The J Spot is back.


I blogged about cracking incidents here and here (on blogspot, since my i.ph site was down).


Thanks to my colleague, Sherwin, for restoring from backup, and tracking down the method by which the cracker

attacked.  Apparently, the individual (or group?) was able to gain

access to my password thru a plugin I had previously installed (and

already un-installed, or apparently, at least).  This particular

plugin used the server’s MySQL database, and hence provided an

interface by which certain database info can be accessed over the web.


It’s good that we were able to discover the security hole caused by

this plugin.  And it’s good that it was my site that was

attacked.  After all, it’s part of my TOR to seek out these types

of problems.


Thanks Sherwin!  Promise, I won’t screw up my site again (or in the next few days, at least).


Be mobile. Be free. Read netbook news and reviews.

Tags: | Viewed 802 times

Related Posts