Wordpress Jacking: Did you change your password?

Have you ever had a password compromised? About two weeks ago, for unexplained reasons, one of my colleagues started having problems with her MSN messenger chat ID. She’d log in and find that things had changed: her password, her picture, a bunch of stuff, messages were sent, etc.. Since this was accessed via a company account, we were pretty sure that the breach hadn’t occurred on our premises. No further breach occurred in any other pc or user machine. We did however take it seriously. She managed to regain control of her account easily enough, but it got me thinking about my own Blog security.

What if someone jacked your Wordpress Account? Naturally, prevention is the best solution, so I’m recommending several things to help make your online behavior a little more secure.

1. when you create your WP login ID, you’ll get a password that is generated randomly. In fact, you should login and create a separate identity for day to day management of your blog. This new ‘id’ should have a name and authority role that is not at the same level, perhaps ‘editor’ should be fine. You’ll have enough authority to post and edit most of the time. Also, if you are blogging at another machine that is public, this account (or even a lower level account) will allow you some measure of security.

2. don’t use the same password for your FTP account and your MYSQL Database User. That way, if someone breaks into your FTP account, they won’t be able to link to your other resources.

3. make sure your password includes numbers, and if it includes a word, make sure that the word is not the only part of the password. Dictionary attacks can easily crack word-based passwords.

4. always email yourself backups of the database, just in case the files are hacked. How frequently will depend on your blogging habit, but you need to do it. You can do backups via Manage > Backup (make sure your backup plugin is enabled).

5. if you think your password has been hacked, login to your WP, and your FTP accounts, and update the passwords as quickly as you can. Your database password will be more difficult to change, as you will also need to change the password in your wp-config.php file.

    1. WP passwords are changed in the Users Section.
    2. Your database password will need to be changed within the database management area of your hosting. Then you’ll need to FTP to your FTP folder and edit the file there. It can’t be done within WP.
    3. To change your FTP user password, you’ll need to login to your hosting, find the User Management area and change the password there. If you have shell access, then this should work on Unix hosts.

      To change your password, issue the command “passwd” at the UNIX command prompt. You will be prompted to enter your old password then enter your new password twice.

      • shell [12] passwd
      • Old Password:
      • Enter the new password (minimum of 5 characters)
      • Please use a combination of upper and lower case letters and numbers.
      • New Password:
      • Re-enter new password:

Keep your blog secure, practice safe blogging and back up your files regularly! Happy Blogging!

Technorati: A Blogger’s Friend or Foe?

Technorati is a well-known website that aims to search, index, and rank the estimated 60 million blogs around the world. When a blogger starts out, your ranking on Technorati tends to be on the low side, if you have one at all. Like Alexa, the ranking is reversed: the smaller the number, the better the ranking. As you move up (like I did), the ranked number decreases as the number of links and blogs linking to your blog increase.
You can build up your ranking in several ways: by linking to blogs and by having blogs linking to yours (called inbound links):

Technorati reads all of the HTML code in a blog posting, and also tracks all of the activity around a blog or post such as inbound and outbound links.

There are a variety of ways that such links can be established: the most obvious are comments, trackbacks, blogroll links, links in posts, perhaps even text links such as ads. All of these can act to increase your ranking. Additionally, I have heard that including a blog in your favorites at Technorati and others including your blog in theirs has a positive effect, too.

So, how do you do it? Basically,

  1. comment on top bloggers postings (thanks, John Chow!),
  2. link to other articles,
  3. encourage people to link to your blog and your articles,
  4. exchange favorites in Technorati,
  5. use your Blogroll to exchange links.

There are more good strategies I found here, though they are perhaps less orthodox.

Naturally, as John Chow found out, there are ways to be banned at Technorati so avoid using blackhat techniques that may risk a hard-earned reputation! Of course, I had problems just claiming my blog, I kept getting an error every time that I tried to claim my blog. And, initially, writing a request for help took a while to solve.

A first data: Should you or shouldn’t you save yourself?

Last week, I spent too many precious hours copying data. Geez! Every solution I have tried seems to generate more trouble. Here’s the problem: I have too many files generated over 10 years of PC use, going way back to Win3.1 on my first pc.

I have religiously copied and backed everything up since my first hard drive died nearly 10 years ago. Result: I have now tons of files, all over the place, with new versions, multiple copies of the same version, and so on. Originally I tried to place them in folders, only to discover that some folders ran so deep that the system couldn’t recognize them when moved. Others were in Chinese so that Win98 would stop copying the files reporting an error. Yikes! I had to copy everything again. I just do not have good data management habits in that respect.

And it’s not like I haven’t tried: I tried a 100MB zip drive, a CD-writer, a DVD writer, an extra hard drive (or two), and even an extra system. All of them worked (for a while), but now I’m overrun again with copies of pictures and albums, and it’s becoming a regular nightmare.

Now I’m hoping that a program called CloneSpy V2.3 will help me, but I’m not awfully positive on that point. I’m also planning to use software like SyncbackSE to store data automatically on another PC for all the computers I use. I have thought about using online storage (I like have a ton of space, courtesy of Dreamhost) as a backup…

But the one common thread that runs through everything is that each solution brought its own problems:

  • zip drive: slow, burdensome, occasionally failed outright (meaning 2 copies were needed)
  • Zip software: quick, effective, until I ended up with zips within zips within zips
  • CD burner: until I ended up with dozens of CDs and not a clue what was on them
  • DVD burner: couldn’t get it to burn a full DVD of data
  • Hard Disk: data was half copied several times due to errors
  • Another PC: copying files in another language caused undue stress.

So, I’m pleading for help. What in your opinion could be the answer to all my problems? I need some data guidance. And as I blog more, I think that will present a whole NEW dimension to my data nightmare… And I have started making videos seriously yet, either…

Comments, suggestions and general advice are most welcome!