Recent Posts

Ugh, spent last night removing malware from my website

Turns out I had accidentally left a folder world-writable on my shared host and another user's account had dropped a shell php file into it, and that infected the rest of my php files.Had a bit of fun dissecting the malware after I had cleaned it up, though. The shell lets the attacker run arbitrary shell / php commands as well a connect to and query mysql, and the base64-encoded block of php that was inserted into all my PHP files checks the user-agent for MSIE, and then modifies the output buffer to inject a <script> tag after the <body> tag that links to a file that infects MSIE users.

Wow, the new Google+ app is ugly! The new app icon sucks and the number in the notification…

Wow, the new Google+ app is ugly! The new app icon sucks and the number in the notification box isn't centered. But at least they've added a compose button to the dashboard activity so you don't have to hit Stream first to post something. Also, why can't I use the native photo picker when posting? The instant upload is great, but I can't post anything from another album on my phone.