| 6 comments ]

ARJ admitted to hacking into T&S in comment number seven here, and also re-hacked into T&S to confess it was him who hacked them.




Apparently whoever is supposedly the T&S admin is not exactly security conscious...or even conscious for that matter.

6 comments

Response to Jodi Stoddard said... @ May 8, 2006 at 10:49 AM

Thanks for reading DKL!

Anonymous said... @ May 8, 2006 at 11:58 AM

arJ is my hero!

a random John said... @ May 8, 2006 at 12:12 PM

I turned myself in when I learned that others were being accused of (or taking credit for) my work.

I hope that the minor defacements I posted were taken in the lighthearted spirit that they were posted in.

I hope that this episode has caused some blog administrators to be a little more security conscious. Security through obscurity isn't much security at all.

Since they have fixed the hole now I can divulge some details. My hack consisted of clicking on an "Edit Post" link from Adam Greenwood's bio to register for an account and then typing in a URL by hand to get to the Recent Links admin page. After that the problem was figuring out how to post something more interesting than a link to another site. I hope that others will follow my lead in posting rich content to the Notes From All Over section.

Response to Jodi Stoddard said... @ May 8, 2006 at 12:18 PM

ARJ, you should have sold the secret on EBay before divulging it. You could have made some filthy lucre.

a random John said... @ May 8, 2006 at 2:01 PM

Filthy lucre for website secrets is Frank's domain!

Out of curiosity, what would you have bid for it?

Response to Jodi Stoddard said... @ May 9, 2006 at 7:27 AM

Frank you say. Hmmm. Hellooo Frank.

I would have coughed up a $20 to start the bidding.

Post a Comment