Comments on: Blog Hacked: It Could Happen To You

By: Will

Will — Fri, 25 Apr 2008 21:37:23 +0000

Hi Jenny,

If you’re going to be upgrading then you may as well upgrade to WordPress version 2.5.1 that was released today.

Another day, another upgrade!

By: Jenny

Jenny — Fri, 25 Apr 2008 14:51:45 +0000

I haven’t upgraded yet but now I’m gonna after seeing this.

By: Will

Will — Wed, 23 Apr 2008 21:32:41 +0000

Elly,

If you’re referring to your blogspot blog then you don’t need to worry about it. You wouldn’t be able to upgrade the software anyway. The hacking in question is targetting blogs based upon the WordPress platform.

By: Elly Chappell

Elly Chappell — Wed, 23 Apr 2008 21:23:06 +0000

I didn’t even know you could have your blog hacked!
How bad is that I am straight over to get my blog upgraded.

By: Will

Will — Tue, 22 Apr 2008 00:03:59 +0000

But then sometimes, it pays to hold off installing new releases, at least until the issues are ironed out.

And then there will be times when the updates are released too late.

Maintain regular backups!

By: Gary

Gary — Mon, 21 Apr 2008 07:09:25 +0000

I knwo which blog too!

The way to instantly see this type of attack is to notice when your bandwidth triples or quadruples - I thought the reason for this was something else entirely, bnut it was because of 500k worth of invisble links.

Ah well - shit happens - should have upgraded as soon as the advisory came out - I’m a lazy b.

By: Will

Will — Sun, 20 Apr 2008 17:38:44 +0000

It’s a right pain in the ass, Sarah. I wonder if anyone else has come up with a clever way of detecting when a blog’s been compromised in some way.

Perhaps some sort of automated check to compare checksums of theme files?

By: SarahG

SarahG — Sun, 20 Apr 2008 12:43:47 +0000

Just to add, now I know which blog you were referring to, seems like subscribing doesn’t always work!

By: SarahG

SarahG — Sun, 20 Apr 2008 12:41:44 +0000

I’m seeing blogs like this too. Google Reader shows the links up, which is one reason why I’m subscribing to all my sites just to keep an eye on what comes through on them.

Of course I’ve also upgraded to 2.5 anyway