So I accidentally published my AWS keys to GitHub, stupid me. I realize this the next day.

$ git reset
$ git push
Reset keys in AWS

I was too late. Bot already stole the keys and started up 53 EC2 instances. Racked up $4000+ of compute time (probably Bitcoin mining, I'd assume)

4 weeks later, I finally have this shit disputed and settled.

Don't test with hardcoded keys. You WILL forget about them. Env vars always. That is all.

Got hacked in a day after deploying my first site. 😑 I just started developing. Well, I am thankful for that person to point it out to me otherwise I wouldn't have known.

My email password has been hacked. That's the third time I've had to rename the cat.

I was drunk yesterday, watching Mr. Robot.

Woke up with Kali linux booted from a usb and a hacked WiFi password for my annoying vegan neighbor.

This guy has hacked everything.

I came early today to the office

Found the office locked

Need fingerprint of Project Manager/CTO

With my mouth saying ah.. i blew hot air into the finger print sensor, 5 to 6 times

There u go.office door opened with welcome message

just hacked the system

Genius me

*Me Coding with a laptop and desktop when friends enter *
Friends : u r a coder right? Hack something in front of me.
Me : *sick of explaining ppl*
*SSHs into lap from desktop and shuts it down*
See. I hacked my lap
Friends : whoa! Cool man

Uhh... That's cool! Someone hacked the public website for Dublin's tram system...

We have info screens around Danmark where companies can buy local ads. This happend yesterday..

Sitting on the bus updating my system.
Random girl: What are you using?
Me: Linux :).
Random girl: Ohh I use Mac, because that doesn't have viruses and can't get hacked!

*me waiting for a cliff to jump off*

The moment when a client dumps you for a "cheaper solution" and after a year his site get hacked and calls you to rescue him. Priceless.

I realized hacking was about being smart when at 14 i hacked into someones computer by guessing his password on the 2nd try.

The dude loved computers more than me and watched matrix all the time.

So i typed “neo”

Someone hacked into a teacher's school district email, sending random stuff to the juniors.

When the principal sent an email saying any help in catching the perpetrator would be appreciated, a bunch of people from my classes were staring at me throughout the day.

Programmer != hacker

I hope they don't report me, I didn't do it. :/

Once, I used inspect element to change Google's image to one from a meme.

My mom legit freaked out and thought I had just hacked Google themselves, and because she wouldn't believe me, I had to wait two hours until my dad got home so he could explain. During which time, I was yelled at about how we were going to be "sued for millions".

If she only understood how inspect element works.

Found this guy at my school who was trying to impress n00bs around the place by using Inspect Element in Chrome to change the content of webpages. He was claiming that he hacked the website 😂😂😂 I'm still crying

Dear diary,

Today I sold my soul... I hacked my way around a bug instead of refactoring. It was a moment of weakness... I... I was not given enough time....

I am sorry...

So my USB DVD drive needs more power than a normal USB port can deliver.
Normal Person: I'll bring it back to the store and get a diffrent one.

Me:

When you were growing up to be a developer and your mom brags about what a genius you were and has literally no idea what she was bragging about...

#IJustInstalledLinuxMomChill...

Funny story my step dad was bragging about me hacking Google to a group of his guys a few months ago (mind you I'm 21, he's a roofing contractor) and he calls me over and is like "yo, Jimmy. Tell them how you hacked google. (Obviously I never "hacked google", whatever that means) and this guy he's talking to say:

"Oh shit. You can do that shazz".

For my own amusement I replied:
"Yeah I hacked google last week. I HTML'd into their json databases to pull out an ASP in order to bash attack on their .Net services using only CSS"

Of course the man's only response at this point was to ask me how much it would cost me to build him a site...

Funny story about the first time two of my servers got hacked. The fun part is how I noticed it.
So I purchased two new vps's for proxy server goals and thought like 'I can setup fail2ban tomorrow, I'll be fine.'

Next day I wanted to install NginX so I ran the command and it said that port 80 was already in use!

I was sitting there like no that's not possible I didn't install any server software yet. So I thought 'this can't be possible' but I ran 'pidof apache2' just to confirm. It actually returned a PID! It was a barebones Debian install so I was sure it was not installed yet by ME. Checked the auth logs and noticed that an IP address had done a huge brute force attack and managed to gain root access. Simply reinstalled debian and I put fail2ban on it RIGHT AWAY.

Checked about two seconds later if anyone tried to login again (iptables -L and keep in mind that fail2ban's default config needs six failed attempts within I think five minutes to ban an ip) and I already saw that around 8-10 addresses were banned.

Was pretty shaken up but damn I learned my lesson!

Hacked a phishing website to phish the domain admin.

So back story... I opened up my own company a while back. I provide not only general IT and phone repair etc but I also do ethical penetration testing and patch the holes.

Before opening my own business me and some buddy's went out to a bowling ally and bar to have a few drinks. I wanted to see what their network was like... I hacked into their entire network in less than two minutes. From my iPhone. I was in their switches, I was configuring their printers and fax machines. Lord knows what I could have done if I had my laptop.

Anyways, back to the rant... I got this text today. 😂😩🔫

A while ago (few months) I was on the train back home when I ran into an old classmate. I know that he's a designer/frontend/wordpress guy and I know that he'll bring anyone down in order to feel good. I also know that he knows jack shit about security/backend.
The convo went like this:

Me: gotta say though, wordpress and its security...
Him: yeah ikr it's bad. (me thinking 'dude you hardly know what the word cyber security means)
Me: yeah, I work at a hosting company now, most sites that get hacked are the wordpress ones.
Him: yeah man, same at my company. I made a security thing for wordpress though so we can't get hacked anymore.
Me; *he doesn't know any backend NOR security..... Let's ask him difficult stuff*
Oh! What language did you use?
Him: yeah it works great, we don't get hacked sites anymore now!
Me: ah yeah but what language did you use?
Him: oh it's not about what language you use, it's about whether it works or not! My system works great!
Me: *yeah.....right.* oh yeah but I'd like to know so I can learn something. What techniques did you use?
Him: well obviously firewalls and shit. It's not about what techniques/technology you use, it's about whether it works or not!

That's the moment I was done with it and steered the convo another way.

You don't know shit about backend or security, cocksucker.

SSH'd into all the computers in college's lab and edited the bashrc to display "YOU ARE BEING WATCHED / YOU'VE BEEN HACKED" etc.
Everyone freaked out instantly.
Then edited my own bashrc file too so that no one realizes it's me.
I was surprised at how easy it was.

The website i made has been hacked today.

Stored in their server.

They didnt give me an access for it.

The user account in the cms i used for updating content while building the website was revoked when the website is completed.

Now they ask me for the latest backup.

I have no backup because how the hell i do a backup when i got no access to the cpanel.

The only backup is the zip file for initial uploading into their server and the contents were added after the website is on their server.

That goddamn IT guy who wont give me any access for “securty sake” is calling me furiously asking for the backup and how to set up the stuffs from the beginning.

I thought he was the one who know his shit but i was wrong.

Fuck me?

No.

Fuck you.

But i still responding to him telling him step by step how to do shit with some swearing and sarcasm.

ALWAYS BACKUP YOUR SHITS, MATE

Our company got attacked last month by what i believe was a code time bomb from a ex employee. And it was brutal, website hacked, email server not responding, locked out from database servers. The IT department asked for my help and I was more than happy to do it. Long story short I got every thing back working smoothly. The IT guys ask for a favor to not include this in my monthly progress report. Fine by me. But then they went out and tokd the top management that they are teaching me about the networks and servers so thats why I was working with them last month. Fucking assholes. Not going to help them any more.

watching CSI:

The cop (watching hacked tv broadcast): "This isn't live, is it?

The hacker girl: "I'll create GUI interface using Visual Basic, see if I can track the IP"

effin' gold, hope that GUI helped her

Drug dealer : yo, you code right?

Me: yeah, why

Drug dealer: can you hack into the police station.. You know, see if they are checking me out.. If they know I'm dealing.. I'll just move

(I've never hacked but I know i could learn if I have to)

Me:... That's actually brilliant

I love in a small town at the moment.. I bet the police security is a joke

Kinda high risk though

Hacked...

Tonight I was getting ready to pay my monthly apartment maintenance bill so I Googled my property management company's name because I always forget the url. It's always the first result, but I noticed Google placed a little "This site may be hacked." line of text on their listing.

Seeing that before and knowing what it means, I went into the source for their index page, and to my suspicion, their WordPress installation was hacked with the standard invisible spam links.

I realize this happens to a lot of WordPress blogs, but this is an NYC property management company that is responsible for a lot of buildings and has millions of dollars in contracts. Normally I would inform them, but having dealt with them in the past I don't like them very much, but more importantly, I don't think they'd understand what I was saying because they are so technically inept. They might even think that because I found this, that I had something to do with it.

So devRant, it is up to you. What should I do?

Client got hacked and mauled to another dimension. Why? Telnet w/o limited login attempts. All because Sysadmin likes to have the option of bruteforcing in case he forgets his own password.. karma?

Boss : "just" hack the google AdWords and show our company ad everywhere on google search"

"Don't you know that everything can be hacked?"

Me : "Ok, first let me ***k you."
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
I mean "let me hack you"

Friend: My other friend said he hacked into the Pentagon, can you do it?
Me: ummm No
Friend: So you are not really a good developer then?
Me: ummm No...I guess
Friend: well I'm hanging out with that guy then, he is showing me ways to make hundreds of $ a day online.
Me: sigh...

I got hacked.

yesterday at school

girl in school:
have you even got a call from a company u hacked?

Wtf? i cant hack and i never did...

Indians in a nutshell...
X feature is unavailable in the paid version.
But X = a + b + c in other free softwares.
Problem hacked.

When you see what is clearly a hacked together prototype running as production code.

Passed the online test.
Passed the technical interview.
Need to pass the final interview.

I'm applying to this company as a JS developer (backend). Their engineers are amazing and the fucking have 99.94% coverage on their test suiteeee; that gave me a code-boner.

If I get this job I'll finally say good bye to fucking PHPShit and Zend Framefuck and all this hacked bootstrap and 15k LoC "core.css/js"

I CAN DO IT

Israeli government hackers hacked into Kaspersky’s network in 2015 and caught Russian government hackers red-handed hacking US government hackers with the help of Kaspersky.

In other words — Russia spying on America, Israel spying on Russia and America spying on everyone.

> 3 hour long mandatory online cybersecurity training
> Preaches that the company is very secure and the only risk of being “hacked” is if employees post company data on social media
> oksure.tar.gz
> Bored out of my mine
> Open dev console
> JSON continually getting sent to backend
> Simple structure and human readable fields including {complete: false}
> Open postman
> {complete: true}
> Send
> 200 response
> Refresh page
> Course complete
> :’ )

Muppets.

Was watching a Chinese movie and there's a scene where someone is getting hacked, and this is the fucking code that they are show as the "hacking code". How hard would it have been to find something more legitimate than this?

If I hadn't had a few $0.69 hamburgers from McDonald's today, I would be more upset.

So unity got hacked…

Friend: you're good with computers right?

Me: sure..

Friend: great so i signed up for this site that likes posts and i think they hacked my account

Me: ok... and?

Friend: well since you're good with computers do you think you could hack my account back?

Me: goodbye

People suck

Debugging somones hacked site now, you know some developer messed up when the heckers injected code is more readable and structured than the actual sites...

My previous password for devRant was 123hackMe!

I never got hacked. I'm disappointed.

I used to work as an all-in-one IT guy in a company. One day I got a call from our HR team and the HR said "my Internet banking account has been hacked! It's logging in automatically!!" So I went to see the issue, and the so called "hack" was because she allowed Mozilla Firefox to save her login credentials, and because of that the login form was automatically filled. Such a stupid ass

Network-connected train displays, failing and displaying their IP address, on a train that has WiFi on board. That's just begging to be hacked.

My Skype was hacked and spam links was sent to everyone.
I guess i deserved it since i haven't updated the password since i've signed up to skype 11 years ago.
Still very annoying.

I hacked this mini-project yesterday night, Computer generated photo-montage by scenes extracted from the movie.
It's an end to end python script which will work for any video and a high res poster.

Nearing the end of my internship I got to sit in with a few interviews for new interns. We asked them in advance to take some of their code with them if possible.

So this guy walks in a suit and with briefcase puts his briefcase on the table and takes out a few laminated A4 printouts. That was his code. He didn't want to take a USB or laptop because he might be hacked by the company.

The whole interview only took 4 minutes from the moment he walked in.

I thought this launch (security/privacy blog) would go smooth:
- analytics fell, except for one thing, apart for yet unknown reasons
- MySQL came with a very weird error which took me like half an hour of research before I hacked my way past it.
- the firewall started to fuck around for no reason, works now though.

Nginx worked without issues though, as well as NetData 😅

Yeah, didn't go as planned :P

After a nice clean reinstall.. some partitions didn't wanna play nice so I got my hacking tools and hacked away.

All my code is hacked together and barely works and is nowhere near shameless. But I'm pretty proud of my hardware hacks. Like the sticker that holds the casing on my laptop together.

One of my older servers just went down. It's been hacked. How do I know this you ask? Is it mining bitcoin?

No - windows event viewer has no errors in the logs for the last 48 hours.

"There are no viruses on Linux :D" proudly says Jhonny when asked why is it better than Windows, just minutes after having run a script he downloaded on the internet, feeling superior because `sudo`ing it gave him "so much freedom".

I once woke up to a $65k invoice from AWS and almost puked in my pants.

2 years ago I was cycling through freelancers on upwork to find a decent candidate. I guess i hired the wrong guy because even after revoking access, they got into my AWS account and spun up 1000's of ec2 instances in multiple locations.

I was a newly wed and feared for my life. How do I tell my wife I gota pay $65k with barely any savings.

I contacted AWS. And they started off by saying "we see some suspicious activity on your account, don't worry, we will handle it". I was like "yehhh cuz I've been paying pennies for the last couple of years. No way I can rake up a bill like that."

Since I was going through so many devs, it was impossible to figure out who. But even if I did find out, what am I gona do. I'm just a code monkey.

Just got a brand new car coming from a 1999 Honda CRV and holy shit the tech in these things is insane.. basically drives itself on HWY's, can start it from an app, does all sorts of weird stuff.. obviously it comes with risks of being hacked and all that but damn new cars are wicked these days.

Decide to open torrent web site from your smartphone.

*popup: your phone is hacked, click here to scan
*popup: you are the 1000th visitor, you win a gift
*popup: see hot pictures
*popup: Hello [somebrand] phone user, click here for tips.

Shit, why I came here in the first place??

Pet peeves as a programmer and ex hobbyist hacker:

1. People who press F12, change a colour and consider themself a hacker or/and programmer.

2. People who pick up someone's phone, guess their passcode and post shit saying 'hacked' at the end.

These people can kindly fuck off to the hellish dimension they came 👌

//Not a rant

r/WindowsPhone discussing if the CIA has hacked them has me in tears 😂

Nothing says welcome back from holiday like a clients website being hacked 🙃

National Health Service (nhs) in the UK got hacked today... Workers at the hospitals could not access patient and appointment related data... How big a cheapskate you gotta be to hack a free public health service that is almost dying for fund shortages anyway...

I recently got a job as a sysadmin and they've been debriefing me on their hacked websites (wordpress malware injection). Beats me why they still have their sites up at all...
BUT WAIT THERE'S MORE!
I wanted to see if they have any backups... NONE.

The latest snapshot was over a year ago...FML. Over a year ago when they barely have anything on their company site and client sites 😒

Now, I have to revive 10 websites from redirection. Time to do some shell scripting!

4 years ago, during our college, a friend of mine was explaining us about hacking using simple SQL injections. He showed us some of the sites he hacked. Out of curiosity we tried it on college internal website it worked. We had access to all the details of all the students in university, and even the lecturer's information. We informed the management , they were shocked on seeing this. They had just spent 25 lakhs for this website couple of months ago.

I always thought that this could only happen with big orgs with precious data. One of my coworkers sent me this last night

When I thought I hacked Facebook.

I somehow managed to "inspect element" and changed a couple of the words on the page. I reloaded the page and all my work was gone... I tried it again and again then googled how to hack. I then learned how to make batch scripts. the rest is history.

I 💓 PHP.

It seems my brain is hacked.

How can I like PHP so much.

A friend (also a colleague) of mine had hacked the password of his manager's Netflix account 😆

Well, can't call it as "hacking" in 2018 when you can sneak into an idle laptop and view stored passwords in Chrome.

Now this Netflix account works as a "charitable trust" and more than 30 people are aware of the password 😆

Subway trolled
Hacked their printer paper roll

Last news: yahoo just invented that thing of the 500M hacked accounts to make us believe they have that much users.

Password max length: 12 characters
Additional requirements: exactly 1 special character and exactly 2 numbers.

Warning: long read....

I got a call this morning from a client who was panicking about not being able to login to his web panel.

So I went to the web panel and tried to login and was just redirected back to the login page. No errors or anything (at least visible on the page). Went looking for an error_log file and found it.

It turns out there was an error was showing: Disk quota exceeded.

So I went into the cPanel and checked, he used about 16GB out of 100GB and that got me confused. So I looked around and found out he was using about 510000/500000 inodes.

Went looking trough FTP to see where he has so many files and try and remove some.

Well it turns out that there were about 7 injected websites (warez, online casino, affiliate one etc) and a full hacking web panel on his FTP. After detailed analysis some who actually built the site (I just maintain some parts) made an upload form available to public with any checks on it. Meaning anyone could upload whatever they wanted and the form would allow it.

The worst part is that the client is not allowing us to secure the form with some sort of login or remove it completely (the best option) as it is not really needed but he uses it to upload some pdf catalogs or something.

TL; DR;
Old programmer created an upload form that was accessible to anyone on the web without adding any security or check as to see what kind of files was getting uploaded. Which lead to having maximum number on inodes used on server and client being unable to login.

Side note:
And ofc I had to go and fix the mess behind him again, even though he stopped working a long time ago and I started just recently and have been having nightmares of this project.

It is always a good thing that none of your clients websites got hacked but your own website got.

Today's gonna be a long day.

"I just hacked your website"

Me: Oh really? What did you do?

"Ran DDos attack using this third party website haha"

Me: 😃

A few weeks before, my neighbor came to me saying his wifi is hacked and someone is abusing it.
So I tried the wifi and found out there is no password. And the one who was abusing a simple open wifi was me XD.
So I set a password for her and disabled wps. But hopefully no one (expect devrant) will know I used that much bandwidth.

Who said Linux cant be hacked?
Despite of best practises, now I am out of the sudoers list of my own machine.

Had a nightmare today. My server got hacked by @floydian. Wtf???

Every time I encounter "404 Not Found - nginx" when I was really young, I thought the website was hacked by Nginx(ngingks). When I got to uni and found out what it was and how to say it, I just facepalmed. Even until now, every time I read it on job posts, I still say ngingks in my head and laugh hahaha

Dear Luis,

If you are an anonymous hacker, please do not include your name in the mail.

Sincerely,
cursemeslowly a.k.a the person who has visited a porn site and supposedly being hacked by an Anonymous Hacker named Luis

Before 10 years, a WordPress site hacked with sql injection. They had access to site, they modified many php files and installed commands to download random malwares from over the internet.

At first I didn't know that it hacked and I was trying to remove any new file from the server. That was happening every 1-2 days for a week.

Then I decided to compare every WordPress file with the official, it was too many files, and I did it manually notepad side notepad!! :/

Then I found about over 50 infected files with the malware code.

Cleaned and finished my job.

No one else knows that I did a lot of hard job.

I bought flowers for my date. Online.
When I registered, the website send me via email my 30 character long password.

😥

So I try "forgot password". The genius website sent me, guess what, my 30 character long password...

For fuck sakes!!!! You had one job.... Hash the fucking password!!!!

I'm afraid these people will probably get hacked soon (murphy law).

Sha256.. Guys please...

And that's how we hacked a groupme chatbot

last week was the funniest week in my damn life.

so apparently, some of friend knew about i can make some mobile applications, lets just call her riri. and that week, riri's Instagram account got hacked.

whats so funny about it? she ask me to get her account back or she'll accuse me as the one who hacked her account.

when i ask her, how could i bring her account back, she replied with, "why would you ask me? you were the one who good at computer thingy"

SO?
if i can drive a car, you'll assuming that i can make a car and repair it myself?

haha, funny

yes i am a developer, no i have not hacked facebook.

So, the other day a friend of mine called me. It's been years that I haven't talked to this girl. She says "can you do me a favour?". I asked "what?". To which she replies "My Facebook account has been hacked. Can you do something and destroy the guys pc? Don't let him create any other account or even let him use the internet. Ban him from the internet or do something.
And I was like

The satisfaction a developer get when you see something hacked publicly.

Can people just fucking stop using "hacked" as a synonym for "my password has been found out"? Even devs do this shit! Devs should know better about what a "hacked" account is.

Got a request on a freelance site, was about modding a game.
I've answered thinking "easy money", then he reveals it's for a console, that it's not "hacked" so I couldn't run any third-party script.
I've tried to kindly explain the situation and he seemed having understood.

Few minutes ago I checked my inboxes and I got a bad review on that freelance platform, of course from him. 👌

Customer:
Our site is hacked, and that is because the FTP port is open to the world!

Me: Well, it is a shared hosting platform, it has to be. You should instead update your 7 year old joomla! site.

So my gf was sleeping and i took the opportunity to unlock her phone using her finger print. Sent bunch of texts and later told her i hacked her cellphone. She now believes i am a genuine hacker. Should i tell her the truth or just drag a little longer?

Microsoft admits they were hacked. Explains how it worked and what happened. No big deal. companies get hacked. That's life.

Indirectly admits that all of their customer support agents have access to your inbox.

Cool. Deleting my Outlook email. Thanks guys.

Hacked 🤣😭😭😭😭

Hoping so much that the new devRant store has official devRant caps.
In the meanwhile I hacked this and wore it backwards during my last 4 race walks including the NY State Empire Game Championships so my opponents could watch 'little devvie' stare them down for 30+ minutes. It worked!

Once you realize your server is hacked, just disconnect the ssh and forget about it. It is known as Schrodinger defense.

The server will be both okay and fucked at the same time until someone get back into the server.

More than 200M yahoo accounts hacked!, who the hell keep using it!

"my app was already hacked so now it has natural immunity"

Somebody took that "let's hack Facebook" meme waaay too far

So earlier today as I was walking out of class, I overheard some people talking.
One of them said “Oh I hacked google”
Then the other one said “Oh yeah I hacked google aswell. I made it say (something I forgot)”
They were thinking that using the dev tools to make one of the tags say stuff was hacking.
😤😤😤😤😤😤😤😤😤😤😤
I had to run away
It was t o o m u c h

The worst thing about being a dev is explaining to these fucktards that facebook can't be hacked.
But what is even worse, is when these dipshits say that i am a bad dev for not hacking facebook for them.
Use that big stupid head to sometimes think straight and stop being a little twat.

I think my server got hacked, yesterday I made a new server on scaleway for the sake of testing I made a user called dev, with password dev. Forgot to change password before I went to bed.

Logged in today to find that load is 5x.x and this (image) in my crontab

Note to self: You are a disgrace, who the hell uses 'dev' as password for ssh on port 22 -_-

Earlier i ranted about how someone hacked our site and he had our source code.
Now finally we found how was our site code stolen, thanks to @dfox he mentioned how can we pull code from got server at that time I checked trying commamds to dowload git folder but it was secure but later we found that we had another subdomain running for pur project and its git folder was not secured

I FREAKED OUT

I WAS A DIFFERENT PERSON FOR SOME REASON

Dfox thanks for the heart attack, I thought I got hacked.

When you realize you insulted a chief of armed forces

MY LAPTOP just scared the shit out of me. It screamed words like a demon. I thought that I am hacked. But it was just a screen reader... I accidentally activated it or something while unlocking the lappy.

You can't build a webapp and trust people won't mess with the browser

I hacked a browser game a few years ago for fun and the exploit I found and used was basically this:

<$php

$f = $_GET['f'];
$p = $_GET['p'];

$f($p);

So it was possible to pass a function and it's parameter in the URL to the server. The author used this to include() sub pages. I to highlight_file()s.

This kind of message doesn't let me sleep, I go to bed with the fear to be hacked for hadn't updated

We all have that one friend who says he "hacked someone's facebook account", and all he did was peek while that person was typing his/her password....

Wordpress. The only backdoor with a plugin system and CMS included.

I have to clean ANOTHER. Hacked WordPress site. One wrong decision and you have to support it for the life time :'(

Being the only tech savvy person in class can be the worst. If someone gets hacked they all blame you...

Merriott got hacked. I know the head (and only) tech at a local hotel/resort that just got bought and turned into a Margaritaville, so I checked in with him to see if he needed any help or advice or anything, and he said he hasn't slept since the attack and probably won't for another week. Everything's on lockdown, he's been staring at the firewall monitor and public PC feeds for like a week straight...

God, I feel bad for this man.

So, my fathers company’s website got hacked. And the hacker left this message on the homepage. Wtf does this mean?

Some guy got hacked through his toaster. His fucking "Smart"-Toaster...

I literally just had a conversation with my coworker who is not a dev where he said that WordPress sites getting hacked is a myth. He also thinks shared hosting sites getting hacked is also a myth......I literally can't right now.

Indian Prime Minister's account was hacked today.

a friend of mine told me about how he hacked this website

all he did was opening the dev-tools in chrome and changing some values...

Seriously. YouTube hacked??

So I wrote a code for a discord bot a few months back. It worked perfectly alright. Suddenly one day, the bot starts sending random shit to me!

Then I realised that my bot had been hacked because I didn't use the bot token as an environment variable while deploying!

Instead I added it to the code, which I uploaded on GitHub! 😐

*Compiled successfully on the first try

Me: Expecting SEG FAULT.

*No SEG FAULT

Me: Expecting logical error.

*Runs fine

Me: Aliens hacked my mind.

Not a Story about an actual hack, but a story about people being dumb and using hacks as an excuse.

A few weeks ago my little cousin would reach out to me because "his Account was hacked...". Supposedly his League of Legends account was hacked by a guy of his own age (14) and this guy was boasting about it.

So i asked the usual things: "Has the email account been hijacked? Did anyone know about details to your acvount access? Etc..."

Turns out that one if his "friends" knew his password and username, but suppsedly erased these Informationen. And that was the part i didn't buy.

This was the point where he lost. Just because i am a programmer does not mean i can retrieve an account he lost because of a dumb mistake that could have easily been avoided. And that guy who was boasting about hacking LoL Account was coincidentally freinds with the friend who had the user credentials and password.

Moral of the Story? The biggest security weakness is almost always the user or a human in between...

Today one of my friend just became a hacker...😂😂
The whole thing he did is:-
Opened a random WordPress site(found by luck) and in the URL bar he tried to type wp-login and it worked. Login page for WordPress dashboard board loaded and he told me that he hacked that website.
I said to him "Go On broda you are a LEET hacker..........

Little anecdote from my in-house it:

"Our passwords are safe because we change them every 3 months and they have to contain uppercases, lowercases, numbers and special characters. 6 digit length is enough and can't be hacked."

why people around me act like dump. i have recently worked with this site, which is written in php.

customer: (yelling) my website is hacked, fix it immediately
me : ok sir, we will restore your site immediately

after finishing talk with customer. i have checked website, there is no sign of website being hacked. i have checked server logs and website for security breach, there is no sign.

me: your website is not hacked, sir. can you please tell me where you have seen hacked page.
customer: look at those pages

after seen that page i facepalmed myself. it's a bug, person who created that page just splitted string without using any multibyte function, so page is showing with corrupted characters. i fixed it and problem solved. i have told about that bug, to the person who created that page.

me: hey you have used this function which is not able to handle multibyte characters, you should use multibyte character functions for that one.
person: every characters are the same. we shouldn't need to handle that way.

he is actually a senior developer. who don't even know the difference between unicode and ascii characters.

One of my clients got hacked.
FML. It was fucking bad passwords by a team member.

Google has now blacklisted the domain.

Removed the shady code, requested for review. Hope it recovers soon.

Any idea how long it takes for Google to remove the red warning page before you even enter the page ?

Apparently the grades machine at my univ is not at all bug proof

Last time client got hacked...we just could not get rid of the malware...it replicated itself short after deletion.

Ended up creating the same files with zero content and setting them read only.

Not clean, but enough to sleep.

Scared the shit out of me when I heard one of my volunteer side projects website was down. Because I just finished fixing my own hacked website today.

Turn out the server and website is fine but the domain was expired yesterday 😣

Don't fucking scare at me like that.

Tough week indeed.

So, anybody aware of this? Does anybody know what the vulnerability is?

Wow, I still remember some math after decades. Today, I needed some parameter calculation in an interval with smooth transition at both ends (i.e. continuously differentiable). So I used a 3rd degree polynomial where the values and derivations gave a 4x4 linear equation system. I lazily hacked that into WolframAlpha, and it works nicely.

Oh no, someone hacked my PayPal account, and it seems... PayPal’s too, they can’t spell properly anymore 😰

Lol @ the Mr. Robot episode descriptions on Amazon video

Yesterday was the day. I got asked. Asked, if I could hack back someone's "hacked" Instagram account. For the first time.

He's probably one of those dudes who use short and easy passwords, so his password was just guessed.

I hacked the coffee machine at work and now I feel guilty.

net send * "your pc has been hacked"

Come on guys we will go to hack someone computer.

I can troll all day by opening Devtools on a browser and change <input type=“password“> to <input type=“text“> they think i hacked google, facebook and their email acoount

The ""operating system"" of questionable quality I hacked together from scratch and alcohol

So a friend just told me one of his websites just got hacked and replaced with viagra advertisement.
He basically avoided joomla updates in order not to break something.

On the weekend I'm going to show him how to quickly spin up a docker environment for testing updates.

An enormous government project that leaves the tax office's database along with all backups exposed to SQL injection.

I know for a fact that the tax office database in at least one country only got a cold backup a few years ago, so it's more likely than you think.

Although around that time someone hacked the public transport company and bought a 12 month ticket for free as PoC and he got jail for it so the risk is quite high.

This week in positive news: "Video Editor" comes to Windows 10, so I can finally uninstall my hacked-together version of Movie Maker

My last job sucked because of ridiculous deadlines, never-ending demos with hacked together fake sites, etc...but I still get nostalgic and miss it because I worked with some really cool people.

I convinced someone that I hacked the government by doing the "help" command.

I run an informational website for medical students. We just got hacked. Fuck you and fuck you WordPress.

I've never been hacked - not that I know of :D - and never "hacked" someone else.
(Sure, I did some things in high school to circumvent certain restrictions but nothing worth mentioning whatsoever.)

But all these rants that I read so far have me wondering if I shouldn't simply setup a honeypot sometime when I'm about to be really bored just to have some fun. Then again, I don't have time to be bored. :/

TL;DR my first vps got hacked, the attacker flooded my server log when I successfully discovered and removed him so I couldn't use my server anymore because the log was taking up all the space on the server.

The first Linux VPN I ever had (when I was a noob and had just started with vServers and Linux in general, obviously) got hacked within 2 moths since I got it.
As I didn't knew much about securing a Linux server, I made all these "rookie" mistakes: having ssh on port 22, allowing root access via ssh, no key auth...

So, the server got hacked without me even noticing. Some time later, I received a mail from my hoster who said "hello, someone (probably you) is running portscans from your server" of which I had no idea... So I looked in the logs, and BAM, "successful root login" from an IP address which wasn't me.

After I found out the server got hacked, I reinstalled the whole server, changed the port and activated key auth and installed fail2ban.
Some days later, when I finally configured everything the way I wanted, I observed I couldn't do anything with that server anymore. Found out there was absolutely no space on the server. Made a scan to find files to delete and found a logfile. The ssh logfile. I took up a freaking 95 GB of space (of a total of 100gb on the server). Turned out the guy who broke into my server got upset I discovered him and bruteforced the shit out of my server flooding the logs with failed login attempts...

I guess I learnt how to properly secure a server from this attack 💪

Today was a good day, (day 4 of my junior dev career) I met the only other female Dev in the company , great stuff

And I'm starting to see how well I fit into the company. The only hot drinks options are coffee and green tea- exactly the only hot things I drink 😂(I think they all hacked me and made the work exactly the way I'd like it hm)

That new devlead that just joined and is bad mouthing everything we did and introducing his own state management library he hacked together without understanding our architecture (Clean Architecture) nor what layers are supposed to do and what the sense behind layers is. Also we learned from him that apparently Android deprecated ProGuard, LiveData is deprecated and Lifecycles in Android are broken.

StackExchange’s Apple Ask Different Question Summary

30% Dual boot Linux destroyed disk partitions - not bootable

40% Destroyed disk with diskutil - not bootable

20% AM I HACKED!?

10% Featured and never answered.

Slant.co is either homophobic or hacked (bottom-right)...

So today I decided to try out Kotlin on Android. Hacked up a little Textview-Button app. AMAZED with the little code.

I have been hacked with cross-site request forgery and I don't know what to do. I have been up all night trying to fix.

Today was a good day.

I was told to use in-house BitBucket runners for the pipelines. Turns out, they are LinuxShellRunners and do not support docker/containers.

I found a way to set up contained, set up all the dependencies and successfully run my CI tasks using dagger.io (w/o direct access to the runner -- only through CI definition yaml and Job logs in the BitBucket console).

Turns out, my endeavour triggered some alerts for the Infra folks.

I don't care. I'm OOO today. And I hacked their runners to do what I wanted them to do (but they weren't supposed to do any of it). All that w/o access to the runners themselves.

It was a good day :)))))
Now I'll pat myself on my back and go get a nice cup of tea for my EOD :)

I was wondering how a sysadmin would know if the user sending malicious traffic is the real attacker or his account has been hacked ?
(Also probable that the attacker has faked his mac address to user's device)

A developer said to me: developers may hurry to finish the project before deadline that they might miss many security bugs specially in the updates. That a creative hacker will later take his time and exploit them.

Is it correct ?

"I know this guy who works in the service centre where they fix ATMs. He reckons if you could create a hacked copy of the OS, he could install it on a machine, then we can go and withdraw unlimited money from it!"

Conversion topic: a security feature the PM doesn't like
PM: but WordPress doesn't do this.
Me: yes but WP is hacked every couple weeks and isn't exactly a security standard!
Debate continues for 5 minutes... And I'm forced to remove the feature 😑

I just love it to giggle at "hackers" in movies/series.

"He used an ARP to 'crack' the hostname of the server"
And then a countdown when the Server is hacked...

Damn you hackers!

This is why it pays to hide your login page with WordPress, luckily not been hacked yet.

They are persistent if nothing else them Bots. 😱

I have a Yahoo app on my phone for some legacy purposes. I just allowed the storage access permissions when it was asking for it during the installation or something, cause like, who doesn't? I checked my Yahoo Mail on the browser tonight and saw copies of my mobile photos in it! It's through the Attach Icon > Insert animated GIF. WTF? So that's how you can easily get hacked from apps?

There might be a special place in hell for the creator of JavaScript. He hacked something in a couple weeks and this monstrosity has been causing hell for devs since the 90s.

Fucking mongodb... the name is really fitting "mongol db"..
I get that a NoSQL db can be very useful but holy crap mongodb is shit..

Even better is the security.. holy shit it's insecure..

"Just use the configuration to only allow 127.0.0.1" stfu that shit apparently doesn't work on fucking centos..

And yes my customer did get hacked
And yes they did blame me
And yes I did have a backup

fuck wordpress... Got a request to improve wordpress site speed + pagespeed score. 20-30 plugins, 15 or more additional ones off. Improved the score and noticed that my adblocker is blocking a lot of urls. Sure enough theres a hidden iframe in the bottom with 10 ad network scripts and bidding get requests. Someone is making ad revenue from this shit.. wtf. I've only had problems with shitty wordpress sites being hacked for some reason. It's always a shitty experience. Any tips on fixing hacked wordpress sites?

Today I went to a computer store,
I ran dir /s C:\ ( "ls -r /" equivalent for Linux, sorry GNU/Linux)
left it there
Hoping someone will panic thinking that computer has been hacked

Google got hacked?

Roses are red

Boost I need you

You do so much I cannot breath

You fucking need to be hacked around every time I have to compile you for a different compiler or VS version getyourshittogheter fucking hell it makes me hate you

Most of the companies visiting my campus for placements are hiring people with high CGPA and less knowledge and leaving (not even allowing for taking tests) the ones with good technical knowledge with less CGPA 🙁. So I hacked the placement portal developed by a PLACED, HIGH CGPA Candidate using SQL Injection and got access to all the student accounts 😄

Working more than 5 months for our new web site. And considering lots of cool stuff and useful features. Just after the launch one customer called our support to notify that our site has been hacked.

Either my server is hacked or I fucked something up two days ago without knowing, I suddenly start receiving a dms file when I try access my domain or either by IP, file name is: valroSG0.dms

Do I need to be worried :S

Alright, server got hacked a week ago. Bad enough on its own but okay, perfect time to change the server infrastucture completely instead of doing it later this year. Since Saturday we are working on setting everything up (game server, apache, etc.pp.) while making sure to configure everything correctly to be safer this time.

We are finally at the point where we could go back online. And what happens? One team member _now_ (6 days after the hack) suggests that it might be a good idea to format the hacked server and configure just what we need to patch the clients with it.

Great fucking idea, why didn't you have that idea 5 days earlier?! There was more than enough time already to format the old server and configure it. Another day delay, yay. X_X

Aaah, ranting really helps in those situations. Oh and Hi, I'm new here. Nice place, I like it. ^_^

telling your girlfriend's younger brother you've hacked his Minecraft account is evil but his reaction is priceless

fuck people who need to be hacked to care about security.

i hope everyone who used that early ap scores gets their credit cards stolen because they don't know how to use a vpn.

Had to buy diablo 3 twice thanks to the asshole who hacked my account from China. Thanks pal.

Working at a local seo sweat-shop as "whatever the lead dev does't feel like doing" guy.

Inherit their linux "server".
- Over 500 security updates
- Everything in /var/www is chmod to 777
- Everything in /var/www is owned by a random user that isn't apache
- Every single database is owned by root sql user
- Password for sudo user and mysql root user same as wifi password given to everyone at company.
- Custom spaghetti code dashboard with over 400 files in one directory, db/ api logins spread throughout these files, passwords in plain text.
- Dashboard doesn't have passwords, just usernames to login
- Dashboard database has all customer information including credit card stored in plain text
- Company wifi is shared by other businesses in the area

I suggest that I should try to fix some of these things.

Lead Developer / Tech Director : We're an SEO company, not a security company . . .

Had to submit a form and couldn't because of some js errors. I hacked my way through with the console to submit none the less