{"id":275,"date":"2015-04-17T13:24:16","date_gmt":"2015-04-17T12:24:16","guid":{"rendered":"http:\/\/nonewwars.co.uk\/blog\/?p=275"},"modified":"2015-04-17T13:28:18","modified_gmt":"2015-04-17T12:28:18","slug":"tiresome-security-vulnerabilities-and-wannabe-l33t-h4ckerz","status":"publish","type":"post","link":"https:\/\/nonewwars.co.uk\/blog\/2015\/04\/tiresome-security-vulnerabilities-and-wannabe-l33t-h4ckerz\/","title":{"rendered":"Tiresome security vulnerabilities and wannabe l33t h4ckerz"},"content":{"rendered":"

The 11112018 organisation web site<\/a> got hacked last week.\u00a0 Some child replaced the site with a pro-Islamic page that boasted of their l33t h4ck1ng skillz<\/i> and claiming to be an Afghanistani member of a hacker team:<\/p>\n

\"Screenshot<\/a>

Hacked 11112018 web site<\/p><\/div>\n

Meh.\u00a0 The page was the sort of thing one saw on bulletin boards back in the early 1990s with a link to an (uncredited) image of a Moslem knight.<\/p>\n

It is a shame that in doing so, they trashed the 11112018 anti-war web site<\/strong><\/span>. How to make friends and influence people, not.<\/p>\n

They managed to do so because I had not applied an update to the Drupal web content management software I was using; the version had a security vulnerability this person took advantage of.\u00a0 A quick Google search shows they have uploaded identical content to over 700 web sites.<\/p>\n

What amazes me is the poor quality of their work.\u00a0 The HTML is full of stupid errors that shows the child responsible did a simple cut ‘n’ paste of downloaded code into existing HTML without knowing what they were doing.\u00a0 It also includes embedded JavaScript, some of which does not execute at all because it is incorrectly implemented.\u00a0 The layout of the HTML also demonstrates a total lack of understanding of what they were doing.<\/p>\n

This is the technology equivalent of putting sugar in someone’s petrol tank or letting their tyres down.<\/p>\n

(But they were unwise to leave log file traces, names, IP addresses, traceable script and a trail of identical destruction to other web sites online.)<\/p>\n

My To Do List for June included replacing Drupal with something else and putting up a load of content onto the 11112018 organisation site.\u00a0 Well, now it seems I’ll be replacing the site completely.\u00a0 Time that would have been spent working on peace studies and pro-peace activity.\u00a0 But now with slightly less motivation than I had before.<\/p>\n

Although I could claim “Hey, I’ve arrived!\u00a0 A pro-Islamist activist group have targeted my peace web site for taking down and replaced it with their messages of hate!<\/strong><\/span>”\u00a0 But the reality is they have an automated script that just trawls the domain lists for sites due for renewal and searches for this specific vulnerability, then automatically applies their\u2014rather awful\u2014content.<\/p>\n

They have just as mindlessly replaced a web site for childcare and a children’s skateboard park web site.<\/p>\n

It’s just the same childish, mindless vandalism as spraying swastikas on bus shelters.<\/p>\n

I am so<\/strong><\/em> disappointed.<\/p>\n","protected":false},"excerpt":{"rendered":"

The 11112018 organisation web site got hacked last week.\u00a0 Some child replaced the site with a pro-Islamic page that boasted of their l33t h4ck1ng skillz and claiming to be an Afghanistani member of a hacker team: Meh.\u00a0 The page was … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7,19,2,66,23,51,12],"tags":[5,117,112,67,120,52,107],"class_list":["post-275","post","type-post","status-publish","format-standard","hentry","category-11-11-2018","category-children","category-eleven-eleven-twenty-eighteen","category-hackers","category-hosting-woes","category-motivation","category-rant","tag-5","tag-children","tag-eleven-eleven-twenty-eighteen","tag-hackers","tag-hosting-woes","tag-motivation","tag-rant"],"_links":{"self":[{"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/posts\/275","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=275"}],"version-history":[{"count":4,"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/posts\/275\/revisions"}],"predecessor-version":[{"id":280,"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/posts\/275\/revisions\/280"}],"wp:attachment":[{"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=275"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nonewwars.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}