Comments on: We Got Hacked – And How We Fixed It

By: SlightlyShadySEO

SlightlyShadySEO — Tue, 01 Jan 2008 06:59:35 +0000

CENSORSHIP

By: ryan

ryan — Tue, 01 Jan 2008 06:51:15 +0000

I have dealt with MT and have to say, they are a better professional host than most. If I didn’t need a reseller I would be with Media Temple for sure.

I hope you reset your password to something around 20 characters, alpha numeric with 5 or 6 characters. This way, crackers will not be able to get your password cracked without a very complex computer.

By: Carl

Carl — Tue, 01 Jan 2008 00:22:51 +0000

In reply to Matt.

That’s how bad things can happen to hacked websites. Anyway, it’s not that serious compared to other hacks.

The guy who did this won’t probably get caught, host gator ain’t that cooperative much.

By: Carl

Carl — Tue, 01 Jan 2008 00:12:25 +0000

In reply to Sly from Slyvisions.com. No problem buddy!

By: elamb

elamb — Mon, 31 Dec 2007 21:28:23 +0000

I believe that crackers find these breaches with search engines (or they are malicious users of the service they intend to hack) so they are familiar with the vulnerability. They then use a known method of exploitation. Its important to get a diligent host who take security seriously.

By: Sly from Slyvisions.com

Sly from Slyvisions.com — Mon, 31 Dec 2007 18:47:59 +0000

Sorry for the misunderstanding. I read the part wrong where you said “if this was intentionally done to us or it was just a cpanel security hole”. When I said that if this was really done by a hacker, that was because I was taking into account the cpanel security hole (which I thought was something done by your web host). Anyway, I got it now. :)

By: SlightlyShadySEO

SlightlyShadySEO — Mon, 31 Dec 2007 18:30:51 +0000

@Ade: It’s not a hostgator problem; it’s a shared hosting problem.
You transfer a domain to their DNS, and then add it on. But WHOEVER adds it on first gets it. There’s no way to verify your claim.
So all this guy did was break into cpanel to remove the addon domain, then add it on his own account.

By: Sly from Slyvisions.com

Sly from Slyvisions.com — Mon, 31 Dec 2007 18:04:01 +0000

Sorry for the misunderstanding but the reason I said that is because you said it yourself that it could have just been a cpanel security hole. I didn’t mean to sound like I thought that you did that to yourself. :)

By: Tal

Tal — Mon, 31 Dec 2007 17:19:46 +0000

Wow, good job! I’m glad you’re back,
Have a wonderful new year !

By: julia

julia — Mon, 31 Dec 2007 13:35:17 +0000

that’s so scary!

(i think there’s someone insecure at your fame!)