{
  "attachments": [],
  "comments_archived": true,
  "date": "2007-11-14T02:52:46.000Z",
  "layout": "post",
  "tags": [
    "asides",
    "spam",
    "hacked",
    "security",
    "penis",
    "viagra"
  ],
  "title": "hacked?",
  "wordpress_id": 1072,
  "wordpress_slug": "hacked",
  "wordpress_url": "http://decafbad.com/blog/2007/11/13/hacked",
  "year": "2007",
  "month": "11",
  "day": "13",
  "isDir": false,
  "slug": "hacked",
  "type": "entry",
  "postName": "2007-11-13-hacked",
  "html": "<p>Crap.  Somehow, someone's gotten access to edit my posts on this blog and have crapped in loads of viagra linkspam.  I've probably destroyed the evidence already by deleting the spam as soon as I saw it — and as soon as some friendly readers emailed me pointing at more.  I've done the obvious, changed my password and tried to lock down the admin pages a bit.  But, I don't know who, how, or why.  Ugh.</p>\n<p>So, my apologies if anyone sees any offers for penis pills around these parts.  A heads up would be kindly appreciated as I scour my records and grumble.</p>\n<div id=\"comments\" class=\"comments archived-comments\"><h3>Archived Comments</h3>\n<ul class=\"comments\">\n<li class=\"comment\" id=\"comment-221083270\">\n<div class=\"meta\">\n<div class=\"author\">\n<a class=\"avatar image\" rel=\"nofollow\" href=\"http://www.tanershot.com\"><img src=\"http://www.gravatar.com/avatar.php?gravatar_id=0e4c3f9f5db1527faf311a4be230bf35&amp;size=32&amp;default=http://mediacdn.disqus.com/1320279820/images/noavatar32.png\" width=\"\" height=\"\"></a>\n<a class=\"avatar name\" rel=\"nofollow\" href=\"http://www.tanershot.com\">Tanner</a>\n</div>\n\n\n<p><a href=\"#comment-221083270\" class=\"permalink\"><time datetime=\"2007-11-14T15:18:29\">2007-11-14T15:18:29</time></a></p>\n</div>\n\n\n<div class=\"content\"><p>I have heard that wordpress needs to be updated to the security point releases consistently. \nThis is something that I try to stay on top of. Don't remember this being that big a deal with movable type. Could be a design flaw for wordpress, or perhaps PHP.</p>\n<p>At one point I was using rsync to synchronize the new default files, and then hitting the dashboard to update the db design if it had changed. last update I did manually since I needed to move some photo links around in mysql. I still think rsync is a good tool for this task. Though lately they have been obseleting some files and they probably shouldn't be left around. what were the permissions on your files?</p>\n<p>-tanner</p></div>\n\n\n</li>\n<li class=\"comment\" id=\"comment-221083272\">\n<div class=\"meta\">\n<div class=\"author\">\n<a class=\"avatar image\" rel=\"nofollow\" href=\"http://richardathome.wordpress.com\"><img src=\"http://www.gravatar.com/avatar.php?gravatar_id=fff0d05378ec238b0ccc6f5bedbf0adb&amp;size=32&amp;default=http://mediacdn.disqus.com/1320279820/images/noavatar32.png\" width=\"\" height=\"\"></a>\n<a class=\"avatar name\" rel=\"nofollow\" href=\"http://richardathome.wordpress.com\">Richard@Home</a>\n</div>\n\n\n<p><a href=\"#comment-221083272\" class=\"permalink\"><time datetime=\"2007-11-14T15:26:06\">2007-11-14T15:26:06</time></a></p>\n</div>\n\n\n<div class=\"content\"><p>Are you hosting on dreamhost?</p>\n<p>http://blog.dreamhosters.com/2007/06/06/dreamhost-ftp-accounts-hacked/</p></div>\n\n\n</li>\n<li class=\"comment\" id=\"comment-221083273\">\n<div class=\"meta\">\n<div class=\"author\">\n<a class=\"avatar image\" rel=\"nofollow\" href=\"http://www.decafbad.com\"><img src=\"http://www.gravatar.com/avatar.php?gravatar_id=2377f34a68801b861c3e54e1301f0dce&amp;size=32&amp;default=http://mediacdn.disqus.com/1320279820/images/noavatar32.png\" width=\"\" height=\"\"></a>\n<a class=\"avatar name\" rel=\"nofollow\" href=\"http://www.decafbad.com\">l.m.orchard</a>\n</div>\n\n\n<p><a href=\"#comment-221083273\" class=\"permalink\"><time datetime=\"2007-11-14T17:57:29\">2007-11-14T17:57:29</time></a></p>\n</div>\n\n\n<div class=\"content\"><p>Thankfully no, not on dreamhost.  Unfortunately, that means I don't have that excuse. :)</p></div>\n\n\n</li>\n</ul>\n\n\n</div>\n\n\n",
  "body": "Crap.  Somehow, someone's gotten access to edit my posts on this blog and have crapped in loads of viagra linkspam.  I've probably destroyed the evidence already by deleting the spam as soon as I saw it — and as soon as some friendly readers emailed me pointing at more.  I've done the obvious, changed my password and tried to lock down the admin pages a bit.  But, I don't know who, how, or why.  Ugh.\r\n\r\nSo, my apologies if anyone sees any offers for penis pills around these parts.  A heads up would be kindly appreciated as I scour my records and grumble.\n\n<div id=\"comments\" class=\"comments archived-comments\">\n            <h3>Archived Comments</h3>\n            \n        <ul class=\"comments\">\n            \n        <li class=\"comment\" id=\"comment-221083270\">\n            <div class=\"meta\">\n                <div class=\"author\">\n                    <a class=\"avatar image\" rel=\"nofollow\" \n                       href=\"http://www.tanershot.com\"><img src=\"http://www.gravatar.com/avatar.php?gravatar_id=0e4c3f9f5db1527faf311a4be230bf35&amp;size=32&amp;default=http://mediacdn.disqus.com/1320279820/images/noavatar32.png\"/></a>\n                    <a class=\"avatar name\" rel=\"nofollow\" \n                       href=\"http://www.tanershot.com\">Tanner</a>\n                </div>\n                <a href=\"#comment-221083270\" class=\"permalink\"><time datetime=\"2007-11-14T15:18:29\">2007-11-14T15:18:29</time></a>\n            </div>\n            <div class=\"content\"><p>I have heard that wordpress needs to be updated to the security point releases consistently. \nThis is something that I try to stay on top of. Don't remember this being that big a deal with movable type. Could be a design flaw for wordpress, or perhaps PHP.</p>\n\n<p>At one point I was using rsync to synchronize the new default files, and then hitting the dashboard to update the db design if it had changed. last update I did manually since I needed to move some photo links around in mysql. I still think rsync is a good tool for this task. Though lately they have been obseleting some files and they probably shouldn't be left around. what were the permissions on your files?</p>\n\n<p>-tanner</p></div>\n            \n        </li>\n    \n        <li class=\"comment\" id=\"comment-221083272\">\n            <div class=\"meta\">\n                <div class=\"author\">\n                    <a class=\"avatar image\" rel=\"nofollow\" \n                       href=\"http://richardathome.wordpress.com\"><img src=\"http://www.gravatar.com/avatar.php?gravatar_id=fff0d05378ec238b0ccc6f5bedbf0adb&amp;size=32&amp;default=http://mediacdn.disqus.com/1320279820/images/noavatar32.png\"/></a>\n                    <a class=\"avatar name\" rel=\"nofollow\" \n                       href=\"http://richardathome.wordpress.com\">Richard@Home</a>\n                </div>\n                <a href=\"#comment-221083272\" class=\"permalink\"><time datetime=\"2007-11-14T15:26:06\">2007-11-14T15:26:06</time></a>\n            </div>\n            <div class=\"content\"><p>Are you hosting on dreamhost?</p>\n\n<p>http://blog.dreamhosters.com/2007/06/06/dreamhost-ftp-accounts-hacked/</p></div>\n            \n        </li>\n    \n        <li class=\"comment\" id=\"comment-221083273\">\n            <div class=\"meta\">\n                <div class=\"author\">\n                    <a class=\"avatar image\" rel=\"nofollow\" \n                       href=\"http://www.decafbad.com\"><img src=\"http://www.gravatar.com/avatar.php?gravatar_id=2377f34a68801b861c3e54e1301f0dce&amp;size=32&amp;default=http://mediacdn.disqus.com/1320279820/images/noavatar32.png\"/></a>\n                    <a class=\"avatar name\" rel=\"nofollow\" \n                       href=\"http://www.decafbad.com\">l.m.orchard</a>\n                </div>\n                <a href=\"#comment-221083273\" class=\"permalink\"><time datetime=\"2007-11-14T17:57:29\">2007-11-14T17:57:29</time></a>\n            </div>\n            <div class=\"content\"><p>Thankfully no, not on dreamhost.  Unfortunately, that means I don't have that excuse. :)</p></div>\n            \n        </li>\n    \n        </ul>\n    \n        </div>\n    ",
  "parentPath": "./content/posts/archives/2007",
  "path": "2007/11/13/hacked",
  "needsBuild": true,
  "prevPostPath": "2007/11/12/cheating-on-my-real-blog",
  "prevPostTitle": "cheating on my \"real\" blog",
  "nextPostPath": "2007/11/20/wow-eve-and-delicious",
  "nextPostTitle": "wow, eve, and delicious"
}