Archive for the ‘Security Issues’ Category
Never Be Offline Again With Clonebox
Written by Bec on November 24, 2011 – 7:00 AM -Have you setup Clonebox yet? If you run multiple websites and have a server hosted somewhere, then you should! The Clonebox team does multiple backups of everything on your server, so let’s say the physical server location goes down, burns down, washes away in a tsunami, or you’re hit by a hacker and your daily backup was made by your host two minutes AFTER you got hit … with Clonebox you’re still online and doing business! The price for this kind of security and disaster prevention is priceless, yet very affordable with Clonebox.
Tags: clonebox, no down time, server backups, server security
Posted in Blog Services, Security Issues | No Comments »
Watching Out for Naughty WordPress Plugins
Written by Bec on November 23, 2011 – 7:00 AM -
It recently came to light that some plugin developer had managed to use a fake jQuery inclusion to steal clicks and re-route site visitors to a different URL.
Beware Fake jQuery Inclusions by WordPress Plugins in the Repo, an article by By Siobhan McKeown goes into great detail on just how this exploit worked. While this isn’t a WordPress hack it is a jQuery hack, and something we all need to be aware of when selecting WordPress add-ons. Just as we need to inspect the code we find in templates we use, we need to insure that other features we have blindly trusted in the past are also secure.
We received an email today from a WordPress user who wanted to alert us to a jQuery hack. At first, I’ve got to admit, I was a little bit sceptical but I thought it was worth looking in to. I was surprised by what I found.
We all love jQuery – sometimes I like to daydream about marrying it in some sort of exotic ceremony in Barbados. In fact, it’s so awesome that it’s become a little bit ubiquitous. There are so many plugins using jQuery that we’re totally used to finding it in them.
Normally a WordPress plugin will get jQuery from just a few places:
Google CDN
WordPress itself
Microsoft CDN
jQuery CDNBut what if you had a plugin that was getting it’s jQuery from http://j-query.org?
That seems pretty legit, right? I mean it’s got j-query in the damned domain! And when you visit it, you end up at http://jquery.org – the official site of jQuery.
Oh… wait…. http://j-query.org and http://jquery.org – they’re not the same, are they?
No, they’re not. And http://j-query.org isn’t even registered by the people at jquery. It’s registered with domains by proxy, and forwards to servers at Media Temple.
So it’s got to be suspicious when you find three WordPress plugins that all contain this piece of code:
Beware Fake jQuery Inclusions by WordPress Plugins in the Repo… Read the rest of the article
If you aren’t using Theme Check to inspect your wordpress THEMES (doesn’t check the jQuery if used in plugins), here’s a link to download it … Theme Check
Tags: jQuery hack, wordpress plugins exploited, wordpress security issue
Posted in Blog Plugins & Widgets, Security Issues, Wordpress | No Comments »
Writing a Proper DMCA Notice
Written by Bec on October 17, 2011 – 7:00 AM -
How to Write a Proper DMCA Notice
A Proper DMCA Notice will notify a domain (hereafter refered to as xyzdomain) that is illegally posting your content of the particular facts in a document signed under penalty of perjury. We refer to this as a “Proper DMCA Notice.” You can read and download more about the Digital Millennium Copyright Act here. To write a proper DMCA notice you should provide the following information:
- Identify yourself as either:
- The owner of a copyrighted work(s), or
- A person “authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.”
- State your contact information, including your TRUE NAME, street address, telephone number, and email address.
- Identify the copyrighted work that you believe is being infringed, or if a large number of works are appearing at a single website, a representative list of the works.
- Identify the material that you claim is infringing your copyrighted work, to which you are requesting that xyzdomain disable access over the World Wide Web.
- Identify the location of the material on the World Wide Web by providing “information reasonably sufficient to permit the xyzdomain to locate the material.”
- State that you have “a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agents, or the law.”
- State that the information in the notice is accurate, under penalty of perjury.
Sign the notice with an electronic signature and email it, and be sure to send a copy to yourself, and to your lawyer.
If you really need someone down in the trenches helping you to stop content piracy, check out Porn Guardian.
For a fee their dedicated staff patrols blogs, filesharing sites, torrents, newsgroups and other places on the internet where your files are being illegally shared. The minute they find one of your files, they add it to their system, which then sends out take-down notices every 15 minutes, 24 hours a day.
If you want to find your files yourself and use their automated platform to make your life easier, sign up for their free do-it-yourself service for more information.
Tags: content piracy, DMCA, DMCA notice, porn guardian
Posted in Adult Legal, Articles & Tutorials, Blog Services, Security Issues | No Comments »
Restricted to Adults WordPress Plugin
Written by Bec on February 28, 2011 – 5:29 PM -
Keeping your blogs “child safe” got a lot easier with the creation of a plugin that works with the Restricted to Adults labeling system. There’s a lot of content which isn’t appropriate for all ages so The [Association of Sites Advocating Child Protection (ASACP)](http://www.asacp.org/ “ASACP) has developed the Restricted to Adults (RTA) tag which most online protection software respects.
Installing the RTA tag on a WordPress install can be somewhat complicated, so the Restricted to Adults plugin makes it one click — just activate the plugin and your site is restricted to adults. Pick it up here, or do a search and auto install with your plugin side panel options.
For non-wordpress adult sites, grab the meta tag code to use in your header at RTALabel.org
Tags: Restricted to Adults plugin for Wordpress, RTA Label
Posted in Adult Legal, Adult Scripts/Software, Blog Plugins & Widgets, Blog Services, Security Issues, Wordpress | No Comments »
WordPress Release 3.0.5 Is A Security Upgrade
Written by Bec on February 8, 2011 – 10:47 PM -
If you haven’t gone around and updated your blogs to the latest 3.0.5 version, released on Feb. 07,2011, you should make a bit of time to do so, as it addresses some security issues. To download WordPress 3.0.5, use the link from the Dashboard > Updates menu in your site’s admin area or visit http://wordpress.org/download/release-archive/.
Posted in Security Issues, Wordpress | No Comments »
Are You Trading With Cheaters?
Written by Bec on September 13, 2010 – 8:00 AM -This is an older post from AskDamageX.com regarding trading with cheaters. This information is pertinent whether you’re trading amongst your tgp sites or links on your blogs or other money making properties.
The above may look like a rhetorical question, as it would be common sense to not ever trade with cheaters. Apparently that isn’t always the case.
So, why? Aside from the obvious? I recently had a long discussion about this with a friend and we both came to the conclusion that, even if they shouldn’t, many people still trade with cheaters, in many cases knowingly. While it didn’t come as too huge of a surprise to either of us, we still remained somewhat dumbfounded about the huge lack of perspective these people express by trading with thieves. Let me take a few minutes of your busy day and elaborate on that, I promise you’ll find it to be worth your time.
So, again, why trade with cheaters? Most of the times people will avoid the ones that cheat them directly, using various methods, because trading with them will cause direct loss. However, many will keep trading with these cheaters, despite public warnings and despite the risk of incurring a direct loss, very often because they “know” the persons in question (the cheaters) and think that because of the “friendship” involved they will not be cheated.
Well, I wish I could put this more nicely, but if you’re one of the ones described above then you’re a fucking moron. What you’re doing is you’re pretty much leaving the door to your house open to a thief, knowing he steals from others and trusting him to not steal from you because you may be friends. In reality you’re just tempting him even more to steal from you, since he knows you have your guard down and will not suspect him, thus making it very likely that you won’t catch him for a good while. By then he will have cleaned out your house and be long gone anyway, so for him it’s a good deal. For you, not so much.
Still, we see people doing this every day. Why do they do this? Well, see, if they kill a trade with a cheater and that trade happens to be quite big, then they lose traffic. Or so they think. And when they lose traffic, well, they lose… Hmmm, numbers in the script, if the traffic is not human. We all know Alexa ranks don’t mean shit and they may not always be accurate, yet every webmaster loves to flex his e-penis with high Alexa ranks. At the end of the day, however, numbers in the script don’t necessarily mean money in the bank, even if some would like to think so.
So what happens when an honest webmaster knowingly trades with a cheater? Since he is known as honest, more honest webmasters will be inclined to trade with him. Which means that not only will he get hitbotted himself, he will also be passing on the hitbot traffic to other honest people, who don’t actually have a say in receiving it or not. So at the end of the day, tolerating cheater “friends” for one reason or another just helps dillute the traffic pool even further. It also helps the cheaters grow big and strong, since they send out fake traffic and get real traffic in return. Or, like in the case of yobt.com, they redirect gallery traffic to their own site, thus cheating the sites that list their galleries, trading stolen traffic for clean traffic.
Again, trading with cheaters means not only that you shoot yourself in the foot quite immediately, it also means you’re shooting yourself and others in the foot for the long-term as well. So start policing your trades better and point it out to them when they trade with cheaters. If they keep trading with them, just drop the trade. You’ll be doing yourself and the rest of your trades a huge favour.
Get more great tips and advice at

Tags: AskDamageX, trading with cheaters
Posted in Articles & Tutorials, Blog Traffic, From the Forums, Security Issues | No Comments »
Network Solutions Hit with Malware Infection
Written by Bec on August 17, 2010 – 9:19 AM -From ComputerWorld comes this security warning about hosting giant, Network Solutions:
As many as five million Web sites hosted by Network Solutions have been serving up malware, probably for several months, a security expert said today.
“This is one of the biggest infections for drive-by download attacks that I’ve seen,” said Wayne Huang, co-founder and CTO of Santa Clara, Calif.-based Armorize Technologies, a Web application security company.
Network Solutions disputed Huang’s estimate of between 500,000 and 5 million infected sites, but was unable to provide its own count.
Huang said his firm’s researchers initially tracked the infection to a widget installed by Network Solutions on its GrowSmartBusiness.com site, then later discovered that the same widget was installed by default on all “parked” domains hosted by the Herndon, Va. hosting giant.
Read the rest of the article …
Posted in Adult Hosting & Domain Registrars, Articles & Tutorials, Security Issues | No Comments »
Prevent Hotlinking of Your Picture Files
Written by Bec on October 30, 2009 – 1:30 PM -If you’re noticing a major increase in your bandwidth usage, you may have others hotlinking to your picture files, which is theft of your bandwidth and is called bandwidth leeching. A simple way to stop hotlinking is by adding this to your .htaccess file:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?mydomain.com/.*$ [NC]
RewriteRule \.(gif|jpg)$ – [F]
Replace mydomain.com with your actual domain name. With this code in place, your images will only display when the visitor is browsing http://mydomain.com. Images linked from other domains will appear as broken images.
If you’re feeling particularly nasty, you can even provide an alternative image to display on the hot linked pages — for example, an image that says “Stealing is Bad … visit http://mydomain.com to see the real picture that belongs here.” Use this code to accomplish that:
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)?mydomain.com/.*$ [NC]
RewriteRule \.(gif|jpg)$ http://www.mydomain.com/dontsteal.gif [R,L]
This time, replace mydomain.com with your domain name, and replace dontsteal.gif with the file name of the image you’ve created to discourage hot linking.
Be sure to upload your .htaccess in ASCII mode, and once it’s up there, chmod it to 644.
Tags: bandwidth leeching, prevent hotlinking
Posted in Articles & Tutorials, Security Issues | No Comments »

















