* Links which are not safe for viewing at work are marked as “NSFW” *
The gist:
My buddy Rudy runs one of the many porn site YouTube clones, xxxuploads.com (NSFW). On Easter Sunday he woke up to all sorts of fun. His two media servers had been hacked and over 7500 videos were deleted. The only thing left on those subdomains were index pages entitled “STOP PORNO” with the below message and Muslim Prayer Call video embedded from YouTube:
In the name of Allah, Most Gracious, Most Merciful
No big deal. He could surely just restore everything from his backups, right? Wrong. His admin set them up wrong, so nothing had ever been backed up. Well, couldn’t he just do a restore? Nopers, those boxes were setup with ext3 filesystems. So, he had to start from scratch and all the sites that have pre-hack videos embedded from his site are screwed.
How it was done:
The sysadmin went through the logs and there was no evidence of anyone logging in via SSH or anything like that. His best guess is that they gained FTP access via a proftpd exploit.
Who did it:
Could it have just been some pasty white kid from Philly who wanted to make it look like holy war was being waged against porn? Sure. That’s not where my money is at though.
Personally, I believe that it was Muslim extremists going all Jihad on Rudy’s ass. This wouldn’t be the first time something like this happened. Remember when those Mohammed cartoons out of Denmark managed to piss off those guys? They hacked a bunch of sites over that nonsense. Hell, even a BotNet was linked to a hacker group in the Middle East a while back.
Why this was a lame hack:
Since they only gained access to the media servers, the In the name of Allah text and video was only on the subdomains of xxxuploads. Those subs were/are strictly used to serve videos from, so no one saw those pages besides Rudy and a handful of webmasters he pointed in that direction. If the “hackers” in question were smarter they would have…
1. Done everything the same - minus tossing up those index.html files.
2. Ripped that prayer video from YouTube, added an intro with their Stop Porno, Praise Allah diatribe, and uploaded it to both servers.
3. Tossed together a simple .htaccess file so that all requests for .flv files (flash videos) would get served the prayer video. And, uploaded that bad boy to both servers also.
If they had done that, every video page on xxxuploads would have played that video. Plus, all the outside sites with embedded videos would have been tuned into the same thing. That would have been a cool hack. The backups being setup incorrectly and ext3 filesystems being used was just a lucky day for them. Otherwise that hack would’ve just killed off all those evil evil bad bad porn videos for a few hours at most.
Additional coverage:
Fleshbot (a Gawker Media blog) covered this hack the day after it happened, but they weren’t aware of the Jihad angle: XXXUploads Gets HaxXx0r3d (NSFW).
Related Articles
39 brave souls have commented on this post
so porno is worse than killing EVERYONE who does not believe in Allah?
lol, did you just give people an exact recipe for hacking your friend’s site???
And why am I not surprised that the first comment is an anti-muslim comment?
re: Daniel
Her comment was Anti-Muslim Extremist. Big difference there. Your comment was actually the Anti-Muslim one since you implied that all Muslims want to kill everyone who does not believe in Allah.
And, no. I gave the recipe for hacking his old setup. He’s using completely different stuff on those boxes now - much more secure stuff.
I’d say “when you assume you make an ass out of u and me”, but you always just make an ass out of yourself.
hmm, maybe you need to re-read what I said. I made no mention that Muslims want to kill everyone. However, Liz implied such a thought. I am a firm defender of Muslim civil rights in America, and believe the Islamic faith to be one of peace. Most Americans, on the other hand, have a completely bigoted viewpoint on the subject, and I can see that Liz fell into that category.
And I have yet to make an ass out of myself. Simply standing up with evidence and logic keeps me from doing that.
By the way lolo, thank you for dropping a link to another good source of free wank material. My old sources were getting dry.
hmmm my nuts… This blog entry made no mention of any Muslims besides the extremists. So, when she said “so porno is worse than killing EVERYONE who does not believe in Allah?” you assumed she was a shitbag and referring to all Muslims and I assumed that she was referring to the ones mentioned in my blog.
You certainly have low expectations of people. Isn’t it funny how people project themselves / values on others. You must really be miserable.
Actually, studies have shown that Americans automatically associate Muslims with negative ideas and stereotypes. You did so when you claimed that this was an attack by “extremists,” when most likely ti was simply done by some 14-year-old from his mom’s basement.
And where did she get the idea that they were calling for death? I didn’t watch the video, so it may have been something on there, but more than likely it was her association of “muslim” with “terrorism.”
Typical bigotry. Happens to be one of the main topics I studied in psychology when I was in grad school.
I guesstimated that it wasn’t a 14-year-old from his mom’s basement based on a good handful of reasons. I guess you’re going to tell me that neither of us are qualified to talk about hacking now - just like legal stuff. lol
Muslim extremists = the nut jobs who want to kill everyone who doesn’t get down with Allah. At least that’s the label those douches have been tagged with.
I <3 the “I went to college” BS. It sure makes you look smart. haha
P.S. you’re not going to build up traffic to your blog by stirring up shit in my comments all the time. You can hang that one up.
Who said I was trying to make myself look smart. I’m just telling you that when I through out the “bigot” line, it means something and is coming from someone who knows what he’s talking about. And no, I’m sure you know more about hacking than me. I have much better things to do in life than learn the utterly boring life of computer programming. My penis just isn’t small enough to justify learning that crap.
And why the fuck would i want to drive up my traffic with YOUR readers? Last time I checked the majority of your readers were camped outside the methadone clinic hoping to score free pills.
Keep in mind other extremist groups exist and not all of them are Muslim extremists. Theres some Christian Extremists that could be doing this to possibly start a race war. Christian Identity is a group that burns Adult Books Stores.
Exactly. Thank you Chris.
damn daniel…you really do like the taste of lolo’s nuts don’t you? by the way, psych majors are fucking retarded. you people couldn’t map out the human psyche if your life depended on it. your “degree” don’t mean shit, so stop acting like a pretentious hippie Sally, it doesn’t matter how much you troll for blog traffic, your writing sucks.
Hmm, whenever there is bigotry, Id shows up as a hairy cheerleader…
This is a neat little pattern I’ve observed.
Lolo, upon a second reading it seems like you have injected a large amount of bigotry into your post. The term “jihad” alone is completely misused here, since you are basically using the stereotypical idea that jihad means “holy war.”
re: Daniel
“while the lower jihad is known as the literal fighting in the cause of god” - Wikipedia
When you mention Jihad in today’s western world, you can bet your sweet ass that’s what people are talking about.
I killed off all the links to your blog and edited your name down to Daniel S. If you want to continue to post comments in my blog, you will follow that lead. I’m all for letting peeps see how retarded you are. I’m just not going to put up with your dumb ass and let you benefit in any way from it. Don’t like it? Go cry elsewhere.
Re: Chris Version 2.0
Say out loud what you just implied…
“It could have been Christian Extremists pretending to be Muslim Extremists who hacked that porn site in order to start a race war.”
It could have been Big Foot or Aliens too, I guess. :P
Just because an answer is obvious doesn’t mean it’s wrong. To steal a line from Grey’s Anatomy, Scrubs, and probably every other medical show every made:
When you hear hoof beats, do you think “Zebra” or “Horse”? Horse naturally. And, which is most likely correct?
give me an “p”, give me an “r” give me a…oh fuck it. it’s going to take way to long to cheer out pretentious, hypocritical, miss-lead, worthless psych-major…by the way, did you even graduate? not that it matters. i wasted some time(about 2 min…tl;dr)reading the crap you think is intelligent and worthwhile, and i have some advice for ya sally…give up. give up on writing, give up on trying to understand things that you have no clue about(but yet you like to pretend you do), in fact, just give up on life. that way at least you won’t fuck up your son’s perceptions (and ultimately his chance of becoming at least semi-intelligent) anymore than you have by passing on your useless genetics to him. that poor, poor boy. you want bigotry? FUCK YOU WHITE BOY! now at least the terms you throw around as a vauge attempt to make you look socially concious can have SOME application.
There is at least one authoritative discussion of historically recent devolution of a significant part of Islam into radical fundamentalism that would do Fallwell and Robertson proud. It also covers the parallel corruption of the idea of Jihad from one of personal struggle toward the current radical Islamist groups’ (Salafist/Wahhabi Sunni and some Shia sects such as al Sadr’s Mehdi Army) idea of “Holy War” (a’la General William G. “Jerry” Boykin).
Point is that the problems of radical Islamism, including such things as “Holy War” interpretations of Jihad, that we see these days are relatively novel, and corrupt, forms of Islam. And that this shift away from historical Islamic belief is closely paralleled by a similar corruption of orthodox Christianity by novel doctrines which have supported the growth of radical Christian fundamentalism and the rejection of much of Christian tradition by some who call themselves Christian and would like to be seen as such. Both houses are in need of a thorough cleaning.
The citation for the article cannot be given in html form, of course. But check “Scott Ritter: Calling Out Idiot America” at Truthdig. It gives essential perspective.
Doesn’t that fucker EVER do anything but follow you around the web and harrass you?? Damn, he must really be obsessed with you. Maybe if you let him lick your balls just once, he’ll be satisfied and go wank some place else.
/thinks it’s funny that Pengies claims to be a psych major…
lol. lolo your obvious jealousy of me never ceases to amaze.
But again, if you are going to use Jihad even here in western culture, make sure that its usage is sensitive to the Muslim population.
You are a funny little bigot though.
LOLz… Jealous? If I were you, I’d probably shoot myself in the face with a flare gun.
sarcasm
Oh no, you caught me. I hate blacks, Jews, Mexicans, Irish peeps, Germans, and ummm… Purple dinosaurs.
/sarcasm
At least you admit it. That’s the first step to healing. To boost your ego though, I dedicated an honorary award just for you. I think you more than earned it with THIS beautiful web entry…
daniels;
even though your son can’t speak in full sentences yet, he wanted me to tell you that he hates you…and to quit touching his penis.
Id, you try too hard. I got bored of you on your first post, and here you are spinning your wheels yet again.
Now put your head back in lolo’s lap and let the adults talk please.
stop projecting your character defects my way sally. your reasoning and logic is in all actuality no differant than rush limbaugh’s, you just bat for the other team. like rush, you take the smallest sentense(re:”so porno is worse than killing everyone who doen not believe in allah”) and blow it all out of proportion, making wild accusations of hatered and bigotry that don’t even exist, just so you can make a call to arms against those you disagree with. you and the big guy are one in the same…that is why nobody takes you seriously, and why you have no readers. and seriously, quit touching your son’s penis. there are laws against that(and please, don’t start arguing about how the “spirit of the law” declares that you can)
you tire me, so i’ll let lolo get back to making you look like a complete jackass. sweet dreams sally.
Yawn. Thank you for leaving Id. I like to be awake when I flame people, and that’s not possible when you are drooling out the same cliched insults you’ve probably been throwing around since grade school.
Since lolo seems to be away at the moment, let me take this opportunity to tell all of his readers about one of the greatest blogs on the internet. Danielspengies.com has it all, from graphic porn, to wonderfully logical, well written, and well thought out political analysis. So if you are interested in kicking dud blogs such as THIS ONE in the ass, join the 5 or 6 people who already read the DANIELSPENGIES.COM WEBLOG, and begin an experience unlike any other
That’s danielspengies.com. You’ll know it’s danielspengies.com, because the webmaster actually knows to make entertaining blog posts, unlike lolo, who mostly types with his penis!
DANIELSPENGIES.COM, where sanity goes to die.
And now for our jingle:
DANIELSPENGIES.COM. We love danielspeniges…AND THAT’S ALLLLLLLLLLLLLLLLLLLLLLLLLL
What’s that web address again?
/I’m around - just busy.
That would be danielspengies.com. Danielspengies.com, where all your dreams go unfulfilled and the sex only lasts a few seconds.
typical pysch major. so blinded by the curse that is the human ego to realize that no one reads his blogs because they arn’t worth the paper from the worthless sociolist panthlets he copies them from. by the way, your mother and the rest of her book club that she pays weekly to read your pathetic attempts of what you consider writing doesn’t exactly count as “devoted readers”
(damn, that was some pretty shitty sentense structure, run on sentenses gallore!you must be rubbing off on me daniel, pretty soon my coments will take the form of your blogs and will start to rattel on endlessly about subject matters that only require a sentense or two because it’s pretty much commen knowledge) (oh shit, it’s already starting to happen!)
what can i say, i couldn’t stay away…i’m a chubby chaser, and you sure do got a perrty mouth sally.
So the other day I thought I would go on the internet and jerk off to some free porn but then BANG I get jacked up with some jihad shit! I really didn’t know what to do so I googled jihad porn and guess what I found? Islamic girls gone wild! So after three to four hours of some good quality jihad spanking time I decided to start searching the world wide web for some islamic mail order brides. Little to find out I could not find any. So my question to you is what is closer to Islamic girls? Russian girls or the ones who like to fuck horses?
Id, you are becoming my biggest fan. I always knew it was just a matter of time before you tried to suck my e cock.
You are still boring though. Try being original next time.
It isn’t e-cock you dumb ass, its e-penis and pfft the only one who seems to want to suck your e-cock is a pirhana, as in rip it off.
Hmmm, where do I start. Well, I could start by saying Lol, id, and Faith are the biggest bunch of no - nothing cunts on the planet. Holy shit you losers. You have nothing better to do than fight with Daniel over who’s got a bigger dick? Jeeeesus, we all know that Spengies does. I can’t even stand to read what you have written. You are a bunch of fucking computer homos. Danielspengies.com is one of the most honest, well written blogs on the computer. Maybe you’s should check it out sometime. See what a real blog looks like. Hahah ghetto webmaster, grrreat name. You are probably one of those creepy Christian bible fuckers. Can’t wait to see you in hell you fucking loser.
ah daniels, it’s so nice to hear from your mom…it’s been like 27 years or something. she still go ass to mouth?
Ok… The comment section is getting too big / stoopid again. About to close it.
/if anyone has any legit questions about this story, shoot an email my way.