Terrific Tuesday The Twenty-Third

[Greenguy]

Morning

My Sabres lost last night & looked horrendous, but that's ok - we only needed to win one there. Home games Wednesday & Friday & I can't wait!

Of course, I missed 24 last night, so now I have to find time today to squeeze that in.

Other than that, it's fucking cold here!

[cd34]

its only 75F here, but with the wind chill, its 75F.

Got an icq from a client:

hey, my website is down.

Odd, the zend encoded file you uploaded requires php5, we don't run php5 on that machine. But I'm on holiday in ______, I have been here for 7 days.

Account was FTPed into, they went directly for a zend encoded file, replaced it with their own version (which didn't work, and I'm not sure why they didn't test it) and left.

So, I figured, lets see what this thing does. I installed it on a machine running zend 3.0 + php5 and lo and behold, without any database connection, a picture perfect copy of their page (with a toolbar javascript at the bottom), but, it gets better. It still sends traffic through their click tracking system, and, skims to another unrelated site.

If you have the ability to change your FTP password, do it frequently. This person claims to have run spyware and antivirus full scans on a weekly basis and has a live update. There are two people that may have the ftp info, either of which could have been compromised as well. If you cannot guarantee that their systems are clean, change your password, let them in, change your password after they are done doing what they need to do.

The logs show that this person logged in from Poland and the UK, went in, grabbed a zend encoded file, uploaded a zend encoded file 38 seconds later. downloaded a few html files, uploaded them 4-5 seconds later each. There were no authentication errors, no mucking around the system. Total connection time was under two minutes.

Other than that, my fuel guy called and I missed his call. And I need a haircut.

[Useless]

Originally Posted by cd34

its only 75F here, but with the wind chill, its 75F.

You better run outside and cover the plants - sounds a bit frosty down there. Brrrr.

I'm not sure what today's weather will be, or even is. The one inch opening at the curtain tells me that the sun is shining to some degree. I guess I'll get a good taste of it when I bring the kids to school.

Oh shit, it's almost time to bring the kids to school.

[Cleo]

Woken up by roofers going to my neighbor's place.

Besides meeting with roofers just a day of working and running errands today. Still suffering with a mild cold. I don't ever remember getting sick this much in one year.

Is it time to go back to bed yet?

[Jim]

Morning
Still kind of running on zombie mode but, I am here
In the last month, we have had 1 day without rain. Today looks like more rain and cold. There was actually snow in higher elevations

[MrMaryLou]

Good Morning All

[Fonz]

Morning all,

Rainy, windy and chilly outside. The average end of May weather.
Other than that I got nothing.

Have a nice day all.

[Toby]

Mornin' y'all,

It's day 3 of Wordpress/Blogging 101 and it's actually starting to look like a blog.

That chilly spell hitting Sparky is present on this side of the gulf coast as well.

is on, extra strong, help yourself

[Ramster]

Good Morning. 24 rocked!!!

The weather is looking up around here. Suppose to be warmer as the week goes on.

[dareutwo]

Morning all -
Damn, it's been a long ass weekend. Saturday was graduation - had to get to 10 of them, got home at about 2am. Sunday was go help out a friend clean up their house and yard day. Monday was a high school softball tourney (got the fields ready and umped 2 games)
Sunny and warm but windy here, rain expected tonight.

The kids last full day of school for the year, two 1/2 days left, then I get to kick them the hell out of the house everyday all summer

[ponygirl]

Good morning everyone

nice long weekend, freezing cold and windy but of course today is nice & sunny - not a cloud in the sky

lots to do so I better get started

have a great day


Ponygirl

[terry]

Good Morning Everyone,

Cold here as well. If it wasnt for the wind it wouldnt be so bad. 30 percent chance of rain today.. well with those dark blue clouds in the sky, id say chances of rain are more certain than that.

Have a great day!

[plateman]

mourning all, back feels a little better today, thank buddy it is getting better...same old thing today

[MrYum]

Good morning everyone

[Torn Rose]

Tried to go to bed at my normal time and was too wired to sleep so I got up and needed to chill out some, so I watched Sopranos and saw 2 dudes get whacked which was pretty freaky.

Well, freaky if you smoked as much as I did during it....

I go back to bed at 3am and finally fall asleep when we are woken up by my cat who gets very pissed when an outside cat walks in his yard so he try’s to attack him through a glass window which if it wasn’t at 4am it would be pretty funny watching him hiss/spit/growl and bounce off glass, but when it wakes you up your first thought is someone is inside your house attacking your cat.

So I am tired and can’t even take a nap, so I guess its shower time and then a few errands and back to work.

Sigh....

[RawAlex]

I am sure someone will get around to sending summer my way... but it doesn't look like it will happen for a few more days at least. At least the sun is out for a change, haven't seen this for more than 4 hours since April, I think.

Yesterday was a remarkably useful sort of a day, got bunches of stuff done and more importantly it was actually useful stuff. Cleaning up traffic flows, exposing new sites to older traffic patterns, and generally cleaning up things and making sure everything is moving forward. Nice.

Today features some serious running around, and that will be followed by thumbnailing galleries and stuff for another new TGP thing... and then I get to spend the rest of the week working on something bigger to close that out and get it public.

I need more coffee.

Alex

[docholly]

Morning!!!

It's my run around all over Las Vegas day today.. blah i hate tuesdays.

have a good one..

[cd34]

This is just incredible.

Not only was the client's home machine hacked, their passwords discovered, etc, but, the hackers found the foresight to install a proxy server on his machine and named it mcafeeav.exe -- so, when the firewall alert popped up to ask whether the client wanted to allow that application remote access, he said yes.

At that point, the hackers used the proxy on his machine to access his server -- making it almost impossible to see which were valid updates to his site and which were not.

Oh how much fun... not!

[digifan]

All your hot weather are belong to us... I mean it is pretty hot and windy and humid here, I can hardly breathe since it is the allergy season... it's good two guys popped in to fix a nice old mirror on the wall, they could take me for some extra oxygen to a hospital nearby.
;(

[digifan]

Originally Posted by cd34

This is just incredible.

Not only was the client's home machine hacked, their passwords discovered, etc, but, the hackers found the foresight to install a proxy server on his machine and named it mcafeeav.exe -- so, when the firewall alert popped up to ask whether the client wanted to allow that application remote access, he said yes.

At that point, the hackers used the proxy on his machine to access his server -- making it almost impossible to see which were valid updates to his site and which were not.

Oh how much fun... not!

Tell me it can't happen on a mac.. not even a mini mac please

[sue-fl]

Morning! More work in the house today, getting really tired of it but it should all be done by the end of the week.

Have a good day all!

[cd34]

Originally Posted by digifan

Tell me it can't happen on a mac.. not even a mini mac please

If you click something, and allow it, that is a socially engineered script and can happen on even the most secure machines.

So, if something looks official and you say, yes, please do this, it doesn't mater what safeguards you have in place or what operating system you are running. It all comes down to the keyboard nut.

[digifan]

Originally Posted by cd34

If you click something, and allow it, that is a socially engineered script and can happen on even the most secure machines.

So, if something looks official and you say, yes, please do this, it doesn't mater what safeguards you have in place or what operating system you are running. It all comes down to the keyboard nut.

Oh hallelujah, just what the dr ordered

[Preacher]

Morning all. Busy with a new project again today, and I'll be in and out. Hope your day gets better cd34.

[Rhiannon]

Good Morning everyone!!! Little man wasnt feeling too good today and either was I but I made it to the office. Other then that nothing new and it looks like a hot one here in Vegas today!