Comments on: Blog Hacks Coming Back to Roost? http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/ Tracking the Internet Evolution Wed, 08 Oct 2008 03:37:12 +0000 http://wordpress.org/?v=MU hourly 1 By: nathanr|ca » Vulnerable WordPress Blogs Not Being Indexed http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-882351 nathanr|ca » Vulnerable WordPress Blogs Not Being Indexed Fri, 06 Jun 2008 09:05:53 +0000 http://gigaom.com/?p=12080#comment-882351 [...] on various high profile blogs and websites. What was even more interesting was the fact that some of these hacks and exploitations might have come from covert and encrypted code hidden in various themes available for free over the [...] [...] on various high profile blogs and websites. What was even more interesting was the fact that some of these hacks and exploitations might have come from covert and encrypted code hidden in various themes available for free over the [...]

]]> By: blog.rotracker.net » Blog Archive » Vulnerable WordPress Blogs Not Being Indexed http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-877311 blog.rotracker.net » Blog Archive » Vulnerable WordPress Blogs Not Being Indexed Wed, 07 May 2008 21:11:46 +0000 http://gigaom.com/?p=12080#comment-877311 [...] on various high profile blogs and websites. What was even more interesting was the fact that some of these hacks and exploitations might have come from covert and encrypted code hidden in various themes available for free over the [...] [...] on various high profile blogs and websites. What was even more interesting was the fact that some of these hacks and exploitations might have come from covert and encrypted code hidden in various themes available for free over the [...]

]]> By: Technorati no indexará blogs vulnerables » Ricotero's Blog http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-871933 Technorati no indexará blogs vulnerables » Ricotero's Blog Sat, 19 Apr 2008 17:40:59 +0000 http://gigaom.com/?p=12080#comment-871933 <p>[...] a la reciente ola de ataques a blogs usando viejas versiones de Wordpress, que en muchos casos intentan agregar spam links y otras cosillas. Los blogs de ZDnet parecen haber sido una de las víctimas. Si aún están usando una versión [...]</p> [...] a la reciente ola de ataques a blogs usando viejas versiones de WordPress, que en muchos casos intentan agregar spam links y otras cosillas. Los blogs de ZDnet parecen haber sido una de las víctimas. Si aún están usando una versión [...]

]]> By: google hacks http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-871474 google hacks Thu, 17 Apr 2008 00:11:21 +0000 http://gigaom.com/?p=12080#comment-871474 <p>[...] load on Google's ...http://richard.jones.name/google-hacks/gmail-filesystem/gmail-filesystem.htmlBlog Hacks Coming Back to Roost? - GigaOm???I was getting listed in google for all manner of sneaky and NSFW terms, so that people could [...]</p> [...] load on Google’s …http://richard.jones.name/google-hacks/gmail-filesystem/gmail-filesystem.htmlBlog Hacks Coming Back to Roost? - GigaOm???I was getting listed in google for all manner of sneaky and NSFW terms, so that people could [...]

]]> By: Two superheroes has a new theme « Two Superheroes http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-871118 Two superheroes has a new theme « Two Superheroes Mon, 14 Apr 2008 11:53:58 +0000 http://gigaom.com/?p=12080#comment-871118 <p>[...] Blog Hacks Coming Back to Roost? [via Zemanta] [...]</p> [...] Blog Hacks Coming Back to Roost? [via Zemanta] [...]

]]> By: Ro http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-871079 Ro Mon, 14 Apr 2008 05:45:41 +0000 http://gigaom.com/?p=12080#comment-871079 <p>Ha, the dark side of AJAX! Check your Wordpress themes -- look in the footer file first -- for a long string of characters that doesn't look like HTML, PHP or Javascript. It's an encrypted string, and anyone can insert it into any theme, and then upload that theme anywhere they like.</p> <p>I started noticing this a year or so ago after downloading themes from the 'free themes' site. Stick with Wordpress.org's theme view, or learn enough code to sniff out bad stuff.</p> Ha, the dark side of AJAX! Check your WordPress themes — look in the footer file first — for a long string of characters that doesn’t look like HTML, PHP or Javascript. It’s an encrypted string, and anyone can insert it into any theme, and then upload that theme anywhere they like.

I started noticing this a year or so ago after downloading themes from the ‘free themes’ site. Stick with WordPress.org’s theme view, or learn enough code to sniff out bad stuff.

]]> By: Technorati: Vulnerable WordPress Blogs Not Being Indexed » D' Technology Weblog: Technology, Blogging, Tips, Tricks, Computer, Hardware, Software, Tutorials, Internet, Web, Gadgets, Fashion, LifeStyle, Entertainment, News and more by Deepak Gupta. http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-870260 Technorati: Vulnerable WordPress Blogs Not Being Indexed » D' Technology Weblog: Technology, Blogging, Tips, Tricks, Computer, Hardware, Software, Tutorials, Internet, Web, Gadgets, Fashion, LifeStyle, Entertainment, News and more by Deepak Gupta. Wed, 09 Apr 2008 07:26:40 +0000 http://gigaom.com/?p=12080#comment-870260 <p>[...] on various high profile blogs and websites. What was even more interesting was the fact that some of these hacks and exploitations might have come from covert and encrypted code hidden in various themes available for free over the [...]</p> [...] on various high profile blogs and websites. What was even more interesting was the fact that some of these hacks and exploitations might have come from covert and encrypted code hidden in various themes available for free over the [...]

]]> By: Technorati no indexará blogs vulnerables http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-870160 Technorati no indexará blogs vulnerables Tue, 08 Apr 2008 19:49:16 +0000 http://gigaom.com/?p=12080#comment-870160 <p>[...] a la reciente ola de ataques a blogs usando viejas versiones de Wordpress, que en muchos casos intentan agregar spam links y otras cosillas. Los blogs de ZDnet parecen haber sido una de las víctimas. Si aún están usando una versión [...]</p> [...] a la reciente ola de ataques a blogs usando viejas versiones de WordPress, que en muchos casos intentan agregar spam links y otras cosillas. Los blogs de ZDnet parecen haber sido una de las víctimas. Si aún están usando una versión [...]

]]> By: Weblog Tools Collection » Blog Archive » Vulnerable WordPress Blogs Not Being Indexed http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-870142 Weblog Tools Collection » Blog Archive » Vulnerable WordPress Blogs Not Being Indexed Tue, 08 Apr 2008 17:27:59 +0000 http://gigaom.com/?p=12080#comment-870142 <p>[...] on various high profile blogs and websites. What was even more interesting was the fact that some of these hacks and exploitations might have come from covert and encrypted code hidden in various themes available for free over the [...]</p> [...] on various high profile blogs and websites. What was even more interesting was the fact that some of these hacks and exploitations might have come from covert and encrypted code hidden in various themes available for free over the [...]

]]> By: Ian Kallen http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-870136 Ian Kallen Tue, 08 Apr 2008 16:35:54 +0000 http://gigaom.com/?p=12080#comment-870136 <p>FWICT, the XML-RPC vulnerability that wp 2.3.3 fixed seems to be having greater impact than the nefarious theme download hack -- old installations being compromised hundreds of times a day. Technorati's crawler is no longer updating vulnerable blogs bearing symptoms of being compromised. I posted a <a href="http://technorati.com/weblog/2008/04/424.html" rel="nofollow">heads up</a> yesterday and more <a href="http://www.arachna.com/roller/page/spidaman/20080407#the_wordpress_security_cancer" rel="nofollow">details</a> last night. -Ian Technorati</p> FWICT, the XML-RPC vulnerability that wp 2.3.3 fixed seems to be having greater impact than the nefarious theme download hack — old installations being compromised hundreds of times a day. Technorati’s crawler is no longer updating vulnerable blogs bearing symptoms of being compromised. I posted a heads up yesterday and more details last night.
-Ian
Technorati

]]> By: Michael http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-870121 Michael Tue, 08 Apr 2008 14:50:56 +0000 http://gigaom.com/?p=12080#comment-870121 <p>@Grant yea, I think a lot of people are downloading themes from untrustworthy sources. One of the major problems is that themes.wordpress.net hasn't allowed theme developers to upload new themes or updates to old themes for nearly 8 months, that means if you want fresh new themes you have to look for them elsewhere.</p> @Grant yea, I think a lot of people are downloading themes from untrustworthy sources. One of the major problems is that themes.wordpress.net hasn’t allowed theme developers to upload new themes or updates to old themes for nearly 8 months, that means if you want fresh new themes you have to look for them elsewhere.

]]> By: Grant http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-870100 Grant Tue, 08 Apr 2008 12:39:24 +0000 http://gigaom.com/?p=12080#comment-870100 <p>Um. Don't execute untrustworthy code? Did people suddenly go mad and start downloading themes from all over the place, or are the affected themes from semi-trustable sources?</p> Um. Don’t execute untrustworthy code? Did people suddenly go mad and start downloading themes from all over the place, or are the affected themes from semi-trustable sources?

]]> By: fabianschonholz http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-870046 fabianschonholz Tue, 08 Apr 2008 05:11:18 +0000 http://gigaom.com/?p=12080#comment-870046 <p>Wow ... that is clever!! Could WordPress certify themes?</p> Wow … that is clever!! Could WordPress certify themes?

]]> By: Harold http://gigaom.com/2008/04/07/blog-hacks-coming-back-to-roost/#comment-869985 Harold Mon, 07 Apr 2008 23:00:12 +0000 http://gigaom.com/?p=12080#comment-869985 <p>What are the themes most commonly affected?</p> What are the themes most commonly affected?

]]>