am i the only one thats getting this virus/trojan on my server? - GoFuckYourself.com

tehHinjew · 02-20-2007, 04:52 PM

seems im not alone
found this when scottybuzz said my site had a virus

Quote:

im on the phone with webair to see wagwaning

like i said im not alone

edit i cant show forums can i

King of Queens · 02-20-2007, 04:54 PM

that sucks

tehHinjew · 02-20-2007, 04:58 PM

fuck i cant show the link im scared to get banned

interracialtoons · 02-20-2007, 05:38 PM

Quote:

Originally Posted by tehHinjew

fuck i cant show the link im scared to get banned

Just copy/paste the text here.

tehHinjew · 02-20-2007, 06:06 PM

http://www.google.ca/search?source=i...e+Search&meta=

click on comus thumbs

interracialtoons · 02-20-2007, 06:08 PM

Quote:

Originally Posted by tehHinjew

http://www.google.ca/search?source=i...e+Search&meta=

click on comus thumbs

Er....fuck you.

Aric · 02-20-2007, 06:26 PM

Before I clicked on this thread - I already knew what it was about - and where you hosted. These threads are becoming more frequent here.

Sooner or later, Webair techs are going to have to isolate the vulnerability in their setup instead of blaming it on client scripts.

I've witnessed this first hand, on completely different accounts - no scripts in common... in fact, one was virtually a vanilla server.

Good luck!

tehHinjew · 02-20-2007, 06:43 PM

Quote:

Originally Posted by Aric

Before I clicked on this thread - I already knew what it was about - and where you hosted. These threads are becoming more frequent here.

Sooner or later, Webair techs are going to have to isolate the vulnerability in their setup instead of blaming it on client scripts.

I've witnessed this first hand, on completely different accounts - no scripts in common... in fact, one was virtually a vanilla server.

Good luck!

wow thats fucked up
can you show me other threads please?

Aric · 02-20-2007, 07:23 PM

Quote:

Originally Posted by tehHinjew

can you show me other threads please?

If the search here would work - I would.

I'm not here to bash Webair - just relaying my first hand experience as well as observations on the boards.

The last thread relating to this was someone telling morefuckingmoney.com to stop installing trojans from their webmaster page if you feel like searching.

webair · 02-21-2007, 11:01 AM

Looks like you have a vulnerable script...contact us and we will help you isolate it and upgrade it accordingly. If you do not regularly update the scripts you use of curse you will have issues.

This security notice goes out in our newsletter monthly (see below). Additionally, there is an upgrade security feature in our control panel that will help guard against vulnerable scripts. Please contact [email protected] or call us 1.866.WEBAIR1 to get your issue resolved if you need further information.

Dear Webair Client,

Your account security is of the utmost importance. As such, we want to equip our customers with the knowledge they need to ultimately ensure their account information remain safely in the right hands. We recommend that everyone visit this page and follow the helpful tips to ensure that their accounts remain secure.

The vast majority of account compromises originate from one of three sources:

1. Insecure scripts and coding

2. Downloading Viruses & Executables

3. Sharing account information

See below in this page for more information on keeping yourself safe.

KEEPING YOUR SYSTEM UP TO DATE

Please be sure that you have the most secure operating system environment on your computer by running Windows Update (if you own a Windows-based PC) or Software Update (if you own a Mac) and installing all of the updates marked "High Priority". Note: you may have to run the updater more than once to ensure you have all the high priority updates; many of the patches require a system restart, and then additional patch installations to complete the process.

INSECURE SCRIPTS AND CODING

It's extremely important to keep your website software up to date. Outdated software is likely to have bugs which can give a hacker access to your website. If your software is no longer maintained, we strongly advise that you select new software that is regularly updated.

If your software vendor operates a mailing list, it's a good idea to be subscribed and stay informed. Security issues are typically announced along with a new version of the software to address the problem

DOWNLOADING VIRUSUS & EXECUTABLES

Viruses, 'Trojan' applications, and key-logging software can all steal your login information, in addition to anything else on your computer once it has been compromised. These sorts of threats are typically brought into the system and installed by "executable" programs.

An "executable" program is something you download and then you run it as its own program - as opposed to opening a file or a folder. You can tell if a program is an executable if its file name ends in EXE. You can also right-click the file and choose "Properties." If the "File Type" says "Application," then that file is an executable.

Hackers and account thieves like to put their viruses, keyloggers, etc into executable files.

GIVING OUT ACCOUNT INFORMATION

Sadly, our support teams take a considerable number of inquiries from people who have lost their account solely because they at one time shared their password to a friend, spouse (or ex-spouse), roommate, relative, etc, and then had their account stolen.

Most of the small-scale account thefts (those not done by a widespread hack or scam) take place because the individual *gives out* their own information to someone they believed they could trust.

Your password is supposed to be yours and YOURS alone... this is part of why our Terms of Use specifically forbid sharing your login information.

Sharing account information is unwise and can wind up costing you everything you have worked for.

MAKING A SECURE PASSWORD

Creating a secure password can help immensely when facing certain types of security risks. Even if you believe your password has been kept secret it is best to follow some guidelines to make sure it is difficult to guess.

Suggestions on how to create a secure password:

Extreme care should be taken in choosing your password. If your password is easy to guess, someone may be able to access or steal your account

There are also a number of "Brute Force" programs which are used to generate password possibilities based on a set of words. These programs will then attempt to log onto an account with as many different passwords as possible, hoping that it will eventually "guess" the account password so that it can logon successfully

Below is a list of password creation suggestions that will reduce the effectiveness of these programs.

You can also contact [email protected] for pricing information on ProxyPass password protection addon for you account.

Password Creation Suggestions

Make sure your password does not contain words from ANY dictionary (forwards or backwards) - Most "Brute Force" programs use a list of common words and terms which they use to generate a list of possible passwords.
Commonly, dictionaries from multiple languages and technical terms are used.

Use letters, numbers, AND symbols - Simply adding a string of numbers at the end of the password is typically not enough to guarantee security. The use of number and symbols through-out the password will strengthen it against "Brute Force" programs.

Make your password at least 6 characters long - The longer the password, the more tries it takes to guess the password. Keeping your password over 6 characters will increase the difficulty in guessing your password.

Avoid common number/letter replacements. (i.e. 1 and I, 3 and e) -
Most "Brute Force" programs are aware of these replacements, and it uses them when creating a list of possible passwords to use.
Do not use any keyboard sequences (i.e. qwerty) - Keyboard strings are common in many passwords, and for this reason many "Brute Force" programs use them as well.

Do not use your own account name - Using your own account name in your password, even if it is followed by other words or numbers, increases the chance that a hacker can guess your password.

Avoid repeating small sequences of characters (i.e. abcabc) - Most
"Brute Force" programs have a list of common sequences that they use when trying to generate a list of possible passwords.

Computer Security

Keeping your account secure relies heavily on keeping your computer secure.
This can help keep your computer safe from malicious programs and those intent on stealing private information.

Useful Links

The following sites maintain lists of vulnerabilities for php scripts and more and are good to check often:

Http://blog.php-security.org/
http://www.securityfocus.com/vulnerabilities

scottybuzz · 02-21-2007, 11:05 AM

Hey tehhinjew. just have a chat with live support, theyre really helpful.

here is a previous example on my server

https://gfy.com/fucking-around-and-business-discussion/686691-warning-site-self-installing-trojan.html

it just kept coming back and back, u gotta delete the source.

JD · 02-21-2007, 11:25 AM

same shit's happening to me. 2 dif hosts neither are webair and neither are running the same OS or scripts

pocketkangaroo · 02-24-2007, 12:24 AM

Same thing happened to me today, I'm on Webair too.

Tempest · 02-24-2007, 01:17 AM

So can anyone actually tell us what the problem is? i.e. the security holes they're using so that we can fix our own servers instead of waiting for it to happen and dealing with it after the fact?

pocketkangaroo · 02-24-2007, 01:22 AM

I have no clue. They told me they were going to add some security measure and they fixed it. I'm crossing my fingers.

pocketkangaroo · 02-28-2007, 01:09 PM

Did this ever get fixed hinjew? It keeps popping up for me on Webair. My scripts are all secure too.

Nookster · 02-28-2007, 01:12 PM

You guys may want to shop for a new host as it's obvious they could care less about you.

webair · 02-28-2007, 01:16 PM

The solution lies in my prior post...If you read the post you will see that this is not a webair issue soley...we have a fix for our clients contact us if you are have been effected by this issue:

Looks like you have a vulnerable script...contact us and we will help you isolate it and upgrade it accordingly. If you do not regularly update the scripts you use of curse you will have issues.

This security notice goes out in our newsletter monthly (see below). Additionally, there is an upgrade security feature in our control panel that will help guard against vulnerable scripts. Please contact [email protected] or call us 1.866.WEBAIR1 to get your issue resolved if you need further information.

Dear Webair Client,

Your account security is of the utmost importance. As such, we want to equip our customers with the knowledge they need to ultimately ensure their account information remain safely in the right hands. We recommend that everyone visit this page and follow the helpful tips to ensure that their accounts remain secure.

The vast majority of account compromises originate from one of three sources:

1. Insecure scripts and coding

2. Downloading Viruses & Executables

3. Sharing account information

See below in this page for more information on keeping yourself safe.

KEEPING YOUR SYSTEM UP TO DATE

Please be sure that you have the most secure operating system environment on your computer by running Windows Update (if you own a Windows-based PC) or Software Update (if you own a Mac) and installing all of the updates marked "High Priority". Note: you may have to run the updater more than once to ensure you have all the high priority updates; many of the patches require a system restart, and then additional patch installations to complete the process.

INSECURE SCRIPTS AND CODING

It's extremely important to keep your website software up to date. Outdated software is likely to have bugs which can give a hacker access to your website. If your software is no longer maintained, we strongly advise that you select new software that is regularly updated.

If your software vendor operates a mailing list, it's a good idea to be subscribed and stay informed. Security issues are typically announced along with a new version of the software to address the problem

DOWNLOADING VIRUSUS & EXECUTABLES

Viruses, 'Trojan' applications, and key-logging software can all steal your login information, in addition to anything else on your computer once it has been compromised. These sorts of threats are typically brought into the system and installed by "executable" programs.

An "executable" program is something you download and then you run it as its own program - as opposed to opening a file or a folder. You can tell if a program is an executable if its file name ends in EXE. You can also right-click the file and choose "Properties." If the "File Type" says "Application," then that file is an executable.

Hackers and account thieves like to put their viruses, keyloggers, etc into executable files.

GIVING OUT ACCOUNT INFORMATION

Sadly, our support teams take a considerable number of inquiries from people who have lost their account solely because they at one time shared their password to a friend, spouse (or ex-spouse), roommate, relative, etc, and then had their account stolen.

Most of the small-scale account thefts (those not done by a widespread hack or scam) take place because the individual *gives out* their own information to someone they believed they could trust.

Your password is supposed to be yours and YOURS alone... this is part of why our Terms of Use specifically forbid sharing your login information.

Sharing account information is unwise and can wind up costing you everything you have worked for.

MAKING A SECURE PASSWORD

Creating a secure password can help immensely when facing certain types of security risks. Even if you believe your password has been kept secret it is best to follow some guidelines to make sure it is difficult to guess.

Suggestions on how to create a secure password:

Extreme care should be taken in choosing your password. If your password is easy to guess, someone may be able to access or steal your account

There are also a number of "Brute Force" programs which are used to generate password possibilities based on a set of words. These programs will then attempt to log onto an account with as many different passwords as possible, hoping that it will eventually "guess" the account password so that it can logon successfully

Below is a list of password creation suggestions that will reduce the effectiveness of these programs.

You can also contact [email protected] for pricing information on ProxyPass password protection addon for you account.

Password Creation Suggestions

Make sure your password does not contain words from ANY dictionary (forwards or backwards) - Most "Brute Force" programs use a list of common words and terms which they use to generate a list of possible passwords.
Commonly, dictionaries from multiple languages and technical terms are used.

Use letters, numbers, AND symbols - Simply adding a string of numbers at the end of the password is typically not enough to guarantee security. The use of number and symbols through-out the password will strengthen it against "Brute Force" programs.

Make your password at least 6 characters long - The longer the password, the more tries it takes to guess the password. Keeping your password over 6 characters will increase the difficulty in guessing your password.

Avoid common number/letter replacements. (i.e. 1 and I, 3 and e) -
Most "Brute Force" programs are aware of these replacements, and it uses them when creating a list of possible passwords to use.
Do not use any keyboard sequences (i.e. qwerty) - Keyboard strings are common in many passwords, and for this reason many "Brute Force" programs use them as well.

Do not use your own account name - Using your own account name in your password, even if it is followed by other words or numbers, increases the chance that a hacker can guess your password.

Avoid repeating small sequences of characters (i.e. abcabc) - Most
"Brute Force" programs have a list of common sequences that they use when trying to generate a list of possible passwords.

Computer Security

Keeping your account secure relies heavily on keeping your computer secure.
This can help keep your computer safe from malicious programs and those intent on stealing private information.

Useful Links

The following sites maintain lists of vulnerabilities for php scripts and more and are good to check often:

Http://blog.php-security.org/
http://www.securityfocus.com/vulnerabilities

Sarah_Jayne · 02-28-2007, 01:16 PM

I had that and they fixed it for me within minutes and added new security to help it stop happening and it hasn't happened since.

Vendzilla · 02-28-2007, 05:49 PM

Webair rocks!!

02-20-2007, 04:54 PM	#2
King of Queens Confirmed User Join Date: Aug 2006 Location: Atlanta, Georgia ICQ 276-218-214 Posts: 1,288	that sucks __________________ Emails = $3.50 each \| girls gone wild \| Big Booty \| Big Booty Videos

02-20-2007, 04:58 PM	#3
tehHinjew Confirmed User Join Date: Sep 2006 Location: MTL Posts: 5,755	fuck i cant show the link im scared to get banned __________________ Hot Porn Wanna trade? email me at wanker (@) wanknation dot com Last edited by tehHinjew; 02-20-2007 at 05:01 PM..

02-20-2007, 06:06 PM	#5
tehHinjew Confirmed User Join Date: Sep 2006 Location: MTL Posts: 5,755	http://www.google.ca/search?source=i...e+Search&meta= click on comus thumbs __________________ Hot Porn Wanna trade? email me at wanker (@) wanknation dot com

02-20-2007, 06:26 PM	#7
Aric Confirmed User Industry Role: Join Date: Sep 2002 Posts: 1,209	Before I clicked on this thread - I already knew what it was about - and where you hosted. These threads are becoming more frequent here. Sooner or later, Webair techs are going to have to isolate the vulnerability in their setup instead of blaming it on client scripts. I've witnessed this first hand, on completely different accounts - no scripts in common... in fact, one was virtually a vanilla server. Good luck! __________________ Awesome cloud hosting by DigitalOcean

02-21-2007, 11:01 AM	#10
webair Confirmed User Industry Role: Join Date: Feb 2002 Location: NYC, NY Posts: 8,531	Looks like you have a vulnerable script...contact us and we will help you isolate it and upgrade it accordingly. If you do not regularly update the scripts you use of curse you will have issues. This security notice goes out in our newsletter monthly (see below). Additionally, there is an upgrade security feature in our control panel that will help guard against vulnerable scripts. Please contact [email protected] or call us 1.866.WEBAIR1 to get your issue resolved if you need further information. Dear Webair Client, Your account security is of the utmost importance. As such, we want to equip our customers with the knowledge they need to ultimately ensure their account information remain safely in the right hands. We recommend that everyone visit this page and follow the helpful tips to ensure that their accounts remain secure. The vast majority of account compromises originate from one of three sources: 1. Insecure scripts and coding 2. Downloading Viruses & Executables 3. Sharing account information See below in this page for more information on keeping yourself safe. KEEPING YOUR SYSTEM UP TO DATE Please be sure that you have the most secure operating system environment on your computer by running Windows Update (if you own a Windows-based PC) or Software Update (if you own a Mac) and installing all of the updates marked "High Priority". Note: you may have to run the updater more than once to ensure you have all the high priority updates; many of the patches require a system restart, and then additional patch installations to complete the process. INSECURE SCRIPTS AND CODING It's extremely important to keep your website software up to date. Outdated software is likely to have bugs which can give a hacker access to your website. If your software is no longer maintained, we strongly advise that you select new software that is regularly updated. If your software vendor operates a mailing list, it's a good idea to be subscribed and stay informed. Security issues are typically announced along with a new version of the software to address the problem DOWNLOADING VIRUSUS & EXECUTABLES Viruses, 'Trojan' applications, and key-logging software can all steal your login information, in addition to anything else on your computer once it has been compromised. These sorts of threats are typically brought into the system and installed by "executable" programs. An "executable" program is something you download and then you run it as its own program - as opposed to opening a file or a folder. You can tell if a program is an executable if its file name ends in EXE. You can also right-click the file and choose "Properties." If the "File Type" says "Application," then that file is an executable. Hackers and account thieves like to put their viruses, keyloggers, etc into executable files. GIVING OUT ACCOUNT INFORMATION Sadly, our support teams take a considerable number of inquiries from people who have lost their account solely because they at one time shared their password to a friend, spouse (or ex-spouse), roommate, relative, etc, and then had their account stolen. Most of the small-scale account thefts (those not done by a widespread hack or scam) take place because the individual gives out their own information to someone they believed they could trust. Your password is supposed to be yours and YOURS alone... this is part of why our Terms of Use specifically forbid sharing your login information. Sharing account information is unwise and can wind up costing you everything you have worked for. MAKING A SECURE PASSWORD Creating a secure password can help immensely when facing certain types of security risks. Even if you believe your password has been kept secret it is best to follow some guidelines to make sure it is difficult to guess. Suggestions on how to create a secure password: Extreme care should be taken in choosing your password. If your password is easy to guess, someone may be able to access or steal your account There are also a number of "Brute Force" programs which are used to generate password possibilities based on a set of words. These programs will then attempt to log onto an account with as many different passwords as possible, hoping that it will eventually "guess" the account password so that it can logon successfully Below is a list of password creation suggestions that will reduce the effectiveness of these programs. You can also contact [email protected] for pricing information on ProxyPass password protection addon for you account. Password Creation Suggestions Make sure your password does not contain words from ANY dictionary (forwards or backwards) - Most "Brute Force" programs use a list of common words and terms which they use to generate a list of possible passwords. Commonly, dictionaries from multiple languages and technical terms are used. Use letters, numbers, AND symbols - Simply adding a string of numbers at the end of the password is typically not enough to guarantee security. The use of number and symbols through-out the password will strengthen it against "Brute Force" programs. Make your password at least 6 characters long - The longer the password, the more tries it takes to guess the password. Keeping your password over 6 characters will increase the difficulty in guessing your password. Avoid common number/letter replacements. (i.e. 1 and I, 3 and e) - Most "Brute Force" programs are aware of these replacements, and it uses them when creating a list of possible passwords to use. Do not use any keyboard sequences (i.e. qwerty) - Keyboard strings are common in many passwords, and for this reason many "Brute Force" programs use them as well. Do not use your own account name - Using your own account name in your password, even if it is followed by other words or numbers, increases the chance that a hacker can guess your password. Avoid repeating small sequences of characters (i.e. abcabc) - Most "Brute Force" programs have a list of common sequences that they use when trying to generate a list of possible passwords. Computer Security Keeping your account secure relies heavily on keeping your computer secure. This can help keep your computer safe from malicious programs and those intent on stealing private information. Useful Links The following sites maintain lists of vulnerabilities for php scripts and more and are good to check often: Http://blog.php-security.org/ http://www.securityfocus.com/vulnerabilities __________________ ~ Webair Dedicated Cloud Servers™ ~ WEBAIR VSYS™ Virtual Hosting Platform ~ Superior CDN Network ~ ~ Managed Dedicated hosting Specialists ~ DISCOUNT DOMAIN NAMES! ~ WEBAIR FUSION IO MANAGED CLOUD SERVERS! ~ *ICQ:* 243116321 - *TWITTER* - @WEBAIRINC - E-Mail: [email protected]

02-21-2007, 11:05 AM	#11
scottybuzz Too lazy to set a custom title Industry Role: Join Date: May 2006 Location: NY Posts: 14,800	Hey tehhinjew. just have a chat with live support, theyre really helpful. here is a previous example on my server https://gfy.com/fucking-around-and-business-discussion/686691-warning-site-self-installing-trojan.html it just kept coming back and back, u gotta delete the source. __________________ $$$$$ MAKE HUGE MONEY IN CAMS - CLICK HERE $$$$$

02-21-2007, 11:25 AM	#12
JD Too lazy to set a custom title Industry Role: Join Date: Sep 2003 Posts: 22,651	same shit's happening to me. 2 dif hosts neither are webair and neither are running the same OS or scripts

02-24-2007, 12:24 AM	#13
pocketkangaroo Confirmed User Join Date: Jan 2005 Location: Chicago, IL Posts: 8,452	Same thing happened to me today, I'm on Webair too.

02-24-2007, 01:17 AM	#14
Tempest Too lazy to set a custom title Industry Role: Join Date: May 2004 Location: West Coast, Canada. Posts: 10,217	So can anyone actually tell us what the problem is? i.e. the security holes they're using so that we can fix our own servers instead of waiting for it to happen and dealing with it after the fact?

02-24-2007, 01:22 AM	#15
pocketkangaroo Confirmed User Join Date: Jan 2005 Location: Chicago, IL Posts: 8,452	I have no clue. They told me they were going to add some security measure and they fixed it. I'm crossing my fingers.

02-28-2007, 01:09 PM	#16
pocketkangaroo Confirmed User Join Date: Jan 2005 Location: Chicago, IL Posts: 8,452	Did this ever get fixed hinjew? It keeps popping up for me on Webair. My scripts are all secure too.

02-28-2007, 01:12 PM	#17
Nookster Confirmed IT Professional Industry Role: Join Date: Nov 2005 Location: Hollywood, CA Posts: 3,744	You guys may want to shop for a new host as it's obvious they could care less about you. __________________ The Best Affiliate Software, Ever.

02-28-2007, 01:16 PM	#18
webair Confirmed User Industry Role: Join Date: Feb 2002 Location: NYC, NY Posts: 8,531	The solution lies in my prior post...If you read the post you will see that this is not a webair issue soley...we have a fix for our clients contact us if you are have been effected by this issue: Looks like you have a vulnerable script...contact us and we will help you isolate it and upgrade it accordingly. If you do not regularly update the scripts you use of curse you will have issues. This security notice goes out in our newsletter monthly (see below). Additionally, there is an upgrade security feature in our control panel that will help guard against vulnerable scripts. Please contact [email protected] or call us 1.866.WEBAIR1 to get your issue resolved if you need further information. Dear Webair Client, Your account security is of the utmost importance. As such, we want to equip our customers with the knowledge they need to ultimately ensure their account information remain safely in the right hands. We recommend that everyone visit this page and follow the helpful tips to ensure that their accounts remain secure. The vast majority of account compromises originate from one of three sources: 1. Insecure scripts and coding 2. Downloading Viruses & Executables 3. Sharing account information See below in this page for more information on keeping yourself safe. KEEPING YOUR SYSTEM UP TO DATE Please be sure that you have the most secure operating system environment on your computer by running Windows Update (if you own a Windows-based PC) or Software Update (if you own a Mac) and installing all of the updates marked "High Priority". Note: you may have to run the updater more than once to ensure you have all the high priority updates; many of the patches require a system restart, and then additional patch installations to complete the process. INSECURE SCRIPTS AND CODING It's extremely important to keep your website software up to date. Outdated software is likely to have bugs which can give a hacker access to your website. If your software is no longer maintained, we strongly advise that you select new software that is regularly updated. If your software vendor operates a mailing list, it's a good idea to be subscribed and stay informed. Security issues are typically announced along with a new version of the software to address the problem DOWNLOADING VIRUSUS & EXECUTABLES Viruses, 'Trojan' applications, and key-logging software can all steal your login information, in addition to anything else on your computer once it has been compromised. These sorts of threats are typically brought into the system and installed by "executable" programs. An "executable" program is something you download and then you run it as its own program - as opposed to opening a file or a folder. You can tell if a program is an executable if its file name ends in EXE. You can also right-click the file and choose "Properties." If the "File Type" says "Application," then that file is an executable. Hackers and account thieves like to put their viruses, keyloggers, etc into executable files. GIVING OUT ACCOUNT INFORMATION Sadly, our support teams take a considerable number of inquiries from people who have lost their account solely because they at one time shared their password to a friend, spouse (or ex-spouse), roommate, relative, etc, and then had their account stolen. Most of the small-scale account thefts (those not done by a widespread hack or scam) take place because the individual gives out their own information to someone they believed they could trust. Your password is supposed to be yours and YOURS alone... this is part of why our Terms of Use specifically forbid sharing your login information. Sharing account information is unwise and can wind up costing you everything you have worked for. MAKING A SECURE PASSWORD Creating a secure password can help immensely when facing certain types of security risks. Even if you believe your password has been kept secret it is best to follow some guidelines to make sure it is difficult to guess. Suggestions on how to create a secure password: Extreme care should be taken in choosing your password. If your password is easy to guess, someone may be able to access or steal your account There are also a number of "Brute Force" programs which are used to generate password possibilities based on a set of words. These programs will then attempt to log onto an account with as many different passwords as possible, hoping that it will eventually "guess" the account password so that it can logon successfully Below is a list of password creation suggestions that will reduce the effectiveness of these programs. You can also contact [email protected] for pricing information on ProxyPass password protection addon for you account. Password Creation Suggestions Make sure your password does not contain words from ANY dictionary (forwards or backwards) - Most "Brute Force" programs use a list of common words and terms which they use to generate a list of possible passwords. Commonly, dictionaries from multiple languages and technical terms are used. Use letters, numbers, AND symbols - Simply adding a string of numbers at the end of the password is typically not enough to guarantee security. The use of number and symbols through-out the password will strengthen it against "Brute Force" programs. Make your password at least 6 characters long - The longer the password, the more tries it takes to guess the password. Keeping your password over 6 characters will increase the difficulty in guessing your password. Avoid common number/letter replacements. (i.e. 1 and I, 3 and e) - Most "Brute Force" programs are aware of these replacements, and it uses them when creating a list of possible passwords to use. Do not use any keyboard sequences (i.e. qwerty) - Keyboard strings are common in many passwords, and for this reason many "Brute Force" programs use them as well. Do not use your own account name - Using your own account name in your password, even if it is followed by other words or numbers, increases the chance that a hacker can guess your password. Avoid repeating small sequences of characters (i.e. abcabc) - Most "Brute Force" programs have a list of common sequences that they use when trying to generate a list of possible passwords. Computer Security Keeping your account secure relies heavily on keeping your computer secure. This can help keep your computer safe from malicious programs and those intent on stealing private information. Useful Links The following sites maintain lists of vulnerabilities for php scripts and more and are good to check often: Http://blog.php-security.org/ http://www.securityfocus.com/vulnerabilities __________________ ~ Webair Dedicated Cloud Servers™ ~ WEBAIR VSYS™ Virtual Hosting Platform ~ Superior CDN Network ~ ~ Managed Dedicated hosting Specialists ~ DISCOUNT DOMAIN NAMES! ~ WEBAIR FUSION IO MANAGED CLOUD SERVERS! ~ *ICQ:* 243116321 - *TWITTER* - @WEBAIRINC - E-Mail: [email protected]

02-28-2007, 01:16 PM	#19
Sarah_Jayne Now with more Jayne Industry Role: Join Date: Dec 2002 Location: Los Angeles Posts: 40,077	I had that and they fixed it for me within minutes and added new security to help it stop happening and it hasn't happened since.

02-28-2007, 05:49 PM	#20
Vendzilla Biker Gnome Industry Role: Join Date: Mar 2004 Location: cell#324 Posts: 23,200	Webair rocks!! __________________ Webair died? Carbon is not the problem, it makes up 0.041% of our atmosphere , 95% of that is from Volcanos and decomposing plants and stuff. So people in the US are responsible for 13% of the carbon in the atmosphere which 95% is not from Humans, like cars and trucks and stuff and they want to spend trillions to fix it while Solar Panel plants are powered by coal plants think about that