Comments on: Ah, irony: a site with “hacks” in its name gets hacked; what I did when my WordPress blog was compromised http://www.practicalhacks.com/2009/04/12/ah-irony-a-site-with-hacks-in-its-name-gets-hacked-what-i-did-when-my-wordpress-blog-was-compromised/ Gadgets, gear, and greatness for people on the go Sun, 12 Feb 2012 23:00:09 +0000 hourly 1 http://wordpress.org/?v= By: Kevin http://www.practicalhacks.com/2009/04/12/ah-irony-a-site-with-hacks-in-its-name-gets-hacked-what-i-did-when-my-wordpress-blog-was-compromised/comment-page-1/#comment-1695 Kevin Mon, 13 Apr 2009 11:38:14 +0000 http://www.practicalhacks.com/?p=5516#comment-1695 Yvette, I didn't take it that way at all; to be frank, in the past I haven't been as careful with some passwords as I should have. The post about passwords is certainly valid, and a good approach. Yvette,

I didn’t take it that way at all; to be frank, in the past I haven’t been as careful with some passwords as I should have. The post about passwords is certainly valid, and a good approach.

]]> By: Enjoying Travel With Kids http://www.practicalhacks.com/2009/04/12/ah-irony-a-site-with-hacks-in-its-name-gets-hacked-what-i-did-when-my-wordpress-blog-was-compromised/comment-page-1/#comment-1694 Enjoying Travel With Kids Mon, 13 Apr 2009 07:33:47 +0000 http://www.practicalhacks.com/?p=5516#comment-1694 Sorry, by my earlier comment, I certainly did not mean to insinuate that the strong password post was bad information! I was just asking if you had now re-evaluated the information in the light of last week's events. Thanks for your answer Kevin, I appreciate your candour. I'm sorry if anyone thought I was criticising - that was NOT my intent! Yvette Sorry, by my earlier comment, I certainly did not mean to insinuate that the strong password post was bad information! I was just asking if you had now re-evaluated the information in the light of last week’s events.

Thanks for your answer Kevin, I appreciate your candour.

I’m sorry if anyone thought I was criticising – that was NOT my intent!

Yvette

]]> By: Lyle Waldo http://www.practicalhacks.com/2009/04/12/ah-irony-a-site-with-hacks-in-its-name-gets-hacked-what-i-did-when-my-wordpress-blog-was-compromised/comment-page-1/#comment-1693 Lyle Waldo Mon, 13 Apr 2009 01:06:01 +0000 http://www.practicalhacks.com/?p=5516#comment-1693 Glad you are back up and running. Good warning to keep in mind. Glad you are back up and running. Good warning to keep in mind.

]]> By: Michael W. http://www.practicalhacks.com/2009/04/12/ah-irony-a-site-with-hacks-in-its-name-gets-hacked-what-i-did-when-my-wordpress-blog-was-compromised/comment-page-1/#comment-1692 Michael W. Mon, 13 Apr 2009 00:57:15 +0000 http://www.practicalhacks.com/?p=5516#comment-1692 Wow. I think basically if hackers can hack Microsoft - and we know how many vulnerabilities they find all the time in MS products, particularly IE, then how safe is a little blog somewhere? Golite's commercially run website got hacked last year. Big name websites get hacked. Don't blame the victim! Amazing job of cleaning up though. My brain is half-fried just from reading about it.... Wow.

I think basically if hackers can hack Microsoft – and we know how many vulnerabilities they find all the time in MS products, particularly IE, then how safe is a little blog somewhere?

Golite’s commercially run website got hacked last year. Big name websites get hacked.

Don’t blame the victim!

Amazing job of cleaning up though. My brain is half-fried just from reading about it….

]]> By: Kevin http://www.practicalhacks.com/2009/04/12/ah-irony-a-site-with-hacks-in-its-name-gets-hacked-what-i-did-when-my-wordpress-blog-was-compromised/comment-page-1/#comment-1691 Kevin Sun, 12 Apr 2009 21:47:26 +0000 http://www.practicalhacks.com/?p=5516#comment-1691 Yvette, I think the advice in that post is sound. Because I use a password manager (RoboForm), however, I tend to create passwords without using a specific formula; I simply use a variety of letters, numbers and special characters and try to be as "random" as possible in selecting them. ...and I don't use short passwords: the longer, the better. By the way: the weak password I alluded to was just that. I created it about 8 months ago and GOT LAZY. It used a dictionary word, and worse yet, a series of numbers in sequence (e.g., 678910) Dumb. Not sure it lead to my problem, but once it was in RoboForm I forgot about it. When I realized it was still in place I of course changed it with something much more robust. Yvette,

I think the advice in that post is sound. Because I use a password manager (RoboForm), however, I tend to create passwords without using a specific formula; I simply use a variety of letters, numbers and special characters and try to be as “random” as possible in selecting them. …and I don’t use short passwords: the longer, the better.

By the way: the weak password I alluded to was just that. I created it about 8 months ago and GOT LAZY. It used a dictionary word, and worse yet, a series of numbers in sequence (e.g., 678910) Dumb. Not sure it lead to my problem, but once it was in RoboForm I forgot about it. When I realized it was still in place I of course changed it with something much more robust.

]]>