email him again" bnault
has arrived. dcarson says, "questions?" pjbanyai says, "Hi Ben" bnault
says, "Hi, sorry for the late arrival" PhilipC says, "Hi Ben. Let the
record show that Ben Nault has arrived. We now have 6 voting members"
PhilipC says, "Dana, balance?" Scottyg-1 says, "Ack. I forgot to pull the
bank statenebt." dcarson says, "still around 30K, haven't got the latest
statement from Scotty" Scottyg-1 says, "Back in a minute," PhilipC says,
"While we're waiting" PhilipC says, "Ben, there are some pre-meeting
comments you're going to want to read" pjbanyai says, ""play current on
recorder"" PhilipC [to go]: back, type "play current on recorder" PhilipC
says, "to go back, type "play current on recorder""" bnault says, "read it
fast but got the gist of it" Scottyg-1 says, "Well, I don't see a statement
for Feb 28. Balamce as of Jan 31 was $30,913.59" PhilipC says, "Ok, lets
move on" PhilipC says, "Now on to the website" PhilipC says, "Scotty, you
have the floor" Scottyg-1 says, "Ok. Well apparently we have a situation. I
just became aware ofit. Dana, do you have more info?" dcarson says, "just
the email I forwarded" PhilipC says, "Scotty before we can fix the web
immediate problem we have with the website, we need to discuss the bigger
picture for this meeting." Scottyg-1 says, "Ok, let me go check my email
again." PhilipC says, "*website" Scottyg-1 says, "Ok, bigger picture..."
Lunadyne says, "Was that for the DB at the new website?" Scottyg-1 says,
"Just after last meeting, I left for a week skiing vacation in Colorado.
While there, I contractede a sinus infection that I'm just getting over."
pjbanyai says, "From the email Dana sent out, it looks like someone ran
several intensive database queries which slowed down the server. GreenGeeks
has suspended our account." Scottyg-1 says, "So I haven't made much
progress, but plan to get back on it this weekend." dcarson says, "those
are no fun" PhilipC says, "No they're not" PhilipC says, "Scotty, do you
think you can tackle the remainder of the migration or would you prefer us
to hire someone to finish it?" Scottyg-1 says, "Philip, either way is ok
with me. I think the migration is well enough organized at this point that
we can hand it off if we can find someone at a price we can afford."
PhilipC says, "What does everyone else here think?" Scottyg-1 says, "But I
find the GreenGeeks action to be quite unfriendly." Lunadyne says, "Well
they did say it brought down a server..." bnault says, "unfriendly maybe
but predictable, given the circumstance." Lunadyne says, "I'm game for
hiring someone to finish the migration - if it's reasonable. I wouldn't
want to spend more than $3-5K, and we better have a beautiful website."
Scottyg-1 says, "A problem with hiring someone is that decisions have to be
made that require some level of knowledge about the society." PhilipC says,
"I'm thinking possibly two projects: finishing the migration and possibly
modifying the style (after testing our current site on the 18-24 crowd)"
Scottyg-1 says, "So if we hire someone they will require quite a bit of
handholding." dcarson says, "finsihing the migration would take aslmost as
much of our time as doing it in house because of the hand holding" PhilipC
says, "The expert's dilemma: do you just do everything yourself or delegate
responsibility while putting in as much work in oversight/fixing mistakes"
Scottyg-1 says, "IMHO, a problem with using Drupal is thaat it is very
database intensive and has HUGE scripts to run its engine." dcarson says,
"getting a pro to do a style redesign makes sense, we don't have the
expertise" Scottyg-1 says, "I've frequently encountered slow or no response
on the new site." Lunadyne says, "I can never get my stuff to post to the
front page." Scottyg-1 says, "So it may be really loadin up the database
server even for routine levels of access." PhilipC says, "The main goal is
to get the site to a point where we're ready to recruit a larger membership
pool, and therefore become able to upgrade our service" dcarson says,
"given how common drupal is I don't see it being a problem, lots of the
sites on the server probably use it" Lunadyne says, "I do think the website
should be our top priority until it's finished." Scottyg-1 says, "Dana, I
don't why its so slow, but it is." PhilipC says, "Has that been a common
problem?" bnault says, "I agree, website is #1" Scottyg-1 says, "Philip. I
don't see much chatter about Drupal being slow. I am only relating my
experience." PhilipC says, "The big question is when will the migration be
finished? " dcarson says, "if we hire someone to retheme it and they are a
drupal expert maybe they can look at performance tuning also" PhilipC says,
"Is mid-May reasonable?" PhilipC says, "We can also hire a web designer to
retheme it during this time too." pjbanyai says, "Is it possible that the
database is on a different distant server from the web server? I set up a
copy of joomla on the discussion team page which used my Dreanmhost
database and it was excruciatingly slow. Distance can make a large impact
in communication speed." PhilipC says, "Let's not troubleshoot why the
server is slow during this meeting" PhilipC says, "We still have a lot to
cover" dcarson says, "seems unlikly, it might be on a database server in
the same server farm" PhilipC says, "Scotty, can you finish the migration
before mid-May? We'll hire a web designer to retheme it during the same
time" Scottyg-1 says, "I should be able to finish it by then." Scottyg-1
says, "I've had other work issues that have limited the time I can spend
but I think those are under control now." PhilipC says, "Is someone willing
to make a motion to hire a web designer/drupal expert? We'll set the budget
at $3-5k while negotiating the best deal possible." pjbanyai says, "Do we
know if our security certificate is secure from the newly discovered
openssl bug?" dcarson says, "unknown, I'll do some more reading on the
details" Scottyg-1 says, "Its ok. The server was not running a vulnerable
version of OpenSSL." PhilipC says, "Please, let's not troubleshoot the
website here." Scottyg-1 says, "It was/is running v1.0.0" PhilipC says,
"Can someone make a motion..." bnault says, "Motion to hire a wed designer
and developer to help with the migration of the MS website." Lunadyne says,
"Second" PhilipC says, "Thank you. Any further discussion?" bnault says, "A
maximum budget of $3-5k is set aside for the purpose." bnault says, "2
sentences/" PhilipC says, "Hearing none. Let's call a vote. All in favor of
the motion say aye. All opposed nay." bnault says, "aye" Lunadyne says,
"Aye" AlanSteinberg says, "I wanted to do this last year... grr"
AlanSteinberg says, "aye" PhilipC says, "Paul? Dana?" AlanSteinberg says,
"i want to be clear, if we are spending this much money I expect a pretty
kickass website" Lunadyne says, "Agreed" Lunadyne says, "something to make
The Mars Society jealous." PhilipC says, "I will work with the website
designer. It should have a style that somewhat resembles Tron:Legacy +
Oblivion" PhilipC says, "Hearing nothing from Dana or Paul, I will mark
them as abstained. The motion carries." dcarson says, "abstain" PhilipC
says, "Moving on. " PhilipC says, "We've spent 30 minutes on the website.
Paul, you mentioned a few other items. Let's keep it short" PhilipC says,
"Ken, you have the floor on Moon DAy" PhilipC says, "*Day" pjbanyai says,
"We have not posted anything on facebook since February." PhilipC says, "Oh
wait a sec." dcarson says, "we've posted, just all in the group page and
not the society page" Lunadyne says, "Just quickly, the head of the Greater
Fort Worth Moon Society is hounding me to get a banner for Moon Day."
Lunadyne says, "A Moon Society banner." Lunadyne says, "The Dallas Mars
Society display across the way is kicking our butt and we need to step up."
Lunadyne says, "Scotty may have comments on their display versus ours."
PhilipC says, "Moon Day as in July 20?" Lunadyne says, "Basically, I'd like
to use some of the discretionary money I was told I had to get a nice
banner which we can use at multiple events." AlanSteinberg says, "I'm good
with that" Scottyg-1 says, "Yeah, we need some work. Also need a supporting
structure for the banner." PhilipC says, "when is Moon Day?" Lunadyne says,
"This year it's Saturday, July 19th. At least the event I'm putting
together here in D/FW" PhilipC says, "I suggest we get the new logo first"
AlanSteinberg says, "is that realistic?" PhilipC says, "then for a banner,
I'm thinking of a very large background split on three panels" Lunadyne
says, "We do have a bit of time until July." AlanSteinberg says, "i mean
the new logo first" PhilipC says, "I should have put this discussion until
after the logo contract update (next)" Lunadyne says, "Alan, the agreement
is to have a logo by the end of May if everything works out." AlanSteinberg
says, "gotcha" PhilipC says, "My thought is to take our website background
image and blow it up to an image of 6 feet by 8 feet, and then split into
three 2x8 panels" Lunadyne says, "I'm thinking more one of the banners like
NSS had made for their chapters, rather than an elaborate multi-panel
display. Those things are a pain." PhilipC says, "the logo would be
tastefully placed somewhere on the panels to look very nice" Lunadyne says,
"Pain to ship, pain to set up, pain to knock down and pack." AlanSteinberg
says, "a table banner is probably suffient for now, no?" Lunadyne says,
"And should fall within my discretionary budget." PhilipC says, "Doesn't
have to be a pain" AlanSteinberg says, "like a 2x6 or 2.5 x 8 flat rollable
one" PhilipC says, "rollable one" Lunadyne says, "I'm also thinking about
getting that Last Breath ad printed on postcards for the event."
AlanSteinberg says, "one like that can be shipped for about $10 at a
time... then if you want it "higher" you can construct a frame for it from
PVC for like $25-50 that we wouldn't bother shipping arround." Lunadyne
says, "Speaking of which, I've gotten zero feedback on that from anyone."
PhilipC says, "of course that wouldn't be the only banner, we could also do
table banners too. But a big one really says that "we've arrived"" PhilipC
says, "Alan, we could use use collapsable tent frames" AlanSteinberg says,
"Ken, I thought the ad was fine, I downloaded the PDF, haven't had a chance
to read it" PhilipC says, "Ken, I enjoyed the comic. It ended on a positive
note, which I liked" PhilipC says, "Maybe in time we can ask them to do a
serial for us" PhilipC says, "Ken, I think that once we have a new logo,
you can go ahead and have a table banner made. I'm just saying that in
addition to that, I'd also like to have a multi-panel display as well."
AlanSteinberg says, "Ken, you could also poster print the ad and put it on
foam board to use as a display. Cost would probably be about $25-50 to do
that" Lunadyne says, "Great idea! Will do." PhilipC says, "Since we don't
need to take any action right now, let's move on" PhilipC says, "Ken, do
you have an update on the logo contract?" Lunadyne says, "I sent it to you
this afternoon. Haven't seen anything from Jessy." Lunadyne says, "Didn't
send it to him. Wanted your okay first, thought you might send it to him."
Lunadyne says, "Let me know if the onus is on me for that." PhilipC says,
"Yes please send it." AlanSteinberg says, "okay, so what's next? I'm going
to have to bail here in about 15 minutes or so" Lunadyne says, "P.S. gotta
head out for some work. Pays $, so gotta go." PhilipC says, "Next is the
Program Management Plan." PhilipC says, "If you had a chance to read the
comments at the beginning, any thoughts so far?" AlanSteinberg says,
"Philip sounds like we will loose quarm here in before anything can be
voted on" PhilipC says, "I'll admit that it's extremely ambitious. But
there is a growth-based structure in place" PhilipC says, "it starts off
small but will grow in accordance to our ability to recruit people"
Lunadyne says, "Seems like a big project, perhaps beyond our scope. I
really want to focus on the website until it's finished before moving to
bigger projects. Also kinda like the GeoSelene international conference on
Moon science idea that Dave had." Lunadyne says, "Boss is riding my case.
Gotta go." Lunadyne has disconnected. PhilipC says, "at this point, I just
want a sense of how everyone feels and whether or not I need to do any
major changes before I finish all of the details" dcarson says, "will
reread the log and see if I have antmore comments" AlanSteinberg says, "i
think you need to break it down to baby steps that we can set timeline
goals for... as it's written it's a lifelong project in my mind" PhilipC
says, "understand though that it's a superstructure for about 9 different
projects, each of which will have 3-5 phases" PhilipC says, "if I were to
write out individual project (not program) management plans, then the total
page length will exceed 1,000 pages" PhilipC says, "right now, i'm already
at about 25" PhilipC says, "the main point is to show what our desired
outcomes are, and to bring about qualified leaders with the expertise
needed to flesh out the projects in more detail" PhilipC says, "But my
program management plan does provide a rough time line for project
completions of each phases" AlanSteinberg says, "okay" AlanSteinberg says,
"just throwing out my thoughts" The housekeeper arrives to cart Lunadyne
off to bed. PhilipC says, "I know it's ambitious, and by no means do I
expect us to do all of it. But if we manage our growth in a smart way, we
just might be able to pull it off. " PhilipC says, "I also mentioned that
along with this program management plan, I would like for us to also
consider a political program as well." PhilipC says, "I haven't developed a
program management plan for that yet, but there are a few major political
hurdles we'll need to take on" PhilipC says, "Again, like the other
program, I would think that it will require a lot of allies and
partnerships." PhilipC says, "But given our name, we're the appropriate
body to host legal and political discussion on lunar law and politics."
PhilipC says, "Alan, would you be interested in being a part of that?"
AlanSteinberg says, "probably so... though I'm not legal scholar :)"
dcarson says, "need to make sure that it falls under what we are allowed as
a 502C3" dcarson says, "501C3" PhilipC says, "We can't use our money to
influence legislation. But since none of us here are staff, we should be
free to advocate for legislation as private citizens." PhilipC says, "I'm
with another nonprofit that deals with C3/C4 funding all the time" dcarson
says, "good" pjbanyai says, "Many of the projects seem similar to past
ASI/Moon Society projects. The many problem in the past was a breakdown in
communication. New members would join a project and not know how to help,
what has happened in the past and what is currently being worked on. "
pjbanyai says, "Many of the projects seem similar to past ASI/Moon Society
projects. The main problem in the past was a breakdown in communication.
New members would join a project and not know how to help, what has
happened in the past and what is currently being worked on. " PhilipC says,
"Hopefully we'll make smarter use of forums and have online training
programs." PhilipC says, "Does anyone have anything they'd like to add, or
think there's something I missed?" dcarson says, "not I" PhilipC says,
"I'll admit that the linchpin of this entire approach is anthropomorphic
robotics" PhilipC says, "I'm mainly thinking of it in terms of the upper
torso" PhilipC says, "If we can make them work reasonably well and at a
reasonable cost, it could be a game changer" PhilipC says, "Sounds like
there's nothing else to discuss here. I will finish up the Program
Management Plan and submit it hopefully within a week or two." PhilipC
says, "Since there's nothing left on the agenda, perhaps we can adjourn
early" bnault says, "motion to adjourn" PhilipC says, "Second?" PhilipC
says, "Any seconds?" AlanSteinberg says, "second" PhilipC says, "Any
objections?" PhilipC says, "Okay, we are now adjourned. " PhilipC says,
"Thank you all for coming." bnault says, "thank you and good night all!"
bnault has disconnected. PhilipC says, "Good night!" pjbanyai says,
"Reminder: To access our Google Apps account go to
http://www.google.com/a/moonsociety.org. Our usernames are the same as the
ones for teamdir." AlanSteinberg has disconnected. PhilipC says, "what
about passwords?" Scottyg-1 says, "What about them?" PhilipC says, "thanks"
Scottyg-1 says, "Oh, ok." Scottyg-1 says, "Missed a line." The housekeeper
arrives to cart bnault off to bed. PhilipC says, "Now Scotty, regarding our
website" pjbanyai says, "Passwords for Google Apps account" The housekeeper
arrives to cart AlanSteinberg off to bed. Scottyg-1 says, "Who was asking
about our SSL certificate?" PhilipC says, "Were you able to check the tech
support ticket?" PhilipC says, "Paul was asking about that" Scottyg-1 says,
"I read it over but don't have a clue what the problem is." PhilipC says,
"I think I have admin rights for the website but I can't find the email"
PhilipC says, "that tells me what my u/p was" dcarson says, "I can resend
it to you if its the one I sent before" PhilipC says, "if you can, i'd
appreciate it" Scottyg-1 says, "Unfortunately it will be tomorrow night
before I can give it much attention. Tonight is about done and I have to
take my wife in for some tests tomorrow morning." PhilipC says, "I'll see
what I can do" Scottyg-1 says, "Ok, command line login still works."
dcarson says, "the Heartbleed security bug has nothing to do with our
certificate, it is a bug in OpenSSL that runs on the server and deals with
the encrypting based on the keys in the certificate" dcarson says, "there
is a patch, hopefully greengeeks has or will apply the fix soon" Scottyg-1
says, "Yeah Dana, but it can lead to compromise of your security key on the
server." Scottyg-1 says, "We aren't using SSL on GreenGeeks. That's on
Randall's server." Scottyg-1 says, "As soon as I heard about it last night,
I checked to see what version of OpenSSL was running on Randall's server.
It was 1.0.0" dcarson says, " OpenSSL 1.0.0 branch is NOT vulnerable"
Scottyg-1 says, "The bug is in versions 1.0.1 thru 1.0.1f" dcarson says, "
OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable" dcarson says, "
OpenSSL 1.0.1g is NOT vulnerable" dcarson says, " OpenSSL 1.0.0 branch is
NOT vulnerable" dcarson says, " OpenSSL 0.9.8 branch is NOT vulnerable"
dcarson says, "Bug was introduced to OpenSSL in December 2011 and has been
out in the wild since OpenSSL release 1.0.1 on 14th of March 2012. OpenSSL
1.0.1g released on 7th of April 2014 fixes the bug." Scottyg-1 says, "As I
just said." dcarson says, "and once again procrastination saves the day"
pjbanyai says, "I went to our registration page and checked the
certificate. It says that it is issued by "Go Daddy Secure Certification
Authority"." Scottyg-1 says, "Yes, that is new cert we obtained this year.
(Which has a problem BTW)" dcarson says, "issuer doesn't matter, just what
version od OpenSSL is on our servers" dcarson says, "so we're OK on
heartbleed" Scottyg-1 says, "You need a command line login to check the
version. Run openssl version." Scottyg-1 says, "Dana, the new cert is for
moonsociety.org. It was supposed to be for secure.moonsociety.org. (Check
the properties.) So I can't move the secure server to secure.moonsociety.org."
Scottyg-1 says, "(It is installed now.)" dcarson says, "I thought I asked
for secure.moonsociety, will reread my emails and what I downloaded"
Scottyg-1 says, "It would be in the CSR." Scottyg-1 says, "Whatever the csr
requests is what they do." Scottyg-1 says, "The cert has www.moonsociety.org
as the alternate URL so both moonsociety.org and www.moonsociety.org work
with it, but secure.moonsociety.org gives a security warning." dcarson
says, "orderign is a web based thing so I can't double check that" PhilipC
says, "Ok, got the email and read the support ticket. " PhilipC says, "It
mentions our WAN IP address. " Scottyg-1 says, "You can run the csr back
through openssl an see what it says, but as I recall the args to do that
are obscure." dcarson says, "are you looking at secure.moonsociety.org.csr"
Scottyg-1 says, "Yeah Philip, and I don't know what that means." dcarson
says, "are you looking at secure.moonsociety.org.csr ?" dcarson says, "I
assume they want the address of a machine to allow access from that machine
so you can troubleshoot the problem" Scottyg-1 says, "No, I'm looking at
the cert properties on a web browser accessing
https://moonsociety.org/register/register1.php" dcarson says, "what cert
file is ti using?" Scottyg-1 says, "its the cert and key beginning with
"secure". (I renamed one of those from how you uploaded it.)" Scottyg-1
says, "So we could keep it straight." dcarson says, "OK, maybe I used the
wrong csr when I created the sert" Scottyg-1 says, "The file creation date
for the key was Jan and for the cert was march." dcarson says, "if so I'll
have to order a new cert probably" Scottyg-1 says, "And I think the csr
date is also jan" dcarson says, "yeah, I bought the cert but didn't
actually generate it until we were ready to start using secure.moonsociety"
dcarson says, "I'll look into it some more and if you don't email me I'll
redo it this weekend" Scottyg-1 says, "I think you said that backward.
Looks like you generated thee key and csr in jan but didn't buy the cert
until march." Scottyg-1 says, "You have to generate the key to create the
csr and you have to send the csr with the order." dcarson says, "you buy a
cert but until you use it by uploading the csr the actual cert isn't
generated" dcarson says, "so there is a "cupon" in your account" Scottyg-1
says, "Ok, different providers may have slightly different schemes. The
ones I've used required you to submit the csr with the orderr." PhilipC
says, "Dana, can you search "what is my IP address" and then update the
support ticket" Scottyg-1 says, "But I haven't used GoDaddy." dcarson says,
"need the IP address of whoever is goin to work on the problem" dcarson
says, "right now Rose and James are unavailable" PhilipC says, "I'll do
what I can tonight and if not, I'll hand it off to Scotty tomorrow" dcarson
says, "and I know almost nothing about drupal" Scottyg-1 says, "I think we
should review the server access logs to see if there was excessive
activity." dcarson says, "yeah, seems liek the first step" Scottyg-1 says,
"I think you have to go through account manager to get to the logs."
dcarson says, "can we get those through the account login or cpanel?"
PhilipC says, "Otoh, I don't know mysql very well although I'll be taking a
class on it soon. Maybe better to let scotty handle it for now" dcarson
says, "problem probably isn't mysql but some other access that is
triggering lots of mysql activity" Scottyg-1 says, "Through cpanel Dana but
they recently changed that so you go through the account manager."
Scottyg-1 [to get]: to it. dcarson says, "either a DOS attack or some bug
that keeps looping in drupal" PhilipC says, "the traffic analysis doesn't
seem to indicate a DDOS" PhilipC says, "there's no telltale spike of a
DDOS" PhilipC says, "our heaviest activity was FTP when we originally
transferred content " Scottyg-1 says, "Yeah, I was suspicious of a Drupal
problem." Scottyg-1 says, "But DOS should be eliminated first." Scottyg-1
says, "Should have been moderate ftp about a month ago when I was
transferring content." PhilipC says, "Going deeper, it looks like there was
a big spike in FTP traffic yesterday at around 214 mb" PhilipC says, "that
was a month ago, sorry looked at march" Scottyg-1 says, "Hmmm. Thats
suspicious. Wassn't me or James or Rose I'm pretty sure." Scottyg-1 says,
"Ah - that was me." PhilipC says, "checking out the more detailed logs for
april, nothing that really stands out" PhilipC says, "no big spikes"
dcarson says, "10-11 this mornign CPU spiked to 100% untilthey killed it"
Scottyg-1 says, "Our installation of Drupal has a couple of minor
modifications to keep /drupal/ from showing in the server paths, but
nothing that should affect the database." Scottyg-1 says, "We have quite a
few modules installed including a couple of custom modules, but again
noting I'm aware of that woul create a database problem." pjbanyai says,
"Our IP address for moonsociety.org is 96.255.255.172. Unless you use a
Drupal ftp plugin this should not access the drupal database. I looked at
the email and it mentioned 3 blocked ip addresses. I searched for them and
two of them are known forum spam bots. Could this have anything to do with
the old moonsocietyforum.com which has been closed due to spam for a long
time. A google search for the forum will bring up our address as well.
Perhaps the owner of a spam bot is using a search program to locate
forums." Scottyg-1 says, "I've had a problem from time-to-time where the
server reports a problem accessing the database. It generally goes away in
a few minutes." PhilipC says, "Almost forgot" 
-- End log: Wednesday, April 9, 2014 11:32:30 pm ASI Meeting Server time --