Comments on: Updating

By: Jeremy Clarke

Jeremy Clarke — Thu, 10 Apr 2008 15:15:53 +0000

Same thing happened to GV, they were very very persistent about it and kept exploiting our user accoutns (caue there’s hundreds).

For the record, we were running 2.3.1, just 0.0.2 away from the fix that closed the hole they exploited. The lesson: point releases are as important as version releases, stay up to date on the 0.x so that when the 0.x.x comes out it’s easy and safe to update to it.

Good work on stopping them. I recommend checking your pages now and then for the js in case they come back.

By: Patrick

Patrick — Wed, 09 Apr 2008 21:16:28 +0000

J’ai pas essayé encore, je veux vivre un peu avec 2.5 avant.

By: Laurent LaSalle

Laurent LaSalle — Wed, 09 Apr 2008 19:48:59 +0000

À vrai dire je pensais que c’était une vulnérabilité de 2.1, alors oui j’ai exagéré un peu le ooooooold, désolé! Mais en même temps, c’était pour souligner le fait qu’un Public Service Announcement était inutile.

Pour ma part je n’utilisais pas d’alternatives au niveau de l’admin, alors je reçois cette nouvelle version à bras ouverts. Faudrait que je compares avec Tiger admin comme tu dis; dois-je comprendre que cette interface n’est pas compatible avec la nouvelle version?

By: Blork

Blork — Tue, 08 Apr 2008 21:39:22 +0000

So this was the vulnerability that 2.3.3 fixed? (If so, I’m safe.)

By: Patrick

Patrick — Tue, 08 Apr 2008 18:01:17 +0000

It wasn’t that old, I was 2 versions behind (plus some minor bug fix versions). Certainly, I should have been more up to date oooooooold would imply no one but a few are on that and I’m sure loads are still on versions with that flaw.

Premières impressions: je trip pas du tout. J’aime les couleurs et le type d’interface mais j’utilisais Tiger admin et je trouve que le nouveau design est un peu désaligné, les morceaux parfois semblent pas fitter ensemble, c’est moins fini.

By: Laurent LaSalle

Laurent LaSalle — Tue, 08 Apr 2008 17:29:51 +0000

@Blork It was an oooooold flaw that was already patched.

By: Laurent LaSalle

Laurent LaSalle — Tue, 08 Apr 2008 17:29:01 +0000

C’est ton cue pour tes premières impressions sur WordPress 2.5…

By: Denis Canuel

Denis Canuel — Tue, 08 Apr 2008 12:54:29 +0000

Some people give free templates that have a “backdoor” to include such links. It’s not very easy to figure out unless you parse the source code file by file. Evil plugins can do this too…

By: Blork

Blork — Tue, 08 Apr 2008 01:59:10 +0000

Public Service Announcement.

Cuz I have no idea what to look for in a case like this. Was it a database hack? A PHP file hack? What is the code in the hack? What do I search for? (etc.)

By: Patrick

Patrick — Mon, 07 Apr 2008 21:31:38 +0000

wtf is a PSA?

By: Blork

Blork — Mon, 07 Apr 2008 21:30:50 +0000

Hey, how about a PSA that shows us what the hack looks like so people know what to look for when they check to make sure they’re not being de-indexed?

By: Marie-Claude

Marie-Claude — Mon, 07 Apr 2008 21:11:10 +0000

C’est donc ça qui est arrivé! Tu avais raison finalement; ce n’était pas normal!

By: hugh

hugh — Mon, 07 Apr 2008 20:51:38 +0000

ouch. that means i have some – shudder – updating to do.