Directory owners using DreamHost (very important!!!)

Man, dreamhost REALLY f'kd up on this one.

If you are using dreamhost, there was a security breech a day or so ago, and if any of your directories and or sites are hosted on them, please DO check your index.php and index.html files. Not just in the root, but also in all subsequent folders within the folder structure.

You will most likely see an 'edited' date of 6-06-2007 or 6-07-2007.
What has happen is they have either replace and/or edited the index.php file and most likely have added an additional index.html (if it didn't exist) or have replaced that one too.

Jeez, this is going to get messy. Just be sure to check on your directories.

 

Don't tell me that the next thing to happen is out of the woodwork will:-
Pop up a QBC Hosting Company
Not saying that is the case here of course

 

I HOPE NOT!

I'll make the list of Trusted Web Hostings then

Dreamhost isn't too new is it?

 

FYI - If you want to find files modified on a certain date you can use the following command on linux shell.

cd /into/site/root
ls -lR | grep Jun..6

 

Thanks for the heads up Anon.

Dreamhost says they emailed those affected, but it is a good idea to change passwords anyway.

Do you know what the index pages were changed to?

Morty

 

Ouch.

I can think back having that warm fuzzy feeling when I just signed up for a host, and thinking about all the wonderful all the features I have available.

And too often, I am later let down.

Site5 was like this for me. So far hostgator is holding strong.

 

I am hosting at servage and I would rate them as one of the best I have ever seen

 

Servage is a big nono because you dont even get a cpanel and if you have high traffic they suspend your sites

@ Dream host seems to be a big company may be some glitch.

 

yesterday i was looking at webhostingtalk to find a hosting company for my site and i saw the following thread at WHT

http://www.webhostingtalk.com/showthread.php?t=610933

3500 passwords leaked

 

Sounds like a dream host.

 

Ill have you check on my adults as they are hosted thier..

I got the notice that asked me to change the password which i did ..

I just Redid my back ups less then a few days ago so...

thx
malcolm

 

I have to say, I have had an account with dreamhost since 1997, (or sometime around there when they first started) and have had many accounts on other ISPs. Despite some minor imperfections, I have always found dreamhost to be the best overall ISP (at least for my needs). Even, dare I say to hostgator,

I know that dreamhost has its hiccups, but compared to some of the "burps" on other ISPs, I will take dreamhost any day

that being said, I still spread sites around on different ISPs.

Morty

 

High traffic upto 70 GB but forums are not allowed

 

This doesn't only affect phpLD directories hosted at Dreamhost. It also affects Wordpress installations at Dreamhost. See my thread in "Security".

Dreamhost seems to be having some very serious problems lately.

 

Yea, I agree about the problems. I've requested that they restore all of my sites (45 on this one account) to an earlier date. This would take me DAYS to go through every single folder and sub folder to eliminate this stuff. This is such BS.

 

i agree 100% with you. servage only for small websites. dont even try to thinking your site there if you want to make your site big/high traffic