Anatomy of a WordPress Hack
Submitted by Marek on Mon, 07/27/2015 - 08:36In which Faelix performs some forensics on a customer's infected WordPress website.
In which Faelix performs some forensics on a customer's infected WordPress website.
Triangles are solid and stable shapes, and for that reason they form the basis of our upgraded network. Our core network in Manchester Reynolds House looks a lot like a pentagram: no link is a single point of failure. Also, we are one of the few small ISPs to run more than one routing platform, which has isolated us from catastrophic implementation bugs if we had just one vendor involved.
In April 2014, after having lain in the code since December 2011, the discovery of the Heartbleed bug in OpenSSL was announced. Since then, it seems like barely a month has gone by without a major security hole in a major piece of infrastructure. Security seems to be getting worse rather than better. How come?
At Faelix, we love virtualisation technology. Ganeti is a virtualisation management system built by Google, and written in our favourite programming language, Python. This year we upgraded our hosting hardware, and when we did, we moved our virtual server hosting platform from our in-house script-based system to Ganeti. There were a few bumps and hiccups along the way, so this is how we did it.
Laura Ipsum!