Re:How security companies use hacker techniques to improve t...
by crikli on Tuesday May 03, 2011 @09:53AM
(#2509932)
The author is careless in using screenshots that implicate companies that have nothing to do with this issue. This article is a linkbait remix of the most obvious security tip out there: don't download and install stuff from places you don't know you can trust.
Proving my point...I can't speak to the Wordpress themes, but one of the screenshot looks like it's the Drupal theme called Acquia Marina (http://drupal.org/node/315555).
You've got four people who are commiting to the git repository (http://drupal.org/node/315548/committers). The only way this code gets in there is if one of those four is putting it in, which they're not as you can view the commits and dig through the code to see if there is anything like this (http://drupal.org/node/315548/commits). They have not.
Therefore this theme has to be coming from another source rather than Drupal.org, the officially supported source for Drupal themes, and to my point, Acquia, a company founded by Dries Buytaert, the fellow that created Drupal.
So if you're downloading code for Drupal from somewhere other than Drupal.org, or downloading themes for WP from somewhere other than WP, or Microsoft system patches from somewhere other than Microsoft, or apt-get-ing from random sources, yup, you've got a risk exposure.
Proving my point...I can't speak to the Wordpress themes, but one of the screenshot looks like it's the Drupal theme called Acquia Marina (http://drupal.org/node/315555).
You've got four people who are commiting to the git repository (http://drupal.org/node/315548/committers). The only way this code gets in there is if one of those four is putting it in, which they're not as you can view the commits and dig through the code to see if there is anything like this (http://drupal.org/node/315548/commits). They have not.
Therefore this theme has to be coming from another source rather than Drupal.org, the officially supported source for Drupal themes, and to my point, Acquia, a company founded by Dries Buytaert, the fellow that created Drupal.
So if you're downloading code for Drupal from somewhere other than Drupal.org, or downloading themes for WP from somewhere other than WP, or Microsoft system patches from somewhere other than Microsoft, or apt-get-ing from random sources, yup, you've got a risk exposure.
As an aside, the OP site is using Drupal.