Saturday, February 22, 2003

If you are using MT - I recommend changing your FTP password. Actually, changing all your passwords is not a bad idea. Every site on the server thus far that has been hacked has been an MT site. No non-MT sites have thus far been attacked. This implies that the person responsible is at the very least targeting MT sites for some reason of his own.

So I recommend that MT users upgrade to the newest version, make sure that you are using different passwords for MT, the control panel, and FTP, and change your passwords. Better safe than sorry.

Note : I also recommend non-MT sites change their passwords as well as making sure you don't use the same password for your site as you do for other accounts (such as hotmail, etc). Having unique passwords for FTP and the control panel is also a great idea.

In other news, we've blocked the intruder's IP and applied a few seemingly-unrelated Plesk patches. Maybe that will help.
.: posted by Josh Sisk 12:13 PM

Friday, February 21, 2003

Okay, so far we aren't sure it's an MT hack and actually it's looking doubtful that it is. Sorry that i jumped to that conclusion. But if you haven't upgraded MT... it's still not a bad idea =].

We're still tracking this down...
.: posted by Loren Cox 1:30 PM

Thursday, February 20, 2003

ALERT! If you are running MoveableType... PLEASE UPGRADE TO THE LATEST VERSION ASAP! We've had two MT blogs on our server hacked so far by the same guy. All he does is change the front page with a "W0w 1'M k3WL 1 c4n rUn a ScR1pt @Nd H@V3 +on5 oPh PHR13ND5 " type message and change the password. So no worries about loosing anything if this does happen to you.
.: posted by Loren Cox 9:22 AM

Wednesday, February 12, 2003

I updated the FAQ (finally!) with the new path info for the new server in the MT and GM instructions. Weee!
.: posted by Loren Cox 5:59 PM
© 2001 by Josh Sisk and Loren Cox. All Rights Reserved and all that other garbage.