Ars Technica Was Hacked

by suprgeek • 12 years ago

51 20 12 years ago

Finklestein3• 12 years ago

Sure looks that way to me.

Stefan-H• 12 years ago

In events like this it is a good idea to avoid sites that have apparently been compromised in case they start serving up malware.

sarciszewski2• 12 years ago

Yep. But living dangerously is so much more fun. runs unpatched Windows Vista in a VM

lurkinggrue• 12 years ago

Running Windows XP without any service packs!

Finklestein3• 12 years ago

I discovered it when I tried to reply to a comment. How do you avoid a site when you're one of the first to see it hacked?

nols2• 12 years ago

You don't. I'm pretty sure they're talking to everyone on HN who's going to come to the comments and then click on the site to check it out.

annasaru• 12 years ago

Esp. if you were running Windows, I would assume. I haven't seen that kind of propagation on non-MS platforms (just my observation).. I'd like to know if a browser on an Ubuntu box would be equally vulnerable - correct me if I am wrong.

untog• 12 years ago

To be honest, I don't actually think Windows is more vulnerable these days - it's just that the average user of Windows is more vulnerable because they're less informed. They'll see the elevated permissions prompt (whatever it's called) and just click yes anyway. Similarly, Windows installers will often come bundled with crapware, but if you read what you're doing you can avoid it.

Someone1234• 12 years ago

I'd always recommend turning on Click-To-Play for all plugins no matter what your platform. Mac isn't immune from this type of thing, even if Linux is due to obscurity.

Most drive-bys are targeting either old versions of IE, Java, Flash, or rarely Windows Explorer issues in XP.

Chrome is great because it auto-updates regularly, and auto-updates Flash. But even in Chrome I turn on Click-To-Play (since I need to have Java installed, and don't trust Java).

geerlingguy• 12 years ago

Earliest tweet about it that I could find (with a screenshot): https://twitter.com/eanlz/status/544585861421993984

The overwritten page read:

    Arse security.
    @nidohax - @metapawd
    cue the music

It looks like Ars has the moonshark up for now. Maybe DNS-related?

Finklestein3• 12 years ago

BTW, @nidohax and @metapawd have no posts on their Twitter accounts. Since they appear to be seeking publicity, lets keep it that way - zero posts on their accounts.

ultramancool• 12 years ago

Ars runs on WordPress, yet another WordPress exploit, or even more commonly, yet another WordPress plugin exploit would be even less surprising than DNS.

agumonkey• 12 years ago

Ha, wordpress seems so anti ars u_u;

bmoresbest55• 12 years ago

Just saw this. Immediately, left and hoping for a quick recovery. More and more just keep on falling. Is it really that fun to bring down other people? I don't understand it. Truly.

nols2• 12 years ago

"We're aware of the issue with our site and are working on it. :)"

https://twitter.com/arstechnica/status/544587442305523712

patman81• 12 years ago

The Year of Living Dangerously

I like the music linked up on autoplay: http://www.youtube.com/embed/FoUWHfh733Y

PublicEnemy111• 12 years ago

google cached it just in time: http://webcache.googleusercontent.com/search?q=cache:7SWNucH...

ikeboy• 12 years ago

https://archive.today/s6N9C

M4v3R• 12 years ago

It's already back online.

Ars Technica Was Hacked

Related Stories