~*~*Hackers Deface Thousands Of Domains*~*~

I ran across this article while scanning the web for newz. Thought it was pretty interesting. Anyone want to discuss it?

http://www.newsbytes.com/news/02/175343.html

its more like script kiddys deface websites not HACKERS!!!

Sheesh.........those who deface websites are really quite lame.

Though the article did mention that the hosting company used IIS.......just another reason to use Apache, I suppose......

It would be interesting, though, to figure out how often IIS domains were cracked, as opposed to Apache or other domains. Adjusted for total number of servers, naturally.

Its sounds like those kids are back at it.......

Hmm.. i guess Mr. Admin 4got to double check.. :cool:

I have formed a little theory on the matter. I think that there are more security bugs in IIS than in Apache because it's not developed as open cource, but this is just part of the reason.
THe major reason, I think, is that traditionally, unix has required quite some knowledge to admin. With this comes the security thinking that makes admins look out for patches and bug reports and the like.

Any idiot can configure IIS and so doesn't necessarily have the security thinking. I mean, it is still possible to find IIS that are vulnerable to ::$DATA and that was like three years ago the report came.

I recon quite an amount of the admins for different IIS-servers out there doesn't care much for service packs, patches or in the case of Microsoft - pathces for the patches.

Just my two cents though

Cheers

Quote:

---

Originally posted here by KublaiKhan
It would be interesting, though, to figure out how often IIS domains were cracked, as opposed to Apache or other domains. Adjusted for total number of servers, naturally.

---

Here's a part of the statistic, Kublai:

The Alldas defacement archive counted by OS:

Alldas OS statistics

Cheers,

BrainStop

Hrm........kinda what I expected........

17927 time(s)
a "Windows"
Host has been defaced, which is 59.767 percent of all archived defacements

Followed by Linux, with 20%, and "Unknown", with 9%.......

Interesting, though, that Novell is at the bottom of the list. 'wonder what they've done right, that they don't get cracked? Or is it just that nobody uses it much?

That´s some sad reading BrainStop
But I can help to wonder if any of the companies in the article asked on what platform the servers used. Or for that matter if they asked Verisign if it was them in person that took care of the servers.
I do think that the company should´ve informed their customers about this but it´s a two way street and asking don´t cost anything.

Yet they still call the defacers "hackers"! ARRRRGGGHHHHHHH!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

SSJVegeta-Sei

Ahhh, I can't remember the link right now, but I am sure someone will be generous and give it...I saw it earlier today.

Anyway, Kublai, you know what makes it even more amazing. If you look at the statistics about what servers are out there. Most web servers are apache based, either Solaris or BSD. You notice that both of those are down a little ways. Other then the BSD's, those that got less then 1000 defacments are really not that common. Novel may only have 3 defacements, but considering there is only 1 novel webserver...(ok, I am kidding about that part). Anyway, that is a big part of it, is how often do you see the machine. Windows is not the most common server though, and it still has 11000 more then the the next highest (linux) server.

Heh, Did they at least leave a message that was worth reading and not 'j00 sux i own j0o'

People just want to get their names out. To bad it is all the idiots which give the hacking community a bad name. Maybe someday “good”, “true” hackers will be known for making a difference. A good difference of course.

Are "Patriot" hackers lame? I first thought it was a good idea to take down anti-US sites and pro-taliban sites, but people should have their own opinion....