Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder1.news.weretis.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path: <rosuav@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.099
X-Spam-Evidence: '*H*': 0.80; '*S*': 0.00; 'charset:iso-8859-7': 0.04; 'subject:into': 0.09; 'assume': 0.14; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'hits': 0.16; 'hits.': 0.16; 'sat,': 0.16; 'wrote:': 0.18; 'earlier': 0.24; 'script': 0.25; 'right.': 0.26; 'post': 0.26; 'header:In-Reply-To:1': 0.27; 'wonder': 0.29; 'message-id:@mail.gmail.com': 0.30; "i'm": 0.30; 'comments': 0.31; 'that.': 0.31; 'subject:Database': 0.31; 'quite': 0.32; 'maybe': 0.34; 'could': 0.34; 'anywhere': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'being': 0.38; 'ahead': 0.38; 'nov': 0.38; 'to:addr:python-list': 0.38; 'pm,': 0.38; 'sure': 0.39; 'to:addr:python.org': 0.39; 'days': 0.60; 'company': 0.60; 'most': 0.60; 'world.': 0.61; 'first': 0.61; 'more': 0.64; 'here': 0.66; 'minutes': 0.67; 'am.': 0.91; 'responses': 0.93; '2013': 0.98
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=kdz6L2dtkYCG+E851FrSHXbxXFC4Q3+Swvbe+5Sr0ZE=; b=M8Dkosps+465URVPEkiPksreUvEMptd4eCISvvkWZTPYIPRv6Z6Mwpy9U55dXPyY5E hhGe3Nq+ylE/WFlZfoBsUW9wsGgXqXEcuULwO60DzCXJpSJ4JJUWbN4G5tmDGuEHFn2u FRCvoClDLsw5nd2avFyDNQCP0XDG6cc4YbTaQQmIX+gXL5OOmyZjTr9IeDqcZamWK2fj SWZWc2hZfhiI/3jCNOMJRXxZXV+GM/Jqx4zOvb0iwmctNag089GapUE/yWh2q1Qkw6I6 hrx5OYnuxMy4oMOq7Me6ownX9KG3RT/suqWlPZ5MHit59OW3aUpFPE5NRd4KMBGvAnWy efiw==
MIME-Version: 1.0
X-Received: by 10.66.102.100 with SMTP id fn4mr20127425pab.71.1383983855579; Fri, 08 Nov 2013 23:57:35 -0800 (PST)
In-Reply-To: <l5kp5b$ajt$1@dont-email.me>
References: <527a5f79$1@news.synserver.de> <l5kimo$imp$1@dont-email.me> <mailman.2276.1383978054.18130.python-list@python.org> <l5kl3n$qih$2@dont-email.me> <mailman.2278.1383979514.18130.python-list@python.org> <l5kn70$22b$2@dont-email.me> <mailman.2280.1383981592.18130.python-list@python.org> <l5kp5b$ajt$1@dont-email.me>
Date: Sat, 9 Nov 2013 18:57:35 +1100
Subject: Re: To whoever hacked into my Database
From: Chris Angelico <rosuav@gmail.com>
To: python-list@python.org
Content-Type: text/plain; charset=ISO-8859-7
Content-Transfer-Encoding: quoted-printable
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.2282.1383983865.18130.python-list@python.org>
Lines: 25
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1383983865 news.xs4all.nl 15957 [2001:888:2000:d::a6]:34383
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:58913

On Sat, Nov 9, 2013 at 6:44 PM, =CD=DF=EA=EF=F2 =C1=EB=E5=EE=FC=F0=EF=F5=EB=
=EF=F2 <nikos.gr33k@gmail.com> wrote:
> You are right. You could have servers anywhere in the world.
> But i will assume the following hostnames are yours:
>
> mail14.ess.barracuda.com
> mail0.ess.barracuda.com
>
> I'm quite sure this time because i notice that the last days when i make =
a
> post about my script these 2 hostnames were the first hits into my websit=
e
> and your comments are the most immediate responses i had in my threads ju=
st
> a few minutes after the hits.

You go right ahead and assume that. I wonder who barracuda.com is...
and whether, I dunno, maybe someone else here is more likely to be
associated with a Californian company than I am.

Also, very interesting that your oh-so-hardened script is still
insecure. Do you now understand my earlier comments about it being
insecure-by-default?

ChrisA