Tuesday, September 25, 2007

You'll notice I have updated the Computronium blog in a while. I did take a couple of weeks off, but when I came back, I couldn't seem to log in, and so put off debugging the problem for another night. Well, it looks like the reason I couldn't log in was because the site was hacked. You'll notice that now all the posts are signed "Mazhar_Fashist", who is not me, and is probably a team of guys.

I'm steaming mad right now. Guys who do this sort of thing are like bombers at 30,000 feet who don't see the damage they do. Or worse, they know and don't care.

I'm having a hard time finding a description of how the hack was done (probably some sort of SQL injection) so I haven't fixed things yet. Fortunately it looks like their only goal is defacement. I'll probably have to reinstall the whole mess, but even if I do, how will I know it won't happen again? Wordpress, which the blog is run on, is a nice slick piece of software, but suffers from its own popularity, and thus is a target for hackers. I could try something less popular but there's always a tradeoff between popularity and slickness. Bugger!

No comments: