Huge Malware Attack on Possibly 500k+ Websites

http://www.pcworld.com/article/id,145151-c,hackers/article.html. Not sure if anyone has seen this yet or not. This good guy vs bad guy fight is one that we'll probably never see the end of, lol.

 

Hello,
Well, the answer is use Apache, with chroot jail and whatnot ... Badly configured servers are the mother of all evils. Well, except reality tv.
Mrk

 

*sigh* Well, at least at the very worst we can reformat our PC to get rid of the malware evil. I tried to reformat the TV and that damned American Idol was still on.

 

This site lists the exploits used by the infected web pages.

 

Those (MS) vulnerabilities have had patches available for a long time. Not sure about Real Player and Yahoo IM.

 

Thank god I hate Realplayer, though I wish I didn't have to use the damn Yahoo IM just to use the chat rooms, idiots (luckily no Yahoo IM installed at the moment).

 

Yes, given the fact that this would probably be bigger news if these were new vulnerabilities, it sounds as if these are also known vulnerabilities that people just are not patching.

 

Another good reason to have Noscript. I always feel safe with it knowing its protecting me.

 

and a sandbox

 

I got suspended from a security web page for even suggesting that MS is still vulnerable in this or any other way. (at least in one sense) It was considered a (non helpful post) to those who are biased towards MS.

and I'm still gettin slammed !

Neo