[Hidden-tech] my blog is getting hacked - help

[Chris Hoogendyk]

Tom Adams- Reelife Productions wrote:
> Thanks all,
> after another week or so of enduring random blog post-hacks from "all- 
> natural" stimulation devices and other enhancement related products...
> I believe I've discovered how my blogger hosted blog was being hacked.  
> There is an option to set up an email @blogger.com and send your posts  
> directly through email. I liked the concept of that when I first set  
> up the blog, so I assigned myself an email... apparently someone (or  
> thing) got a hold of that and was posting their naughty-bits via that  
> email. I just changed that email - so, I'm hoping that does the trick.  
> I'm surprised that wasn't one of the 10 or so suggestions I got from  
> this fine  group of smartypantszes;) but hey, you learn something new  
> everyday.

Actually, if you look back at my message, that was one of the things 
that was pointed out. I gave you a link to Google's site on what things 
to look out for if you were getting unauthorized posts. you should still 
go back and look at those links, because just changing your email that 
you post from isn't necessarily going to close that vulnerability. There 
may be other options you have to tighten up as well.

My original reply to you, with the links, is below.


-- 
---------------

Chris Hoogendyk

-
   O__  ---- Systems Administrator
  c/ /'_ --- Biology & Geology Departments
 (*) \(*) -- 140 Morrill Science Center
~~~~~~~~~~ - University of Massachusetts, Amherst 

<hoogendyk at bio.umass.edu>

--------------- 

Erdös 4







-------- Original Message --------

Subject: 	Re: [Hidden-tech] my blog is getting hacked - help
Date: 	Wed, 23 Sep 2009 14:52:48 -0400
From: 	Chris Hoogendyk <hoogendyk at bio.umass.edu>
To: 	Tom / Reelife Productions <tomadams at gmail.com>
CC: 	Hidden-Tech Tech <hidden-discuss at lists.hidden-tech.net>
References: 	<9fdf10230909230750x7fd3c076k836f7f4376ba7b3d at mail.gmail.com>



Tom / Reelife Productions wrote:
 > Hello all,
 >
 > anyone have any tips on how to stop the darn
 > viagra-miracle-drug-wielding-freaks from hacking into my blog and
 > posting new posts over the top of mine? What most scares me most is
 > that I'm thinking the little bot-poster must have my password (which
 > is also my gmail password!). I did change my password last week but
 > it's still happening. I don't even blog that much and kind of find the
 > whole thing pointless...so, if all else fails I could just delete the
 > blogspot account altogether...but this is the first (and only) kind of
 > hacking that I've had to deal with, so I'd like to "solve" it.
 >
 > I've been going through and deleting the posts every other day or so,
 > but they keep coming back. Occasionally, I'll check & they'll be 20
 > freaky-drug enhancement posts (fortunately, I can "select all" in the
 > blog's edit page and delete in one fell-swoop)
 >
 > here's the blog: http://reelifeproductions.blogspot.com/
 >
 > ugh. any help would be greatly appreciated.

http://www.google.com/support/forum/p/blogger/thread?tid=54f41e4b2e321bb3&hl=en

see the end of that thread and the support links at the end

http://www.google.com/support/forum/p/blogger/thread?tid=10e3ca08f0cb212f&hl=en

so, there are some questions for you as well. These indicate that you
should moderate comments to your posts, and also that you should check
the configuration you have set up if you are using mail-to your blog to
post. Aside from those, there is a question about whether you have added
third party widgets to your blog. And I would add, are you sure your own
computer hasn't been hacked -- that would expose your passwords and
links to your blog -- although that seems less likely than the possible
avenues to get directly to your blog if you haven't set it up with the
correct precautions.


-- 
---------------

Chris Hoogendyk

-
   O__  ---- Systems Administrator
  c/ /'_ --- Biology & Geology Departments
 (*) \(*) -- 140 Morrill Science Center
~~~~~~~~~~ - University of Massachusetts, Amherst 

<hoogendyk at bio.umass.edu>

--------------- 

Erdös 4




_______________________________________________
Hidden-discuss mailing list - home page: http://www.hidden-tech.net
Hidden-discuss at lists.hidden-tech.net

You are receiving this because you are on the Hidden-Tech Discussion list.
If you would like to change your list preferences, Go to the Members
page on the Hidden Tech Web site.
http://www.hidden-tech.net/members

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20091001/9a56c445/attachment.html