July 7, 2014

So it’s finally happened

Passwords. Pah.

After running my blog on various virtual hosts and VPSs since 1998, my measures put into place to protect this site and the others on here were insufficient to protect against weak passwords.

Let’s just say that if you are a script kiddy and know all about press.php, tmpfiles.php and others, you have terrible operational security. There will be consequences. That is not a threat.

In

2 responses

palako

July 8, 2014

Best is to assume that you’re credentials are going to be compromised sooner or later, no matter how strong they are, and do something about it. Check out this plugin: https://wordpress.org/plugins/latch/
vanderaj

July 8, 2014

If anything, I will add Google two factor authentication. I’ve already demoted the account that was broken into to a normal WP user and rotated all the passwords.

Leave a Reply