Here’s why we keep getting hacked – clear and present Billabong failures

Re:Here’s why we keep getting hacked – clear and present Bil... by davidandgoliath on Monday July 16, 2012 @03:12PM (#4252035)

This post is irrelevant, the author can reduce it to: https://billabong.com:8443/

(Plesk.)

[ Parent | on HN ]

Re:Here’s why we keep getting hacked – clear and present Bil... by spiffytech on Monday July 16, 2012 @10:44PM (#4253828)

For those who don't know, Plesk has been a recent vector to compromise a large number of websites: http://krebsonsecurity.com/2012/07/plesk-0day-for-sale-as-th...

[ Parent | on HN ]

Re:Here’s why we keep getting hacked – clear and present Bil... by davidandgoliath on Tuesday July 17, 2012 @12:03AM (#4254025)

Apologies! Should have expanded on that a bit. Overall gist: billabong.com has plesk publicly available for login. Plesk allows root (full system access) logins from a remote source and has all kinds of exploits available for purchase and abuse.

This kind of stuff happens, but in essence Billabong's sysadmin needs to start surfing exploit mailing lists more than he's surfing other places :)

[ Parent | on HN ]