Hacker News Reader

You would be surprised. But to say the truth, I trust the OpenSSH code a lot more than any VPN software that you can install to prevent direct access to it.

sucuri2on SSH Brute Force – The 10 Year Old Attack That Still Persists

Yes, SSH keys is the recommended option. The post has been updated there to state that.

thanks,

sucuri2on WordPress Plugin Social Media Widget Hiding Spam

Yep. The WP.org guys explain the reason for removing it:

http://wordpress.org/support/topic/anyone-know-why-social-me...

sucuri2on Ask HN: Who is hiring? (March 2013)

Anywhere (telecommuting/remote) - PHP Developer/ Devops - Full time

Sucuri is looking for a PHP Developer with Linux experience to join our team.

See more at: http://sucuri.net/company/employment/php-developer-ops-02251...

Or just ping me if you have questions (email in profile).

thanks,

sucuri2on Server hack prompts call for cPanel customers to take “immediate action”

Some more details here too:

http://blog.sucuri.net/2013/02/cpanel-inc-server-compromised...

thanks,

sucuri2on NBC.com hacked, serving up Citadel malware

All sites. Some more tech details here:

http://ddanchev.blogspot.ca/2013/02/dissecting-nbcs-exploits...

sucuri2on NBC.com hacked, serving up Citadel malware

Still infected after more than 2 hours of reporting to them.

Not only nbc .com, but also latenightwithjimmyfallon .com and other major NBC sites.

We posted some details here too:

http://blog.sucuri.net/2013/02/nbc-website-hacked-be-careful...

thanks,

sucuri2on Ask HN: I can't tell why my site is showing malware warning.

You could also use http://sitecheck.sucuri.net .

However, since the site is now disabled, it won't find anything...

*note that we see this type of malware on sites with vulnerable plugins or using that uploadify script.

thanks,

sucuri2on Dropbox is my publish button

"Internal Server Error". Cache anyone?

sucuri2on MySQL.com currently Hacked (and serving javascript malware)

They fixed it.

sucuri2on MySQL.com currently Hacked (and serving javascript malware)

They fixed it..

sucuri2on Ask HN: How should I apply for U.S. jobs as a non-resident?

It depends a lot where you are from and what citizenship do you have.

If you are from Canada, some countries in the UE and a few others, it is pretty easy. You can even apply for the work permission when arriving in the USA.

For other countries, you have to find a job an go through the H1-B process (expensive for the company) and that can take a few months. Waiting for the green card will take even longer (4 or 5 years).

So most people that I know that came to the USA, they got a job in a large company (microsoft, etc) that applied for their H1-B. After arriving to the US, they applied for the green card themselves.

hope it helps..

sucuri2on Google Removes More Than 11 Million .co.cc Domains From Search Results

And just as they blocked the .co.cc, the attackers are now using the .co.tv:

http://blog.sucuri.net/2011/07/google-blocks-co-cc-attackers...

Never ending battle...

sucuri2on WordPress › WordPress 3.2 now available

The only issue now is their PHP 5.2.4 requirement which will keep from 15-20% of the users unable to update it:

http://blog.sucuri.net/2011/07/wordpress-3-2-and-php-support...

sucuri2on The tale from a phone pishing attempt

Curious, did anyone from here ever received such a call? Wondering if they always use the same company name/domain and other things they say.

thanks,

sucuri2on Google just blacklisted the whole .cz.cc TLD

Including nic.cz.cc.

sucuri2on Google just blacklisted the whole .cz.cc TLD

You can check any site by going to their safe browsing API page:

http://safebrowsing.clients.google.com/safebrowsing/diagnost...

sucuri2on Sony Music Brazil hacked

If they have a security team (which I hope they do), I feel bad for them (considering the last few weeks). Probably were under staffed and ignored for a long time and now are under a terrible pressure.

sucuri2on SonyPictures.com hacked, personal information and passwords compromised

All the info here: http://lulzsecurity.com/releases/

sucuri2on How to get shell access with a .htaccess file

Never said that :) Just wanted to show some of the techniques that the other side are currently using.

sucuri2on How to get shell access with a .htaccess file

Nice hack in there. But the "bad guys" are already using the .htaccess for a while as well. Posted about it here:

http://blog.sucuri.net/2011/05/understanding-htaccess-attack...

sucuri2on Loren wants to work at Airbnb

Awesome way to get their attention. Hope you get hired :)

sucuri2on Ask HN: Review my first serious product (WP-FotoTag)

It has to be open source (at least the PHP code). Not that I agree with it, but they (WP guys) consider plugins and themes derivated from WordPress.

As far as the market, it is hughe, but not very friendly to paid stuff...

sucuri2on Security Incident

Hey :) This is probably not related to the post, but yes, we clean up/monitor WP sites, just send us an email dd@sucuri.net (can certainly give discounts to HN'ers).

thanks,

sucuri2on Security Incident

They didn't post much details, but if you have accounts at wordpress.com/.org, you know what to do (change passwords, etc) :)