Kemputing

This time, i think the godaddy setup has certain vulnerabilities, But in all fairness, godaddy is much more of a target than anyone else because they host so many wordpress blogs

In any case, being hacked again, i did the following, and up to now, it seems all the blogs that share this setup (With my custom made multi site wp-config.php file) seem to be working just fine

1- Deleted all the wordpress files excluding the uploads directory.
2- chmoded the upload directory and all it’s sub files to no writing mode (Yes, i can no longer upload until i find out what the root cause is)
3- uploaded new wordpress files and chmoded them to no write for everyone (Yes, when i need to update i will need to swicth, replace the files, and switch back again)
4- Created a script that deletes all the pending comments and run it every now and then

the reason behind the last has to do with the way wordpress decides to put comments on pending or publish instantly, maybe with some javascript to decode, a user can sneak in links within javascript that wordpress can not detect because they are not in link forms, in any case, i don’t know how the hacking is executed, all i know is that this way works up to now. and probably step 4 is irrelevant for the time being.

It seems that upgrading wordpress by uploading the new files in lace of the old was not enough, i ended up having to 1- backup my config file, 2- delete all files, 3- upload the new wordpress, 4- upload my old config file

Before that, simply updating wordpress to the latest version did not work. so again, the solution is to delete all wordpress files first (Keep your config file)

I am almost never late in updating wordpress, but every time i check cached pages of my website, i find hacked pages full of links, i update my system, and update my database, but i still get surprises very often

This time, it is not a blog post that was hacked, it is a PAGE, the default page that comes when you install wordpress, unmodified to me, but google can see otherwise, to google, it is a page full of links, something hackers do to get PageRank to there temporary websites where they sell counterfeit or questionable products, in any case, the need for my own blogging platform is real, and i should start working on it some time soon.

GoDaddy expands it’s ICANN accredited registrars to make the total 8 registrar accounts, this is so that they can improve on the capture / Domain Snatching abilities.

The reason is that Verisign imposes a limit on every registrar, a limit on how many requests a registrar can send in per hour, and in the 2 hours domains are dropped, every registrar has better chances of fulfilling back orders when they have more registrar accounts to send the requests from

So this explains why godaddy’s abilities to catch domain names once they become available again has improved, here is the list.

GoDaddy, Inc.
Blue Razor Domains, Inc.
Wild West Domains, Inc.
Go Australia Domains, Inc.
Go Canada Domains, Inc.
Go China Domains, Inc.
Go France Domains, Inc.
Go Montenegro Domains, Inc.

So if you find that a domain you have backordered with GoDaddy or one of it’s affiliates has been assigned to one of the registrars above, congrats, godaddy has secured the domain name.

It is worth noting that if a domain name is registered with GoDaddy, godaddy will undoubtedly and certainly secure it, but the natural lifecycle of the domain name will be different because GoDaddy will drop the domain early so that only they can anticipate the drop and recapture without a redemption fee. More information is available at Domain Generator => Expired Domains

Today, i was playing with some Domain names data, and from a list of all the domain names in the .COM and .NET database (including expired domain names since the beginning of the year), and a database of half a million words in a few latin based languages, i counted the most popular words in domain names.

Here, i will show you the list, maybe you could make use of it (if you are a domainer or something of the sort)

I also verified the data and made sure it is accurate or very close to it, you can do it yourself, just visit one of those words at statsinfinity, check the number of pages and multiply by 20 for the total number of domain names having that word !

In any case, i must say this is one hell of a surprise to me, i expected different words.

Some of the words i expected to find in the top 50 i did not find in the top 500 !

In any case, here is the data