racoma.com.phJ. Angelo Racoma on technology, economics, writing, problogging, and getting things done

The J Spot is back.

I blogged about cracking incidents here and here (on blogspot, since my i.ph site was down).

Thanks to my colleague, Sherwin, for restoring from backup, and tracking down the method by which the cracker
attacked.  Apparently, the individual (or group?) was able to gain
access to my password thru a plugin I had previously installed (and
already un-installed, or apparently, at least).  This particular
plugin used the server’s MySQL database, and hence provided an
interface by which certain database info can be accessed over the web.

It’s good that we were able to discover the security hole caused by
this plugin.  And it’s good that it was my site that was
attacked.  After all, it’s part of my TOR to seek out these types
of problems.

Thanks Sherwin!  Promise, I won’t screw up my site again (or in the next few days, at least).

• Tweet
• "&title=""">

Share: