Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Mon 28 Jul 2014, 14:57
All times are UTC - 4
 Forum index » Taking the Puppy out for a walk » Misc
Virus warning from www.puppylinux.com/manuals.htm
Moderators: Flash, JohnMurga
Post new topic   Reply to topic View previous topic :: View next topic
Page 7 of 10 [138 Posts]   Goto page: Previous 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 Next
Author Message
Sage

Joined: 04 Oct 2005
Posts: 4776
Location: GB

PostPosted: Mon 10 Mar 2008, 09:56    Post subject:  

Huh! Jumping the queue at the expense of the poorest instead of paying more tax?! No free lunches in this world.
Back to top
View user's profile Send private message 
Sage

Joined: 04 Oct 2005
Posts: 4776
Location: GB

PostPosted: Mon 10 Mar 2008, 10:12    Post subject:  

Excuse me, I had no intention of hijacking this thread, just that the arrogance of some is overwhelming.

Concerning the substantive issue,
Quote from Barry

"I don't have any scripts left. Well, not exactly, WordPress is still there, I just renamed the directory to something no one will guess. Anyway, I shall reply to their reply.
Oh yeah, I've cleaned up my site, yet again."

Can't say I've ever encountered such a tolerant guy. The time to file suit would seem to have long past. Beating one's head against the proverbial doesn't help ( bit like MU with linuxcbon, who won't even disclose this affiliation!). I'd sue without further warning. Nothing to lose. Adverse publicity will help close them down in the long term.
Back to top
View user's profile Send private message 
big_bass

Joined: 13 Aug 2007
Posts: 1747

PostPosted: Mon 10 Mar 2008, 12:09    Post subject:  

jamesbond wrote:

Sample below:



well ,here is the latest I will update this same post
with a time stamp

************************************************************
Last-Modified: Mon, 10 Mar 2008 12:53:00 GMT

Etag: "6ab0130-326b-af092300"

Content-Length: 12907

************************************************************


still clean from Mon, 10 Mar 2008 12:53:00 GMT
until -----> Wed, 12 Mar 2008 14:50:12 GMT Very Happy


I know many others are monitoring also Wink
big_bass

Last edited by big_bass on Wed 12 Mar 2008, 11:09; edited 6 times in total
Back to top
View user's profile Send private message 
wingruntled

Joined: 20 Feb 2007
Posts: 287
Location: Great Lakes

PostPosted: Mon 10 Mar 2008, 12:25    Post subject:  

Barry
Thank You for looking into servage’s history a little farther.
Now you understand IN PART why I was complaining about that useless excuse of a host so much.
Do yourself a favor. Bite the bullet and get the hell out of there.
edited to add: IN PART
Back to top
View user's profile Send private message 
HairyWill


Joined: 26 May 2006
Posts: 2949
Location: Southampton, UK

PostPosted: Mon 10 Mar 2008, 14:06    Post subject:  

whilst we're sticking the boot in, I just received this email
Quote:
Dear Will,
SSL Certificates from only GBP 14.95
Before and After Upgrade

In addition to our focus on your account security, you can actually protect you and your visitors data even further by using a SSL certificate. This enables very strong and absolute protection from any third party gaining access to the sent data during transmission.

The use of secure communication between your website and its visitors is strongly recommended. Therefore we have reduced our prices for SSL certificates by amazingly 50% in order to enable as many people as possible to stay safe!

» Order your SSL certificate from only GBP 14.95
Why should you use SSL?
Before and After Upgrade

Did you know that any data without the use of SSL is sent in plain text? That means any personal data, credit card numbers, passwords etc. are sent to your site (for instance if you use a login form, webshop etc. on your hosting account) can be viewed (and abused) by anyone gaining access to your data transmission!

The best case scenario is your visitor submitting his confidential data via a secure line to your site using an SSL certificate. No one can read the data.
Thank you...

...very much for being with Servage Hosting. We are proud to host your site!

Best Regards,
Jakob, Servage Hosting

Oooohhh I feel all inclined to give them some more money. So I can use ssl to ensure that all traffic to the site is encrypted. I wonder how safe the data is once it gets there?

_________________
Will
contribute: community website, screenshots, puplets, wiki, rss
Back to top
View user's profile Send private message 
prehistoric


Joined: 23 Oct 2007
Posts: 1255

PostPosted: Mon 10 Mar 2008, 16:06    Post subject: 'bot hypothesis  

@HairyWill,
Already explained. Servage is staffed with 'bots. Time to reject the null hypothesis?
Back to top
View user's profile Send private message 
Th3_uN1Qu3

Joined: 27 May 2007
Posts: 142
Location: Bucharest, Romania

PostPosted: Wed 12 Mar 2008, 14:12    Post subject:  

Time to drop Servage, definitely. Check this out:

http://www.hammersound.net/

Just found this when i was looking for some soundfonts for use with Fluidsynth. Site was hacked and the hacker left a message, saying "Servage - where security is no security."

Any of this could happen to us too.

_________________
Toshi Portege 4010 | PIII Tualatin 933MHz | 512MB RAM | Cyberblade 16MB | 30GB | WiFi, IrDA | ~5 hrs runtime | WinMe Sad |


Back to top
View user's profile Send private message 
bobwrit


Joined: 12 Mar 2007
Posts: 286

PostPosted: Wed 12 Mar 2008, 14:35    Post subject:  

I wonder whether the black hats have been on the forums and hence are aware of the counter mesures in place. I know that servage is a bad host and am not denying that.
_________________
I need help with my forum. LINK:http://www.programers.co.nr/
http://www.freewebs.com/programm/iframe.html is my gateway page...
Back to top
View user's profile Send private message Visit poster's website Yahoo Messenger 
alienjeff


Joined: 08 Jul 2006
Posts: 2291
Location: Winsted, CT - USA

PostPosted: Wed 12 Mar 2008, 22:14    Post subject:  

bobwrit wrote:
I wonder whether the black hats have been on the forums and hence are aware of the counter mesures in place.

Don't wonder. Presume yes. Fortify accordingly. Compute wisely.

_________________
hangout: ##b0rked on irc.freenode.net
diversion: http://alienjeff.net - visit The Fringe
quote: "The foundation of authority is based upon the consent of the people." - Thomas Hooker

Back to top
View user's profile Send private message 
BarryK
Puppy Master


Joined: 09 May 2005
Posts: 7047
Location: Perth, Western Australia

PostPosted: Fri 14 Mar 2008, 07:39    Post subject:  

After arguing with Servage, I cleaned up my site, made sure all scripts were gone, checked dir/file permissions, changed passwords, then waited. Servage indicated they were trying to fix it, myself and guys in this thread were monitoring my site. Then on 9th March, just one file got hacked, puppylinux.com/index.html. I got the feeling that the hacker just wanted to show that he/she could still do it, but was cautious in just hacking one file.

I cleaned it immediately, but I renamed the hacked file to index.htlHACKED-9MAR08, just in case Servage admin wanted to see it.

Well, guess what, today that same index.html has been hacked, and the index.htmlHACKED-9MAR08 has been removed. Just the one file again, the hacker is showing that he can delete any file on my site.

Someone is toying with me.

Today I received an email from someone who came across my news page and was relieved as he has also been plagued with his site (hosted by Servage) being hacked, and being told by Servage customer support that no one else has that problem.

It is interesting that puppylinux.org, which is hosted on another Servage account, appears to be uncompromised. Perhaps it is just a particular "cluster" that is compromised. I'm on Sevage's cluster 39.

I've paid for one year with Servage, just used 3 months of that. They only have a 5 day money back guarantee, and from stories I've read even that is hard to get.

I have decided that even if Servage fix my security problem, I'm leaving, simply on principle. Their customer support tell outright lies.

Also a comment about my experiences with their technical support: they don't seem to have the ability nor the authority to actually fix anything. They just have a set of standard replies to send, and that's it. Probably the penalty paid from out-sourcing the customer support (I read somewhere that's what Servage has done). I need customer support where you talk to an actual admin guy.

Thanks to recent donations from Ian and pakt (Ian in particular, a quiet guy who doesn't say much on this forum, but he is very keen on Puppy and supports me by sending a cheque every now and then), I can afford to signup with another host. I've had some recommendations, I'll have a bit of a look around tonight.

_________________
http://bkhome.org/news/
Back to top
View user's profile Send private message Visit poster's website 
prehistoric


Joined: 23 Oct 2007
Posts: 1255

PostPosted: Fri 14 Mar 2008, 08:58    Post subject: who is safe?  

While Barry's experience with Servage furnishes grounds for dismissing these attacks as the result of sheer incompetence there is evidence of similar attacks against a harder target. http://www.theregister.co.uk/2008/03/13/trend_micro_website_infected/

To quote an understatement of the late mathematician, Paul Erdos, "This is not a trivial problem."

prehistoric
Back to top
View user's profile Send private message 
Sage

Joined: 04 Oct 2005
Posts: 4776
Location: GB

PostPosted: Fri 14 Mar 2008, 09:06    Post subject:  

Small Claims Courts cost peanuts and in the unlikely event you lose, there are no costs against you. If you have sworn (notorised) statements from experts in support, the 'little man' invariably wins on 'balance of probability'. Winning is not so much a warm feeling for the individual but helps those that come after and helps to close down the business of bad companies by the adverse publicity. In the UK, you can file online - it's easy. I have been successful against such diverse companies as Ebuyer, Indesit and Parcel Force. In the latter case, it got as far as the bailiffs arriving to remove the CEO's computer - I let him off for a cash alternative. These bullying traders need to be taught a lesson - it's the only way their behaviour can be moderated. These days, when buying goods and asked if I would like an extended warranty (for a vast extra premium). I always decline and tell the salesman "No thank you, I always sue if there's a problem" and insist on him giving me the address of the registered office, to make sure the message gets home.
Back to top
View user's profile Send private message 
wingruntled

Joined: 20 Feb 2007
Posts: 287
Location: Great Lakes

PostPosted: Mon 17 Mar 2008, 00:13    Post subject:  

Bad News!
I wasn't going to post on this forum any longer because of the lack of securties set by the admin but With fireswalls up!
Here is the log I just got from firestarter when I went to Barry's blog Sad
Time: Mar 16 22:54:49 Source: 77-232-84-168.static.servage.net Destination: mke-216-54-***.***.******.com In IF: ppp0 Out IF: Port: 2600 Length: 44 ToS: 0x00 Protocol: TCP Service: Zebrasrv

Bye! and clearing system again!!!!!
Back to top
View user's profile Send private message 
wingruntled

Joined: 20 Feb 2007
Posts: 287
Location: Great Lakes

PostPosted: Mon 17 Mar 2008, 00:28    Post subject:  

BUMP
due to an SQL error when I posted the above.
Back to top
View user's profile Send private message 
alienjeff


Joined: 08 Jul 2006
Posts: 2291
Location: Winsted, CT - USA

PostPosted: Mon 17 Mar 2008, 08:43    Post subject:  

test
_________________
hangout: ##b0rked on irc.freenode.net
diversion: http://alienjeff.net - visit The Fringe
quote: "The foundation of authority is based upon the consent of the people." - Thomas Hooker

Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 7 of 10 [138 Posts]   Goto page: Previous 1, 2, 3, 4, 5, 6, 7, 8, 9, 10 Next
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Taking the Puppy out for a walk » Misc
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0885s ][ Queries: 12 (0.0055s) ][ GZIP on ]