🚀 go-pugleaf

Cydrome Leader <presence@mungepanix.com> wrote:

> I tried to ROT 13 this back into English, but it still didn't make any 
> sense.

I dunno what he's crying about either but a few fragments reminds me of an
incident we had around here a few years ago.

One of the larger music websites we run, the owner was on a mini tour and
hitting all the free wifi spots while traveling, one of them must of had a
sniffer on it, they got his ftp username and password.

Was sort of odd because what they did was, after looking around the site at
everything, they downloaded all the .html files. Then each one was modified
with a single new line in it, encrypted javascript linking to some server to
pull ads for an online casino and uploaded back up.

It was really low key, just a small ad at the bottom of the page, centered
and in many cases, almost looked like it belonged there.

Funny thing about the whole thing, he didn't even notice for months, like
almost a year. It wasn't until the server the ads were being pulled from
went offline and they started to show up as empty rectangles with question
marks in them. He called us wondering what those were because he said they
shouldn't be there.

Was a pretty subtle hack.

But he wasn't crying all over it and took it down or anything. We got him to
use sftp instead, fixed up all the files and continued on.

-bruce
bje@ripco.com