Slashdot Mirror


Blogger Hacked

WCityMike writes "Blogger has been severely hacked into, with users' passwords and e-mail addresses being replaced with 'hacx0redbyme' or 'hax0redbyme.' Apparently, attempts to change your password or other information do not succeed due to a major database problem. Blogger currently has no official news: its main page simply apologizes for being down for repairs and its status blog has no information, probably suffering from the same accessing problem as other blogs. In the meantime, discussion, information, and advice is appearing on the weblogs of Anil Dash and Tom Coates, as well as this QuickTopic thread. Glad I use another journaling service." We usually try to avoid "Site X Hacked!" stories, but since this affects so many people - and, heh-heh, they don't have anywhere else to talk about it - here you go.

38 of 340 comments (clear)

  1. And in other news by Anonymous Coward · · Score: 4, Funny

    Authorities were puzzled by the seemingly strange rash of "FIRST HACK!!!" posts on slashdot.org that arose shortly thereafter.

  2. I'm glad I don't use a blog by LordHunter317 · · Score: 4, Funny

    I wouldn't want some l337 hax0r coming in and reading everything about my personal life...

    Oh wait, everyone can do that.

    Doh!

    1. Re:I'm glad I don't use a blog by -=OmegaMan=- · · Score: 4, Funny

      Yes, I'm sure the braintrust that makes up the majority to bloggers will hop all over PGP.

      --

      This sig is xenon coated, and will glow red when in the presence of aliens

  3. Re:A bit mean. by gowen · · Score: 5, Funny
    Blogs are what seperates us from the animals
    Thats true. You never see dogs boring each other witless with the irrelevant minutiae of their lives. Mind you, dog's can lick actually their own genitals, which is pretty much what blogging is a substitute for...
    --
    Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
  4. Blogger's troubles by spookysuicide · · Score: 5, Informative

    Blogger has been having a lot of troubles lately, if you can find your own web hosting, you may want to consider using the very easy to set-up movable type.

    --
    yes i run a goth/punk/emo porn site.
  5. Blogout. by b0r0din · · Score: 5, Funny

    Good thing I chose hax0redbyme as my original password. Ahh, the 1337 L1phs7y13.

  6. recommendation by flanker · · Score: 5, Informative

    Disable or reset the password of the account used to FTP your blog to your web server ASAP.

    --
    Left shift 1 for e-mail...
  7. I don't really get blogs... by Bonker · · Score: 5, Interesting

    Slashdot, for example, is a lot more of a news and current events site than it is Taco's personal weblog. k5 is more about essays and news. Occasionally, however, I'll stumble across a blog while looking for something else. If I don't know what it is at first, I tend to read it for a few seconds before going back.

    LiveJournal blogs are the worst, IMHO. People go on and on about events and parties with people that 99.99999% of their readers have never met. Once I realize I've stumbled across something like that, I leave it as soon as I can.

    Is it exhbitionism/vouyerism? If I read stories about a person's private life, I'd much rather they beging with a line like, "Dear Penthouse, I've always read the letters in your magazine but never thought that something like that could happen to me..."

    --
    The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
    1. Re:I don't really get blogs... by eclectric · · Score: 5, Insightful

      Well, personally, I don't care if any of my readers know who I'm talking about. I really use a weblog to keep track of my state at any given time. This lets me look back and say "oh, that's what I was thinking." I mean, I don't care if I'm the only person in the world who reads my weblog.

      Why put it on the web? Well, there are often times, on irc and in email, when I want to point someone to something I've written... plus, if anyone is visiting my website, then it's possibly they want to know more about me. If they don't, then fine. If they do, then the weblog is there.

    2. Re:I don't really get blogs... by jacobito · · Score: 4, Insightful

      LiveJournal blogs are the worst, IMHO. People go on and on about events and parties with people that 99.99999% of their readers have never met. Once I realize I've stumbled across something like that, I leave it as soon as I can.

      The obvious response is that you're not their audience. Most bloggers write to keep up with their circles of friends, not to impress the general public with the minutiae of their daily lives.

    3. Re:I don't really get blogs... by wunderhorn1 · · Score: 4, Funny
      OK, here's the thing: Many people who keep blogs have *actual friends* with whom they like to keep in touch with. This idea of writing to friends may be an unfamiliar concept to you, but it's actually quite an attractive idea: You can tell people about your life, and those who care about you can read it and even write back! It's like writing letters, only you have a log of what you've written which could possibly be valuable at a later date, plus it's "write once, read everywhere" which saves you the time of having to compose a new letter each day for every person you want to know about you, and removes from them the burden of obligation to reply to everything you write!

      AND (this gets even better) because it's publicly accessible, you can meet new people with whom you can make friends! You may not have grown up with access to the online world, but for the generation that has, the internet is a great venue for social interaction.
      Does that help you understand why blogs appeal to some?

      If you come across a blog whose contents do not interest you, it probably wasn't meant for you to read. That doesn't mean there aren't people who do care about that person and enjoy keeping in touch with them.

      Oh yeah, and like the other guy said, your web page seems suspiciously weblog-like. And I liked the rant where you bitch about the Taliban's web page :-)

      --
      Karma: Bored. (Thinking about resurrecting the "Anyone else is an imposter" joke.)
    4. Re:I don't really get blogs... by Zulfiya · · Score: 4, Insightful

      Well, they're not necessarily for you. LiveJounal, in particular, is geared towards reading other LiveJournal entries. That is, you get together a circle of ten or so friends and socialize. It's not about being informative or entertaining, it's about socializing. Since adding and deleting "friends" is more or less trivial, people leave their journals open (or "public") in the hopes that a person interested in other members of their mini-network will find them and become a new "friend".

      You don't get anything out of the little circle o'exhibition because it's really not there for your benefit. Move along.

      --
      -- I'm not evil, I'm ... differently motivated!
  8. But... but.... by BMonger · · Score: 4, Funny

    I really didn't cheat on my math test like I said in my blogger!!! Somebody hacked it... yeah... that's it...

  9. Shameless plug for my weblog. by eclectric · · Score: 4, Informative

    Luckily, I was worred when I first setup my blogger account, so i switch to a mysql database on my own webserver instead. Eventually, I ended up using movable type to manage my weblog. If you have access to a mysql database on your webserver, I would really recommend doing this.

  10. How will we do without blogs? by Prince_Ali · · Score: 4, Funny

    Blogs are the next coming of geocities. They clutter the internet with useless information.
    I have a blog, but I only use it to say things like, "Fdisk overflowed when I tried to format my hard drive. Now it is negative 15 Gigs!"
    So yeah, I need to be shot.

  11. Blog = weblog by gosand · · Score: 5, Insightful
    FYI, the term blog comes from the term weblog. It got morphed into "we blog", and the term got overused quite a bit. So a blog is basically a journal.

    I have never used one, or intend to. For some unknown reason, it bacame popular to just ramble out your thoughts into an online journal. Whatever. I don't see why this made the news though...

    --

    My beliefs do not require that you agree with them.

  12. While Everyone by SomeOtherGuy · · Score: 5, Informative

    is looking for alternatives. b2 is a really good and powerful altewrnative. PHP, MySQl, and all the goodies.

    --
    (+1 Funny) only if I laugh out loud.
  13. Status Blog now has info by burgburgburg · · Score: 5, Informative
    As of 10:02 am, the status blog now reports:

    Blogger has suffered a security intrusion by a "haX0r." We have all the data that was changed backed up within a couple hours of the attack, so we can have things pretty much back to normal soon. Of course, we're assessing the situation as thoroughly as possible to make sure it doesn't happen again. Also, if you store your FTP login information in Blogger, it wouldn't hurt to change that on your server--though it is unlikely that information was accessed. Sorry for the inconvenience.

  14. one more pointless joke about blogs by L.+VeGas · · Score: 5, Funny

    Hacking a blogging site is like littering in a dump.

  15. Re:script kiddies are sickoes by bellings · · Score: 5, Funny

    They should be treated just like as if they burned down a building, but no, the law doesn't understand.

    They should be treated as if they burned down a building with cute little kitties living inside of it! Because, inside of every blogger there's a cute little kitty, just waiting for you to discover it.

    What these hackers have done is atrocious. It's far, far worse than petty graffiti or vandalism. They have trampled the hearts and emotions of sensitive bloggers everywhere. And for that, there can be no justice -- only bitter revenge.

    --
    Slashdot is jumping the shark. I'm just driving the boat.
  16. Specifically ... by burgburgburg · · Score: 4, Informative
    According to netcraft.com:

    The site blogger.com is running Microsoft-IIS/5.0 on Windows 2000.

  17. Sept 11?!?! by jzs9783 · · Score: 4, Insightful

    From the QuickTopic thread:

    "This is like September the 11th all over again."

    Does that mean the attack on the WTC was a noble cause, causing many to rejoice, point, laugh, and snicker? For humanity's sake, I hope this was the thickest sarcasm ever to form.

  18. Movable Type put the moves on me. by MisterSquid · · Score: 4, Interesting

    Movable Type is indeed excellent weblogging donationware. The folks at Movable Type are great at providing requested features and documenting their software. Installation takes (and I mean this) fewer than 15 minutes, set-up maybe 1/2 hour for even the most non-technical of users.

    I would rather run the latest release of Slash and went so far as to even check out chromatic's Running Weblogs with Slash (NB: /.'ers, /. is a weblog) after reading this recent /. story about "Building Online Communities."

    My problem though is that Slashcode requires a dedicated server--or one on which you have root acces--to install. I'm sure this gives Slash many advantages, but those of us who can't afford dedicated server solutions can't make use of those advantages. My web host doesn't even allow shell access.

    Movable Type (and a few other brands of weblog software) offers people with cheap web-hosting solutions to successfully install high-quality, customizable, open-source weblog software. The couple who run Movable Type produce a quality product. Check them out if you want to run weblog software but don't have a lot of money.

    I wonder if the /. crew couldn't be persuaded to come up with a version of Slash that doesn't require a dedicated server . . .

    --
    blog
  19. Re:Blogs, who need em? by The+Good+Reverend · · Score: 5, Insightful

    Web logs are amazingly convenient for people who don't have the skills to edit from the command line. Remember, most people on the internet aren't as savvy as you or I are, and to them, blogs are an easy and efficient means to updating their personal site. Don't put them down simply because they found a way onto the web without your skill level.

  20. Re:Good for them by The+Good+Reverend · · Score: 5, Insightful

    Oh, I'm sorry. Because someone uses a term you don't like, they deserve to be hacked? That's absurd. I'm sorry you have a personal problem with a certain combination of letters.

    It's not like "blog" was created by an ad agency, or by some company to sell it's product. It's a contraction of "Web Log", which is what these types of sites are. Don't like the word? Don't use it. But don't wish an attack on someone because you find time in your day to hate a contraction.

  21. For all those bashing "Blogs" by aengblom · · Score: 5, Insightful

    Blogs have achieved one of the most fantastic of things ever on the internet. They killed the personal web site! Anyone been asked to visit anyones "personal web page" recently? I think not!

    Personal web pages were 50 times worse than any blog. It's evolution--not revolution ;-).

    Anyway... My friend has a blog. It's is like the BBS I ran when I was 14. Some friends log in. We talk about intersting things (or not) publicly. Eventually when I did things right, a few extra people came along and we had some good conversations.

    --


    So close and yet so far from the world's perfect ID number
    1. Re:For all those bashing "Blogs" by aengblom · · Score: 4, Funny

      But don't compare blogs to a BBS... those were the days when you actually had to have a brain to get online, versus now, when Bertha Walmartski can blog it up to tell the world that one of her three toy poodles is depressed.

      You never signed on to my BBS did you

      --


      So close and yet so far from the world's perfect ID number
    2. Re:For all those bashing "Blogs" by dswensen · · Score: 4, Informative
      But don't compare blogs to a BBS... those were the days when you actually had to have a brain to get online, versus now

      Give this man a 5, Funny!

      I used to frequent a BBS. The rank stupidity I encountered there still amazes me -- I kept a few logs of some of those exchanges, and my reaction varies between thinking they must have been joking and wondering how they could even operate a keyboard.

      Incidentally, that particular BBS is still running, more than seven years later. I've checked in on a couple occasions, only to find the exact same users, arguing about the exact same things, obsessing over the same miniscule and irrelevant BBS policies, carving the same mountains out of molehills -- seven years later. It gave me the chills. I sometimes wonder if they're not trapped in some kind of Sartrian hell.

      The tools have advanced, there are a lot more people on the net now, but the general level of intelligence (on both ends) is about the same as it always was. What you see in an average blog isn't any more or less insightful than what I saw in the "Grips" or "Non Sequitur" forums on the old BBS.

  22. oh thank goodness. by gabec · · Score: 5, Funny

    What I did today: Well my 'blog website is down today. I dunno why. Golly. Luckily enough I found another website (as you can see) where I could babble on and on about absolutely nothing. Felix, (my roommate's cat) is doing just fine, thank you for asking. Did you see the X-Files re-run last week? Oh dear, look at the time. Maybe the normal blog website is back up. *hope*hope*

  23. In additional developments... by Hyped01 · · Score: 4, Funny
    "Blogger currently has no official news: its main page simply apologizes for being slashdotted if they re-enable full content, making their downtime for repairs even worse since they'll probably suffer from the same accessing problem as many other sites linked to from /.'s home page."

    :-)

    -Rob

    --

    WebMaster:
    BinFeeds
    XXX Thumbnailed Image Newsgroups but

  24. Re:Is it just me... by Planesdragon · · Score: 4, Insightful

    I have to wonder what kind of life someone must lead when an attack on their favorite website is as traumatic as the events of that day.

    One outside of NYC, obviously.

    9/11 may have been horrible and dastardly and evil and all--but "tramatic" it was not for me or anyone within a hundred miles of where I am, exempting those few who lost relatives.

  25. Re:Blogger runs windows..... by ChazeFroy · · Score: 5, Informative

    My money is that these guys got in with an application-level hack, not an OS/server hack. The biggest fault of applications, especially web applications, is a failure by the programmer to do input validation.

    Apache, perl, and php are vulnerable to the same type of hacks, it's not just Microsoft.

  26. Unless you have 28 years of once daily entries.. by Inoshiro · · Score: 5, Insightful

    MySQL is really overkill for your work. My changelog uses a Perl script which parses my entries into XHTML. It even nicely preserves my double-spaced end-of-sentences (I really crave that whitespace...). I'm starting to see some slugishness from ext3 because I'm over 1,000 entries now, but I'm planning on hashing my entries into a subdir for the year. That'll limit it to 365 entries per directory (give or take a leap year :)), allowing ext3 to serve my needs for years to come.

    A good flat file system lets you reuse the VFS of Linux for smarter caching, and it's easy to NFS or SMB mount it via any machine on my private network. This also means that for someone to compromise my setup and mess with my changelog, they'd also have unrestricted access (pretty much) to my local network, meaning I'd have a whole lot more to worry about than losing my journal entries.

    --
    --
    Internet Explorer (n): Another bug -- that is, a feature that can't be turned off -- in Windows.
  27. Re:A bit mean. by scott1853 · · Score: 4, Funny

    You're absolutely correct. People need a place to discuss topics ranging from the great tasting new Pepsi Twist to the new Chicago Style Deep Dish Pizza from Pizza Hut that's so deep, you'll need to eat it with a fork.

    Without blogging capabilities we would be just like animals you would see on The Crocodile Hunter on Animal Planet, Wed. and Sat at 8pm, 11pm, and 3am.

    All in all, blogging gives us purpose, and gives us a sense of comfort, similar to the new E-Class from Mercedes-Benz

  28. What the hell...it's only karma... by Cutriss · · Score: 5, Insightful

    Mark me as troll if you want. I don't give a shit.

    90% of the posts in this thread are all "Holier Than Thou"-type Slashdot posts from fellow geeks that obviously feel some sort of insecurity about their own lives and are thus insulting those that use weblogs.

    I don't use a weblog to achieve an inflated sense of importance or to boost my ego. I use it to keep track of what my friends and I are doing. A year from now, we'll have all graduated college, and it's nice to be able to keep tabs on everyone's day-to-day events...and to continue to do so even when we've gone our separate ways.

    Just because you *think* the Internet is full of 12-year-old girlie bloggers discussing the drab details of their lives doesn't mean it's the truth. And even if it was, who appointed you "critic of all those lowly masses"? Get a life of your own, man...

    --
    "Mod, mod, mod...and another troll bites the dust."
  29. Re:Meanwhile.... by CaffeineAddict2001 · · Score: 4, Funny

    2:13 AM
    Someone hacked my blog. Ignore previous post about "Mandy is a sorry loser". Do not ignore October 20th post with the same title, as this was intentional.

  30. blogger back up by ntk · · Score: 5, Informative
    Blogger's status page was just updated (1150am-ish PST) to say this:

    We have found the cause of the vulnerability and have patched it. Everything is back restored and back online with the exception of the API server and bSTATS.

  31. Re:Meanwhile.... by oldstrat · · Score: 5, Funny

    /.
    That's cruel and completely not true.
    The 4 of us handled it completely without anger and substituted by sending each other text messages on our cell phones.