web analytics

Extra weight

Written By: - Date published: 10:05 pm, April 22nd, 2008 - 6 comments
Categories: admin - Tags:

A reader pointed out a set of hidden spam links that had attached themselves to the footer of the site.

I’d noticed them previously and thought that I’d corrected them (see comment). But they turned up again. Turns out it was from an interesting flaw in the website, and was being inserted from outside. I’ve hardened up the problem area(s) and I’ll monitor for a repitition.

It is likely that I’ll need to take the site down for a few hours in the early morning on Sunday to do some further maintenance. So don’t get too surprised to get a unexpected screen around that time.

Lynn

6 comments on “Extra weight ”

  1. Peak Oil Conspiracy 1

    Lynn:

    This played havoc with my computer earlier – I believe one of those spam links led to a trojan virus website?

  2. lprent 2

    I’ve just finished scanning the backups (5 times daily) for the last 2 weeks and 3 days that the links show up. There was no client side script or binary objects which would have been required to do anything active. It looks like the links didn’t change much either, so there was no active updating going on between times at the server.

    Thats what I expected. If it had then I’d have noticed a lot earlier. My AV is quite aggressive and would have been popping up warnings about unauthorized action when I was accessing the site. But it doesn’t object to passive links unless I click on them and it finds something it doesn’t like.

    The links were in a hidden DIV so you would not have been able to click on one to activate it. Could have led to that kind of site (I didn’t look). But the intent of the hidden div appears to have been to simply carry the links to increase their google score. Most of the links were to sites like travel agents, real esate, financial services, cheap airfares, hotel bookings, and other such junk. Someone commercial was freeloading on the sites popularity.

    It just added extra weight to all of the pages delivered on the blog – but probably less than one of Steves graphs or a_y_b’s graphics, because the text would usually have been compressed, and their graphs and pictures don’t.

    Anyway, the AV at the server would have noticed a virus or trojian. It isn’t particularly bright compared to Kaspersky, but it does update daily and scans in a auto-protect mode.

    It is highly unlikely that you caught payload from this site.

    //============================================

    Some general advice on viruses, trojians etc. I’d recommend buying Kaspersky – it has been protecting all of my file servers, mail servers, web servers and workstations very well since 2003. Hopefully I’ll be replacing the AV on The Standard’s server with it.

    The most likely cause of your infection is still from e-mail. My mail server discards 74% of mail as spam daily, and a high proportion of those either contain viruses or have links to them. You can get viruses from webpages, but usually you have to click something to download it (unless you have activeX enabled on IE5/6 – urrghh).

    I’d advise using Firefox or Safari even if you have a good AV. IE7 is better than IE6, but it is still inadequete in a lot of directions. In my opinion, especially in security areas. It is noisy about security, but not as inherently safe as Firefox.

  3. Peak Oil Conspiracy 3

    Lynn:

    Interesting comments. I’m not a techy, so this really is your area of expertise.

    Here’s the thing: I don’t open executable file attachments – from anyone. I give you my word that, when I visited this blog earlier today, my computer packed up – more or less straight away. I wasn’t running anything else in the background. I can only assume that there was some malicious code in there somewhere which destablished my OS.

    It sounds like you’ve fixed the problem – whatever it was – but I’d be interested to know if anyone else had the same experience as me.

  4. lprent 4

    I would doubt that it came from here (there is no absolute certainty in IT). But I’d be interested as well. It is a problem that should have been solved long ago by adequete use of AV’s.

    There are quite a lot of interesting (to me anyway) techniques going on around websites at present. It isn’t an area that I’ve looked at extensively for a number of years. But it does keep coming up. There are a lot of routes into systems, and not just by clicked on executables.

    For instance a friend forwarded an e-mail a few days ago to have a look at because the wording was quite threatening, and it turned up in both of her mail boxes. It had a link to a webpage which I opened in a sniffer. The front of the site had a routine bit of porn. But there was a IFRAME on the page that had some very well written vbscript that would have worked in older IE’s, and outlooks.

    I’ve seen trojian insertors turn up in video and audio codexes. The “install this to play this video” for something on a web page targeted at windows media player.

    Some rather stupid applications use open protocols like tftp to update drivers. I caught one of them pulling in a virus a year or so ago presumably because someone was capturing the packets at a router.

    I’m not going to bother detailing the access points that are detailed on the net. But it is why there are so many security updates coming through on windows over the last few years.

    Generally the best defense is to have very good antivirus and scanners (and keep them updated!) plus use the hardware firewall on your router.

    Every outbreak that I’ve seen in the last 4-5 years has also had no or antique anti-virus at the client side.

    The hardware firewall.. Most machines visible on the net have port scans done on them at least every 30 minutes looking for open ports. One server I help maintain in the US gets scanned on average every 4 seconds.

  5. mondograss 5

    Actually, my PC choked as well. When I accessed the site it asked me if I wanted to download a plugin (redirected to a-b-c.com I think?), which I tried to decline but by that stage IE had locked up and I had to reboot. The PC ran pretty badly for a while but eventually sorted itself out, antivirus didn’t find anything when I ran it.

  6. lprent 6

    I’ve had that happen a couple of times in the last few days (in IE7).

    Once on here and once on another site. It was asking for different plugins in each case. One was some kind of graphics protocol and the other was something that I’ve forgotten – shockwave?. Displayed in the bar just under the tab bar in IE7.

    The defining factor was that it jammed IE7, and put one CPU core into 100%. The rest of the machine went really sluggish. Because the machines are multi-CPU/multi-core, I just killed IE7.

    I never allow plugins for Internet Explorer, and routinely get that type of message. I’d attributed the jam up to one of microsoft’s automatic downgrades. It was only the jam that was unusual.

    Just in case you hadn’t realised. I don’t like Internet Explorer. I only use it because I still have to write HTML/css/js for it sometimes. IMHO it is too non-standard to code for easily, and outright dangerous on security.

Recent Comments

Recent Posts

  • Next steps for Christchurch Hospital campus redevelopment
    Canterbury DHB will be better placed to respond to future demand for services and continue to deliver high quality care, with the next stage of the campus redevelopment programme confirmed, Health Minister Andrew Little says. The Government has approved $154 million in funding for the construction of a third tower ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Five Power Defence Arrangements Defence Ministers’ Joint Statement
    The Defence Ministers from Australia, Malaysia, New Zealand, Singapore and United Kingdom reaffirmed their nations’ continued commitment to the Five Power Defence Arrangements (FPDA), and commended the achievements over the past 49 years as the FPDA moves towards its 50th Anniversary in 2021.  The Ministers recognised the FPDA’s significant role ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Jobs for Nature funding protects health of Hawke’s Bay waterways
    A joint Government and Hawke’s Bay Regional Council project will invest $4.2 million to protect local waterways, enhance biodiversity and employ local people, Environment Minister David Parker announced today.   Over two years, the Hāpara Takatū Jobs for Nature project will fence 195km of private land to exclude stock from vulnerable ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • New Year border exception for seasonal workers in the horticulture and wine industries
    2000 additional RSE workers to enter New Zealand early next year employers must pay these workers at least $22.10 an hour employers will cover costs of managed isolation for the RSE workers RSE workers will be paid the equivalent of 30 hours work a week while in isolation From January ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Government increases support for New Zealanders to work in seasonal jobs
    The Government is offering further financial support for unemployed New Zealanders to take on seasonal work. These new incentives include: Up to $200 per week for accommodation costs $1000 incentive payment for workers who complete jobs of six weeks or longer increasing wet weather payments when people can’t work to ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Government receives Royal Commission of Inquiry report into the Terrorist Attack on Christchurch Mos...
    Minister for Internal Affairs Jan Tinetti has today received the Royal Commission of Inquiry report into the Terrorist Attack on Christchurch Mosques, and will table it in Parliament on Tuesday December 8. “I know this will have been a challenging process for whānau, survivors and witnesses of the terrorist attack ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • New Zealand Government to declare a climate emergency
    The Government will declare a climate emergency next week, Climate Change Minister James Shaw said today.                                       “We are in the midst of a climate crisis that will impact on nearly every ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Call for urgent action on Pacific conservation
    A declaration on the urgency of the global biodiversity crisis and the need for immediate, transformative action in the Pacific was agreed at a pan-Pacific conference today. The 10th Pacific Islands Conference on Nature Conservation and Protected Areas is taking place this week across the Pacific.  Minister of Conservation Kiritapu ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Speech from the throne
    E aku hoa i te ara o te whai, Kia kotahi tā tātou takahi i te kō, ko tōku whiwhi kei tō koutou tautoko mai. Ko tāku ki a koutou, hei whakapiki manawa mōku. He horomata rangatira te mahi, e rite ai te whiwhinga a te ringatuku, me te ringakape ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Keynote address to Chartered Accountants Australia and New Zealand conference
    Speech to the CAANZ conference - November 19, 2020 Thank you, Greg, (Greg Haddon, MC) for the welcome. I’d like to acknowledge John Cuthbertson from CAANZ, the Commissioner of Inland Revenue Naomi Ferguson, former fellow MP and former Minister of Revenue, Peter Dunne, other guest speakers and CAANZ members. I ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Expert independent advisory group appointed to strengthen the future of Māori broadcasting
    A panel of seven experts are adding their support to help shape the future of Māori broadcasting, Minister for Māori Development Willie Jackson has announced today. “Today I will meet with some of the most experienced Māori broadcasters, commentators and practitioners in the field. They have practical insights on the ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Government to review housing settings
    New Zealand’s stronger-than-expected economic performance has flowed through to housing demand, so the Government will review housing settings to improve access to the market, the Finance Minister Grant Robertson announced today. “Our focus is on improving access to the housing market for first home buyers and ensuring house price growth ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Crown accounts reflect Govt’s careful economic management
    The better-than-expected Crown accounts released today show the Government’s careful management of the COVID-19 health crisis was the right approach to support the economy. As expected, the Crown accounts for the year to June 2020 show the operating balance before gains and losses, or OBEGAL, was in deficit. However that ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Community launch marks next step in addressing racism in education
    The launch of Te Hurihanganui in Porirua today is another important milestone in the work needed to address racism in the education system and improve outcomes for Māori learners and their whānau, Associate Education Minister Kelvin Davis says. Budget 2019 included $42 million over three years to put Te Hurihanganui ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Government to consider recommendations on DNA use in criminal investigations
    The Minister of Justice has received the Law Commission’s recommending changes to the law governing the way DNA is used in criminal investigations. The report, called The Use of DNA in Criminal Investigations – Te Whahamahi I te Ira Tangata I ngā Mātai Taihara, recommends new legislation to address how ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Speech to Wakatū Nelson regional hui on trade
    First, I want to express my thanks to Te Taumata for this hui and for all the fantastic work you are doing for Māori in the trade space. In the short time that you’ve been operating you’ve already contributed an enormous amount to the conversation, and developed impressive networks.  I ...
    BeehiveBy beehive.govt.nz
    5 days ago
  • Speech to Primary Industries Summit
    Thank you for the opportunity to speak to you today about the significant contribution the food and fibres sector makes to New Zealand and how this Government is supporting that effort. I’d like to start by acknowledging our co-Chairs, Terry Copeland and Mavis Mullins, my colleague, Agriculture Minister Damien O’Connor, ...
    BeehiveBy beehive.govt.nz
    5 days ago
  • Fast track referrals will speed up recovery and boost jobs and home building
    The Government is taking action to increase jobs, speed up the economic recovery and build houses by putting three more projects through its fast track approval process. “It’s great to see that the fast-track consenting process is working. Today we have referred a mix of potential projects that, if approved, ...
    BeehiveBy beehive.govt.nz
    5 days ago
  • Papakāinga provides critically needed homes in Hastings
    A papakāinga opened today by the Minister for Māori Development the Hon Willie Jackson will provide whānau with much needed affordable rental homes in Hastings. The four home papakāinga in Waiōhiki is the first project to be completed under the ‘Hastings Place Based’ initiative. This initiative is a Government, Hastings ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New Zealand ready to host APEC virtually
    Prime Minister Jacinda Ardern took over the leadership of APEC earlier today, when she joined leaders from the 21 APEC economies virtually for the forum’s final 2020 meeting. “We look forward to hosting a fully virtual APEC 2021 next year. While this isn’t an in-person meeting, it will be one ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Revival of Māori Horticulturists
    The rapid revival of Māori horticulture was unmistakeable at this year’s Ahuwhenua Trophy Awards, with 2020 marking the first time this iconic Māori farming event was dedicated to horticulture enterprises. Congratulating finalists at the Awards, Māori Development Minister Willie Jackson said growing large-scale māra kai is part of Māori DNA. ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Emergency benefit to help temporary visa holders
    From 1 December, people on temporary work, student or visitor visas who can’t return home and or support themselves may get an Emergency Benefit from the Ministry of Social Development, Social Development and Employment Minister Carmel Sepuloni announced today. Previously, temporary visa holders in hardship because of COVID-19 have had ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • School sustainability projects to help boost regional economies
    Forty one schools from the Far North to Southland will receive funding for projects that will reduce schools’ emissions and save them money, Education Minister Chris Hipkins announced today. This is the second round of the Sustainability Contestable Fund, and work will begin immediately. The first round announced in April ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Farmer-led projects to improve water health in Canterbury and Otago
    More than $6 million will be spent on helping farmers improve the health of rivers, wetlands, and habitat biodiversity in Canterbury and Otago, as well as improving long-term land management practices, says Agriculture Minister Damien O’Connor. Four farmer-led catchment group Jobs for Nature projects have between allocated between $176,000 and ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Tupu Aotearoa continues expansion to Pacific communities in Nelson, Marlborough, Tasman & Northl...
    Pacific communities in Nelson, Marlborough, Tasman and Northland will benefit from the expansion of the Tupu Aotearoa programme announced today by the Minister for Pacific Peoples, Aupito William Sio. The programme provides sustainable employment and education pathways and will be delivered in partnership with three providers in Northland and two ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New primary school and classrooms for 1,200 students in South Island
    Education Minister Chris Hipkins unveiled major school building projects across the South Island during a visit to Waimea College in Nelson today. It’s part of the Government’s latest investment of $164 million to build new classrooms and upgrade schools around the country. “Investments like this gives the construction industry certainty ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Minister of Māori Development pays tribute to Rudy Taylor
      Today the Minister of Māori Development, alongside other Government Ministers and MP’s said their final farewells to Nga Puhi Leader Rudy Taylor.  “Rudy dedicated his life to the betterment of Māori, and his strong approach was always from the ground up, grassroots, sincere and unfaltering”  “Over the past few ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Prime Minister to attend APEC Leaders’ Summit
    Prime Minister Jacinda Ardern will attend the annual APEC Economic Leaders’ Meeting and associated events virtually today and tomorrow. “In a world where we cannot travel due to COVID-19, continuing close collaboration with our regional partners is key to accelerating New Zealand’s economic recovery,” Jacinda Ardern said. “There is wide ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Speech to Infrastructure NZ Symposium
    Tena Koutou, Tena Koutou and thank you for inviting me to speak to you today. This is a critical time for New Zealand as we respond to the damage wreaked by the global COVID-19 pandemic. It is vital that investment in our economic recovery is well thought through, and makes ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Pike River 10 Year Anniversary Commemorative Service
    Tēnei te mihi ki a tātau katoa e huihui nei i tēnei rā Ki a koutou ngā whānau o te hunga kua riro i kōnei – he mihi aroha ki a koutou Ki te hapori whānui – tēnā koutou Ki ngā tāngata whenua – tēnā koutou Ki ngā mate, e ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Huge investment in new and upgraded classrooms to boost construction jobs
    Around 7,500 students are set to benefit from the Government’s latest investment of $164 million to build new classrooms and upgrade schools around the country. “The election delivered a clear mandate to accelerate our economic recovery and build back better. That’s why we are prioritising construction projects in schools so more ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Keeping Pike River Mine promises 10 years on
    Ten years after the Pike River Mine tragedy in which 29 men lost their lives while at work, a commemorative service at Parliament has honoured them and their legacy of ensuring all New Zealand workplaces are safe. Prime Minister Jacinda Ardern attended the event, along with representatives of the Pike ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Additional testing to strengthen border and increase safety of workers
    New testing measures are being put in place to increase the safety of border workers and further strengthen New Zealand’s barriers against COVID-19, COVID-19 Response Minister Chris Hipkins said today. “These strengthened rules – to apply to all international airports and ports – build on the mandatory testing orders we’ve ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • More public housing delivered in Auckland
    The Government’s investment in public housing is delivering more warm, dry homes with today’s official opening of 82 new apartments in New Lynn by the Housing Minister Megan Woods. The Thom Street development replaces 16 houses built in the 1940s, with brand new fit-for-purpose public housing that is in high ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Agreement advanced to purchase up to 5 million COVID-19 vaccines
    The Government has confirmed an in-principle agreement to purchase up to 5 million COVID-19 vaccines – enough for 5 million people – from Janssen Pharmaceutica, subject to the vaccine successfully completing clinical trials and passing regulatory approvals in New Zealand, says Research, Science and Innovation Minister Megan Woods. “This agreement ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Jobs for Nature funding will leave a conservation legacy for Waikanae awa
    Ninety-two jobs will be created to help environmental restoration in the Waikanae River catchment through $8.5 million of Jobs for Nature funding, Conservation Minister Kiritapu Allan announced today. “The new funding will give a four-year boost to the restoration of the Waikanae awa, and is specifically focussed on restoration through ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New Dunedin Hospital project progresses to next stage
    As the new Dunedin Hospital project progresses, the Government is changing the oversight group to provide more technical input, ensure continued local representation, and to make sure lessons learnt from Dunedin benefit other health infrastructure projects around the country. Concept design approval and the release of a tender for early ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Jump in apprentice and trainee numbers
    The number of New Zealanders taking up apprenticeships has increased nearly 50 percent, and the number of female apprentices has more than doubled. This comes as a Government campaign to raise the profile of vocational education and training (VET) begins. Prime Minister Jacinda Ardern and Education Minister Chris Hipkins announced ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • ReBuilding Nations Symposium 2020 (Infrastructure NZ Conference opening session)
    Tena koutou katoa and thank you for the opportunity to be with you today. Can I acknowledge Ngarimu Blair, Ngati Whatua, and Mayor Phil Goff for the welcome. Before I start with my substantive comments, I do want to acknowledge the hard work it has taken by everyone to ensure ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • New Zealand's biosecurity champions honoured
    Biosecurity Minister Damien O’Connor has paid tribute to the winners of the 2020 New Zealand Biosecurity Awards. “These are the people and organisations who go above and beyond to protect Aotearoa from pests and disease to ensure our unique way of life is sustained for future generations,” Damien O’Connor says. ...
    BeehiveBy beehive.govt.nz
    2 weeks ago