Hacker News Reader

sucuri2on SQL Slammer’s mysterious disappearance

Article from April 1st...

sucuri2on 0-day vulnerability on WordPress 3.x (remote command execution)

Not lying, just a joke :) Specially when you blame their lead dev, ATT and the NSA...

Hard to believe :)

sucuri2on GoDaddy competitor offers discounted domain transfers to save elephants

Hungry people or an elefant? I am actually on godaddy side on this one..

sucuri2on [dead]

Too bad the +hn only works on Google hosted emails...

sucuri2on Salesforce Buys Social Media Monitoring Company Radian6 For $326 Million

You guys from NB?

sucuri2on Salesforce Buys Social Media Monitoring Company Radian6 For $326 Million

Good for them! What most people doesn't know is that Radian6 founder, C. Newton, also founded Q1 Labs ( a successful security company ) and was kicked out of it a few years ago by the "board"...

Instead of giving up, he formed a new company and did very well for the second time.

sucuri2on Phpfog "Down for maintenance"

It seems to be from one of your friends:

phpfogsucks.com is hosted with tomato.compwhizii.net:

http://sharingmyip.com/?site=phpfogsucks.com

Which is owned by John Du Hart ( http://johnduhart.me/ ) .

You guys could be in a lot of legal trouble if they decide to press charges.

sucuri2on Phpfog "Down for maintenance"

Their phpfogsucks is hosted with tomato.compwhizii.net:

http://sharingmyip.com/?site=phpfogsucks.com

The guy ( http://johnduhart.me/ )could be in trouble if they decide to go with legal action.

sucuri2on Show HN: Keyword Tool to Find Available Domain Names

throwing errors:

TemplateSyntaxError at /keyword_tool/

Caught OperationalError while rendering: (2002, "Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)")

Request Method: GET Request URL: http://domaingroovy.com/keyword_tool/ Django Version: 1.3 rc 1 Exception Type: TemplateSyntaxError Exception Value:

Caught OperationalError while rendering: (2002, "Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)")

Exception Location: /home/domain/domaingroovy/env/lib/python2.6/site-packages/MySQLdb/connections.py in __init__, line 187 Python Executable: /home/domain/domaingroovy/env/bin/python Python Version: 2.6.5

sucuri2on Securing an Ubuntu Server

I don't get why people recommend chkrootkit + failban/denyhost.

I would recommend OSSEC to anyone looking for a serious host-based IDS (it does all those tools do + a lot more and very light weight).

*link: http://www.ossec.net

sucuri2on HBGary planned to "blow the balls off Nmap"

Everyone says stupid things on emails. Specially on PRIVATE emails.

It is funny, sounds stupid what he is saying, but how many stupid things we say on email, IM etc on a daily basis? Don't judge just because of it...

sucuri2on Is it normal to get hundreds of break-in attempts per day?

OSSEC (open source) is very good at blocking those. It looks at all your logs and blocks brute forces via SSH, HTTP, etc...

Link: http://ossec.net

sucuri2on Should antivirus vendors block state malware?

AV != IDS. Goal of the AV is to stop known malware from propagating.

Goal of the IDS is to detect (or block) attacks (or your penetration tests).

sucuri2on How I Gamed GDC’s Top Social Game Developers

503 - Service unavailable? Copy anywhere?

sucuri2on Security Analysis - More than 3% of the top 100k web sites were hacked recently

Those were the sites in the top 100k list by Alexa...

sucuri2on Wordpress.com Suffers Major DDoS Attack

They use their paid VIP service, which is pretty solid (and pricy).

sucuri2on Show HN: Invite to try fiesta.cc - effortless mailing lists

Ah, very cool :) Thanks for the explanation...

*btw, I would not use a ".cc" domain for the project, since it is mostly used by malware stuff lately :/

sucuri2on Show HN: Invite to try fiesta.cc - effortless mailing lists

Sounds a good concept. Can anyone send email to the created list or just the initial members? What if the list is already created / used by other people?

sucuri2on Grameen Bank web site hacked / infected with spam

Just leaving the political issues a side..

sucuri2on Yunus fired from Grameen Bank

What is funny is that their site is hacked as well: http://blog.sucuri.net/2011/03/grameen-bank-web-site-hacked-...

sucuri2on ASK HN: Review our new product: WordPress Module: Security, Auditing and Backup

I would love some feedback on a new product we just released to the public.

It is a security plugin that will add some things that are missing on WordPress. Including:

-Full auditing trail (so you can track everything that happens, including logins, logouts, new users, new posts, posts being modified, etc, etc)

-Active response - Based on the audit trail, it will block certain behaviours (multiple failed logins, spam bots, attacks against known WP vulns, etc)

-Backup - Daily backup of your site (DB + files)

-1 click hardening - A quick option to run some best-security-practices hardening into WP.

Link: http://sucuri.net/wordpress-security-monitoring

Anyone can download it from here (only parts of the plugin that are paid - auditing + backup), the rest is free: https://wordpress.sucuri.net/wp-sucuri-plugin.zip

Any feedback on the landing page, plugin itself, screenshots, etc are more than welcome.

thanks,

sucuri2on Ask HN: Who Is Hiring Remote Workers? (March 2011 Edition)

We are: http://sucuri.net

Looking for an entry-level (junior) support person to help us out. Great way to get experience and work with some cool security projects (dealing with all types of malware, infected sites, etc).

What we are looking for? Someone that learns fast, loves to automate boring tasks, knows Linux / PHP (or shell scripting) and is fun to work with. Experience with WordPres/ Joomla/ Wiki and other popular web apps is a plus.

Email me dd@sucuri.net if interested.

sucuri2on HN request: Nordic startups, we'd love to feature you

Does Canada count as a nordic country? :)

sucuri2on Ask HN: How to learn more about the A in the LAMP?

You may not like it, but it is far from a piece of shit. Very modular, easy to use, well supported, well documented and does the job well.

sucuri2on Ask HN: is it unfair to refuse a job application simply based on bad writing?

Not when it is so hard to find qualified people...

sucuri2on Ask HN: is it unfair to refuse a job application simply based on bad writing?

One word for you: foreigners (or people that English is not their main language).

Very capable, very smart and awesome to work with (most of the time), but can make some silly mistakes when writting in english... Specially on things that a spell checker wouldn't catch.

Not unfair, but you could miss a lot of good people by doing that.

sucuri2on Google IPO? No Thanks (2004)

Easy to make fun of it now, but the domain "fool.com" fitted well for that article :)

sucuri2on WordPress.com / CNN.com redirecting to superfantastically.com (hacked?)

Good reply from the WP.com guys:

Hey folks – I work for Automattic. Around 9:53AM CST this morning, while troubleshooting an issue, one of our developers accidentally pointed all mapped domains on WordPress.com to their test site. We quickly became aware of the problem and replaced the test site with an error message, since some site owners were concerned that their sites had been compromised. We then began the process of restoring good data from our backups. By 10:48AM CST, all data had been restored and we had cleared various caches which may have been polluted with bad data. There was never a risk to the content associated with any site on WordPress.com, or any security compromise. Instead, it was an important mapping table that was accidentally overwritten during debugging. We apologize for the problems and are looking into ways to prevent this type of issue from happening in the future.

sucuri2on WordPress.com / CNN.com redirecting to superfantastically.com (hacked?)

It seems they fixed already (not local, as you can see from the twitter stream).

sucuri2on IPv6 is here

I agree. I did a quick check and only 0.19% of the top 1 million sites (according to alexa) have ipv6 enabled:

http://blog.sucuri.net/2011/02/ipv6-is-not-here-yet-in-fact-...

And the biggest issue is that very few people really understand ipv6 to make for a smooth transition..