web analytics

Extra weight

Written By: - Date published: 10:05 pm, April 22nd, 2008 - 6 comments
Categories: admin - Tags:

A reader pointed out a set of hidden spam links that had attached themselves to the footer of the site.

I’d noticed them previously and thought that I’d corrected them (see comment). But they turned up again. Turns out it was from an interesting flaw in the website, and was being inserted from outside. I’ve hardened up the problem area(s) and I’ll monitor for a repitition.

It is likely that I’ll need to take the site down for a few hours in the early morning on Sunday to do some further maintenance. So don’t get too surprised to get a unexpected screen around that time.

Lynn

6 comments on “Extra weight ”

  1. Peak Oil Conspiracy 1

    Lynn:

    This played havoc with my computer earlier – I believe one of those spam links led to a trojan virus website?

  2. lprent 2

    I’ve just finished scanning the backups (5 times daily) for the last 2 weeks and 3 days that the links show up. There was no client side script or binary objects which would have been required to do anything active. It looks like the links didn’t change much either, so there was no active updating going on between times at the server.

    Thats what I expected. If it had then I’d have noticed a lot earlier. My AV is quite aggressive and would have been popping up warnings about unauthorized action when I was accessing the site. But it doesn’t object to passive links unless I click on them and it finds something it doesn’t like.

    The links were in a hidden DIV so you would not have been able to click on one to activate it. Could have led to that kind of site (I didn’t look). But the intent of the hidden div appears to have been to simply carry the links to increase their google score. Most of the links were to sites like travel agents, real esate, financial services, cheap airfares, hotel bookings, and other such junk. Someone commercial was freeloading on the sites popularity.

    It just added extra weight to all of the pages delivered on the blog – but probably less than one of Steves graphs or a_y_b’s graphics, because the text would usually have been compressed, and their graphs and pictures don’t.

    Anyway, the AV at the server would have noticed a virus or trojian. It isn’t particularly bright compared to Kaspersky, but it does update daily and scans in a auto-protect mode.

    It is highly unlikely that you caught payload from this site.

    //============================================

    Some general advice on viruses, trojians etc. I’d recommend buying Kaspersky – it has been protecting all of my file servers, mail servers, web servers and workstations very well since 2003. Hopefully I’ll be replacing the AV on The Standard’s server with it.

    The most likely cause of your infection is still from e-mail. My mail server discards 74% of mail as spam daily, and a high proportion of those either contain viruses or have links to them. You can get viruses from webpages, but usually you have to click something to download it (unless you have activeX enabled on IE5/6 – urrghh).

    I’d advise using Firefox or Safari even if you have a good AV. IE7 is better than IE6, but it is still inadequete in a lot of directions. In my opinion, especially in security areas. It is noisy about security, but not as inherently safe as Firefox.

  3. Peak Oil Conspiracy 3

    Lynn:

    Interesting comments. I’m not a techy, so this really is your area of expertise.

    Here’s the thing: I don’t open executable file attachments – from anyone. I give you my word that, when I visited this blog earlier today, my computer packed up – more or less straight away. I wasn’t running anything else in the background. I can only assume that there was some malicious code in there somewhere which destablished my OS.

    It sounds like you’ve fixed the problem – whatever it was – but I’d be interested to know if anyone else had the same experience as me.

  4. lprent 4

    I would doubt that it came from here (there is no absolute certainty in IT). But I’d be interested as well. It is a problem that should have been solved long ago by adequete use of AV’s.

    There are quite a lot of interesting (to me anyway) techniques going on around websites at present. It isn’t an area that I’ve looked at extensively for a number of years. But it does keep coming up. There are a lot of routes into systems, and not just by clicked on executables.

    For instance a friend forwarded an e-mail a few days ago to have a look at because the wording was quite threatening, and it turned up in both of her mail boxes. It had a link to a webpage which I opened in a sniffer. The front of the site had a routine bit of porn. But there was a IFRAME on the page that had some very well written vbscript that would have worked in older IE’s, and outlooks.

    I’ve seen trojian insertors turn up in video and audio codexes. The “install this to play this video” for something on a web page targeted at windows media player.

    Some rather stupid applications use open protocols like tftp to update drivers. I caught one of them pulling in a virus a year or so ago presumably because someone was capturing the packets at a router.

    I’m not going to bother detailing the access points that are detailed on the net. But it is why there are so many security updates coming through on windows over the last few years.

    Generally the best defense is to have very good antivirus and scanners (and keep them updated!) plus use the hardware firewall on your router.

    Every outbreak that I’ve seen in the last 4-5 years has also had no or antique anti-virus at the client side.

    The hardware firewall.. Most machines visible on the net have port scans done on them at least every 30 minutes looking for open ports. One server I help maintain in the US gets scanned on average every 4 seconds.

  5. mondograss 5

    Actually, my PC choked as well. When I accessed the site it asked me if I wanted to download a plugin (redirected to a-b-c.com I think?), which I tried to decline but by that stage IE had locked up and I had to reboot. The PC ran pretty badly for a while but eventually sorted itself out, antivirus didn’t find anything when I ran it.

  6. lprent 6

    I’ve had that happen a couple of times in the last few days (in IE7).

    Once on here and once on another site. It was asking for different plugins in each case. One was some kind of graphics protocol and the other was something that I’ve forgotten – shockwave?. Displayed in the bar just under the tab bar in IE7.

    The defining factor was that it jammed IE7, and put one CPU core into 100%. The rest of the machine went really sluggish. Because the machines are multi-CPU/multi-core, I just killed IE7.

    I never allow plugins for Internet Explorer, and routinely get that type of message. I’d attributed the jam up to one of microsoft’s automatic downgrades. It was only the jam that was unusual.

    Just in case you hadn’t realised. I don’t like Internet Explorer. I only use it because I still have to write HTML/css/js for it sometimes. IMHO it is too non-standard to code for easily, and outright dangerous on security.

Recent Comments

Recent Posts

  • Upper Hauraki to move to Alert Level 2
    Upper Hauraki will move to Alert Level 2 from 11:59pm tomorrow, 25 September, COVID-19 Response Minister Chris Hipkins confirmed today. After positive cases were detected in the Upper Hauraki area on Sunday, extra Alert Level restrictions were put in place to immediately prevent any wider transmission of the virus.  “We’ve ...
    BeehiveBy beehive.govt.nz
    2 hours ago
  • Report into Aotearoa New Zealand’s export controls system released
    Foreign Affairs Minister Nanaia Mahuta today welcomed the findings of an independent review into Aotearoa New Zealand’s export controls system, which regulates the export of goods to foreign militaries, police forces or paramilitaries. Produced by David Smol, a former Chief Executive of the Ministry of Business, Innovation and Employment, the ...
    BeehiveBy beehive.govt.nz
    5 hours ago
  • New District Court Judge appointed
    Attorney-General David Parker has announced the appointment of Brett Crowley of Wellington as a District Court Judge.  He is currently the Wellington Public Defender and started his career as a staff solicitor working in a range of litigation including criminal defence work. He went to the bar in 1999 specialising ...
    BeehiveBy beehive.govt.nz
    6 hours ago
  • Mental health stocktake shows strong progress
    The first report of the Government’s Implementation Unit has found strong progress has been made since the Mental Health and Addictions Package was announced in 2019. “The report notes most initiatives funded in the Budget 2019 package are on track to deliver what is expected by 2023/24,” Grant Robertson said. ...
    BeehiveBy beehive.govt.nz
    6 hours ago
  • Working together to grow the West Coast
    A project that has been crucial in allowing businesses to continue during the tourism downturn is among a number of initiatives to receive a boost from the Government’s Jobs For Nature programme, Conservation Minister Kiri Allan says. Sustaining South Westland is an extension of an initiative set up last year ...
    BeehiveBy beehive.govt.nz
    6 hours ago
  • Next steps to improve safety in wake of Whakaari White Island tragedy
    The Government is moving to improve safety in light of the Whakaari White Island tragedy and has released proposals to reinforce safety standards in registered adventure activities. The package of proposals includes: Strengthening requirements for how operators, landowners and the regulator manage natural hazard risks Improving how risks are monitored, ...
    BeehiveBy beehive.govt.nz
    8 hours ago
  • New Zealand donates more COVID-19 vaccines to COVAX and the Pacific
    Foreign Affairs Minister Hon Nanaia Mahuta and Associate Health Minister Aupito William Sio announced today that New Zealand is donating additional Pfizer vaccines to the Pacific and AstraZeneca vaccines to the COVAX Facility, to support equitable access to COVID-19 vaccines. “New Zealand is donating 708,000 doses of the AstraZeneca COVID-19 vaccine ...
    BeehiveBy beehive.govt.nz
    11 hours ago
  • Speech to the Property Council of New Zealand
    Kia ora koutou katoa   Is it a pleasure to be able to speak with you today, and to be able to answer some questions you may have. I would like to acknowledge the organisers of this event, the Property Council. The theme of this year’s conference is City Shapers. Together ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Additional MIQ for Christchurch
    An additional hotel will be added to our network of managed isolation and quarantine facilities, COVID-19 Response Minister Chris Hipkins said today. “I have approved and Cabinet is in the final stages of signing off The Quality Hotel Elms in Christchurch as a new managed isolation facility,” Chris Hipkins said. ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • NZ COVID-19 response earns another major digital investment
    Minister for the Digital Economy and Communications Dr David Clark welcomes Amazon’s Web Services’ (AWS) decision to establish a Cloud Region on New Zealand shores, further boosting New Zealand’s growing digital sector, and providing a vote of confidence in the direction of New Zealand’s economic recovery. “Amazon is the second ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • New Zealand invests in cutting edge cancer R&D
    Scaling up the manufacture of CAR T-cell cancer therapy for clinical trials Advancing New Zealand’s biomedical manufacturing capability Supporting future international scientific collaborations Transforming cancer care with targeted, affordable solutions Research, Science and Innovation Minister Hon Dr Megan Woods has announced that the fight against COVID-19 will not stop the ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Expert group appointed to lead New Zealand’s future health system
    An outstanding group of people with extensive and wide-ranging governance and health experience have been appointed to lead the Māori Health Authority and Health New Zealand, Health Minister Andrew Little says. “This Government is building a truly national health system to provide consistent, high-quality health services right across the country. This ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Funding to help clean up contaminated sites
    The Government is supporting the clean-up of contaminated sites in Northland, Dunedin and Southland to reduce risk to people’s health and protect the environment. Environment Minister David Parker said the funding announced today, through the Contaminated Sites Remediation Fund, will help us turn previously hazardous sites into safe, usable public ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Predator Free apprenticeships open up new job opportunities
    The expansion of a predator free apprenticeship programme is an opportunity for more people to kick-start a conservation career, Conservation Minister Kiri Allan says. “The Predator Free Apprenticeship Programme is focused on increasing the number of skilled predator control operators in New Zealand through a two-year training programme. “The Trust ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Further NCEA support confirmed for Auckland students
    The number of Learning Recognition Credits for senior secondary school students will be increased for Auckland students, Education Minister Chris Hipkins confirmed today. This recognises the extended time these students will spend in Alert Levels 3 and 4. “It means students in Auckland will have a fair opportunity to attain ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Long-term pathway next step to better mental wellbeing for New Zealanders
    The Government is taking a new approach to support people who experience mental distress, Health Minister Andrew Little says. “Kia Manawanui Aotearoa – Long-term pathway to mental wellbeing (Kia Manawanui) is the first 10-year plan of its kind that targets the cause of mental distress and also sets out how ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Keeping our Police safe to keep our communities safe
    The Government is committed to keeping our frontline police officers safe, so they in turn can keep New Zealanders safe – with one of the largest investments in frontline safety announced by Police Minister Poto Williams at the Police College today.   The $45 million investment includes $15.496 million in ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Clean Vehicles Bill passes first checkpoint
    The Land Transport (Clean Vehicles) Amendment Bill will help New Zealand drive down transport emissions by cleaning up the light vehicle fleet, Transport Minister Michael Wood says. The Bill passed its first reading today and will establish the legislative framework for key parts of the Government’s Clean Car Package, including ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Funding boost supports ongoing Māori COVID-19 response
    The Government is responding to the need by whānau Māori and Māori Health providers to support their ongoing work responding to COVID-19 and to continue increasing rates of Māori vaccination, Associate Minister for Health (Māori Health), Peeni Henare and Minister for Māori Development Willie Jackson announced today.   This increased ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Significant increase to COVID-19 penalties
    Penalties for breaches of COVID-19 orders are set to significantly increase from early November 2021 to better reflect the seriousness of any behaviour that threatens New Zealand’s response to the virus, COVID-19 Response Minister Chris Hipkins said today. “Throughout this Delta outbreak we’ve seen the overwhelming majority of people doing ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Counter-Terrorism Legislation Bill returns to Parliament
    The Counter-Terrorism Legislation Bill has returned to Parliament for its second reading in an important step towards giving enforcement agencies greater power to protect New Zealanders from terrorist activity. “The Bill addresses longstanding gaps in our counter terrorism legislation that seek to protect New Zealanders and make us safer,” Justice ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Joint Statement: New Zealand and Australian Trade Ministers
    Hon Damien O'Connor MP, New Zealand Minister for Trade and Export Growth, and Hon Dan Tehan MP, Australian Minister for Trade, Tourism and Investment, met virtually on Monday 20 September to advance trans-Tasman cooperation under the Australia-New Zealand Closer Economic Relations Trade Agreement (CER). CER is one of the most ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Prime Minister’s Post Cabinet Press Conference/COVID-19 Update opening statement
    ***Please check against delivery***   E te tī, e te tā, nau mai rā [To all, I bid you welcome]   As you will have seen earlier, today there are 22 new community cases to report; three of which are in Whakatiwai in the Hauraki area, and the remainder in ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Major milestones for Māori COVID-19 vaccine rollout as new campaign launches
    Whānau Ora and Associate Health (Māori Health) Minister Peeni Henare acknowledges two major milestones in the rollout of the COVID-19 vaccination programme for Māori. “I am very pleased to announce more than 50 percent of eligible Māori have received their first dose and 25 per cent are now fully vaccinated,” ...
    BeehiveBy beehive.govt.nz
    5 days ago
  • Government funding to fight infectious diseases
    $36 million for research into Covid-19 and other infectious diseases The investment will improve our readiness for future pandemics Research will focus on prevention, control, and management of infectious diseases The Government’s investing in a new Infectious Diseases Research Platform to boost Aotearoa New Zealand’s Covid-19 response and preparedness for ...
    BeehiveBy beehive.govt.nz
    5 days ago
  • Quarantine-free travel with Australia to remain suspended for a further 8 weeks
    Suspension to be reviewed again mid to late November Decision brought forward to enable access from Australia to first tranche of around 3000 rooms in MIQ Air New Zealand working at pace to put on more flights from Australia from October    The suspension of quarantine-free travel (QFT) with Australia has ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Extra support for Ethnic Communities to share vaccination information
    Extra support is being made available to Ethnic Communities to help them share COVID-19 vaccination information within their communities, Minister for Diversity, Inclusion and Ethnic Communities Priyanca Radhakrishnan said. “We know we need to get every eligible person in New Zealand vaccinated. A fund being launched today will allow for ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • School holidays remain unchanged for Auckland region
    School holidays in Auckland will continue to be held at the same time as the rest of the country, starting from Saturday, 2 October, Education Minister Chris Hipkins said today. “I’ve carefully considered advice on the implications of shifting the dates and concluded that on balance, maintaining the status quo ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Government continues crackdown on gangs and organised crime
    Operation Tauwhiro extended until March 2022 Since it was launched in February, Operation Tauwhiro has resulted in:   987 firearms seized $4.99 million in cash seized 865 people charged with a firearms-related offence Gangs and organised crime groups will continue to be relentlessly targeted with the extension of Police’s successful ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Speech to Body Positive 'HIV Treatments Update Seminar 2021'
    E ngā mana E ngā reo E ngā iwi Tēnā koutou katoa Ka huri ki ngā mana whenua o te rohe nei. Tēnā koutou. He mihi hoki ki a tatou kua tau mai nei I raro I te kaupapa o te rā. Nō reira tēnā koutou katoa Acknowledgements It’s a ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Power bill changes bring fairness to charges
    A key recommendation of an independent panel to make electricity charges fairer across all households will be put in place, the Energy and Resources Minister Megan Woods has announced. “Phasing out the regulations on ‘low-use’ electricity plans will create a fairer playing field for all New Zealanders and encourage a ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • NZ economy’s strong momentum will support rebound from Delta outbreak; COVID fund replenished
    The economy showed strong momentum in the period leading up to the recent Delta COVID-19 outbreak, which bodes well for a solid economic rebound, Grant Robertson said. GDP rose 2.8 percent in the June quarter, following on from a 1.4 percent increase in the previous March quarter. This was a ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Projects create benefits into the future
    Making a well-known lake swimmable and helping to halt the decline of the endangered hoiho/yellow-eyed penguins are among a suite of new projects being supported by the Government’s Jobs for Nature programme across the southern South Island, Conservation Minister Kiri Allan says. “It’s no secret that many of our most ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Opening statement for Whāriki Indigenous Small Business Roundtable
      Kei ngā tōpito e wha o te āo e rere ana te mihi maioha ki a koutou nō tawhiti, nō tata mai e tāpiri ana ki tēnei taumata kōrero mo te ao hokohoko arā mā ngā pākihi mo ngā iwi taketake Tēnā koutou, tēnā koutou katoa – Pai Mārire.  ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New members appointed to Kāpuia
    The Government is adding four additional members to Kāpuia, the Ministerial Advisory Group on the Government’s Response to the Royal Commission of Inquiry into the terrorist attack on Christchurch mosques. “I’m looking forward to having Pamela MacNeill, Huia Bramley, Melani Anae and Katherine Dedo  join Kāpuia and contribute to this group’s ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Timeline confirmed for Emissions Reductions Plan
    Cabinet has agreed to begin consulting on the Emissions Reduction Plan in early October and require that the final plan be released by the end of May next year in line with the 2022 Budget, the Minister of Climate Change, James Shaw confirmed today. “Cabinet’s decision allows organisations and communities ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Pay parity pathway for early learning teachers confirmed
    Pay parity conditions and higher funding rates for education and care services will come into force on 1 January, 2022, Minister of Education Chris Hipkins confirmed today. The Government signalled this work in Budget 2021. “From 1 January, 2022, centres opting into the scheme will receive government funding and be ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Speech to the New Zealand Nurses Organisation Conference 2021
    Kia Ora tatau katoa.   Ka tuku mihi ki nga nēhi, He pou Hauora o Aotearoa, E ora ai tatou.   Whakatau mai  I runga i te kaupapa o te ra Te NZNO conference.   Tena koutou tena koutou Tena tatou katoa   Good morning, and thank you inviting me ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Government investment in farmer-led catchment groups sweeps past 150 mark
    171 catchment groups have now been invested in by the Government 31 catchment groups in the Lower North Island are receiving new support More than 5,000 farmers are focussed on restoring freshwater within a generation through involvement in catchment groups  Government investment in on-the-ground efforts by farmers to improve land ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Fight to protect kauri on track
    The Government is pitching in to help vital work to protect nationally significant kauri forests in Auckland, Minister of Conservation Kiri Allan says. “Ensuring the survival of these iconic trees for future generations means doing everything we can to prevent the potential spread of kauri dieback disease,” Kiri Allan said. ...
    BeehiveBy beehive.govt.nz
    1 week ago