Wally Nes’ Blog

The photopage is infected again. Now that was pretty damn fast. I cleared the directory on the server where it had been and did a complete clean install with the latest version of the program I use. Interesting though is that the photopage mentions being created by the 7,3 version while I ran it on 8,0. Though this would compute with it being build 30-05-2008. A clue, perhaps

Edit: Yeah, that was easily rectified. Silly mistake on my part. Let’s see how long this holds though. I looked for some time today to find mention of vulnerabilities on the theme I use and have found nothing. I will probably revert to that one as I liked it. Might play with other themes, but not in the near future. I like this blog, but it is taking way too much time atm

I will spend some more time tonight fixing this security leak I seem to have. If it can get back into the photopage it can probably get into the blog agian aswell. I have reverted back to the basic theme to rule out possibility that the theme I use is the weak link eventhough my scanner sais it is not.

The site still isn’t in top shape (See post below) and this will take some of my time still.

BUT, I will try and catch up on writing about some of the things that have been happening. Here is an overview.

I visited Raph in her hometown of Hitachi. Yes, we are direct competitors in the industry. Mitsubishi vs. Hitachi, grrrrrrrr. Most of this visit was . . . well. You probably won’t be hearing much about this. It involved Blueberry cake.

Raph and me went to visit shizuoka. Mostly because it was in the middle of our two towns but also because of something which made “The new three views of Japan”. There will be pictures, though these won’t explain why it made that listing though. This was also the weekend of the akihabara-stabbings. Akihabara -> Shizuoka = 250km. No worries.

The week following that we went to Tokyo. Tokyo -> Akihabara = well . . . Akihabara is IN Tokyo. DUN DUN DUUUUUUUH. More importantly, Tokyo had the VinJ ’07 Brotherhood party, where most of the Vulcanus人 came together once more to party the night away. This weekend involved me taking videos of the “bands” performing in yoyogi park which drained my mobile’s battery so I couldn’t make pictures of the party. I will scrounge around some on the sites of other Vulcanus人 and see what I can find because the party involved inebriated Italian and Polish people. Both are usually good for a laugh. Belatedly I also found out I would be the only Dutch guy in a party filled with Italian and French people. This is hazerdous for your health during this Eurocup. Japan was also rocked by the biggest earthquake in Japan this year. I didn’t feel diddly.

Oh, there was more. Adventure, Drugs, Sex, you name it . . . but, this site is listed as Rated G. And if I started including all of that I would have to apply for a change in that. Too much hassle.

This is just a guess. I did some editing and got rid of some other lines which needed getting rid of and found out I damaged some other files which will need fixing later on. But I can load my site AND the admin bit (otherwise I could not be writing this to you)

If you visit this site and get any warnings of virusses/trojans/bad scripts please email me the details so I can further clear things up.

As of yet, some of the scripts are not working so you will notice some things missing. I will work on this later. But, I think I know what I damaged so I should be able to rectify that soon enough.

Here’s to me being back on the web

P.S. The breach was caused partly by a fault in the wordpress basis. This was known for some time and fixed shortly after that but I did not pick up on it. I still have to figure out if it was only the basis or if the theme I use is also compromised. In which case you will shortly see a new look for this site. The theme and the statcounter I use have their own php files and can therefor be subject to these things (I think) but I have to look in on that.

UPDATE: All reports have come in clean. All that is left is patching up security leaks. The theme was reported back as safe, but I’ll get a 2nd opinion on that matter and I will remove the stat counter (note: this was not the wp-stats.php.info that was part of the infiltration) and upgrade the script/switch to another. Also, a part of the SHQ admin is down and I can’t change the database password. That one is pretty strong, but just trying to be thorough

Two people have come forward with complaints of virusses that might have been linked to this website.

While I have not found any virus codes in my website I did track down an embedded video whose code had increased 16-fold and now sponsored some 26 references to various “poker” sites. The video has been removed as has the link in the comment which pointed me to the video. I may look for that video on youtube, but I will no longer link to that online video carrier.

If you have any other comments regarding virusses/spyware/adware/resource drainage that is up when you are loading my website. Don’t hesitate to let me know.

And if anyone knows an easier way to find out if these things creep into my code I would also like to know that. Looking for them manually is . . . tiresome.