Puppy Linux Discussion Forum

wingruntled · Joined: 20 Feb 2007 Posts: 287 Location: Great Lakes

Sure enough Sad

And I just got done from a complete reinstall of of everything, so this isn't a cache or worm issue.
Not yet anyway :/

BarryK · Posted: Fri 07 Mar 2008, 05:14 Post subject:

wingruntled · Joined: 20 Feb 2007 Posts: 287 Location: Great Lakes

muggins · Joined: 20 Jan 2006 Posts: 6660 Location: lisbon

alienjeff · Joined: 08 Jul 2006 Posts: 2290 Location: Winsted, CT - USA

@Barry
Thanks for the update. To leave the iframe exploit online is as much as supporting the black hats. Instead of passively waiting for the techs at Servage to check the pages live, if and when they ever get around to it, please consider:

1) copying and saving the the HTML from both the index and links pages,
2) upload clean index and links pages, and
3) attach appropriate excerpts of HTML to correspondence with Servage.

I noted that several of your puppylinux(dot)com pages were generated using IBM WebSphere Studio Homepage Builder V6.0.0 for Windows. Assuming you use Windows from time to time, it's conceivable that your own Windows box may be compromised and the reinfection could be taking place quite close to home. Anyone else with admin privies to puppylinux(dot)com should check their systems for infection, too.

It would be sad if at the end of the day it turned out to be a case of either tail or ghost chasing ...

@Community
Going by this thread, two of "our own" have been infected, though there may be more and we haven't heard from them. They may be a tad embarrassed to display soiled laundry.

Regardless of how some of us feel about the monster of Redmond that is Microsoft, it's important to remember that a many of us may very well may have been introduced to Puppy while still using IE.

Also remember the old saw about Linux being inherently safe from virii, trojans and such. Puppy could take a devastating publicity hit should the wrong person innocently visit puppylinux(dot)com and click "links" in the menu bar. When I say devastating, I mean a publicity hit that would make the infamous Mark South Distrowatch Dramarama barely a blip on the radar screen.

Please don't ask me to spell it out any further. Use your own imagination.

Think about it.

wingruntled · Joined: 20 Feb 2007 Posts: 287 Location: Great Lakes

Warning for all forum users:
Turn off :display email address: in your user profile. I didn’t realize till yesterday that this phpBB version doesn’t use an internal mail server for sending emails to other users.
Your email address is displayed with as little as a mouse-over. This makes it so easy for anyone to gather ALL emails, from everybody registered on this rather old and buggy version of phpBB.
There is a script out there that can gather all your email addresses in just a minute or two.
Email spam is as bad as that crap in a can. LOL

prehistoric · Joined: 23 Oct 2007 Posts: 1208

@wingruntled,

I was embarrassed to find that out some time before the changeover, while using a friend's machine to view the forum. Makes me wonder what else we haven't noticed.

wingruntled · Joined: 20 Feb 2007 Posts: 287 Location: Great Lakes

@prehistoric
I just can’t help but wonder why somebody got so hacked off at the Puppy community to launch such an intensive cross site attack. These are not some random attacks.
Thanks for having some others look into this problem. Smile

alienjeff · Joined: 08 Jul 2006 Posts: 2290 Location: Winsted, CT - USA

wingruntled · Joined: 20 Feb 2007 Posts: 287 Location: Great Lakes

If I told you once I told you a thousand times!
Get your hands off that, aj. You know you don’t know nothin’ bout machinery.
ROFLMAO

prehistoric · Joined: 23 Oct 2007 Posts: 1208

After checking Barry's (now static) blog, I just had a brilliant insight.

wingruntled · Joined: 20 Feb 2007 Posts: 287 Location: Great Lakes

Servage doesn’t have phone support. They are as useless as OO’s on a bull.

BarryK · Posted: Fri 07 Mar 2008, 19:57 Post subject:

You need to see their second reply, at puppylinux.com/blog.

Note, I have cleaned up my site, yet again.

BarryK · Posted: Fri 07 Mar 2008, 20:48 Post subject:

I also changed my passwords again. So, we wait and see if my site gets compromised again....
I dunno, maybe the previous time I changed my password wasn't enough and it was somehow discovered. Well, right now my site seems to be clean and I have brand spanking new passwords, so we shall see.

prehistoric · Joined: 23 Oct 2007 Posts: 1208

O.K., Barry, my first hypothesis was too conservative. Servage is staffed entirely by 'bots.

This is a pity, If there were any humans available I would send them a link to this article. computerworld article