{"id":412,"date":"2012-05-23T22:55:34","date_gmt":"2012-05-23T14:55:34","guid":{"rendered":"http:\/\/www.brainfart.sg\/?p=412"},"modified":"2012-05-23T22:55:48","modified_gmt":"2012-05-23T14:55:48","slug":"why-we-cant-have-nice-things","status":"publish","type":"post","link":"https:\/\/www.brainfart.sg\/index.php\/2012\/05\/why-we-cant-have-nice-things\/","title":{"rendered":"Why we can&#8217;t have nice things"},"content":{"rendered":"<p>Brainfart.SG was taken down for almost a month since last April, due to my VPS being exploited. The reason I believe is due to a <a title=\"Setting up PHP-FastCGI and nginx? Don\u2019t trust the tutorials: check your configuration!\" href=\"https:\/\/nealpoole.com\/blog\/2011\/04\/setting-up-php-fastcgi-and-nginx-dont-trust-the-tutorials-check-your-configuration\/\" target=\"_blank\">misconfiguration<\/a> of the webserver.<\/p>\n<p>Somebody managed to install a backdoor in the VPS and then installed a script to launch a DoS attack.<br \/>\nMy VPS was only suspended at first, but after recovering my VPS, it was again compromised to launch DoS attack. Which resulted in me being banned from BuyVM.<\/p>\n<p>Since then, I have moved to <a title=\"Virpus\" href=\"http:\/\/virpus.com\" target=\"_blank\">Virpus<\/a>\u00a0and have spent a considerable effort to harden the VPS.<br \/>\nI&#8217;ve installed <a title=\"APF\" href=\"http:\/\/www.rfxn.com\/projects\/advanced-policy-firewall\/\" target=\"_blank\">APF<\/a>, <a title=\"rkhunter\" href=\"http:\/\/www.rootkit.nl\/projects\/rootkit_hunter.html\" target=\"_blank\">rkhunter<\/a>, <a title=\"ZB Block\" href=\"http:\/\/www.spambotsecurity.com\/zbblock.php\" target=\"_blank\">ZB Block<\/a>, among other things. And not to mention closing the security hole for nginx + PHP.<br \/>\nLooks like I&#8217;ll have to be on an active lookout for vulnerabilities and also solutions&#8230;<\/p>\n<p>It seems like in a perfect world, you can leave your doors unlock at night and you also need not worry about your webserver much. But since we live in a\u00a0imperfect\u00a0world, we&#8217;ll have to lock up our doors, harden our webservers, deploy SSL for our web connections, etc.<\/p>\n<p>And this is why we can&#8217;t have nice things.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Brainfart.SG was taken down for almost a month since last April, due to my VPS being exploited. The reason I believe is due to a misconfiguration of the webserver. Somebody managed to install a backdoor in the VPS and then&hellip; <a href=\"https:\/\/www.brainfart.sg\/index.php\/2012\/05\/why-we-cant-have-nice-things\/\" class=\"more-link\">Continue Reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"aside","meta":{"spay_email":""},"categories":[17],"tags":[81,82,51,54,83],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p1T66h-6E","jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/posts\/412"}],"collection":[{"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/comments?post=412"}],"version-history":[{"count":3,"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/posts\/412\/revisions"}],"predecessor-version":[{"id":415,"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/posts\/412\/revisions\/415"}],"wp:attachment":[{"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/media?parent=412"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/categories?post=412"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.brainfart.sg\/index.php\/wp-json\/wp\/v2\/tags?post=412"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}