Anatomy of a hacking

Well Campbell found the site last night that had been compromised (running phpbb). Somehow, not sure how, it's then trawled through the file system on the server looking for files that were group writeable (all ordinary users are in the same group, so any group writeable files are writeable by everyone else on the server). Generally files shouldn't be group writeable by default, however MT in its default wisdom seems to generate all its files as *world* writeable. *sigh* It could just be the way directories get setup by default, will have to have a play with it - sorry if I break anything in the process :) Fortunately Campbell was online last night to mount the backup partition for me, and I got back my non-blog files that had been overwritten. If anything, it's a good motivation for me to clean out my home directory, as it's totally full of crap.

And on that note, I'm off to bed.