Hacked sites make me sad with an "m"
Let me tell you my favorite number: 444. Why? Because that's now the permissions number I place on all my configuration.php files. Why? Because three of my sites were hacked yesterday and today by snot-nosed kids in Turkey and Russia. I have spent all day - ALL DAY - securing sites (which I guess is a good thing) and fixing sites - all which were hacked in different ways by different Hackers. All of this AFTER I ran the security upgrades released by Joomla. WTH?
Two of the sites were noticed by clients who freaked out - which they should - because it can look scary when you don't know what's going on. Two of the sites were easy stupid fixes - replace the config file and lock it down. Amateaurs. The third was well-done. This punk actually ran an SQL injection that replaced the admin password (my password) with random letters and deleted all the other site admins. Too bad I actually know what I'm doing and can replace the password in the database using a password string from another site. And I also have backups of all my databases and site files. The crappy part is that it's taken all this time. Time is money and I need to run out and meet a client soon - but have to do all this crap first.
I'm screaming on the inside about all this - you just can't hear me because your ... Outside The Box.
And thus, I think a new catch-phrase is born. We'll see where I take it.

0 Comments:
Post a Comment
<< Home