Network Solutions (netsol), the company behind domain names had a rough day today and it dragged its customers down with it. Apparently a DDoS attack knocked out their network making hosted web sites and DNS servers inaccessible. This site, while not hosted on netsol, does have its name servers hosted with them and so it — Continue reading »
PRISM, Spies, and Leaks
While the US and much of the world is embroiled in the so-called scandal of US government spying on its citizens, I am left wondering why this is news at all? The Patriot Act enacted after September 11, 2001 was designed to do exactly that, spy on voice and data communications in the US. Yes — Continue reading »
Disabling SELinux
I know it's sacrilegious for some to disable a security feature on a platform, but SELinux (an enhanced Linux security feature) has left me no choice but doing exactly that on Linux. SELinux was added to Linux to give it additional security measures beyond what it inherited From Unix. By default many of the Linux — Continue reading »
Wordpress Base64 Hack or PHP-CGI Hack? part III
After being hit by the Wordpress base64 hack twice within a couple of weeks, it finally dawned me that the PHP CGI flaw was the culprit. The attack robots (a la Metasploit) use the knowledge of PGP CGI flaw together with the well-known scripts of popular products (Wordpress, Joomla, Drupal, etc.) to penetrate sites and — Continue reading »
Wordpress Base64 Hack or PHP-CGI Hack? part II
To be factual about it, my site was hacked twice in exactly the same way over a period of couple of weeks. The first time around I noticed it when the feeds coming via Feedburner kept crashing the RSS readers because of a javascript malware block inserted right at the top of the feed. Turns out — Continue reading »
Wordpress Base64 Hack or PHP-CGI Hack?
A couple of months ago I started noticing that this blog's RSS feed, which is via Feedburner, wasn't coming through on some RSS readers. After some tests I discovered that the feed actually contained a malicious javascript block at the top. That was breaking the XML format, causing the RSS readers to fail. Turns out — Continue reading »
Block China Web Traffic
Sometimes I'm so tempted to to do this: Block China Web Traffic IP Addresses and Chinese Hackers. Of course if everyone blocked everyone else indiscriminately that would go against the spirit of the Internet. What's needed is for the ISPs to get off their lazy and greedy butts and block attacks at their sources. Certainly a bunch of — Continue reading »
SYN Flood DDOS
To the couple of visitors of this website, I'm sorry for the 2-day outage earlier this week. It was a DDOS (distributed denial of service) attack and I never found out who was behind it and why. The problem started in the early morning hours with an outage alert from the remote monitoring service. The — Continue reading »