Hacker News Reader

daveddon Show HN: New project we started – Simple uptime monitor

Glad you liked :)

daveddon Web hoster Antagonist automatically fixes vulnerabilities in customers' websites

Nope, we work with hosts that do exactly that. Patch and update if it is outdated, fix if it is broken and even remove any malware if it is infected.

Again, what you guys are doing is great, and I don't want to take that way. My only point is that you were not the first and some have been doing that for a while.

thanks,

daveddon Web hoster Antagonist automatically fixes vulnerabilities in customers' websites

That's a good approach, but not novel and not the first host doing that.

Many hosts automatically scan and fix their clients sites and have been doing that for a while. Specially when you are talking about popular CMSs like WorPress, Joomla and drupal.

thanks,

Another issue we identified is that you can find those "hidden" admin panel or URLs that shouldn't be known to the outside, by just refreshing the page a few times and checking all requests.

It is not a best practice, but some companies do and it makes easier for those to be found.

thanks,

Site is back up.

daveddon Ask HN: Review quick tool to check if an email is disposable (one time)

Valid link: https://gudado.com/tools/freeemail.php

It also has a simple/open API that anyone can use (being using that on our own sites).

thanks,

daveddon Ask HN: Who Is Hiring? (August 2012)

Remote, Anywhere, anywhere

PHP Developer: http://sucuri.net/company/employment

" Sucuri is looking for a Senior PHP Developer with JavaScript & AJAX chops to join our team, and help us continue building the most polished and reliable website malware scanning and cleanup engine in the world.

This developer would be responsible for creating new enhancements as well as improving existing functionality within a high-load, high-availability, distributed environment. "

Details: http://sucuri.net/company/employment

daveddon Yahoo Voices Hacked, Usernames and Passwords Posted Online.

A quick tool for end users to check if their emails were compromised:

http://labs.sucuri.net/?yahooleak

daveddon Yahoo Voices Hacked, Usernames and Passwords Posted Online.

We did an analysis of the dump:

http://blog.sucuri.net/2012/07/analysis-of-yahoo-voice-passw...

Interesting is the lack of "yahoo" as part of the passwords... I would expect a much higher % from a yahoo leak.

daveddon Ask HN: Who Is Hiring? (June 2012)

Remote.

This position is remote and affords a semi-flexible working schedule.

Job Position: Senior Security Support “Ninja” Analyst

Description: As a Senior Analyst you will be responsible for:

-Handling our most complex security cases (hacked servers, broken sites, hidden malware, etc)

-Troubleshooting broken websites (WordPress, Joomla, osCommerce, Magento, vBulletin, Drupal, and more)

-Direct engagement with the research team to expand our engine

-Queue wrangler, engaging with Junior staff and streamlining processes

As you might imagine, its not all unicorns and rainbows we’re looking for a technical type and specifically someone with the following traits:

-Advanced Linux experience – CLI

-Server hardening and security experience (using firewalls, NIDs, HIDs, etc)

-Experience with log analysis, malware analysis or forensics a big plus

-System administration experience with WordPress, Joomla, ,etc osCommerce or other CMSs

-Shell scripting required

-PHP and C coding experience useful, but not required. -Open source and community participation and contributions a plus

*We love to see active community engagement. If you’re already assisting on forums (WordPress.org, open source project, github, stackoverflow, stopbadware) please include your account name as a reference

Link: http://sucuri.net/company/employment

daveddon Blog Comments – Analysing 100,000 Comments and Spammers

In terms of countries (based on the IP address of the spammer):

#1 USA (30%)

#2 China (20%)

#3 Russia (6%)

#4 Brazil (4%)

daveddon PHP-CGI Vulnerability Exploited in the Wild

You would be surprised:

http://www.shodanhq.com/search?q=PHP-CGI

daveddon Nikjju Mass SQL injection campaign (180k+ sites compromised)

It prevents a user visiting those sites from getting compromised.

However, the spread if this is via SQL injection, so as long as those sites are insecure, it will keep going..

daveddon We Got Hacked, Here's What We Found

That's actually very very common (blackhat seo spam).

daveddon We Got Hacked, Here's What We Found

We are seeing many of those attacks (via brute force) on WP-bases sites:

http://blog.sucuri.net/2012/03/brute-force-attacks-against-w...

So not a vulnerability in WordPress, just bad password usage...

daveddon Ask HN: Who is Hiring? (March 2012)

REMOTE - Sucuri (sucuri.net): Junior (Security) Support analyst:

Description: As a Junior Support Analyst you will be required to troubleshoot web site security issues (learn to fix them), analyse and decode malware, patiently engage with clients, and learn a lot about security :)

We employ manual and automated techniques to analyze, decode, and fix web-based malware. The right candidate will have the opportunity to learn and apply these techniques in their day-to-day duties. If you like the challenge of fixing broken websites and reversing the effects of malware, then you’ll love this job.

Email: dd@sucuri.net Link: http://blog.sucuri.net/2012/02/sucuri-hiring-junior-support-...

daveddon [dead]

Sucuri.net - Remote - Part or full time.

Looking for a junior system admin (or op dev) to help us out.

If you love web security, love learning new tools and have already some experience with Linux, WordPress, Joomla, managing sites, etc, email me dd@sucuri.net.

thanks,

daveddon I Wasn't Paid

Yep, seems to be compromised there:

http://sitecheck.sucuri.net/results/youthoughtwewouldntnotic...

daveddon I Wasn't Paid

IT seems your site is hacked:

http://sitecheck.sucuri.net/results/http://youthoughtwewould...