June 28, 2005 · Posted in: General, In the News

We were hacked!

IN case you were wondering why yesterday’s blog activity, save for a trickle of reader comments on previous posts, consisted only of an odd post from our end entitled "A Hacker’s Journey," it was because our site had sustained a security breach from someone who managed to assign himself a user level almost equivalent to that of administrator and left that entry. Upon the discovery of the intrusion late afternoon, we were also advised by our hosting provider to desist from posting anything pending the results of their investigation of the hacking incident. 

The attack, however, came as no surprise to us, having been made aware by some of our sources that certain quarters since last week have been trying to get the services of hackers to take our blog down. We can only surmise why. Since the controversy surrounding the supposed taped conversations between Pres. Gloria Macapagal-Arroyo and Comelec Commissioner Virgilio Garcillano broke out in the news, our blog has been providing access to the audio files and transcripts of the tape versions to an information-hungry public.

The timing of the attack was also uncanny, coming as it did on the day when Pres. Arroyo finally broke her silence on the issue of the taped conversations.

Now that the security breach has been traced, we have taken the necessary measures to prevent the likelihood of future incidents. Should this blog succumb to more attacks, we’ve set up a mirror blog here.

34 Responses to We were hacked!

Avatar

raincontreras.com - one pinoy pundit points and shoots » Apology, Schmology

June 28th, 2005 at 4:47 am

[…] nalysis, so I’d rather link to people who do this for a living. Alas, their blog was recently hacked for making the Gloriagate audio files available. Times like these, even the people most-hesitan […]

Avatar

signals

June 28th, 2005 at 5:28 am

what kind of tools do they use?

Avatar

The J Spot

June 28th, 2005 at 7:11 am

PCIJ Blog Cracked

The PCIJ Blog
was recently cracked, and I’m renaming and editing this entry.  I
was foolish enough to cite “A Hacker’s Journey” without first verifying
if the article was legit.  But I did smell something…

Avatar

The J Spot

June 28th, 2005 at 7:58 am

Admission

President Gloria Macapaga-Arroyo issues an apology, and admitting that the voice in the Wiretapgate audio was indeed hers.  She does not admit to rigging the vote, but she says:
I was anxious to protect…

Avatar

crd_web

June 28th, 2005 at 10:32 am

I think they have gotten to wordpress but not on the hosting account. Be sure to back up everyday including the mysql database.

Good luck to PCIJ.

Avatar

kuntil_butil

June 28th, 2005 at 10:39 am

“Now that the security breach has been traced, we have taken the necessary measures to prevent the likelihood of future incidents.”

may post na naman si rebarz99…magaling talaga yun.

baka naman coincidence lng yung timing nya kahapon

Avatar

ricelander

June 28th, 2005 at 11:08 am

I experienced a block two days ago. The comment was something like: Sorry, you are a victim of hacker’s war.

Avatar

crd_web

June 28th, 2005 at 11:14 am

i ban ninyo na yung ip.

Avatar

Mang_Romy

June 28th, 2005 at 11:48 am

Reklamo nyo sa NBI, ay wag na lang, useless naman sila

Avatar

jepoy

June 28th, 2005 at 1:47 pm

@crd_web – the hacker is good. Banning the IP wont do anything

Avatar

DingG

June 28th, 2005 at 2:39 pm

You might say the hacking incident is much like a medal. An indication that the hacker wants to have a share of the much deserved spotlight that is on the PCIJ for the great public service it is doing.

As we salute PCIJ, may this blogger suggest that PCIJ post the audio of GMA’s statement to the nation. In a way, her remarks, truthful or otherwise, deserve to be fully scrutinized. Just just reading the text does not impart the flavor that an audio “reading” does.

Ms. Arroyo was also obviously well-rehearsed for the performance, with the TV camera framing carefully composed to show her flanked by the national flag on her right and the banner bearing the seal of her high office to her rear left. Let as also give proper notice to the carefully positioned framed photographs of her four grandchildren and the absence of the images of you know who.

Avatar

anonymous

June 28th, 2005 at 8:00 pm

1st of all i want to clarify the word ” hacker ” media of today are not using this word in a proper way, ” Originally, a hacker was someone who made furniture with an axe. In computing slang it is a person who enjoys exploring the details of programmable systems and how to stretch their capabilities, as opposed to most users, who prefer to learn only the minimum necessary. Also, one who programs enthusiastically (even obsessively) or who enjoys programming rather than just theorizing about programming.” PCIJ use the web application called WordPress for posting Blogs entries into their site, basically rebz use a exploit (security hole) of WordPress that discover by some person to access on the PCIJ Blog site (the exploit can be found here http://www.securityfocus.com/archive/1/401672 ), this people who use premade scripts and break into websites and vandalize the sites are nothing but a script kiddies (definition of script kiddie http://en.wikipedia.org/wiki/Script_kiddie ) , theres hundreds of script kiddies in the internet maybe thousands or more, what they do is compromise a computer system for their own profit and fun, how they do this? they oftentimes visit a Security Vulnerability Database website like http://www.securityfocus.com and when a new security holes release they go grab the script/codes and use it into a affected computer system and compromise it, if this people really eager of learning computer security, they can practice it in a legal way.. and yet you might ask why this people breaking illegally into some computers? the common reason is they want to gain popularity in the cyber world … and why do i bother about this article? its just simply because when you publish a article about a script kiddie and calling them ” hackers ” your just increasing their EGO…..

Avatar

juan magtanggol

June 28th, 2005 at 8:02 pm

It is now time for the supposed Gary — the man they say is the chief of staff of Iggy Arroyo — to be investigated. The people wanted to known who ordered him to cover up the Arroyo-Garci conversation? And for Garcillano himself, the old man does not have a clean mind, and I will not be shocked to hear the next news that he killed himself!

And for Iggy, Mikey and Jose Miguel — the unholy trinity — I don’t know what to say. And this goes also to Pichay, Mirian, Villafuerte and the rest who act as if they are the Arroyo’s counsels-at-law. The people will surely not forget you. You are all now part of the political history of this country.

Mabuhay!

Avatar

jjc1384

June 28th, 2005 at 8:37 pm

How can the future authors of history books skip the name Gloria Macapagal Arroyo? When the name was the name of the first politician or president ever in the history of the Philippines who was caught CHEATING! The people would not remember the Mcapagal-Arroyo clan through the overly budgeted Diosdado Macapagal Highway, the infamous Doña Eva Macapagal Terminal at the back of Manila Hotel, the infamous 200 peso bill and the largest airport in the Philippines the Diosdado Macapagal International Airport but they will remember them as one of most corrupt first family ever in the history… maybe second after Marcos… I don’t believe that ERAP is more corrupt than GMA….

Others say that who cares all of them cheat, what’s the big deal??? The big deal is that finally someone was caught… The second female president of the republic the one whom we thought would improve our economy, a star and a hero last EDSA II and who was supposed to be a successor to a “corrupt president”… Our hopes suddenly faded away last June 6,2005 when the audio CD containing how GMA rigged in the 2004 presidential polls, the jueteng scandals, the Jose Pidal issue…all these issues broke the credibility of the President totally….

The political crisis here in the country gets worse day by day and as analyst say, the only thing that would end this crisis is for the President to resign…..

If the president truly loves the country and was really sorry to what she had done to all her citizens, her apology must come with a resignation… yet she insisted that she didn’t cheat and that she would not step down…. She really is not sorry, she just wanted more people to support her and that she wanted her credibility back….

Was her credibility back after 24 hours of her admission??? The answer is a Big “NO”…she pushed herself more to the edge… more people calls for her resignation… She must shown her love and respect to our country by stepping down..prolonging her stay in the palace would mean a longer crisis and the more our economy would plundge…

GMA PLEASE RESIGN NOW! IT’s TIME FOR YOU TO GO…GOODBYE…

Avatar

jammer

June 28th, 2005 at 8:58 pm

jjc1384 said,

talo ni gma si marcos sa kalokohan.. at least hindi nagbabasa ng speech si marcos. tsaka hindi kailangan ng gary para sa cover up.

ang may ayaw lang naman sa history kay marcos ay ang oligarchs eh… which was restored after edsa 1.

but no one ever said that sing dumi ni cory si marcos…

remember the restoration of hacienda luisita to clan cojuanco?

remember the power blockout?

remember the main changes of aquino?… only the change of names sa institution?

we have to give marcos his credit… he had a vision that contradicted US during the later part of his term. inside story is that he wants higher rental cost for subic and clark plus additional military rearmament for the philippines…

kaya nga nakakatuwa eh… dahil dati minimal cost ang afp natin dahil billed sa US majority… pinaalis ni cory.. ayun! naramdaman nya ang walang US base rentals. ha ha ha

should we feel rotten for marcos.. can u compare our generals today wd marcos and the afp that time? Now is worse… look at ramos… behind majority of the faults happening today. look at our generals.. each 1 is as worse as marcos.

look at our president… SORRY LETTER NA LANG BABASAHIN PA!

and marcos is worse? itemize natin… compare the 20 years of marcos with the 4 years of gma…

panahon ni marcos… 1-5 centavo inrease sa fuel.. rally isang katutak.

ngayn… ang increase ay by 50cents to 1 peso… beat that!

dna makapag rally tao kasi yung nagrarally noon..nakaupo na sa pwesto.. and they always have marcos to blame..

get this… nung panahon ni marcos… wala na ang mindanao issue.. wala ngang nur misuari noon eh… ngayn… ilang daang bilyon ang kelangan ubusin para mabawasan ang south problems na ayaw talagang alisin kasi wala nang sisisihin ang government…

tsaka… why consider afp? puro magnanakaw din sila dba?

Avatar

swerty

June 28th, 2005 at 9:20 pm

obvious naman na puppet lang si GMA, pinapabasa lang siya ng letter na gawa ng ‘boss’ niya.

Avatar

kapebarako

June 28th, 2005 at 9:31 pm

Nag-sorry ga din ang hacker?

Avatar

46664

June 28th, 2005 at 10:57 pm

i doubt its the big brother 😉 and
and if that’s a true blooded hacker..this site should be down and out by now.
but if i were you guys….
in case the ‘enemy’ decided to get dirty and serious your host should know how to handle a dos attack…its really nasty. believe me.
and pls…can you delete our ips in mysql? just in case this thing goes out of hand.i never used our encrypted routing network as a show of trust in your site’s competence but after this… :(
so pls kindly delete it. thanks.

Avatar

jammer

June 28th, 2005 at 10:58 pm

sorry….

i won fair and square….

d naman si gma ang nangdaya eh…

si gary ang political adviser nya…

si bunye ang spokes man…

si drilon ang back up…

si devenesia ang support group…

armed ni lomibao ng pnp at afp…

backed ni ramos…

baka gusto nyo mapapatay lahat at mag sorry lang sila..

so better accept the sorry…

sorry na lang tayo…

Avatar

lethal_pointofview

June 29th, 2005 at 2:03 am

I think hackers should hack this webby instead of pcij.org :

http://www.kgma.org/
http://www.macapagal.com/gma/

One can see the email add of Juan Miguel “Miggy” Arroyo- mikey_arroyo@yahoo.com

Avatar

jammer

June 29th, 2005 at 2:15 am

GMA—> anus shitus. (shit of your ass)

bunye—> the FLY, kissing the shit of your ass!

the question is… how do you feel that we have a president like this?

search the net if GMA has a little bit of honor and respect left, other than their self proclaimed web site mentioned above.

Avatar

jay cynikho

June 29th, 2005 at 4:40 am

PCIJ has done much to the cause of Press Freedom in this country.

It’s the leanpost of truth, the sword of the gagged. PCIJ has done heroic to expose the venalities of government.

Yet, many do not know how much PCIJ have done to seek justice for murdered journalists. Many do not know how PCIJ safeguards the legion of its contributors.

In this country, it’s apt to be concerned when even its president was wire tapped. In this country where dirty money abounds in millions to buy hackers.

If PCIJ doesn’t watch out, hackers can truly endanger the lives of PCIJ staff and contributors. a HACKER enters your skin, ransack you inner vitals and spill out your guts, with laughter and gets handsomely paid for it.

A HACKER is worst than a virus a virus can give you lots of pain and head aches, wasted time and money. But it can not kill you, as a hacker can do in a fascistic country.

Remember this country is number one in eliminating those who practice their freedom of expression.

TO PCIJ: THE MESSAGE IS SIMPLE: WATCH YOUR BACK AND YOUR DOMAINS. YOU OWE IT TO THE FILIPINO PEOPLE.

Avatar

prem

June 29th, 2005 at 11:19 am

There are known exploits in WordPress, as with any blogger tool. My advice is that PCIJ avoid the nightly builds or be updated of security fixes if using the stable build. Contact me if you need help with the fixes.

Avatar

Ed

June 29th, 2005 at 11:37 am

You guys deserved to be hacked. You claimed it’s no surprise because your “sources” told you that “certain quarters” are soliciting hackers/crackers to take down your blog and yet you did not take steps to stop it from happening. Whoever is your IT consultant should be bitch slapped & fired.

If this guy is smart, and he probably is, you’ll never catch him. They usually connect to multiple servers and/or open proxies before attacking a server.

As prem stated, there are known exploits in WordPress, a poor choice in blogging software I might add. Checking out packetstorm yields a significant number of exploits.

Avatar

jammer

June 29th, 2005 at 12:02 pm

we are fucked!!!

si mike arroyo naka voluntary exile daw sa USA. para hindi maimbistigahan!!!

para may errand na taga deposito sa bangko sa USA o Switzerland!!!

GMA… bumaba ka na… ano ka ba??? dka ba makaintindi???

hanggang ngayn may lapse of common thinking ka pa rin???

more than 1 year na yan ha???

Avatar

tobebs

June 29th, 2005 at 1:29 pm

FG Mike Arroyo would do a great service to the country if he goes to IRAQ and help our kababayans over there instead of going somewhere else. Kung ayaw naman nya at magdesisyong magpunta na lang sa bansang gustuhin nya; nanawagan ako sa lahat ng Pilipino na maaring mapuntahan ni FG Mike Arroyo na KALAMPAGIN, KULITIN at ‘WAG TANTANAN sa panawagan ng sambayanan na Gloria ALIS D’YAN.

Avatar

masha

June 29th, 2005 at 1:38 pm

isa-isa nang nilalaglag ni gma and pamilya niya. dapat niyang maintindihan na huli na. di tayo matatahimik kung di siya aalis.

hihintayin pa ba niyang maging sisenta ang dolyar?

Avatar

Alecks Pabico

June 29th, 2005 at 1:59 pm

Ed, it’s not as if we didn’t do any precautionary measures when we learned of the threats. We did inform our host about it and had them raise the level of security of our site. The breach happened with the blog, with the “hacker” likely exploiting the security holes in the blogging software.

So far, we’re happy with WordPress. As prem also said, there are known exploits not just with WordPress but with any other blogging tool. We just have to be extra vigilant from hereon.

Avatar

prem

June 29th, 2005 at 2:10 pm

The advantage with “open-source” tools like WordPress is that vulnerabilities are immediately fixed by the community. The act was just a “kiddie” defacement not “hacking”.

Avatar

yuga

June 29th, 2005 at 5:41 pm

Hi Alecks,

WordPress 1.5.1.3 is now available which addresses another security issue (though not yet known publicly).

Go ahead and upgrade your blog: http://wordpress.org/development/2005/06/wordpress-1513/

Avatar

Ambot ah! » Wordpress 1.5.1.3 now available.

June 29th, 2005 at 5:47 pm

[…] After the recent security breach of PCIJ’s blog, I believe that bloggers will be more aware of the importance of regularly updating softwares. Along with WP, PHPNuke and PhpBB are two of the most widely exploited web apps. WP is quick in releasing patches and updates, phpBB (now v2.0.16) regularly releases new updates as well. […]

Avatar

Alecks Pabico

June 29th, 2005 at 5:49 pm

Thanks, Abe. Already installed version 1.5.1.3.

Avatar

CGBacani

June 30th, 2005 at 3:42 pm

I have been trying to post but I continue to be block by the site and told that I am a Spammer. Hindi po ako si Mike o si Garci!!! Please help!!!

Avatar

lawspeak_007

July 1st, 2005 at 2:21 pm

Alecks,

Here we go again, I’m being bugged by SPAM KARMA!

I cant make a successful post.

O baka SPAM KARMA is Cory and Gloria, combined?

Comment Form