Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Skype blog hacked

blogs.skype.com

Post reply on HN
Print view View original

11–20 of 61 posts

Re: Skype blog hacked

#12

Post by jon_kuperman »

xSwag wrote: post #4

This blog is not hosted by the Skype but on WordPress VIP. This means that, most likely, the blog was not broken into using a software exploit of any sort since the security on VIP blogs is professional. Knowing that this is the Syrian Army, this attack was most likely done using phished credentials. If they had any sort of system access they would have defaced the entire subdomain or the main site. So most likely, t…

Yeah getting access to their WordPress blog doesn't really prove anything.

Re: Skype blog hacked

#13

Post by thirsteh »

mrkris wrote: post #10

I don't consider getting access to a website via the most insecure blogging platform on the internet "hacking".

[citation needed]

WordPress isn't that insecure. A lot of third-party (i.e. written by inexperienced developers) plugins for it are, though.

Re: Skype blog hacked

#14

Post by yeukhon »

Here is the screenshot of the blog hacked. http://imgur.com/RGeTFWV

So it looks like Skype doesn't host on its own server. It looks like this is wordpress.com but with custom domain?

curl http://blogs.skype.com -v

EDIT Okay it is

New to wpscan. When it says plugins found are these the vulnerable plugins wordpress.com running?

https://gist.github.com/yeukhon/8211580

And I found the username 7 pretty interesting.... wonder if I am actually doing the ethical thing here :(

Re: Skype blog hacked

#15

Post by zeitg3ist »

romanovcode wrote: post #9

I'm not sure why the accent on "Stop using MS, it's spying on you!" is on MS. AFAIK every company is using your data and giving/selling it to the government. How is MS more evil than anyone else?

Microsoft has been moving Skype from its original peer-to-peer architecture to a more centralized system for some time. After the Snowden shitstorm, critics have been implying that the move was NSA-related.

Re: Skype blog hacked

#17

Post by stusmall »

jon_kuperman wrote: post #12
xSwag wrote: post #4

This blog is not hosted by the Skype but on WordPress VIP. This means that, most likely, the blog was not broken into using a software exploit of any sort since the security on VIP blogs is professional. Knowing that this is the Syrian Army, this attack was most likely done using phished credentials. If they had any sort of system access they would have defaced the entire subdomain or the main site. So most likely, t…

Yeah getting access to their WordPress blog doesn't really prove anything.

Doesn't look like they are trying to prove insecurity of the service but protest the spying that Skype and now Microsoft are involved in.

Re: Skype blog hacked

#19

Post by RyanZAG »

romanovcode wrote: post #9

I'm not sure why the accent on "Stop using MS, it's spying on you!" is on MS. AFAIK every company is using your data and giving/selling it to the government. How is MS more evil than anyone else?

If someone drowns 4 kittens and you only drown 1 kitten, you're still pretty evil. I don't see how "everyone else is doing it" is possibly a valid argument. Obviously 'evil' in this case is based on your definition though, it's not exactly a universal concept.

Re: Skype blog hacked

#20

Post by xsNzgw8 »

Snapshot archive (if they fix the page): http://mraka.eu/snapshot/v/blogs.skype.com

Direct link to the snapshot of the hacked site: http://mraka.eu/snapshot/img/2014/01/01/e0d8888c73483275afea...

Snapshot archive of twitter account: http://mraka.eu/snapshot/v/twitter.com

Direct link to the first tweet snapshot: http://mraka.eu/snapshot/img/2014/01/01/1d6269aa8371ce676587...

Direct link to the first retweet snapshot: http://mraka.eu/snapshot/img/2014/01/01/a0f4c0947281bb0fb19d...

Post reply on HN