Announcements
Please update out-dated 3rd party software
02/22/2010 12:13
A hacker was able to deface around 15 websites last Saturday. Most of them were out-dated WordPress templates. In defacing a site, the hacker replaces the index page with his page.
Aside from keeping your site template updated, please keep all the permissions of the folders in your accounts set 755, i.e. non-writable. Because writable folders are like open doors to the hackers. They can upload files and execute them freely.
If a site was defaced, this means that the hacker could even take full control of the site but opted not to. This is a sign that the site needs to be secured.
On the server side, we asked our datacenter to audit for server security measures and we received a reply that our servers are secure from such attacks but they cannot prevent sites that have vulnerable scripts nor writable folders.
