Posted by: Rin
filed under: Web &Work
Tags: rantings, Web

 

 

 

30 comments to date:

 

1. xD, your website is so interesting that attract Chinese Hacker’s attention. Suggest you back up your data at certain time, and enhance security of your site. I’m developer in Shanghai.

   Tod
   March 26th, 2009, 1:23 am

2. 安慰一下两位好人，希望以后加强防范
   另外鄙视一下这个hacker

   tinyfox
   March 26th, 2009, 10:41 am

3. I wonder why he did it at all… you seemed to gain back control immediately. What did you do to the guy? Did you report him or anything?

   Really. Please tell. =/ You just got us visitors more curious…

   mary
   March 27th, 2009, 11:50 pm

4. 我了解主人懂汉语,也就不用英语了==
   我有必要澄清一下:
   1,我既没有hack, 更没有存心攻击且删除数据, 据我个人估计是您的服务器出现问题;
   2,我之所以访问到那站点, 也是从这个站点链过去的, 却发现出现WP安装, 一度以为是提供WP服务==
   3,我坐如上澄清,希望您删除涉及的相关个人隐私.对于所造成的后果我只能表示歉意.
   4,对于您在此事草率判断我hack您的站点表示遗憾.

   Dulce
   March 28th, 2009, 2:35 pm

5. @Tod, tinyfox:
   Thanks I’ll take your advice to heart.

   @Mary:
   Nope currently I did not do anything except writing on this blog.

   @Dulce:
   Since you know English, it will be much easier for me to communicate without typing in Chinese.
   1) There are many WordPress installations out there. And yet only mine has this problem? Rin-wendy.com is also using the same webhost and same webspace as with littlevault.com, but only littlevault.com has this problem?

   2) What you did, intentionally or not, is defacing another party’s website. You might think “Oh it is a server problem, I was there at the wrong time and it happened.” Truth is, no matter what intentions you have, the site is still defaced by you.
   It is like playing ball games at a neighbourhood field, you throw the ball a bit too far and break a neighbour’s window, do you still try to cover up the incident to say things like “oh it is the wind, the fengshui, the shape of the ball”?

   3)Both parties, me and you suffer loses. For me, my data and some potential clients and for you, negative reputation over a small sphere in the worldwide web. Cause and effect my friend, whether we like it or not.

   4)I do not view my handling of this matter as too rushed without putting much thoughts into it. Come to think of it, why didn’t you email me when such a major thing happened? Keeping mum about it only increases the doubt in the credibility of your innocence. If you deface some other major websites by accident, I am sure that you will be prepared to see a lawyer’s letter, not just a rant post on a personal blog.

   Rin
   March 28th, 2009, 3:57 pm

6. 1、我之前从来没遇到这种状况，所以在那种情况下，谁知道这到底发生什么了，而之后完成安装之后我才意识到这到底发生什么了。事后我和一位朋友说起，他也提到发生过有此问题也出现过（您也可以询问您的朋友是否也有过如此经历）。至于为什么这个页面没有出现问题，我想可能的因素会非常多。
   2、对，承认我的过错，但我的过错和您数据丢失没有关系。我希望您之前做过数据备份。
   3、我错误的执行了WP的安装，出于我的无知。但我不能为您数据丢失埋单。换其他人，也许也有像我这样并不清楚当时到底发生什么了，莫非也要背黑锅？
   4、我希望您可以冷静的考虑整个问题，草率的把一切错误归结于我，并且把某些个人隐私公布于众，是否有所谓“以暴制暴”的嫌疑。我没有在第一时间联系你，确实是我的错误，但您就不能事先质问我（我想很少有人这么诚实的交出mail地址）。
   5、我再次期望您正确的看待这个事件。我确信我在这个问题上不存在重大过错。

   Dulce
   March 28th, 2009, 4:34 pm

7. Is there anything we can do to people who hack into other people’s site? If the guy is in China, I can think of any available course of action that you can take.

   Adrian Lee
   March 30th, 2009, 12:06 pm

8. 天哪，太不可思议了。赶紧告诉wordpress技术人员。难道博客系统存在严重bug？

   fabin
   March 31st, 2009, 4:55 pm

9. @adrian lee
   from Rin’s latest comment, it appears that Dulce is the person who ‘accidentally’ hacked the portfolio site.

   I think Dulce is claiming something about both of them being victims of a bad host or wordpress installation or something.

   But don’t quote me on that. I don’t understand Chinese. =/ Just picking up context clues… *points at Rin’s comment*

   It seems that that is the reason Rin wouldn’t pursue the issue. =) Because the other party claimed innocence. he’s just ranting his frustrations on this blog post.

   mary
   April 1st, 2009, 12:14 am

10. Infact I’m a Chinese too, I don’t konw what’s the problem with rin’s blog but I hope everything will be OK.

    whatACoolDesign
    April 2nd, 2009, 10:14 pm

11. So Rin this is a web hosting issue you had with your and this other guys database conflicting with each other? Or was this some exploit in WordPress itself?

    Tollboy
    April 7th, 2009, 2:56 am

12. What is it with China and hacking American sites?!!

    I work for a web development firm and a hospital site, which is impossible to find unless you live in the area and know the name, was hacked and the DB was corrupted.

    Insane. Sorry to hear about your problems.

    Web Developer
    May 3rd, 2009, 12:19 am

13. My English is very poor!…
    So…

    我从Css vault链接到你这里!因为很喜欢rin-wendy这个风格!
    没想到你的博客被攻击了,而且是中国人所为
    (当然看到评论也不知道是否真有此事),
    我真的很抱歉,也只能说抱歉,希望您的数据留有备份
    也希望这件事能有个清晰的结果.

    抱歉,谢谢!

    耿培
    May 3rd, 2009, 12:40 pm

14. 根据Dulce说的，似乎是因为wp的config文件不存在，所以才被引导到了创建wpconfig文件页上了
    我相信这位Dulce是无心之过，毕竟没有哪位hacker在恶意攻击后还会留下email嘛，建议询问空间提供商，是不是数据库出了问题
    另外，如果是hacker的话，怎么可能跳出来来澄清这种事情呢？呵呵

    Ravanello
    May 6th, 2009, 1:06 am

15. I’m sorry to hear it. Good Lucky Forever..:)

    Richard
    May 9th, 2009, 10:11 pm

16. 没准是个误会，不过，中国的哥们们看来很喜欢你们的夫妻博客，呵呵
    我上次给你的老婆两条留言莫名其妙被删掉了，但是，我没有说什么失礼的话，这有点匪夷所思。
    我也想做一个和你们差不多的博客，但是限于技术有限，现在还没有办法完成。
    谁要是能有源代码提供就好了。
    没想到你们还懂汉语，很不错。

    Alex.Lee
    May 20th, 2009, 12:14 pm

17. Hello Rin,

    I’m sorry to hear such a hack. I don’t speak in Chinese but a quick translation of Dulce’s first comment says:

    2. I did visit the site there are also links from this site over the past, but found WP installation, once WP is to provide services that.

    If I trust what Dulce said, this a rare problem in WordPress, someday your database will get a problem and WP will throw the installation file in front of you.

    See this link: http://perishablepress.com/press/2009/05/05/important-security-fix-for-wordpress/

    I think adding .htaccess password to the wp-admin folder will solve the problem, so no one will have the ability to re-install your server!

    J Mehmett
    May 21st, 2009, 9:58 pm

18. I’m not good at english.
    Infact I’m a Chinese too,I hope everything will be OK.

    Distant Memory
    June 20th, 2009, 8:12 pm

19. 这里好冷。。=.=。。
    空间商是哪家。。。速度不错。。。
    情侣博客做得很成功，继续努力。。。
    各位继续。。。
    养成经常备份好习惯。。。

    yangpizhi
    June 20th, 2009, 11:17 pm

20. I think you should back up your wordpress files sometimes to prevent the lost of data if someone hacks your websites again. Wish you luck! Hope the site will be back!

    Trang
    July 10th, 2009, 8:58 am

21. Hi Rin,
    i really love your blog theme. Can i ask you share it to me and my wife. I think my wife will very happy when we use this time.

    Thousand thanks

    Nam Le
    July 23rd, 2009, 3:35 pm

22. came to you via the beautiful rin-wendy block and I am really shocked to hear that. Hope you will be back professionally soon.Let me know, when you are!

    All the best and Greetings from Germany!
    lothar

    Lothar
    July 24th, 2009, 6:39 pm

23. I just read somewhere that there’s a bug in wordpress that someone can just get to your wordpress installation script and reinstall your blog and then gain imediate admin access.

    You need to delete the install.php script inside wordpress after successful installation.

    If you don’t delete the file anyone will be able to reinstall your wordpress.

    victor
    July 28th, 2009, 7:03 am

24. Dulce说的是有可能的，当配置文件丢失的时候，WP确实会提示访客“是否重新安装”，况且如果真是他黑的，应该不会留下名字。

    目前有一些网站在使用贵站的主题，是否与这次的攻击有关？

    建议楼主冷静思考，并收集一下服务器上的日志，再详细的查一下。

    cuikai
    July 29th, 2009, 4:08 pm

25. 这是一件令所有人都很遗憾的事情

    o(╯□╰)o

    SW-27
    July 30th, 2009, 1:32 pm

26. I am sorry for you Rin… it should not happen to you..
    o(╯□╰)o

    vinoth
    August 2nd, 2009, 7:01 pm

27. 我是从https://rin-wendy.com/的连接来到这个博客的，在我看来这件事情并非黑客所谓，任何以为黑客不会采取这种攻击网站的形式。而对于Wordpress本身如果丢失wp-config.php文件而又存在wp-config-sample.php文件是允许重复安装的，再下一步会提示输入数据库，如果表和数据库信息是使用的你原来的信息，那么这个数据是不会丢失的。但是如果使用另外的数据库或者表的前缀不同，这样才会造成重装。即时被重装了，你的WEB数据依然存在，只是出于没有激活状态。从理论上来说Dulce是不可能知道你数据库信息的，所以在上面的推测都不存在。
    那么只有一个可能，你的web数据是完整，并且没有丢失wp-config.php，那么wordpress就允许直接输入博客名称和邮件进行安装，而进行安装必须是你的数据库中原来的表是不存在了，如果已经存在将不能进行安装，所以我认为是您的数据库出现问题。

    蓝冰
    August 10th, 2009, 6:35 pm

28. 另外，我很期待您的新版本。

    蓝冰
    August 10th, 2009, 6:38 pm

29. Hi Rin,

    sorry for you, an excellent idee to use a site for two persons.

    It is possible to use your rin and wendy themes for my own site?

    kind regards and good luck
    Michael

    Michael
    August 11th, 2009, 6:58 pm

30. hey, rin,

    it’s very ridiculous~~

    i know that guy who hacked your site…

    but from my perspective, he is not that kind of person, and additionally,he is not that capable…

    you can visit my web site, and find him.

    He always leaves comments at my blog.

    nooidea
    September 27th, 2009, 8:56 pm

 

Leave a Reply