Pages

Jump to bottom

5 comments

1 Dark_Falcon  Sat, Apr 13, 2013 1:05:59pm

The image that forms in my mind is of a huge number of infected machines merging to form one giant Devastator-type Transformer.

/More than meets the eye.

2 Charles Johnson  Sat, Apr 13, 2013 1:10:53pm

This could be very bad. Anyone who uses WordPress needs to make sure they’re using very strong passwords.

3 CuriousLurker  Sat, Apr 13, 2013 1:36:48pm

Ugh. We’ve created several sites using WP. I make a habit of using strong passwords when I install anything (learned the hard way), but I guess I’d better check with clients to make sure they haven’t changed anything.

Thanks for the heads-up.

4 Political Atheist  Sat, Apr 13, 2013 1:56:56pm

re: #2 Charles Johnson

re: #3 CuriousLurker

This leaves a lot of us users crossing our fingers and hoping our ISP people are on the ball. IIRC.

5 CuriousLurker  Sat, Apr 13, 2013 2:24:39pm

re: #3 CuriousLurker

Another good practice is to avoid using the default “super user” username which is often “admin”. As the article notes, this is being exploited:

According to CloudFlare’s Prince, the distributed attacks are attempting to brute force the administrative portals of WordPress servers, employing the username “admin” and 1,000 or so common passwords.

Don’t make things easy for the bad guys.

Web sites, no matter how small or insignificant, are under constant attack. I have several personal sites that I don’t use much except for playing around, but just for shits & giggles one day I added some PHP to my 404 (not found) page to see which resources were being requested that were resulting in the 404 error.

There were numerous attacks every single day from all over the world. Luckily, my hosting company has pretty good security, and most of it looked like script kiddies trying to brute force their way in using common vulnerabilities, but still…it was an eye-opener.

On another domain I added an “admin” directory (e.g. mydomain.com/admin) with a fake login screen (no pwd or uname required) just to see if people would attempt to get in. Yep, they tired on a regular basis, though not as often as with the automated brute force attempts that target the commonly installed stuff.

Moral of the story: If you put something on the web, people WILL attempt to access it just because they can, so take precautions.

*steps down from pulpit*


This page has been archived.
Comments are closed.

Jump to top

Create a PageThis is the LGF Pages posting bookmarklet. To use it, drag this button to your browser's bookmark bar, and title it 'LGF Pages' (or whatever you like). Then browse to a site you want to post, select some text on the page to use for a quote, click the bookmarklet, and the Pages posting window will appear with the title, text, and any embedded video or audio files already filled in, ready to go.
Or... you can just click this button to open the Pages posting window right away.
Last updated: 2016-01-01 10:29 am PST
LGF User's Guide RSS Feeds Tweet

Help support Little Green Footballs!

Subscribe now for ad-free access!Register and sign in to a free LGF account before subscribing, and your ad-free access will be automatically enabled.

Donate with
PayPal
Square Cash Shop at amazon
as an LGF Associate!
Recent PagesClick to refresh
Brandi Carlile - the Times They Are A-Changin’ (Live on KEXP) Come senators, congressmen Please heed the call Don't stand in the doorway Don't block up the hall For he that gets hurt Will be he who has stalled There's a battle outside And it is ragin'. It'll soon shake ...
Thanos
8 hours, 14 minutes ago
Views: 109 • Comments: 0 • Rating: 1
Tweets: 2 • Share to Facebook
Cage the Elephant - Broken Boy (Audio) Ft. Iggy Pop “Broken Boy” feat. Iggy Pop available now: smarturl.it Get Cage The Elephant’s latest album ‘Social Cues’: smarturl.it I was born on the wrong side of the train tracksI was raised with a strap across my backLay me on my ...
Thanos
8 hours, 21 minutes ago
Views: 106 • Comments: 0 • Rating: 0
Tweets: 3 • Share to Facebook
Wolf Parade - Julia Take Your Man Home [OFFICIAL VIDEO]"Julia Take Your Man Home" from the album Thin Mind (Release Date: January 24, 2020) megamart.subpop.com Spotify: u.subpop.comAppleMusic: u.subpop.comAmazon: amazon.com Wolf ParadeFacebook: facebook.comBandcamp: wolfparade.bandcamp.comInstagram: instagram.comTwitter: @WolfParade VIDEO CREDITS: Animation by Chad VanGaalen YouTube
Thanos
8 hours, 34 minutes ago
Views: 107 • Comments: 0 • Rating: 0
Tweets: 1 • Share to Facebook
Stay ‘97 Listen to this bass - Gail Ann is superb. Previously this version was only available as a bootleg. Provided to YouTube by Rhino/ParlophoneStay '97 · David Bowie Stay '97 ℗ 2020 Jones/Tintoretto Entertainment Company LLC under exclusive licence to ...
Thanos
8 hours, 46 minutes ago
Views: 102 • Comments: 0 • Rating: 0
Tweets: 1 • Share to Facebook
Black Pumas - Fire (Official Live Session) Black Pumas’ debut album is available now - limited edition vinyl, CD and digital formats: smarturl.it FOLLOW BLACK PUMASTour Dates: theblackpumas.comFacebook: facebook.comTwitter: @blackpumasmusicInstagram: instagram.com Video Directed by Amos David McKayVideo Filmed at Arlyn Studios – Austin, TX LYRICSI’ve got ...
Thanos
20 hours, 47 minutes ago
Views: 180 • Comments: 0 • Rating: 0
Tweets: 1 • Share to Facebook
Sergio Mendes & Brasil 66 - Mas Que Nada (Introduced by Eartha Kitt / Something Special 1967)Sergio Mendes & Brasil 66 - Mas que nada, from Eartha Kitt's Something Special 1967.
Thanos
1 day, 20 hours ago
Views: 289 • Comments: 0 • Rating: 0
Tweets: 1 • Share to Facebook
Wes Montgomery - Here’s That Rainy Day - Live London 1965Stan Tracey (piano) Wes Montgomery (guitar) Rick Laird (bass) Jackie Dougan (drums)Television broadcast, "Tempo", ABC TV, London, England, May 7, 1965
Thanos
1 day, 20 hours ago
Views: 306 • Comments: 0 • Rating: 0
Tweets: 1 • Share to Facebook
Halsey - You Should Be Sad (Lyric Video) Halsey’s new album ‘Manic’ out now! halsey.lnk.toiTunes: halsey.lnk.toSpotify: halsey.lnk.to Apple Music: halsey.lnk.toAmazon: halsey.lnk.toGoogle Play: halsey.lnk.to Get tickets to #ManicWorldTour! Each ticket purchase comes with a physical copy of ‘Manic’.halsey.lnk.to Follow Halsey –Twitter: @halsey Facebook: facebook.com Instagram: instagram.comSpotify: halsey.lnk.toOfficial Site: ...
Thanos
1 day, 21 hours ago
Views: 281 • Comments: 0 • Rating: 0
Tweets: 0 • Share to Facebook
#Thegreatpoolpondconversion - 200119Yup, some are now calling it "The Pondathon" The boards we pounded in to the sump last week were not long enough to reach bottom.We didnt want to spend all day sunday on this and lose a day. And we ...
Dangerman (misuser of the sarc tag)
3 days, 10 hours ago
Views: 1,941 • Comments: 0 • Rating: 2
Tweets: 0 • Share to Facebook
Steve Martin and the Steep Canyon Rangers - California (Official Lyric Video) ​@Steve Martin and @Steep Canyon Rangers present "California"Get the song now via @Rounder Records found.ee Produced by RMV ProductionsAnimators: Matt Entecott and Tash TullyDirector: Peter ReeveInstagram: instagram.comTwitter: @RMVProdsFacebook: facebook.com Follow Steve Martin on Twitter: @SteveMartinToGoFor more info and tour ...
Thanos
4 days, 13 hours ago
Views: 525 • Comments: 0 • Rating: 1
Tweets: 2 • Share to Facebook