Extra weight

Written By: - Date published: 10:05 pm, April 22nd, 2008 - 6 comments
Categories: admin - Tags:

A reader pointed out a set of hidden spam links that had attached themselves to the footer of the site.

I’d noticed them previously and thought that I’d corrected them (see comment). But they turned up again. Turns out it was from an interesting flaw in the website, and was being inserted from outside. I’ve hardened up the problem area(s) and I’ll monitor for a repitition.

It is likely that I’ll need to take the site down for a few hours in the early morning on Sunday to do some further maintenance. So don’t get too surprised to get a unexpected screen around that time.

Lynn

6 comments on “Extra weight ”

  1. Peak Oil Conspiracy 1

    Lynn:

    This played havoc with my computer earlier – I believe one of those spam links led to a trojan virus website?

  2. lprent 2

    I’ve just finished scanning the backups (5 times daily) for the last 2 weeks and 3 days that the links show up. There was no client side script or binary objects which would have been required to do anything active. It looks like the links didn’t change much either, so there was no active updating going on between times at the server.

    Thats what I expected. If it had then I’d have noticed a lot earlier. My AV is quite aggressive and would have been popping up warnings about unauthorized action when I was accessing the site. But it doesn’t object to passive links unless I click on them and it finds something it doesn’t like.

    The links were in a hidden DIV so you would not have been able to click on one to activate it. Could have led to that kind of site (I didn’t look). But the intent of the hidden div appears to have been to simply carry the links to increase their google score. Most of the links were to sites like travel agents, real esate, financial services, cheap airfares, hotel bookings, and other such junk. Someone commercial was freeloading on the sites popularity.

    It just added extra weight to all of the pages delivered on the blog – but probably less than one of Steves graphs or a_y_b’s graphics, because the text would usually have been compressed, and their graphs and pictures don’t.

    Anyway, the AV at the server would have noticed a virus or trojian. It isn’t particularly bright compared to Kaspersky, but it does update daily and scans in a auto-protect mode.

    It is highly unlikely that you caught payload from this site.

    //============================================

    Some general advice on viruses, trojians etc. I’d recommend buying Kaspersky – it has been protecting all of my file servers, mail servers, web servers and workstations very well since 2003. Hopefully I’ll be replacing the AV on The Standard’s server with it.

    The most likely cause of your infection is still from e-mail. My mail server discards 74% of mail as spam daily, and a high proportion of those either contain viruses or have links to them. You can get viruses from webpages, but usually you have to click something to download it (unless you have activeX enabled on IE5/6 – urrghh).

    I’d advise using Firefox or Safari even if you have a good AV. IE7 is better than IE6, but it is still inadequete in a lot of directions. In my opinion, especially in security areas. It is noisy about security, but not as inherently safe as Firefox.

  3. Peak Oil Conspiracy 3

    Lynn:

    Interesting comments. I’m not a techy, so this really is your area of expertise.

    Here’s the thing: I don’t open executable file attachments – from anyone. I give you my word that, when I visited this blog earlier today, my computer packed up – more or less straight away. I wasn’t running anything else in the background. I can only assume that there was some malicious code in there somewhere which destablished my OS.

    It sounds like you’ve fixed the problem – whatever it was – but I’d be interested to know if anyone else had the same experience as me.

  4. lprent 4

    I would doubt that it came from here (there is no absolute certainty in IT). But I’d be interested as well. It is a problem that should have been solved long ago by adequete use of AV’s.

    There are quite a lot of interesting (to me anyway) techniques going on around websites at present. It isn’t an area that I’ve looked at extensively for a number of years. But it does keep coming up. There are a lot of routes into systems, and not just by clicked on executables.

    For instance a friend forwarded an e-mail a few days ago to have a look at because the wording was quite threatening, and it turned up in both of her mail boxes. It had a link to a webpage which I opened in a sniffer. The front of the site had a routine bit of porn. But there was a IFRAME on the page that had some very well written vbscript that would have worked in older IE’s, and outlooks.

    I’ve seen trojian insertors turn up in video and audio codexes. The “install this to play this video” for something on a web page targeted at windows media player.

    Some rather stupid applications use open protocols like tftp to update drivers. I caught one of them pulling in a virus a year or so ago presumably because someone was capturing the packets at a router.

    I’m not going to bother detailing the access points that are detailed on the net. But it is why there are so many security updates coming through on windows over the last few years.

    Generally the best defense is to have very good antivirus and scanners (and keep them updated!) plus use the hardware firewall on your router.

    Every outbreak that I’ve seen in the last 4-5 years has also had no or antique anti-virus at the client side.

    The hardware firewall.. Most machines visible on the net have port scans done on them at least every 30 minutes looking for open ports. One server I help maintain in the US gets scanned on average every 4 seconds.

  5. mondograss 5

    Actually, my PC choked as well. When I accessed the site it asked me if I wanted to download a plugin (redirected to a-b-c.com I think?), which I tried to decline but by that stage IE had locked up and I had to reboot. The PC ran pretty badly for a while but eventually sorted itself out, antivirus didn’t find anything when I ran it.

  6. lprent 6

    I’ve had that happen a couple of times in the last few days (in IE7).

    Once on here and once on another site. It was asking for different plugins in each case. One was some kind of graphics protocol and the other was something that I’ve forgotten – shockwave?. Displayed in the bar just under the tab bar in IE7.

    The defining factor was that it jammed IE7, and put one CPU core into 100%. The rest of the machine went really sluggish. Because the machines are multi-CPU/multi-core, I just killed IE7.

    I never allow plugins for Internet Explorer, and routinely get that type of message. I’d attributed the jam up to one of microsoft’s automatic downgrades. It was only the jam that was unusual.

    Just in case you hadn’t realised. I don’t like Internet Explorer. I only use it because I still have to write HTML/css/js for it sometimes. IMHO it is too non-standard to code for easily, and outright dangerous on security.

Recent Comments

Recent Posts

  • Ō-Rākau Remembrance Bill passes first reading
    The return of the historic Ō-Rākau battle site to the descendants of those who fought there moved one step closer today with the first reading of Te Pire mō Ō-Rākau, Te Pae o Maumahara / The Ō-Rākau Remembrance Bill. The Bill will entrust the 9.7-hectare battle site, five kilometres west ...
    BeehiveBy beehive.govt.nz
    6 hours ago
  • Government to boost public EV charging network
    Energy Minister Simeon Brown has announced 25 new high-speed EV charging hubs along key routes between major urban centres and outlined the Government’s plan to supercharge New Zealand’s EV infrastructure.  The hubs will each have several chargers and be capable of charging at least four – and up to 10 ...
    BeehiveBy beehive.govt.nz
    6 hours ago
  • Residential Property Managers Bill to not progress
    The coalition Government will not proceed with the previous Government’s plans to regulate residential property managers, Housing Minister Chris Bishop says. “I have written to the Chairperson of the Social Services and Community Committee to inform him that the Government does not intend to support the Residential Property Managers Bill ...
    BeehiveBy beehive.govt.nz
    7 hours ago
  • Independent review into disability support services
    The Government has announced an independent review into the disability support system funded by the Ministry of Disabled People – Whaikaha. Disability Issues Minister Louise Upston says the review will look at what can be done to strengthen the long-term sustainability of Disability Support Services to provide disabled people and ...
    BeehiveBy beehive.govt.nz
    12 hours ago
  • Justice Minister updates UN on law & order plan
    Justice Minister Paul Goldsmith has attended the Universal Periodic Review in Geneva and outlined the Government’s plan to restore law and order. “Speaking to the United Nations Human Rights Council provided us with an opportunity to present New Zealand’s human rights progress, priorities, and challenges, while responding to issues and ...
    BeehiveBy beehive.govt.nz
    14 hours ago
  • Trade Minister travels to Riyadh, OECD, and Dubai
    Trade Minister Todd McClay heads overseas today for high-level trade talks in the Gulf region, and a key OECD meeting in Paris. Mr McClay will travel to Riyadh to meet with counterparts from Saudi Arabia and the Gulf Cooperation Council (GCC). “New Zealand’s goods and services exports to the Gulf region ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Education priorities focused on lifting achievement
    Education Minister Erica Stanford has outlined six education priorities to deliver a world-leading education system that sets Kiwi kids up for future success. “I’m putting ambition, achievement and outcomes at the heart of our education system. I want every child to be inspired and engaged in their learning so they ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • NZTA App first step towards digital driver licence
    The new NZ Transport Agency (NZTA) App is a secure ‘one stop shop’ to provide the services drivers need, Transport Minister Simeon Brown and Digitising Government Minister Judith Collins say.  “The NZTA App will enable an easier way for Kiwis to pay for Vehicle Registration and Road User Charges (RUC). ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Supporting whānau out of emergency housing
    Whānau with tamariki growing up in emergency housing motels will be prioritised for social housing starting this week, says Associate Housing Minister Tama Potaka. “Giving these whānau a better opportunity to build healthy stable lives for themselves and future generations is an essential part of the Government’s goal of reducing ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Tribute to Dave O'Sullivan
    Racing Minister Winston Peters has paid tribute to an icon of the industry with the recent passing of Dave O’Sullivan (OBE). “Our sympathies are with the O’Sullivan family with the sad news of Dave O’Sullivan’s recent passing,” Mr Peters says. “His contribution to racing, initially as a jockey and then ...
    BeehiveBy beehive.govt.nz
    1 day ago
  • Speech – Eid al-Fitr
    Assalaamu alaikum, greetings to you all. Eid Mubarak, everyone! I want to extend my warmest wishes to you and everyone celebrating this joyous occasion. It is a pleasure to be here. I have enjoyed Eid celebrations at Parliament before, but this is my first time joining you as the Minister ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Government saves access to medicines
    Associate Health Minister David Seymour has announced Pharmac’s largest ever budget of $6.294 billion over four years, fixing a $1.774 billion fiscal cliff.    “Access to medicines is a crucial part of many Kiwis’ lives. We’ve committed to a budget allocation of $1.774 billion over four years so Kiwis are ...
    BeehiveBy beehive.govt.nz
    2 days ago
  • Pharmac Chair appointed
    Hon Paula Bennett has been appointed as member and chair of the Pharmac board, Associate Health Minister David Seymour announced today. "Pharmac is a critical part of New Zealand's health system and plays a significant role in ensuring that Kiwis have the best possible access to medicines,” says Mr Seymour. ...
    BeehiveBy beehive.govt.nz
    3 days ago
  • Taking action on Fetal Alcohol Spectrum Disorder
    Hundreds of New Zealand families affected by Fetal Alcohol Spectrum Disorder (FASD) will benefit from a new Government focus on prevention and treatment, says Health Minister Dr Shane Reti. “We know FASD is a leading cause of preventable intellectual and neurodevelopmental disability in New Zealand,” Dr Reti says.  “Every day, ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • New sports complex opens in Kaikohe
    Regional Development Minister Shane Jones today attended the official opening of Kaikohe’s new $14.7 million sports complex. “The completion of the Kaikohe Multi Sports Complex is a fantastic achievement for the Far North,” Mr Jones says. “This facility not only fulfils a long-held dream for local athletes, but also creates ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Diplomacy needed more than ever
    Foreign Minister Winston Peters’ engagements in Türkiye this week underlined the importance of diplomacy to meet growing global challenges.    “Returning to the Gallipoli Peninsula to represent New Zealand at Anzac commemorations was a sombre reminder of the critical importance of diplomacy for de-escalating conflicts and easing tensions,” Mr Peters ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Anzac Commemorative Address, Buttes New British Cemetery Belgium
    Ambassador Millar, Burgemeester, Vandepitte, Excellencies, military representatives, distinguished guests, ladies and gentlemen – good morning and welcome to this sacred Anzac Day dawn service.  It is an honour to be here on behalf of the Government and people of New Zealand at Buttes New British Cemetery, Polygon Wood – a deeply ...
    BeehiveBy beehive.govt.nz
    4 days ago
  • Anzac Commemorative Address – NZ National Service, Chunuk Bair
    Distinguished guests -   It is an honour to return once again to this site which, as the resting place for so many of our war-dead, has become a sacred place for generations of New Zealanders.   Our presence here and at the other special spaces of Gallipoli is made ...
    BeehiveBy beehive.govt.nz
    5 days ago
  • Anzac Commemorative Address – Dawn Service, Gallipoli, Türkiye
    Mai ia tawhiti pamamao, te moana nui a Kiwa, kua tae whakaiti mai matou, ki to koutou papa whenua. No koutou te tapuwae, no matou te tapuwae, kua honoa pumautia.   Ko nga toa kua hinga nei, o te Waipounamu, o te Ika a Maui, he okioki tahi me o ...
    BeehiveBy beehive.govt.nz
    5 days ago
  • PM announces changes to portfolios
    Paul Goldsmith will take on responsibility for the Media and Communications portfolio, while Louise Upston will pick up the Disability Issues portfolio, Prime Minister Christopher Luxon announced today. “Our Government is relentlessly focused on getting New Zealand back on track. As issues change in prominence, I plan to adjust Ministerial ...
    BeehiveBy beehive.govt.nz
    6 days ago
  • New catch limits for unique fishery areas
    Recreational catch limits will be reduced in areas of Fiordland and the Chatham Islands to help keep those fisheries healthy and sustainable, Oceans and Fisheries Minister Shane Jones says. The lower recreational daily catch limits for a range of finfish and shellfish species caught in the Fiordland Marine Area and ...
    BeehiveBy beehive.govt.nz
    7 days ago
  • Minister welcomes hydrogen milestone
    Energy Minister Simeon Brown has welcomed an important milestone in New Zealand’s hydrogen future, with the opening of the country’s first network of hydrogen refuelling stations in Wiri. “I want to congratulate the team at Hiringa Energy and its partners K one W one (K1W1), Mitsui & Co New Zealand ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Urgent changes to system through first RMA Amendment Bill
    The coalition Government is delivering on its commitment to improve resource management laws and give greater certainty to consent applicants, with a Bill to amend the Resource Management Act (RMA) expected to be introduced to Parliament next month. RMA Reform Minister Chris Bishop has today outlined the first RMA Amendment ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Overseas decommissioning models considered
    Overseas models for regulating the oil and gas sector, including their decommissioning regimes, are being carefully scrutinised as a potential template for New Zealand’s own sector, Resources Minister Shane Jones says. The Coalition Government is focused on rebuilding investor confidence in New Zealand’s energy sector as it looks to strengthen ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Release of North Island Severe Weather Event Inquiry
    Emergency Management and Recovery Minister Mark Mitchell has today released the Report of the Government Inquiry into the response to the North Island Severe Weather Events. “The report shows that New Zealand’s emergency management system is not fit-for-purpose and there are some significant gaps we need to address,” Mr Mitchell ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Justice Minister to attend Human Rights Council
    Justice Minister Paul Goldsmith is today travelling to Europe where he’ll update the United Nations Human Rights Council on the Government’s work to restore law and order.  “Attending the Universal Periodic Review in Geneva provides us with an opportunity to present New Zealand’s human rights progress, priorities, and challenges, while ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Patterson reopens world’s largest wool scouring facility
    Associate Agriculture Minister, Mark Patterson, formally reopened the world’s largest wool processing facility today in Awatoto, Napier, following a $50 million rebuild and refurbishment project. “The reopening of this facility will significantly lift the economic opportunities available to New Zealand’s wool sector, which already accounts for 20 per cent of ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Speech to the Southland Otago Regional Engineering Collective Summit, 18 April 2024
    Hon Andrew Bayly, Minister for Small Business and Manufacturing  At the Southland Otago Regional Engineering Collective (SOREC) Summit, 18 April, Dunedin    Ngā mihi nui, Ko Andrew Bayly aho, Ko Whanganui aho    Good Afternoon and thank you for inviting me to open your summit today.    I am delighted ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Government to introduce revised Three Strikes law
    The Government is delivering on its commitment to bring back the Three Strikes legislation, Associate Justice Minister Nicole McKee announced today. “Our Government is committed to restoring law and order and enforcing appropriate consequences on criminals. We are making it clear that repeat serious violent or sexual offending is not ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • New diplomatic appointments
    Foreign Minister Winston Peters has today announced four new diplomatic appointments for New Zealand’s overseas missions.   “Our diplomats have a vital role in maintaining and protecting New Zealand’s interests around the world,” Mr Peters says.    “I am pleased to announce the appointment of these senior diplomats from the ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Humanitarian support for Ethiopia and Somalia
    New Zealand is contributing NZ$7 million to support communities affected by severe food insecurity and other urgent humanitarian needs in Ethiopia and Somalia, Foreign Minister Rt Hon Winston Peters announced today.   “Over 21 million people are in need of humanitarian assistance across Ethiopia, with a further 6.9 million people ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Arts Minister congratulates Mataaho Collective
    Minister for Arts, Culture and Heritage Paul Goldsmith is congratulating Mataaho Collective for winning the Golden Lion for best participant in the main exhibition at the Venice Biennale. "Congratulations to the Mataaho Collective for winning one of the world's most prestigious art prizes at the Venice Biennale.  “It is good ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Supporting better financial outcomes for Kiwis
    The Government is reforming financial services to improve access to home loans and other lending, and strengthen customer protections, Commerce and Consumer Affairs Minister Andrew Bayly and Housing Minister Chris Bishop announced today. “Our coalition Government is committed to rebuilding the economy and making life simpler by cutting red tape. We are ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • Trade relationship with China remains strong
    “China remains a strong commercial opportunity for Kiwi exporters as Chinese businesses and consumers continue to value our high-quality safe produce,” Trade and Agriculture Minister Todd McClay says.   Mr McClay has returned to New Zealand following visits to Beijing, Harbin and Shanghai where he met ministers, governors and mayors and engaged in trade and agricultural events with the New ...
    BeehiveBy beehive.govt.nz
    1 week ago
  • PM’s South East Asia mission does the business
    Prime Minister Christopher Luxon has completed a successful trip to Singapore, Thailand and the Philippines, deepening relationships and capitalising on opportunities. Mr Luxon was accompanied by a business delegation and says the choice of countries represents the priority the New Zealand Government places on South East Asia, and our relationships in ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • $41m to support clean energy in South East Asia
    New Zealand is demonstrating its commitment to reducing global greenhouse emissions, and supporting clean energy transition in South East Asia, through a contribution of NZ$41 million (US$25 million) in climate finance to the Asian Development Bank (ADB)-led Energy Transition Mechanism (ETM). Prime Minister Christopher Luxon and Climate Change Minister Simon Watts announced ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Minister releases Fast-track stakeholder list
    The Government is today releasing a list of organisations who received letters about the Fast-track applications process, says RMA Reform Minister Chris Bishop. “Recently Ministers and agencies have received a series of OIA requests for a list of organisations to whom I wrote with information on applying to have a ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Judicial appointments announced
    Attorney-General Judith Collins today announced the appointment of Wellington Barrister David Jonathan Boldt as a Judge of the High Court, and the Honourable Justice Matthew Palmer as a Judge of the Court of Appeal. Justice Boldt graduated with an LLB from Victoria University of Wellington in 1990, and also holds ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Education Minister heads to major teaching summit in Singapore
    Education Minister Erica Stanford will lead the New Zealand delegation at the 2024 International Summit on the Teaching Profession (ISTP) held in Singapore. The delegation includes representatives from the Post Primary Teachers’ Association (PPTA) Te Wehengarua and the New Zealand Educational Institute (NZEI) Te Riu Roa.  The summit is co-hosted ...
    BeehiveBy beehive.govt.nz
    2 weeks ago
  • Value of stopbank project proven during cyclone
    A stopbank upgrade project in Tairawhiti partly funded by the Government has increased flood resilience for around 7000ha of residential and horticultural land so far, Regional Development Minister Shane Jones says. Mr Jones today attended a dawn service in Gisborne to mark the end of the first stage of the ...
    BeehiveBy beehive.govt.nz
    2 weeks ago

Page generated in The Standard by Wordpress at 2024-04-30T11:30:31+00:00