Posted on Leave a comment

I see suspicious activity!

Time to take pause from programming and do a quick upgrade to the blogs. Looks like someone is trying to do bad things. Alright. Everything is backed up. Next step, remove users that are obviously malicious. I have turned off allowing users to register since I don’t currently use features that would ever require you to be logged into RealityMe. If I accidentally deleted your account and you want to be registered at RealityMe just let me know. Deleted 40 megs of data that had accumulated in wp_sk2_spams and wp_sk2_logs. I have 52078 comments in wp_comments marked as spam constituting roughly 34.1mb. I can find no dependencies between the wp_comments table and any other data so those comments are being deleted. As an aside, I have 3770 comments that are approved constituting 1.8mb of data. I used "delete FROM wp_comments WHERE comment_approved = ‘spam’" so if your comment was inadvertently marked as spam and I didn’t catch it, my apologies. My final step today is to upgrade from 2.6.2 to 2.6.3.

Posted on 1 Comment

Has my Google Calendar been compromised?

This morning as I looked at "My calendars" of my Google calendar I noticed one I did not remember creating. Not in "Other calendars" but in "My calendars" sat Paddy Daly. Since I quit using Google Calendar regularly a while back, I decided to see what notes I’d made about this Paddy Daly calendar I created. But I didn’t create it! And the creator made no notes. The calendar creator is punapaddy at a yahoo.com email address and a Hawii timezone. This makes no sense. There appear to be no events on the calendar either. I do seem to have the ability to delete the calendar.

Who is Paddy Daly?

Paddy Daly, {1888-1960} sometimes referred to as Paddy O’Daly, served in the Irish Republican Army during the Irish War of Independence[1] and subsequently held the rank of Major-General in the National Army in the period 1922 to 1924. [Source, Wikipedia]

So is this some form of vandalism? Political protest or activism? How did it get on my calendar and what security hole in Google Calendar do I need to close?