Search:  

 
 
   News
newer
story category Spread Firefox Site Hacked Again
Shut down, will be 'rebuilt from scratch'
(old news - 10:23AM Tuesday Oct 04 2005)
tags: business · software
Our users point out that the Mozilla Foundation's Firefox promotional website SpreadFirefox.com has been hacked. "The Spread Firefox Team became aware this week that the server hosting Spread Firefox, our community marketing site, has been accessed by unknown remote attackers who attempted to exploit a security vulnerability in TWiki software installed on the server," says the Mozilla Foundation. "We have scanned Spread Firefox servers and at this time do not believe any sensitive data was taken, but as a precautionary measure we have shutdown the site and will be rebuilding the web site from scratch."

Related:
  1. Skype Sees Huge International Growth
  2. Zango (180Solutions) Closes Up Shop
  3. Android Climbs, But iPhone Remains King
  4. Uh, Mom? The Air Force Just Attacked Our PC
  5. Google Starts Discussion About Speeding Things Up
  6. Google Voice Invitations Going Out
  7. Google Announces PC Operating System
  8. Vonage: Apple Approved Our iPhone App
Forums » Spread Firefox Site Hacked Again
view: topics flat text 
Post a:

Cheese
Premium
join:2003-10-26
Naples, FL
clubs:

Wow.

Just, wow.

voiplover
Premium
join:2004-05-28
Portsmouth, NH

Re: Wow.

>>>........Pain in the A55......

Maarvin
Premium
join:2005-04-11
Denver, CO

1 edit

Re: Wow.

If their servers have security problems, what does that say about Mozilla Firefox software?

Dipsomaniac
Oh My, Yes.

join:2001-12-12
Toronto, ON

Re: Wow.

Pretty much nothing, actually.

sporkme
drop the crantini and move it, sister
Premium,MVM
join:2000-07-01
Morristown, NJ
·Optimum Online

said by Maarvin See Profile :

If there servers have security problems, what does that say about Mozilla Firefox software?
Nothing. Firefox isn't wiki software, nor is it web server software. One would imagine that would be obvious...

Anyhow:

»twiki.org/cgi-bin/view/Codev/TWi···tyAlerts

TWiki looks like good software to steer clear of.
Thaler
Premium
join:2004-02-02
Encino, CA

said by Maarvin See Profile :

If there servers have security problems, what does that say about Mozilla Firefox software?
I dunno. What do all the sites that've been hacked running IIS say about IE?

AtomicZero

join:2004-11-24
West Palm Beach, FL
nothing. since anything can be hacked.
clickie

join:2005-05-22
Monroe, MI
Congratulations on appearing clueless.

LinuxJunkie

join:2005-01-19
Cyberspace

Re: Wow.

Hahaha!

Vin DSL

join:2002-08-10
Gilbert, AZ

The only secure web sites in the shark-infested waters of the Internet are ones that are offline, and they took the appropriate course of action[s], and took their Wiki web site down. Yawn...

So, what else is new?

Well, for one, I've recently put Firefox on the back burner. Yes, I still do the 'nightlies', but Firefox is working so good these days that it's about as exciting as brushing your teeth.

My new 'love' is SeaMonkey 1.1 alpha. It's buggier than a lollipop in an ant farm, but it's *fun* to go over Mozilla.org and launch bug reports, et cetera. At least I think it's fun. Who can get excited about Firefox these days?

So, if Firefox is making YOU yawn, you're looking for some action, and/or you want to impress your Firefox friends with how cutting-edge you are, I strongly urge you to try SeaMonkey. Basically, it's a Firefox 1,5 core with a Mozilla GUI. It's so friggin' edgy it doesn't even have an official logo yet...

»www.mozilla.org/projects/seamonkey/

Be there or be square!

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1)
Gecko/20050929 SeaMonkey/1.1a

--
.:: Visit Vin DSL's Web Site | Try Vin DSL's Speed Test | Read Vin DSL's Blog::.

TKJunkMail
Enjoy the sun
Premium
join:2002-03-03
Avalon, NJ
·Sprint Mobile Broa..
·Comcast


3 edits

Spread FF site redirected to Mozilla

»www.mozilla.org/products/firefox···507&t=61

»www.spreadfirefox.com
SpreadFirefox is currently unavailable. We currently plan to make SpreadFirefox available again around October 15th. Keep checking in because it might be up before expected. We apologize for any inconvenience during this time. We assure you that we do this to provide you with the best service possible. For updates on what is happening, please visit MozillaZine (»www.mozillazine.org).
2 weeks to rebuild their site. Pathetic!!

Maybe they should use Windows Server 2003 instead of open source server code.;)
--
--
Join Red Room Forum
My Web Page

scooby
Premium
join:2001-05-01
Schaumburg, IL

Re: Spread FF site redirected to Mozilla

said by TKJunkMail See Profile :

Maybe they should use Windows Server 2003 instead of open source server code.;)
Did you read the headlines? Apache was not the issue. An application running via apache caused the problem. Like there arent a million ways to root windows server 2003 without any apps installed.
amungus
Premium
join:2004-11-26
America
clubs:

either way, 2 weeks is a long time! Couldn't they at least salvage most of it???

Why on earth they would do it "from scratch" is beyond me.

...That would be funny if server '03 were used to host an open source site.

I'm thinking they're taking the engineer "Scotty" approach and saying 2 weeks just in case, when in fact they'll probably have it up in less than a week. Spreading FF is kind of already happening without a website dedicated to it.

Either people want to try something, or they don't. I still use both IE and FF on and off. Mostly FF since ver. 0.8 since I was once, a long long time ago, a fan of Netscape.

geekamongus
Real Slump Quality
Premium,MVM
join:2004-07-27
Asheville, NC

Re: Spread FF site redirected to Mozilla

said by amungus See Profile :

I'm thinking they're taking the engineer "Scotty" approach and saying 2 weeks just in case, when in fact they'll probably have it up in less than a week.
The key to success: underpromise, overdeliver.
--
Geek.
bmn
? ? ?
Premium,ExMod 2003-06
join:2001-03-15
hiatus

said by amungus See Profile :

Why on earth they would do it "from scratch" is beyond me.
Partly because once a system is compromised, its no longer a trusted system. In the process of compromising the Wiki, its possible that the people responsible were able to find a way to install a root kit or a packet sniffer. Since the system can't be trusted, its best to blow everything away so that, even after you fix the exploit, you don't have some nastyware running on the system.
--
This space intentionally left blank...

ifarrell

join:2000-08-10
Willow Spring, NC
Well I guess Scotty never worked for Microsoft since they can't deliver anything on time.

Atha

@comcast.net
LOL.... no kidding.
WiZZLa
Insert Meaningless Text Here -Run 4a Mod

join:2003-11-09
Canada

Microsoft Hired Hackers?

Maybe the hackers Microsoft "hired" to try to exploit and figure out the bugs in IE7 are taking some extra incentive.

I'm kidding of course, but it is funny that after Microsoft said they were working with hackers to find vulnerabilities in IE7, the spreadFF site is hacked.

AcidDevil

join:2002-07-02
7th Layer

Re: Microsoft Hired Hackers?

said by WiZZLa See Profile :

Maybe the hackers Microsoft "hired" to try to exploit and figure out the bugs in IE7 are taking some extra incentive.

I'm kidding of course, but it is funny that after Microsoft said they were working with hackers to find vulnerabilities in IE7, the spreadFF site is hacked.
OK children the word of the day is "Conspiracy"
--
"I'n un vecchio palazzo qualcosa che non riusciamo a vedere si sta muovendo....."

Vvian Kalyss

join:2003-10-14
Stage 5.0
clubs:

Re: Microsoft Hired Hackers?

Get your tinfoil hat now... while stocks last.

AcidDevil

join:2002-07-02
7th Layer

Re: Microsoft Hired Hackers?

said by Vvian Kalyss See Profile :

Get your tinfoil hat now... while stocks last.
LOL;)
--
"I'n un vecchio palazzo qualcosa che non riusciamo a vedere si sta muovendo....."
WiZZLa
Insert Meaningless Text Here -Run 4a Mod

join:2003-11-09
Canada

said by AcidDevil See Profile :

OK children the word of the day is "Conspiracy"
Actually, it would be two words, "conspiracy theory."

AcidDevil

join:2002-07-02
7th Layer

Re: Microsoft Hired Hackers?

said by WiZZLa See Profile :

said by AcidDevil See Profile :

OK children the word of the day is "Conspiracy"
Actually, it would be two words, "conspiracy theory."
I stand corrected Sir
--
"I'n un vecchio palazzo qualcosa che non riusciamo a vedere si sta muovendo....."

BillRoland
Premium
join:2001-01-21
Ocala, FL
clubs:

Trust

Yet another security breach brought to you by the makers of "The Browser YOU Can Trust."
--
"Don't steal. The government hates competition."

Dipsomaniac
Oh My, Yes.

join:2001-12-12
Toronto, ON
·Rogers Hi-Speed

Re: Trust

Don't be an idiot. The breach was in the TWiki software. Don't you think the blame for that goes to the authors of that software, or are you just eager to piss on the browser for any reason?
--
Therapy is expensive. Bubble wrap is free.

DaDogs
Semper Vigilantis
Premium
join:2004-02-28
Deltaville, VA

Re: Trust

said by Dipsomaniac See Profile :

Don't be an idiot.
He can't help it, he is a natural.
--
How can I improve my WiFi signal?
AquaVita
Premium
join:2003-01-14
Garland, TX

2 edits
clickie

join:2005-05-22
Monroe, MI

Re: Trust

Did your desktop theme come with a membership to NAMBLA and a limited edition litho of the Wizard of Oz?

Sheesh.

sbrook
Premium,Mod
join:2001-12-14
H0H 0H0
Another recall brought to you by Ford ... what does that say for the Corolla?

My word the logic some people use is beyond belief.

dadkins
Can you do Blu?
Premium,MVM
join:2003-09-26
Hercules, CA

What?

No Imaging of the servers?

redxii
too big to fail
Premium,Mod
join:2001-02-26
Texas

Host:
/dev/null
Broadband Tweaks
Suddenlink
ISDN
Fiber Optic

Re: What?

said by dadkins See Profile :

No Imaging of the servers?
No need. Open source software is reliable and unhackable.
--
Microsoft Windows 2000/XP Security: Some Assembly Required.

HardwareGeek

join:2003-11-15
Brooklyn, NY

Re: What?

If that were the case so many server admins wouldn't find them selves patching and configuring their firewall software.

Only a Fanboy who pretends to have a clue would claim a software is unhackable.
--
Email/MSN: Michael at hardwaregeeks.comAIM: MikeR35292

NonFanboi

@direcpc.com

from:
spicerun See Profile
thumbs down from:
spicerun See Profile

Re: What?

And only a Fanboy would also claim that IIS, IE, and Windows are superior to their openSource counterparts. They're all viable and they all have vulnerabilities.
teddy

join:2002-02-20
Kingston, ON
You can't honestly have missed the sarcasm...
--
»www.chemicalfusion.net
Thaler
Premium
join:2004-02-02
Encino, CA

said by dadkins See Profile :

No Imaging of the servers?
I don't think imaging is the problem, but more of a fact of security. They could easily re-publish the same site, but then they'd be vulnerable to the same ol' s*** again.

Development of a new site that's not reliant upon unreliable software would be needed.
bmn
? ? ?
Premium,ExMod 2003-06
join:2001-03-15
hiatus

said by dadkins See Profile :

No Imaging of the servers?
Its difficult to image servers that busy... Once the image is completed, you already have an image that's outdated because Wikis and forums are constantly changing. Images are only really affective when you have a system that doesn't have a lot of constantly changing information.

As well, if you were hacked, reimaging the server would put it back up in a vulnerable state.
--
This space intentionally left blank...

See 20 replies to this post

Portmonkey
scurvy
Premium
join:2004-04-09
Southern IL

LOL


See 6 replies to this post

knightmb
Everybody Lies

join:2003-12-01
Franklin, TN
·AT&T DSL Service

OK, for all the non tech people here

Just to explain, this has nothing to do with the Firefox Browser being open to TWiki software exploits. That's like saying "Because your car outside is Red, it means your Microsoft Office Word has an exploit in it". Those that post about how everything was hacked are just making the rest of us laugh at you. Please save yourself from posting silly comments as such. For those that want to be silly, then carry on, I enjoy the humor.

AnnaS8

join:2005-05-26
Annapolis, MD

Re: OK, for all the non tech people here

said by knightmb See Profile :

Just to explain, this has nothing to do with the Firefox Browser being open to TWiki software exploits. That's like saying "Because your car outside is Red, it means your Microsoft Office Word has an exploit in it". Those that post about how everything was hacked are just making the rest of us laugh at you. Please save yourself from posting silly comments as such. For those that want to be silly, then carry on, I enjoy the humor.
OMG! OMG! OMG! OMG!...AHHHH!!! I have a red car. LMKAO!!!

insomniac
Oh Yeah
Premium
join:2002-09-22
Naperville, IL
clubs:
·AT&T Midwest

I like Firefox as much as the next guy, but...

... the TWiki vulnerability is more than two weeks old. One would expect the administrators of such a public Web site to be more vigilant about security.
--
If everything seems to be going well, you've obviously overlooked something.
GHz

join:2002-01-02
Needham, MA

Re: I like Firefox as much as the next guy, but...

I'm no security expert, but:

They could have patched the server 1 day after news of the exploit was made available. However, by then it could be too late... the exploit was used to gain root access, and once that's done they've got to rebuild from scratch to be 100% sure that the site is secure.

-G

HardwareGeek

join:2003-11-15
Brooklyn, NY

This just shows

That when you have an open source browser and you are busy patching all the flaws that have been poping up lately (a number that rivals IE) its hard to keep your server software up to date. Because every ones busy patching FF.
--
Email/MSN: Michael at hardwaregeeks.comAIM: MikeR35292
neo456

join:2005-05-14
Erlanger, KY

Re: This just shows

Leave the Pope out of it. He has nothing to do with all flaws POPPING up lately.

bit_junkie

join:2004-05-04
Maricopa, AZ

Re: This just shows

said by neo456 See Profile :

Leave the Pope out of it. He has nothing to do with all flaws POPPING up lately.
I about pi$$ed my pants when i read that,
Thank You for the laugh
Caiphus13

join:2005-07-14
south africa
Oh too cool... thanks for spotting that one.:D

Ryan F
Take Back The Web
Premium
join:2002-10-18
Alexandria, VA

said by HardwareGeek See Profile :

That when you have an open source browser and you are busy patching all the flaws that have been poping up lately (a number that rivals IE) its hard to keep your server software up to date. Because every ones busy patching FF.
What an ignorant statement. Read: Software Developer != Server Administrator. Spreadfirefox isn't maintained by any of the core developers.

quote:
(a number that rivals IE)
Oh yes, because 24 is much greater than 86. Heck, IE has almost 24 unpatched vulnerabilities.

Time
Premium
join:2003-07-05

Jeez

And some people claim Microsoft is bad?

Scree
In the pipe 5 by 5

join:2001-04-24
Mount Laurel, NJ

Re: Jeez

Most people claim everything is bad, so as Seinfeld would say, "That's a shame"

a

@qwest.net
And some people claim Microsoft is bad?

Microsoft isn't bad, it's customers are just too illiterate.

Blackraven
I Am Always Left
Premium
join:2005-06-27
USA.

said by Time See Profile :

And some people claim Microsoft is bad?
Are you a hacker? Just curious.

Augustus III
If Only Rome Could See Us Now....

join:2001-01-25
Gainesville, GA

so

Being so "secure" does this mean it ran microsoft or some unknown copy of unix?

Dipsomaniac
Oh My, Yes.

join:2001-12-12
Toronto, ON

Re: so

The OS was not the problem. RTFA.
jsouth
Jsouth

join:2000-12-12
Wichita, KS

What I think

I have no bias for or against Firefox or IE. I just think that a company that touts security in it's browser should know how to secure their own web site regardless of the software run on it.
--
BTK is guilty!!!!

Rob
In Deo speramus, God Bless the USA
Premium
join:2001-08-25
Kendall, FL
·Comcast

Re: What I think

said by jsouth See Profile :

I have no bias for or against Firefox or IE. I just think that a company that touts security in it's browser should know how to secure their own web site regardless of the software run on it.
Their business is Browsers. Not OS.
--
YourIP.US - Quickly Locate Your IP!
LiveWhois.Net - It's Never Been So Easy!
RR.CX My Blog..
jsouth
Jsouth

join:2000-12-12
Wichita, KS

Re: What I think

True, but they should still know something about OS security since the browser ties into that.
--
BTK is guilty!!!!

Rob
In Deo speramus, God Bless the USA
Premium
join:2001-08-25
Kendall, FL
·Comcast

Re: What I think

said by jsouth See Profile :

True, but they should still know something about OS security since the browser ties into that.
And I'm sure they do know about the Windows Operating System. But their system was running Redhat with Apache 2.0.52
--
YourIP.US - Quickly Locate Your IP!
LiveWhois.Net - It's Never Been So Easy!
RR.CX My Blog..
jsouth
Jsouth

join:2000-12-12
Wichita, KS

Re: What I think

Yes, but a browser works with that. So I still think they should know at least the basics.
--
BTK is guilty!!!!
Forums » Spread Firefox Site Hacked Again


Sunday, 22-Nov 05:40:33 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole