Tag Archives: security

Not your regular bot driven UDP flood

Posted on 26 April 2013 by stuff writer

After weeks of battling Joomla/JCE sites that insist on running evil code and spewing denial of service traffic, we had a machine today sending UDP floods. This, it turns out, is not a hacked machine sending spews of botnet traffic … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on Not your regular bot driven UDP flood

The core is secure

Posted on 24 August 2011 by stuff writer

In the documentation for that wonderful content management software, joomla, you can read the following statement: Although the Joomla! core is secure when configured correctly, third party extensions come in all flavors of age and quality. Unless you absolutely trust … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on The core is secure

Unicast flooding meets promiscuous routing

Posted on 29 June 2011 by stuff writer

To make a disaster, you need a perfect storm of mistakes. A single mistake is insufficient, but a stack of sub-obtimal configuration choices stacked together will give you rampant failure and poor network quality. For today’s mistake we have massive … Continue reading →

Posted in Stuff | Tagged , , , , | Comments Off on Unicast flooding meets promiscuous routing

WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!

Posted on 8 June 2011 by stuff writer

If you use ssh for a while, you are sure to get this message sooner or later: WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!. This means more or less what it says – the machine formerly known as somemachine suddenly smells … Continue reading →

Posted in Stuff | Tagged , , | Comments Off on WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!

PHP deobfuscation

Posted on 21 May 2011 by stuff writer

One of the things that you see with depressing regularity when hosting crummy PHP scripts for others is this: eval&28;base64_decode&28;’aWYgKCFlbXB0eSgkX1JFUVVFU1RbInRoZW What’s that? Well it says to decode that gobbledegook into a binary stream (the base64_decode part), and then interpret whatever … Continue reading →

Posted in Stuff | Tagged , , , , , | Comments Off on PHP deobfuscation

SMTP innovations for virii

Posted on 17 November 2010 by stuff writer

It took a long time, but finally an email-borne virus has bypassed the MX records for a domain, where there is an anti-spam, anti-virus and anti-mail scanner, and delivered itself directly to the target server. This was a very obvious … Continue reading →

Posted in Stuff | Tagged , | Comments Off on SMTP innovations for virii