Re:Ask HN: Have you ever been hacked?
by stevekemp on Friday August 01, 2014 @10:06AM
(#8119844)
Once upon a time I was given an account on a host which was publicly accessible over the internet.
I was told "OK your username is 'steve', your password is 'steve'". Between the time it was created and the time I logged in for the first time it had been compromised via a dictionary-attack.
I know these things happen constantly, but I was pretty surprised at the sheer bad luck and timing involved.
Otherwise I worked at a hosting company for many years, and clients would frequently get compromised. Largely as a result of outdated wordpress/magento/drupal installations. (Sometimes dictionary attacks too, but largely it was outdated web applications allowing remote code-execution.)
I was told "OK your username is 'steve', your password is 'steve'". Between the time it was created and the time I logged in for the first time it had been compromised via a dictionary-attack.
I know these things happen constantly, but I was pretty surprised at the sheer bad luck and timing involved.
Otherwise I worked at a hosting company for many years, and clients would frequently get compromised. Largely as a result of outdated wordpress/magento/drupal installations. (Sometimes dictionary attacks too, but largely it was outdated web applications allowing remote code-execution.)