It started last night. I was doing jack shit with a friend on wow, when I saw Mail.app had a strange email for me.
Dushkin.org was inaccessible to me: it was 404ing the whole time – probably my ISP’s cache to blame. None of my friends had a single problem, and the same was true for CGI proxies. I rang my ISP that day and they had clearly stated, “we have a problem.”
Fine. They have a problem. And fine, they cache my pages. And that cache is having problems, fine. It’s not the first problem I’ve had, and I’m honestly quite tired. Sick and tired.
The email though, read as follows:
Password Lost and Changed for user: dushkin
Password changed?
I had someone take a look at the site. Someone with… internet tubes that aren’t broken. At first I thought he was bullshitting me, “why is there a guy with a gun there?” But, no, he wasn’t lying, as I soon found out via a CGI-proxy.
Naturally, I freaked out. What else could I do? Of course I’d freak out, I assumed I protected myself against these things. But then again, wordpress is not flawless. It was to be expected.
I mentioned this one had something to do with Spice Girls? Well, I wasn’t lying, I’m serious. This stuff is a blast from the past. Some serious hardcore 90s trash. Take a look at some of the HTML: (Modified slightly for better lolz)
<META content="Microsoft FrontPage 4.0" name=GENERATOR>
<BODY oncontextmenu="return false" onselectstart="return false">
Holy shit. “Disabling” right clicking? FrontPage? All this page needs now is real player. Wait a second…
<embed name="video" pluginspage="http://www.real.com/player/" src="http://some.url.rm" hidden="true" type="audio/x-pn-realaudio-plugin" maintainaspect="false" controls="ControlPanel,StatusBar" nojava="true" autostart="true" loop="true" height="62" width="165">
The only thing this page was lacking was a Spice Girl photo. And LASERS.
I reverted the database, changed my password and made changes to .htaccess among other things to ensure nobody gets in.
I don’t know whether the guy who did it was being even remotely serious. Namely because of the logs showing pretty clearly an IP in Egypt originating in Cairo:
41.232.6.15 – - [03/Jul/2009:13:43:26 -0500] “GET /visuals/?action=image&image=December%208.png HTTP/1.1″ 200 14458 “http://www.dushkin.org/visuals/” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)”
The same IP is the one that changed my theme (which no longer has write access) in case you were wondering why I’m pasting this snippet.
Hey, at least he took the time to appreciate my gallery. I guess it’s something? I guess our Dr.MoZo at least appreciates art.
The second thing I have with regards to him is an email address on Yahoo, which was how he resetted the password by some unknown feat: mazika_aboezat@yahoo.com
Come on, that HTML is like sooo last decade.







