Vanvalkinburgh.org

Dear ASO Customer,

Last night, several of our hosting servers were compromised and a number of customer accounts were deleted. While not all customers are affected, we feel that all customers should be aware of the incident.

The attack happened through a compromised password/computer used by one of the techs to access/support/maintain servers. We’ve disabled access from that computer and account until we can investigate the matter thoroughly.

The servers affected were server names starting with the letters A through D. We’ve posted a notice on our customer forums and will update it with more information:

http://forums.asmallorange.com/index.php?showtopic=12908

If your server isn’t listed, your site wasn’t affected by this.
If you don’t know the server your site is hosted on, you can use our server lookup tool:

http://www.asmallorange.com/extras/server.php

Based on the log data, it does not appear that customer password files were downloaded or accessed, or that any data was transferred. Instead, the attacker simply deleted the customer accounts, and on some servers, critical system files. If you account is on a server that was attacked, we recommend changing your passwords as soon as you have access to your site again.

Our overnight and morning teams have been restoring data, but this is a slow process. For customers affected, please be patient as we work to get through this problem. We understand that many of you host sites for your clients and many of you run your website as a business. Our support team is working as hard as they can to get the data back online as soon as possible.

Once this is behind us, we will be reviewing many of the security systems currently in place and start building improvements. We certainly don’t want an incident like this to happen again. We sincerely regret that this happened, and apologize to all customers who were affected by this.

Thanks for being our customer, and we appreciate your patience as we work to get this resolved.

Email I got from them.

WARNING: During a short period of time during the attack, your site may have been redirected to a malware page promoting a “Web Accelerator” program. This file contains a virus identified as “Backdoor.Win32.VanBot!IK.” Though the exposure time was very short, (less than 30 minutes) there is a possibility that users may have downloaded it. I would suggest informing your users of this and recommend that they run a virus scan and take measures to ensure their system is clean if they happened to download it.

That is on the forum post page, the server my site is on, wasn’t affected.

Oh yeah and by the forum post it says the tech’s computer had a virus, probably the same one. Stupid tech using windows, use linux or something. To improve the security, they could roll their own minimal linux distro, that could be run using virtual box, or vmware player, or parallels, or any other virtual machine program.

Making a full backup of my site so I can download it, cpanel lets you make full backups. Puts everything in a compressed file, so you don’t have to manually download everything.

Already get weekly mysql database backups using Wordpress Database Backup.

Yesterday I got an email saying somebody installed wordpress, and had a url to some spam username on some forum. So one post is missing, did a database restore, which put it back how it was, excluding that one post. Wordpress thinks it needs to be installed if it can’t connect to database, so guessing my host was having problems or something. Simple solution would be to delete /wp-admin/install.php?step=2. And the other most important solution, is to ban the asshole. Not that it’ll do any good, it appears as though their in India. Better off banning everybody inAsia, though I’d think my host would take care of that. What’s really funny, it appears as though their using windows.

164.100.43.41 - - [14/Apr/2009:16:24:48 -0400] "POST /wp-admin/install.php?step=2 HTTP/1.1" 200 360054 "http://vanvalkinburgh.org/2007/03/07/godaddy-cant-login/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"


Must be an outdated zombie computer in India.

Got MadWorld today, seemed easy at first, on third level I think, or is it the fourth place? I don’t remember, took a break. Also got No More Heroes. Its alright, kind of easy, probably because I selected the easy mode, wonder how much harder the other level is. Oh yeah man darts is fun.

Ahh now I can update my facebook account from posting on my blog, no longer have to login to facebook now. Never really updated it anyways, only when something automatically does it, like when uploading a picture or becoming friends with somebody or something.

Looks like my uncle decided not to pay the bill, since he never updated it, and I stopped updating it for him. The theme it had might be released for free, I made it, so I can do whatever I want with it. Probably won’t use it on this site, most of the theme has been edited to get rid of ads, and so it works without certain plugins. I need to edit the comments file though, as the latest version of wordpress has paged comments. Don’t know when or if I’ll do that though. Screen shot below.

I installed a plugin called WPtouch, which will load an optimized theme for iPhone/iPod touch users. So this site should be faster on the iPhone and iPod touch now.

Site might need a new theme now, with the nice new release of wordpress 2.6. The Press This bookmark is nice though. The new turbo feature isn’t available if you use safari, because gears doesn’t support safari.

WordPress › Blog » WordPress 2.6

Looks like wordpress 2.5 will be released soon. That means I’ll have to upgrade my site, at least it’s been a while since the last update. The new interface looks nice though.

After you unzip it, right click on the Siphon and click Show Package Contents, I assume you are using a mac. Then you will see a file called “accounts.xml”, open it up in a text editor, and put in your info. I don’t have an iPhone, so I have no idea if it’ll work or not. According to comments on touchmods, you will have to ssh into your iPhone to install the application. You can download siphon from here. If that link doesn’t work you can find the latest link to it here. Or you can download it from zshare.

Oh yeah and for windows extract the zip file and double click on “Siphon.app”, it should show up as a folder, at least in xp. Then open the accounts.xml file.

In the accounts.xml file you will see the below:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>nat</key>
	<string>NO</string>
	<key>password</key>
	<string></string>
	<key>server</key>
	<string>freephonie.net</string>
	<key>stundomain</key>
	<string></string>
	<key>stunserver</key>
	<string></string>
	<key>timeout</key>
	<string>1800</string>
	<key>username</key>
	<string></string>
</dict>
</plist>

New version of wordpress, once again. Going to upgrade my site. Not sure what will happen, might totally break the site.

Update
Site still works. I haven’t added support for tags to my theme yet, probably won’t, don’t really care about tags. Screw editing the theme, you can add a widget, which my theme supports. Hmm shows all tags on my site.

Update
Just upgraded DS: Warranty Voided, which wasn’t as easy. The table post2cat, no longer exists, so I had to fix the download system. Which was a pain.

Look at this page. I designed the site, but I didn’t make the pages. Trying to wait until she finishes adding images to it, so I can fix it. I could fix it while she’s editing it, but if she clicked save, and then added another picture, with the images wrong, then it’ll overwrite what I just did. So I guess I’ll have to wait a while. Not sure if she wants those huge images on there or not. Not sure I like the navigation. But she doesn’t email me, so I’m assuming she likes it. So I’m not changing it.

Nice wordpress didn’t make a thumbnail of the images, meaning now I have to manually do it. That would explain why the image is so big.

Cool I don’t have to do anything. They figured it out, except she isn’t doing it the way I would, but it works. Just isn’t 56 K friendly.

She isn’t use a thumb, or a compressed image, she’s using width=xxx height=xxx, html, which it does for her, just click the image icon, if you’re using the visual editor in wordpress. I don’t use the visual editor, don’t need it, plus the visual editor can screw things up. One of the pictures is 611.08 KB, she might get complaints by 56 K users. If it was my camera the size would be over 1 MB, and I’d have a lot of complaints, if I was running a non personal site.

Damn just noticed the expo page is screwed up, damn visual editor. Will have to click code when fixing her site, so I don’t screw it up again. I hate wordpress’s visual editor. The visual editor made “Vendor Liability Form – required Vendor Letter Vendor Rules & Regulations” all one link. But its fixed now.

The first image on the dogs page, is over 1 MB, 1470.51 KB.

I made a pdf, so maybe now people will stop asking me how to use wordpress. Which I think is a simple task, isn’t very hard, but I guess its hard for some people.

wordpress.pdf

PDF exported with open office, and tested in kpdf. Don’t have or want adobe reader. Adobe reader is slower then kpdf.

If you need more help then the pdf, then that’s to bad. If you can’t view the pdf, that’s to bad too. If you can’t wipe your ass, that’s to bad too.

Was released two days ago. To bad wordpress isn’t immune to security problems. Then I wouldn’t have to upgrade it. Since I don’t have a dedicated server, I can just do wget, and then untar it over the existing one. I hacve to upload it, with my crappy upload speed, thanks comcast. I have to upgrade three sites, that’s why its a pain. I don’t have to upgrade the ds, but I doubt my uncle will. Since it fixes security holes, a script kiddie, would be able to “hack” it or script kiddie it I should say. Make that four sites, I forgot one.

Wordpress 2.2.2 and 2.0.11

I tried it a while ago. But it didn’t work, as if I remember correctly, it was using ip6. Which my router doesn’t support. So if I wanted to I’m sure I could get it running now. Wouldn’t be that hard, or at least I don’t think it would be. I probably won’t install it anytime soon. Though it probably would be fast, as it’ll only have the crap you need. Gentoo is fast, even sabayon linux, which has crap you don’t need. Sabayon linux is based on gentoo, in case you didn’t know. Think I rather install sabayon linux again, less work to do. And its fast, also it has a sexy interface. Thinking about linux, I should get my linux blog up again.

Arch linux
Sabayon linux
Linux blog (Backup, just converted it to wordpress.)

Well I converted to wordpress for my blog.

There’s a ton of plugins/themes for it. You can have pages, without a plugin. I like the control panel better then nucleus’s. One day I’ll convert my site to wordpress. Will either make this theme for it, or use a pre made one. Will probably use a pre made one.
My ds site using wordpress

Well my on board ethernet isn’t supported. Also my sound card isn’t supported. Not going to download freebsd, cause the release notes don’t say its supported. Freebsd has worse support for hardware then linux, wonder how hard it would to get wireless working. Probably wouldn’t work either.

Update
I got kubuntu working, mythtv is working too. Also have wine working, steam is installed, decrypting files now. I did some tweaks to speed up ubuntu or kubuntu, same thing.

How to speed up ubuntu edgy

I didn’t do a server install though. I rather have a whole bunch of crap I don’t need.