
blaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
as you may have noticed, the site was down for a few days. what you didn’t know is that it was due to an injection of quasi-malicious code, aka U BEEN HACKED. best choice in first page of image search results for “u been hacked”, above.
one thing that a layperson might not understand about being hacked is that being hacked as (basically) a nobody is very different from being hacked for political reasons. it is also way more futuristic. for one thing, i was not targeted by a person or group for any reason, i was hacked by what can best be called a thing- a program that crawls through the web looking for specific vulnerabilites, then capitalizes on those vulnerbilities. in my instance, the vulnerability was a security hole in an older version of wordpress, the blogging software that i use. this program (hereafter referred to as a spider) found this hole, came in, and messed around. it also installed numerous backdoors so that, even if i update the software into a current secure version (which i did weeks ago), it will still be able to gain entry (which it did, days ago).
another way that this victim-ambivalent spider is more futuristic is in its goal- once installed on the computer, the spider didn’t steal or destroy any information, or tag its or its creator’s name somewhere, or do any “human invader” actions- it injected advertising onto the site. presumably, some of this advertising was paid for, and that’s where money, and with it a motive, finally comes in. BUT just as one member of a firing squad is unknowingly armed with a blank, a decent amount of the ads, i think, were unsolicited. in this way the advertisers can’t be held at fault. and how do i know they were unsolicited? some of them were links to random wikipedia entries. some of them were links to different parts of my own website.
if this all seems too preposterous, it gets even crazier when i tell you that the ads were invisible. i think they were up for a while, but i never saw them, and most likely you never saw them either. looking at the code, it’s possible that they were only triggered from certain locations, but more likely, the ads were only there to fool other (benevolent) spiders (who work to index the web for search engine companies), in an effort to make it seem like i was linking to them, and as such to boost their page rank in the reputation economy. to further fool the spiders, the links were surrounded and interspersed with randomly-generated text that appeared to use fantasy slash fiction as a seed bed.
so to sum up: my website was being used as a staging ground for an ongoing battle between benevolent robots and mercenary spiders. the spiders were hired/created by a rogue advertising agency or cluster of agencies to make it seem like i was writing sexy wizard bodice-rippers as a form of heart-felt recommendation of this person’s online pharmaceutical distro, that person’s day care company in ontario, and a miscellany of wikipedia pages. or to put it another way, U BEEN HACKED!
back on track now, i think. let me know if you still see anything suspicious.