Extra weight

Written By: - Date published: 10:05 pm, April 22nd, 2008 - 6 comments
Categories: admin - Tags:

A reader pointed out a set of hidden spam links that had attached themselves to the footer of the site.

I’d noticed them previously and thought that I’d corrected them (see comment). But they turned up again. Turns out it was from an interesting flaw in the website, and was being inserted from outside. I’ve hardened up the problem area(s) and I’ll monitor for a repitition.

It is likely that I’ll need to take the site down for a few hours in the early morning on Sunday to do some further maintenance. So don’t get too surprised to get a unexpected screen around that time.

Lynn

6 comments on “Extra weight ”

  1. Peak Oil Conspiracy 1

    Lynn:

    This played havoc with my computer earlier – I believe one of those spam links led to a trojan virus website?

  2. lprent 2

    I’ve just finished scanning the backups (5 times daily) for the last 2 weeks and 3 days that the links show up. There was no client side script or binary objects which would have been required to do anything active. It looks like the links didn’t change much either, so there was no active updating going on between times at the server.

    Thats what I expected. If it had then I’d have noticed a lot earlier. My AV is quite aggressive and would have been popping up warnings about unauthorized action when I was accessing the site. But it doesn’t object to passive links unless I click on them and it finds something it doesn’t like.

    The links were in a hidden DIV so you would not have been able to click on one to activate it. Could have led to that kind of site (I didn’t look). But the intent of the hidden div appears to have been to simply carry the links to increase their google score. Most of the links were to sites like travel agents, real esate, financial services, cheap airfares, hotel bookings, and other such junk. Someone commercial was freeloading on the sites popularity.

    It just added extra weight to all of the pages delivered on the blog – but probably less than one of Steves graphs or a_y_b’s graphics, because the text would usually have been compressed, and their graphs and pictures don’t.

    Anyway, the AV at the server would have noticed a virus or trojian. It isn’t particularly bright compared to Kaspersky, but it does update daily and scans in a auto-protect mode.

    It is highly unlikely that you caught payload from this site.

    //============================================

    Some general advice on viruses, trojians etc. I’d recommend buying Kaspersky – it has been protecting all of my file servers, mail servers, web servers and workstations very well since 2003. Hopefully I’ll be replacing the AV on The Standard’s server with it.

    The most likely cause of your infection is still from e-mail. My mail server discards 74% of mail as spam daily, and a high proportion of those either contain viruses or have links to them. You can get viruses from webpages, but usually you have to click something to download it (unless you have activeX enabled on IE5/6 – urrghh).

    I’d advise using Firefox or Safari even if you have a good AV. IE7 is better than IE6, but it is still inadequete in a lot of directions. In my opinion, especially in security areas. It is noisy about security, but not as inherently safe as Firefox.

  3. Peak Oil Conspiracy 3

    Lynn:

    Interesting comments. I’m not a techy, so this really is your area of expertise.

    Here’s the thing: I don’t open executable file attachments – from anyone. I give you my word that, when I visited this blog earlier today, my computer packed up – more or less straight away. I wasn’t running anything else in the background. I can only assume that there was some malicious code in there somewhere which destablished my OS.

    It sounds like you’ve fixed the problem – whatever it was – but I’d be interested to know if anyone else had the same experience as me.

  4. lprent 4

    I would doubt that it came from here (there is no absolute certainty in IT). But I’d be interested as well. It is a problem that should have been solved long ago by adequete use of AV’s.

    There are quite a lot of interesting (to me anyway) techniques going on around websites at present. It isn’t an area that I’ve looked at extensively for a number of years. But it does keep coming up. There are a lot of routes into systems, and not just by clicked on executables.

    For instance a friend forwarded an e-mail a few days ago to have a look at because the wording was quite threatening, and it turned up in both of her mail boxes. It had a link to a webpage which I opened in a sniffer. The front of the site had a routine bit of porn. But there was a IFRAME on the page that had some very well written vbscript that would have worked in older IE’s, and outlooks.

    I’ve seen trojian insertors turn up in video and audio codexes. The “install this to play this video” for something on a web page targeted at windows media player.

    Some rather stupid applications use open protocols like tftp to update drivers. I caught one of them pulling in a virus a year or so ago presumably because someone was capturing the packets at a router.

    I’m not going to bother detailing the access points that are detailed on the net. But it is why there are so many security updates coming through on windows over the last few years.

    Generally the best defense is to have very good antivirus and scanners (and keep them updated!) plus use the hardware firewall on your router.

    Every outbreak that I’ve seen in the last 4-5 years has also had no or antique anti-virus at the client side.

    The hardware firewall.. Most machines visible on the net have port scans done on them at least every 30 minutes looking for open ports. One server I help maintain in the US gets scanned on average every 4 seconds.

  5. mondograss 5

    Actually, my PC choked as well. When I accessed the site it asked me if I wanted to download a plugin (redirected to a-b-c.com I think?), which I tried to decline but by that stage IE had locked up and I had to reboot. The PC ran pretty badly for a while but eventually sorted itself out, antivirus didn’t find anything when I ran it.

  6. lprent 6

    I’ve had that happen a couple of times in the last few days (in IE7).

    Once on here and once on another site. It was asking for different plugins in each case. One was some kind of graphics protocol and the other was something that I’ve forgotten – shockwave?. Displayed in the bar just under the tab bar in IE7.

    The defining factor was that it jammed IE7, and put one CPU core into 100%. The rest of the machine went really sluggish. Because the machines are multi-CPU/multi-core, I just killed IE7.

    I never allow plugins for Internet Explorer, and routinely get that type of message. I’d attributed the jam up to one of microsoft’s automatic downgrades. It was only the jam that was unusual.

    Just in case you hadn’t realised. I don’t like Internet Explorer. I only use it because I still have to write HTML/css/js for it sometimes. IMHO it is too non-standard to code for easily, and outright dangerous on security.

Recent Comments

Recent Posts

  • New Zealand’s minerals future
    Introduction Today, we are sharing a red-letter occasion. A Blackball event on hallowed ground. Today  we underscore the importance of our mineral estate. A reminder that our natural resource sector has much to offer.  Such a contribution will not come to pass without investment.  However, more than money is needed. ...
    BeehiveBy beehive.govt.nz
    12 hours ago
  • Government sets out vision for minerals future
    Increasing national and regional prosperity, providing the minerals needed for new technology and the clean energy transition, and doubling the value of minerals exports are the bold aims of the Government’s vision for the minerals sector. Resources Minister Shane Jones today launched a draft strategy for the minerals sector in ...
    BeehiveBy beehive.govt.nz
    12 hours ago
  • Government progresses Māori wards legislation
    The coalition Government’s legislation to restore the rights of communities to determine whether to introduce Māori wards has passed its first reading in Parliament, Local Government Minister Simeon Brown says. “Divisive changes introduced by the previous government denied local communities the ability to determine whether to establish Māori wards.” The ...
    BeehiveBy beehive.govt.nz
    15 hours ago
  • First RMA amendment Bill introduced to Parliament
    The coalition Government has today introduced legislation to slash the tangle of red and green tape throttling some of New Zealand’s key sectors, including farming, mining and other primary industries. RMA Reform Minister Chris Bishop says the Government is committed to  unlocking development and investment while ensuring the environment is ...
    BeehiveBy beehive.govt.nz
    16 hours ago
  • Speech to Employers and Manufacturers Association: Relief for today, hope for tomorrow
    Kia ora, Ngā mihi nui ki a koutou kātoa Tāmaki Herenga Waka, Tāmaki Herenga tangata Ngā mihi ki ngā mana whenua o tēnei rohe Ngāti Whātua ō Ōrākei me nga iwi kātoa kua tae mai. Mauriora. Greetings everyone. Thank you to the EMA for hosting this event. Let me acknowledge ...
    BeehiveBy beehive.govt.nz
    17 hours ago
  • Government invests in 1,500 more social homes
    The coalition Government is investing in social housing for New Zealanders who are most in need of a warm dry home, Housing Minister Chris Bishop says. Budget 2024 will allocate $140 million in new funding for 1,500 new social housing places to be provided by Community Housing Providers (CHPs), not ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • $24 million boost for Gumboot Friday
    Thousands more young New Zealanders will have better access to mental health services as the Government delivers on its commitment to fund the Gumboot Friday initiative, says Deputy Prime Minister Winston Peters and Mental Health Minister Matt Doocey.  “Budget 2024 will provide $24 million over four years to contract the ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Residential Tenancies Amendment Bill passes first reading
    The Coalition Government’s Residential Tenancies Amendment Bill, which will improve tenancy laws and help increase the supply of rental properties, has passed its first reading in Parliament says Housing Minister Chris Bishop. “The Bill proposes much-needed changes to the Residential Tenancies Act 1986 that will remove barriers to increasing private ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Montecassino Commemorative Address, Cassino War Cemetery
    Standing here in Cassino War Cemetery, among the graves looking up at the beautiful Abbey of Montecassino, it is hard to imagine the utter devastation left behind by the battles which ended here in May 1944. Hundreds of thousands of shells and bombs of every description left nothing but piled ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • First Reading – Repeal of Section 7AA of the Oranga Tamariki Act 1989
    I present a legislative statement on the Oranga Tamariki (Repeal of Section 7AA) Amendment Bill Mr. Speaker, I move that the Oranga Tamariki (Repeal of Section 7AA) Amendment Bill be now read a first time. I nominate the Social Services and Community Committee to consider the Bill. Thank you, Mr. ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • First reading of 7AA’s repeal: progress for children
    The Bill to repeal Section 7AA of the Oranga Tamariki Act has had its first reading in Parliament today. The Bill reaffirms the Coalition Government’s commitment to the care and safety of children in care, says Minister for Children Karen Chhour.  “When I became the Minister for Children, I made ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • China Business Summit 2024
    Kia ora koutou, good morning, and zao shang hao. Thank you Fran for the opportunity to speak at the 2024 China Business Summit – it’s great to be here today. I’d also like to acknowledge: Simon Bridges - CEO of the Auckland Chamber of Commerce. His Excellency Ambassador - Wang ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Assisted depatures from New Caledonia
    Foreign Minister Winston Peters has confirmed a New Zealand Government plane will head to New Caledonia in the next hour in the first in a series of proposed flights to begin bringing New Zealanders home.    “New Zealanders in New Caledonia have faced a challenging few days - and bringing ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Assisted departures from New Caledonia
    Foreign Minister Winston Peters has confirmed a New Zealand Government plane will head to New Caledonia in the next hour in the first in a series of proposed flights to begin bringing New Zealanders home.  “New Zealanders in New Caledonia have faced a challenging few days - and bringing them ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Government to rollout roadside drug testing
    The Coalition Government will introduce legislation this year that will enable roadside drug testing as part of our commitment to improve road safety and restore law and order, Transport Minister Simeon Brown says.  “Alcohol and drugs are the number one contributing factor in fatal road crashes in New Zealand. In ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Minister responds to review of Kāinga Ora
    The Government has announced a series of immediate actions in response to the independent review of Kāinga Ora – Homes and Communities, Housing Minister Chris Bishop says. “Kāinga Ora is a large and important Crown entity, with assets of $45 billion and over $2.5 billion of expenditure each year. It ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Pseudoephedrine back on shelves
    Associate Health Minister David Seymour is pleased that Pseudoephedrine can now be purchased by the general public to protect them from winter illness, after the coalition government worked swiftly to change the law and oversaw a fast approval process by Medsafe. “Pharmacies are now putting the medicines back on their ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • New Zealand-China Business Summit
    Tēnā koutou katoa. Da jia hao.  Good morning everyone.   Prime Minister Luxon, your excellency, a great friend of New Zealand and my friend Ambassador Wang, Mayor of what he tells me is the best city in New Zealand, Wayne Brown, the highly respected Fran O’Sullivan, Champion of the Auckland business ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • New measures to protect powerlines from trees
    Energy Minister Simeon Brown has announced that the Government will make it easier for lines firms to take action to remove vegetation from obstructing local powerlines. The change will ensure greater security of electricity supply in local communities, particularly during severe weather events.  “Trees or parts of trees falling on ...
    BeehiveBy beehive.govt.nz
    6 days ago
  • Wairarapa Moana ki Pouakani win top Māori dairy farming award
    Wairarapa Moana ki Pouakani were the top winners at this year’s Ahuwhenua Trophy awards recognising the best in Māori dairy farming. Māori Development Minister Tama Potaka announced the winners and congratulated runners-up, Whakatōhea Māori Trust Board, at an awards celebration also attended by Prime Minister Christopher Luxon and Finance Minister ...
    BeehiveBy beehive.govt.nz
    6 days ago
  • DJ Fred Again – Assurance report received
    "On the 27th of March, I sought assurances from the Chief Executive, Department of Internal Affairs, that the Department’s correct processes and policies had been followed in regards to a passport application which received media attention,” says Minister of Internal Affairs Brooke van Velden.  “I raised my concerns after being ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • District Court Judges appointed
    Attorney-General Judith Collins has announced the appointment of three new District Court Judges, to replace Judges who have recently retired. Peter James Davey of Auckland has been appointed a District Court Judge with a jury jurisdiction to be based at Whangarei. Mr Davey initially started work as a law clerk/solicitor with ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Unions should put learning ahead of ideology
    Associate Education Minister David Seymour is calling on the Post Primary Teachers’ Association (PPTA) to put ideology to the side and focus on students’ learning, in reaction to the union holding paid teacher meetings across New Zealand about charter schools.     “The PPTA is disrupting schools up and down the ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Craig Stobo appointed as chair of FMA
    Commerce and Consumer Affairs Minister Andrew Bayly today announced the appointment of Craig Stobo as the new chair of the Financial Markets Authority (FMA). Mr Stobo takes over from Mark Todd, whose term expired at the end of April. Mr Stobo’s appointment is for a five-year term. “The FMA plays ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Budget 2024 invests in lifeguards and coastguard
    Surf Life Saving New Zealand and Coastguard New Zealand will continue to be able to keep people safe in, on, and around the water following a funding boost of $63.644 million over four years, Transport Minister Simeon Brown and Associate Transport Minister Matt Doocey say. “Heading to the beach for ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • New Zealand and Tuvalu reaffirm close relationship
    New Zealand and Tuvalu have reaffirmed their close relationship, Foreign Affairs Minister Winston Peters says.  “New Zealand is committed to working with Tuvalu on a shared vision of resilience, prosperity and security, in close concert with Australia,” says Mr Peters, who last visited Tuvalu in 2019.  “It is my pleasure ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New Zealand calls for calm, constructive dialogue in New Caledonia
    New Zealand is gravely concerned about the situation in New Caledonia, Foreign Minister Winston Peters says.  “The escalating situation and violent protests in Nouméa are of serious concern across the Pacific Islands region,” Mr Peters says.  “The immediate priority must be for all sides to take steps to de-escalate the ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New Zealand welcomes Samoa Head of State
    Prime Minister Christopher Luxon met today with Samoa’s O le Ao o le Malo, Afioga Tuimalealiifano Vaaletoa Sualauvi II, who is making a State Visit to New Zealand. “His Highness and I reflected on our two countries’ extensive community links, with Samoan–New Zealanders contributing to all areas of our national ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Island Direct eligible for SuperGold Card funding
    Transport Minister Simeon Brown has announced that he has approved Waiheke Island ferry operator Island Direct to be eligible for SuperGold Card funding, paving the way for a commercial agreement to bring the operator into the scheme. “Island Direct started operating in November 2023, offering an additional option for people ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Further sanctions against Russia
    Foreign Minister Winston Peters today announced further sanctions on 28 individuals and 14 entities providing military and strategic support for Russia’s invasion of Ukraine.  “Russia is directly supported by its military-industrial complex in its illegal aggression against Ukraine, attacking its sovereignty and territorial integrity. New Zealand condemns all entities and ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • One year on from Loafers Lodge
    A year on from the tragedy at Loafers Lodge, the Government is working hard to improve building fire safety, Building and Construction Minister Chris Penk says. “I want to share my sincere condolences with the families and friends of the victims on the anniversary of the tragic fire at Loafers ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Pre-Budget speech to Auckland Business Chamber
    Ka nui te mihi kia koutou. Kia ora and good afternoon, everyone. Thank you so much for having me here in the lead up to my Government’s first Budget. Before I get started can I acknowledge: Simon Bridges – Auckland Business Chamber CEO. Steve Jurkovich – Kiwibank CEO. Kids born ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New Zealand and Vanuatu to deepen collaboration
    New Zealand and Vanuatu will enhance collaboration on issues of mutual interest, Foreign Minister Winston Peters says.    “It is important to return to Port Vila this week with a broad, high-level political delegation which demonstrates our deep commitment to New Zealand’s relationship with Vanuatu,” Mr Peters says.    “This ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Penk travels to Peru for trade meetings
    Minister for Land Information, Chris Penk will travel to Peru this week to represent New Zealand at a meeting of trade ministers from the Asia-Pacific region on behalf of Trade Minister Todd McClay. The annual Asia-Pacific Economic Cooperation (APEC) Ministers Responsible for Trade meeting will be held on 17-18 May ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Minister attends global education conferences
    Minister of Education Erica Stanford will head to the United Kingdom this week to participate in the 22nd Conference of Commonwealth Education Ministers (CCEM) and the 2024 Education World Forum (EWF). “I am looking forward to sharing this Government’s education priorities, such as introducing a knowledge-rich curriculum, implementing an evidence-based ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Education Minister thanks outgoing NZQA Chair
    Minister of Education Erica Stanford has today thanked outgoing New Zealand Qualifications Authority Chair, Hon Tracey Martin. “Tracey Martin tendered her resignation late last month in order to take up a new role,” Ms Stanford says. Ms Martin will relinquish the role of Chair on 10 May and current Deputy ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Joint statement of Christopher Luxon and Emmanuel Macron: Launch of the Christchurch Call Foundation
    New Zealand Prime Minister Christopher Luxon and President Emmanuel Macron of France today announced a new non-governmental organisation, the Christchurch Call Foundation, to coordinate the Christchurch Call’s work to eliminate terrorist and violent extremist content online.   This change gives effect to the outcomes of the November 2023 Call Leaders’ Summit, ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Panel announced for review into disability services
    Distinguished public servant and former diplomat Sir Maarten Wevers will lead the independent review into the disability support services administered by the Ministry of Disabled People – Whaikaha. The review was announced by Disability Issues Minister Louise Upston a fortnight ago to examine what could be done to strengthen the ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Minister welcomes Police gang unit
    Today’s announcement by Police Commissioner Andrew Coster of a National Gang Unit and district Gang Disruption Units will help deliver on the coalition Government’s pledge to restore law and order and crack down on criminal gangs, Police Minister Mark Mitchell says. “The National Gang Unit and Gang Disruption Units will ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New Zealand expresses regret at North Korea’s aggressive rhetoric
    Foreign Minister Winston Peters has today expressed regret at North Korea’s aggressive rhetoric towards New Zealand and its international partners.  “New Zealand proudly stands with the international community in upholding the rules-based order through its monitoring and surveillance deployments, which it has been regularly doing alongside partners since 2018,” Mr ...
    BeehiveBy beehive.govt.nz
    1 week ago

Page generated in The Standard by Wordpress at 2024-05-23T19:45:36+00:00