It'll Never Fly » security http://wqoq.com Clever... not good, but clever. Thu, 20 Oct 2011 19:50:06 +0000 en hourly 1 http://wordpress.org/?v=3.3-beta1-18972 Neat! I was hacked. http://wqoq.com/2007/05/16/neat-i-was-hacked/ http://wqoq.com/2007/05/16/neat-i-was-hacked/#comments Thu, 17 May 2007 03:01:56 +0000 Bob http://wqoq.com/2007/05/16/neat-i-was-hacked/ My non-blogging site, rjmaguire.com, that mainly hosts my genealogy stuff, was hacked recently. The perp found an underground published security hole in the 3rd party genealogy software I use called TNG: The Next Generation. I found a message on their support forums that describes how to close the hole and now it has. I’ve also replaced the damaged file (as they at least were kind enough to only do a minimal amount of damage).

I don’t blame the author of the software or the PHP programming language. It was an easy mistake to make. I still intend on using the software (and upgrade to the newest version even). It was my own fault for not keeping a closer eye on the server logs and on the TNG mailing list to notice that this kind of thing was going on.

I haven’t actually been able to pinpoint the exact day or time when the hack occurred. The first attempts began in mid-March. I don’t think the hack actually occurred until just a few days ago, when I noticed the page on my site was posted in a Spanish-language forum as a badge of honour as it were. Thankfully, the kids trying this stuff out aren’t really that bright, as witnessed by a lot of failures to even copy and paste correctly.

One of them actually managed to copy a couple of executables that looked like IRC server software or something, but was undoubtedly stopped cold when it had no chance of running on my server’s architecture.


These are the IPs of the machines from which these kiddies attempted their hacks, followed by the URLs where they hosted their payloads:

Update (18 Jul 2007): I’ve created a quick and dirty live feed of hack attempts and the external links from where the attack scripts are being hosted, seeing as I’m still getting the odd attempt now and then…

Update (15 Sep 2007): List removed since it’s grossly out of date.

]]> http://wqoq.com/2007/05/16/neat-i-was-hacked/feed/ 8 links for 2007-02-08 http://wqoq.com/2007/02/08/links-for-2007-02-08/ http://wqoq.com/2007/02/08/links-for-2007-02-08/#comments Thu, 08 Feb 2007 12:18:12 +0000 Bob http://wqoq.com/2007/02/08/links-for-2007-02-08/
  • Popular firmware updates for various wifi routers, in particular the Linksys WRT54G.
  • Another Linksys firmware provider
  • John Gruber’s analysis of the Steve Jobs letter and its responses.
    • ]]>     http://wqoq.com/2007/02/08/links-for-2007-02-08/feed/ 0     links for 2007-01-30 http://wqoq.com/2007/01/30/links-for-2007-01-30/ http://wqoq.com/2007/01/30/links-for-2007-01-30/#comments Tue, 30 Jan 2007 12:19:02 +0000 Bob http://wqoq.com/2007/01/30/links-for-2007-01-30/
  • I’ve been trying to get this up and running for years, but have just been too damn lazy. I made it my mission to get it working tonight and I finally did. Yay!
  • Screensaver that makes your currently open windows and desktop picture fly around in a virtual 3D space behind your monitor.
  • I’m not sure which is cooler: what the guy did, that he did it with a Max Headroom mask on, or that he did it during Doctor Who. Check out the video!
  • Like most things in life: moderation and common sense. Two things that humans are very bad at.
    • ]]>     http://wqoq.com/2007/01/30/links-for-2007-01-30/feed/ 0     links for 2007-01-17 http://wqoq.com/2007/01/17/links-for-2007-01-17/ http://wqoq.com/2007/01/17/links-for-2007-01-17/#comments Wed, 17 Jan 2007 12:17:49 +0000 Bob http://wqoq.com/2007/01/17/links-for-2007-01-17/
  • Coffee table book of mugshots for least offensive crimes.
  • EXIF header editor
  • Protecting a WordPress blog from script kiddies.
    • ]]>     http://wqoq.com/2007/01/17/links-for-2007-01-17/feed/ 0     links for 2007-01-13 http://wqoq.com/2007/01/13/links-for-2007-01-13/ http://wqoq.com/2007/01/13/links-for-2007-01-13/#comments Sat, 13 Jan 2007 12:18:06 +0000 Bob http://wqoq.com/2007/01/13/links-for-2007-01-13/
  • A guy couldn’t ship his empty containers through FedEx because it was the labels, the words on the boxes, that made them dangerous. Sheesh…
  • A 150 year old anatomy book. I find this kind of stuff fascinating.
  • Bloody Americans always coming up here and eating our mall food and drinking our Horton’s. We should send ‘em back to England where they came from.
  • Sealand has a very interesting history. Make sure to dig through the links and read on about it.
  • An interesting Wired article on the upcoming changes being made to James Randi’s Million Dollar Challenge.
  • People really need to stop using MSN. It’s a scourge I tell ya!
  • Cue the Toy Story aliens “Oooooooh…” sound.
    • ]]>     http://wqoq.com/2007/01/13/links-for-2007-01-13/feed/ 0     links for 2007-01-05 http://wqoq.com/2007/01/05/links-for-2007-01-05/ http://wqoq.com/2007/01/05/links-for-2007-01-05/#comments Fri, 05 Jan 2007 12:18:30 +0000 Bob http://wqoq.com/2007/01/05/links-for-2007-01-05/
  • Google group for the “Month of Apple Bugs” fixes by Landon Fuller
  • The funny web site of illustrator, Joe Sayers.
  • Any funny online comic strip, this time by Nicholas Gurewitch.
    (tags: funny comics)
  • Handy dandy little 3-in-1 clock, timer, and stop watch for the kitchen. They also have analog timers available, or dual digital/analog timers (see bottom). Counts down or up depending on if you set a time or not.
    (tags: gadgets food)
    • ]]>     http://wqoq.com/2007/01/05/links-for-2007-01-05/feed/ 0     links for 2007-01-04 http://wqoq.com/2007/01/04/links-for-2007-01-04/ http://wqoq.com/2007/01/04/links-for-2007-01-04/#comments Thu, 04 Jan 2007 12:18:13 +0000 Bob http://wqoq.com/2007/01/04/links-for-2007-01-04/
  • A few guys claim they’ve found enough bugs in OS X to report one each day for a whole month. Not sure I agree with their method of sensationalizing them to report them.
  • He’s going to try and provide fixes each day for each bug as they show up.
  • The ultimate gift for your friend, the writer. A pen that never runs out of ink… because it doesn’t use any.
  • Quake model viewer
  • Model viewer for World of Warcraft
  • In that first video of the large pool, I wished someone had cannonballed.
    • ]]>     http://wqoq.com/2007/01/04/links-for-2007-01-04/feed/ 0     links for 2006-12-08 http://wqoq.com/2006/12/08/links-for-2006-12-08/ http://wqoq.com/2006/12/08/links-for-2006-12-08/#comments Fri, 08 Dec 2006 12:18:15 +0000 Bob http://wqoq.com/2006/12/08/links-for-2006-12-08/
  • Great Cold War missile crisis fallout shelter material from 1962.
  • A blog about teaching English in Japan.
  • Real life CTF in Toronto (Capture The Flag)
  • Flags of the World… rebranded
  • You go girl!
  • O’Reilly is such a tool.
  • Video of newsreels from yesteryear.
  • The Prelinger Archvies, films of historic significance.
  • Historical Nuclear Test Site films from the U.S. Department of Energy, National Nuclear Security Administration
    • ]]>     http://wqoq.com/2006/12/08/links-for-2006-12-08/feed/ 0     links for 2006-12-07 http://wqoq.com/2006/12/07/links-for-2006-12-07/ http://wqoq.com/2006/12/07/links-for-2006-12-07/#comments Thu, 07 Dec 2006 12:18:23 +0000 Bob http://wqoq.com/2006/12/07/links-for-2006-12-07/
  • Soviet Russian architecture from the 70s and 80s.
  • Wil Wheaton’s Christmas gift guide on SuicideGirls.com. Hey, I read it for the articles, okay? I use to love those RadioShack electronic kits.
  • Looks like a password manager on steroids.
  • Tracks your wishlist and alerts you when an item’s price reaches your set threshold.
    • ]]>     http://wqoq.com/2006/12/07/links-for-2006-12-07/feed/ 0     Passed through security http://wqoq.com/2006/10/27/passed-through-security/ http://wqoq.com/2006/10/27/passed-through-security/#comments Fri, 27 Oct 2006 20:00:49 +0000 Bob http://wqoq.com/2006/10/27/passed-through-security/ Passed through security

    Passed through security. Fairly painless procedure. Booked online. Checked in online. Only had human contact with three WestJet staff people. Now I play the waiting game. They just changed the departure gate, presumably to keep me on my toes. Not sure when I’ll get to post next.

    ]]>     http://wqoq.com/2006/10/27/passed-through-security/feed/ 0