Malware Pulls an “Italian Job”

This is a pretty crazy article, and the indication that 80% of the sites were at the same large italian hosting provider. Well it looks like some script kiddies did something more than just ./obb target. Imagine having access to half or a quarter of an ISP’s machines, for dDoS, spam and phishing. 

Malware Pulls an "Italian Job"A number of readers sent us word about a malware attack that has been underway since Saturday that began with the compromise of more than 1,100 mostly Italian Web sites. Websense claims that more than 10,000 sites have been infected by now, 80% of them in Italy. There are indications that most of the Italian sites are resident at the same large Italian hosting provider. Trend Micro reports on the attack, which is launched from a malicious Iframe tag inserted into pages on compromised sites. For visitors to these sites, this begins a cascade of "drive-by" malware downloads if one of several targeted vulnerabilities is available and unpatched. The first page to which visitors are redirected by the Iframe hosts a recent version of Mpack attack software. Panda has a month-old report on Mpack (PDF) that provides copious detail about its nefarious ways.

Read more of this story at Slashdot.

Iran.com sold for $400,000

I got this link from a friend over MSN, interesting read, almost over a million dollars spent on domains.

Rick Latona of DigiPawn.com went on a spending spree this week and more than half a million dollars later he was the proud new owner of Iran.com ($400,000), TrackAndField.com ($57,000), Territory.com ($30,000) and Gutter.com ($12,500). The first three names all landed on the top half of our new Top 20 chart and Gutter.com just missed making the Big Board. All four names were acquired in private transactions. In addition to being the biggest sale reported this week, Iran.com is the 6th biggest sale reported so far in 2007.




You can read the full article here at http://www.dnjournal.com
















Shockvoice Alpha 0.6.0 released

Shockvoice Alpha 0.6.0 released – [WArp2Search]

I just tried this out on a server that was setup for digital-anarchy.com and I have to say its pretty good. The voice quality is amazing and the built in browser is cool. You can setup your server to pull up a page when your connect and change channels. Is this a replacement for ventrilo? Click below to see a screenshot of the client.

Drupal Day 1

So, this is what Day 1 is like. I have a nice theme that I got off the main Drupal site. As you can see its sleep and colorful but not overwhelming. Aside from messing with the general configuration of Drupal, there is a lot more you need to do to make it even remotely functional/organized.

Lets take categories for instance. At first I didn’t know exactly how these worked. However after some playing around, and further posting. I was able to separate my blog entries and the HOWTO’s. I just create a new Category for each, and then provide terms to place them under which is a great feature.

SpamHaus being dDoS’d

Hello,

Just read this at work, from a co-worker, luckily we have a SpamHaus cache setup so that we rsync the data and can still operate. Bu there has been a surge of spam!

http://www.forbes.com/technology/2007/06/12/storm-malware-spamhaus-tech-cx_0612darkreading.html

Installing Drupal Part I

The Drupal setup portion was pretty easy, I just had to create a database and provide the database login credentials to the Drupal install page. This page is the default page of where you put the install. After this, I was able to post and do all sorts of things.

I did hit a hitch though, when I started playing around with the Drupal “Administer/Site configuration Clean URLs/Clean URL’s”. At first it wasn’t enabled, and of course for Search Engine Optimization I wanted them to work. I knew this could only be done by a .htaccess file, but where was it?

Well, after further searching on Google I find this little article:

http://drupal.org/node/15365

Where it tells you what needs to be in the missing .htaccess file, however the information they provided was:



RewriteEngine on
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?q=$1 [L,QSA]

Which then gave me an Internal 500 server error, and I kinda new what was going on. But I was being kinda lazy about it. I checked the apache2 log:


[Thu Jun 14 13:17:58 2007] [alert] [client 64.180.78.228] /home/geektank/public_html/.htaccess:

You will need to remove the "If you don't use the .htaccess that comes with Drupal you'll need to add some rewrite rules into your apache directory directive. Consult the .htaccess file in Drupal for examples of rules.

I was still getting a 500 Internal Server Error, and I saw this in the apache2 error log:


[Thu Jun 14 13:18:22 2007] [alert] [client 64.180.78.228] /home/geektank/public_html/.htaccess: Invalid command 'RewriteEngine', perhaps misspelled or defined by a module not included in the server configuration, referer: http://geektank.net/?q=admin/settings/clean-urls

LOL, I didn't enable mod_rewrite in apache2. Mind you this is a new install of Debian Etch, so I just did a2enmod rewrite and viola, nice clean links!

Now I just need to get the formatting down for Drupal. I'm use to MediaWiki, which powns.

My first Drupal Install.

This crazy thing you’re looking at is Drupal. I will be logging all my changes to this site as I make it look good and functional. I plan on turning this domain name into a storage of Tech Articles + HowTo’s. We will see how this goes as I try and make it work, and look good at the same time.