Vanvalkinburgh.org

Dear ASO Customer,

Last night, several of our hosting servers were compromised and a number of customer accounts were deleted. While not all customers are affected, we feel that all customers should be aware of the incident.

The attack happened through a compromised password/computer used by one of the techs to access/support/maintain servers. We’ve disabled access from that computer and account until we can investigate the matter thoroughly.

The servers affected were server names starting with the letters A through D. We’ve posted a notice on our customer forums and will update it with more information:

http://forums.asmallorange.com/index.php?showtopic=12908

If your server isn’t listed, your site wasn’t affected by this.
If you don’t know the server your site is hosted on, you can use our server lookup tool:

http://www.asmallorange.com/extras/server.php

Based on the log data, it does not appear that customer password files were downloaded or accessed, or that any data was transferred. Instead, the attacker simply deleted the customer accounts, and on some servers, critical system files. If you account is on a server that was attacked, we recommend changing your passwords as soon as you have access to your site again.

Our overnight and morning teams have been restoring data, but this is a slow process. For customers affected, please be patient as we work to get through this problem. We understand that many of you host sites for your clients and many of you run your website as a business. Our support team is working as hard as they can to get the data back online as soon as possible.

Once this is behind us, we will be reviewing many of the security systems currently in place and start building improvements. We certainly don’t want an incident like this to happen again. We sincerely regret that this happened, and apologize to all customers who were affected by this.

Thanks for being our customer, and we appreciate your patience as we work to get this resolved.

Email I got from them.

WARNING: During a short period of time during the attack, your site may have been redirected to a malware page promoting a “Web Accelerator” program. This file contains a virus identified as “Backdoor.Win32.VanBot!IK.” Though the exposure time was very short, (less than 30 minutes) there is a possibility that users may have downloaded it. I would suggest informing your users of this and recommend that they run a virus scan and take measures to ensure their system is clean if they happened to download it.

That is on the forum post page, the server my site is on, wasn’t affected.

Oh yeah and by the forum post it says the tech’s computer had a virus, probably the same one. Stupid tech using windows, use linux or something. To improve the security, they could roll their own minimal linux distro, that could be run using virtual box, or vmware player, or parallels, or any other virtual machine program.

Making a full backup of my site so I can download it, cpanel lets you make full backups. Puts everything in a compressed file, so you don’t have to manually download everything.

Already get weekly mysql database backups using Wordpress Database Backup.

Oops forgot about profile I created long time ago, never used it, should delete, but to lazy.

Got my Trendnet TEW-652BRP today. Haven’t had any problems with it yet, updated the firmware, which adds the ability to set static IPS to different MAC addresses. Well had one problem, put my mac’s MAC address in wrong, so I had no internet, but setting the IP manually let me get to router’s config, took a while to figure that out. Thought I put in everything right. Thought MAC address filtering made it so people couldn’t access router at all, it should disconnect not allowed MAC addresses. Not sure if all routers let you get to config page if the MAC isn’t allowed, maybe its a setting, you can probably disable router page from all wireless users. Oh yeah it seems to be smaller then the D-Link router it replaced, not much smaller though. Oh yeah you have to use firefox to update firmware, didn’t work in Safari, didn’t even seem to send the firmware using Safari, maybe it works in older Safari. Still using Safari 4 beta. The login seems to use some javascript encryption thing too, so don’t bother telling 1password to remember password, won’t work. Hmm guess you can’t tell it to not allow wireless clients to access router config. Pretty sure you can with DD-WRT, don’t think that works with this router, don’t care. Trendnet’s firmware seems to be stable, at least so far. Oh yeah the firmware tells you the router uptime too, just like DD-WRT, D-Link didn’t say that.

Downloaded the beta of Safari 4 earlier, pretty nice. I’m liking the Top Sites, also like the speed. Still getting use to the tabs being at the top. 1password works after following instructions on their forum, oh yeah I didn’t have to edit plist file. I should of looked in View Customize toolbar before updating to beta, might not of needed to update to beta… Google gears doesn’t seem to work, maybe I need to reinstall it or something.

After you unzip it, right click on the Siphon and click Show Package Contents, I assume you are using a mac. Then you will see a file called “accounts.xml”, open it up in a text editor, and put in your info. I don’t have an iPhone, so I have no idea if it’ll work or not. According to comments on touchmods, you will have to ssh into your iPhone to install the application. You can download siphon from here. If that link doesn’t work you can find the latest link to it here. Or you can download it from zshare.

Oh yeah and for windows extract the zip file and double click on “Siphon.app”, it should show up as a folder, at least in xp. Then open the accounts.xml file.

In the accounts.xml file you will see the below:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>nat</key>
	<string>NO</string>
	<key>password</key>
	<string></string>
	<key>server</key>
	<string>freephonie.net</string>
	<key>stundomain</key>
	<string></string>
	<key>stunserver</key>
	<string></string>
	<key>timeout</key>
	<string>1800</string>
	<key>username</key>
	<string></string>
</dict>
</plist>

I downloaded sabayon linux last night, left it on over night. Burned the dvd today. First time I booted it, I couldn’t hit enter, as the keyboard wasn’t working. Read on apple’s forum to unplug everything but the keyboard from usb, and that worked. Then I plugged everything back in keeping the keyboard plugged in to the first usb slot, rebooted and the keyboard still worked. Then after it started up all I saw was a gray screen with a mouse pointer, so I clicked ctrl alt f1, and typed killall kdm, and then clicked ctrl alt f1 again, and typed gdm. I also read that kdm doesn’t work right on mac’s, read that on sabayon linux’s forum. After I logged in with “sabayonuser” and “sabayonuser” for the password, I connected to the internet by the wireless card, which worked right away, without doing anything. Just had to enter my wpa password. Sound didn’t seem to work, didn’t try to get it to work. Compiz works, kind of laggy on the live dvd, might work better if it was installed, no plans on installing it. After you enable compiz, you have to logout and log back in, for it to work.

I got OS X leopard yesterday, and my uncle wasn’t lying, when he said Safari is faster then firefox. I made an apple script to do most of the work for me, but not 100% automatic. Now I can mess around with the new features. I setup spaces, you can assign applications to the spaces to. I’ll upload the apple script eventually. Maybe in a week or two. Or maybe my uncle will post it on his blog. Hmm Gimp 2.4 is released. Wait only the 2.4 RC3 is available for OS X, and I already have RC3. Could compile it myself, but I don’t want to.

Easter Egg

Just think if you were on a network with thousands of pcs, sharing their computer… I would probably fall off my chair.

Pretty Box

Why didn’t I just pirate OS X Leopard?

They took the time to put that on their box, non like microsoft.

Install

By the time I was done taking a dump, it was almost done. I didn’t take a picture of it when it was almost done though, only took two pictures of it checking the dvd, one with the flash on, and the other off.

I got my uncle’s old iBook today. In the process of buying osx tiger, about two hours left, before it gets here. I got 7 hour shipping, payed a lot of money for it. It has ubuntu on it, my uncle put ubuntu on it. Don’t know his username and password, don’t care either. I don’t want to use ubuntu. Wonder if leopard will only be for intel based macs, or if it will be for ppc based macs too.

Opera has problems rendering some sites, which is annoying, also the wand thing, doesn’t put it in the username and password fields, you have to click some wand button. And I’m use to how firefox does it. They don’t have the latest version optimized for my processor, on my laptop. Haven’t downloaded it on desktop yet. You could compile the newest one, they list the compile options they use.

Get swiftfox

10 Things that “Absolutely suck” about the iPhone

Found that on reddit. No attach button on the email client? That’s pathetic. Also you can’t download any files from the internet, like ring tones. It can read pdfs though. You can’t browse the file system either, thats why there’s no attach button in the email client. Oh yeah no junk filter either in the email client, so its better to use web mail, wait it magnifies what you’re typing, so somebody from five feet away can see your password. I would wait until they fix these problems, and if they don’t, then wait for somebody else to release something better.

Well it seems as though they locked my account again, can’t login.

You can see my other post about not being able to login to godaddy here.

Update
Reset my password, you have to have javascript enabled for the reset password link to work. I’m using the noscript extension for firefox.

Well I tried logging in, I have the password and stuff saved to a file. Didn’t work, then I changed it, still couldn’t login. So I changed the password once again, and still can’t login. Oh well don’t really need to make a ds.vanvalkinburgh.org sub domain. Thanks anyhow godaddy, now I can’t cancel my account. You fuckin idiots.
“There is no account with that information. Please try again.”
Oh yeah I don’t know my username, I just know my account number.

Update 03/08/07
Still can’t login. Need to cancel or sue em, if this keeps up. I should be able to cancel if I desire, but there is no way to cancel now, other then emailing them. This is bull shit, and really starting to piss me off. It’ll really suck if my mom has to cancel the card its on. Avoid godaddy. Use powweb, never had a problem with them, especially like this. Use to use em, but godaddy is cheaper. Surprised this site is still online. Need to backup my data, but that’ll take a long time. All I wanted to do was add a fuckin sub domain. You fuckin assholes.

Update 03/09/07
Still can’t login. Just emailed them.

Update 03/10/07
Still can’t login. They emailed me back, just got the last 6 digits of my mom’s credit card. They need that, for security reasons.
Found this on google
I’m not the only one with that problem.

Update 03/11/07
Can login finally, they unlocked my account. Was lucky I could check my site email, to get the reset password link. As their servers are having problems. Looks like ftp is down. So I created a sub domain, but no ftp.

Well I got my script to work. Though it has a bug with converting the comments, it inserted one comment like 66 times. Not sure why, don’t care. I deleted the duplicates/spam comments.
Working drupal to nucleus converter Works with drupal version 4.7.4. Not tested with any other version. Don’t forget you have to edit the file and put your host name, user name, password, database name in it.

Update
The main site is backup.