sucuri2

What do you mean by WordPress logs? I would love support to internal wordpress logs, like the ones by the trunc plugin:

https://wordpress.com/plugins/trunc-logging

that would be interesting.

Quite a few:

- AWS route53

- Google DNS

- Sucuri DNS

- https://noc.org DNS

- https://nsa1.com DNS

And probably many more.

50% of all traffic to the dual stack hosts are going via IPv6. That's expected as most dual stack clients favour IPv6 over IPv4.

We posted some more details here:

https://blog.sucuri.net/2016/05/imagemagick-remote-command-e...

You would be surprised. But to say the truth, I trust the OpenSSH code a lot more than any VPN software that you can install to prevent direct access to it.

Yes, SSH keys is the recommended option. The post has been updated there to state that.

thanks,

Yep. The WP.org guys explain the reason for removing it:

http://wordpress.org/support/topic/anyone-know-why-social-me...

Anywhere (telecommuting/remote) - PHP Developer/ Devops - Full time

Sucuri is looking for a PHP Developer with Linux experience to join our team.

See more at: http://sucuri.net/company/employment/php-developer-ops-02251...

Or just ping me if you have questions (email in profile).

thanks,

Some more details here too:

http://blog.sucuri.net/2013/02/cpanel-inc-server-compromised...

thanks,

All sites. Some more tech details here:

http://ddanchev.blogspot.ca/2013/02/dissecting-nbcs-exploits...

Still infected after more than 2 hours of reporting to them.

Not only nbc .com, but also latenightwithjimmyfallon .com and other major NBC sites.

We posted some details here too:

http://blog.sucuri.net/2013/02/nbc-website-hacked-be-careful...

thanks,

You could also use http://sitecheck.sucuri.net .

However, since the site is now disabled, it won't find anything...

*note that we see this type of malware on sites with vulnerable plugins or using that uploadify script.

thanks,

"Internal Server Error". Cache anyone?

They fixed it.

They fixed it..

It depends a lot where you are from and what citizenship do you have.

If you are from Canada, some countries in the UE and a few others, it is pretty easy. You can even apply for the work permission when arriving in the USA.

For other countries, you have to find a job an go through the H1-B process (expensive for the company) and that can take a few months. Waiting for the green card will take even longer (4 or 5 years).

So most people that I know that came to the USA, they got a job in a large company (microsoft, etc) that applied for their H1-B. After arriving to the US, they applied for the green card themselves.

hope it helps..

And just as they blocked the .co.cc, the attackers are now using the .co.tv:

http://blog.sucuri.net/2011/07/google-blocks-co-cc-attackers...

Never ending battle...

The only issue now is their PHP 5.2.4 requirement which will keep from 15-20% of the users unable to update it:

http://blog.sucuri.net/2011/07/wordpress-3-2-and-php-support...

Curious, did anyone from here ever received such a call? Wondering if they always use the same company name/domain and other things they say.

thanks,

Including nic.cz.cc.

You can check any site by going to their safe browsing API page:

http://safebrowsing.clients.google.com/safebrowsing/diagnost...

If they have a security team (which I hope they do), I feel bad for them (considering the last few weeks). Probably were under staffed and ignored for a long time and now are under a terrible pressure.

All the info here: http://lulzsecurity.com/releases/

Never said that :) Just wanted to show some of the techniques that the other side are currently using.

Nice hack in there. But the "bad guys" are already using the .htaccess for a while as well. Posted about it here:

http://blog.sucuri.net/2011/05/understanding-htaccess-attack...

Awesome way to get their attention. Hope you get hired :)

It has to be open source (at least the PHP code). Not that I agree with it, but they (WP guys) consider plugins and themes derivated from WordPress.

As far as the market, it is hughe, but not very friendly to paid stuff...

Hey :) This is probably not related to the post, but yes, we clean up/monitor WP sites, just send us an email dd@sucuri.net (can certainly give discounts to HN'ers).

thanks,

They didn't post much details, but if you have accounts at wordpress.com/.org, you know what to do (change passwords, etc) :)

Article from April 1st...