|
|
Joined: Nov 2008
Posts: 51
Mostly harmless
|
|
Mostly harmless
Joined: Nov 2008
Posts: 51 |
Dear Hikers, Looks like www.meridian-audio.info has been hacked. Scanning my machine now in case of a "drive-by" trojan being planted by the site. GMS
#1: StormAudioISPEliteMk1;DSP5K2/5K2HC/D33x6/D2500;RoonRock/Tidal
RegaPlanar3/RB250/Carbon/NADPP2;SonyTCK850es;CaCXUHD;CaAzure651T;GoogleTV; FireTV4KMax;AppleTV4k;Virgin360/Philips 65OLED950;SonosArc
#2: 562v2;DSP5K;FireTV;SonyBDPS3700;CAAzure640T
Spare: 568.2mm (faulty);596s;DSP5000C;M60C;Explorer2;G68ADV;
|
|
|
|
|
Joined: May 2004
Posts: 816 Likes: 14
Paranoid android
|
|
Paranoid android
Joined: May 2004
Posts: 816 Likes: 14 |
Sorry don't have access to my pc now, will have to check out later.
Streaming: Roon Lounge: LG 65 Oled, Wiim Ultra & Neat SX2; Study: Pro-Ject Pre Box S2 Digital, Quad Vena II & MA; In Storage: M1's, Agent 4's, A500's, 500 series, 602/604/606, G51, Prime, M80 & lots of Quad Storage: Synology NAS (100Tb+); HDMI Matrix: 8x8 HDBaseT, SkyHD. Websites: www.meridian-audio.info
|
|
|
|
|
Joined: Jun 2009
Posts: 880 Likes: 3
Pan-dimensional being
|
|
Pan-dimensional being
Joined: Jun 2009
Posts: 880 Likes: 3 |
Just tried link at top of page and got ------------------------ Not Found The requested URL / was not found on this server. Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request. Apache/2.2.9 (Unix) mod_ssl/2.2.9 OpenSSL/0.9.7a DAV/2 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_perl/2.0.4 Perl/v5.8.8 Server at www.meridian-audio.info Port 80 ------------------------ Another Duncan
|
|
|
|
|
Joined: Nov 2008
Posts: 51
Mostly harmless
|
|
Mostly harmless
Joined: Nov 2008
Posts: 51 |
It was showing a typical "you've been hacked" page Sat morning at ~10:00 - maybe the web hosting service took the hacked pages down. GMS
#1: StormAudioISPEliteMk1;DSP5K2/5K2HC/D33x6/D2500;RoonRock/Tidal
RegaPlanar3/RB250/Carbon/NADPP2;SonyTCK850es;CaCXUHD;CaAzure651T;GoogleTV; FireTV4KMax;AppleTV4k;Virgin360/Philips 65OLED950;SonosArc
#2: 562v2;DSP5K;FireTV;SonyBDPS3700;CAAzure640T
Spare: 568.2mm (faulty);596s;DSP5000C;M60C;Explorer2;G68ADV;
|
|
|
|
|
Joined: Sep 2009
Posts: 5,358 Likes: 2
President of the Imperial Galactic Government
|
|
President of the Imperial Galactic Government
Joined: Sep 2009
Posts: 5,358 Likes: 2 |
This one has been hacked too: if you just go straight to www.meridianunplugged.com you get the hacker screen.
Ex-moderator
Sitting room: dCS Network Bridge, 818v3, HD621, 8kSE
Library: dCS Rossini Apex DAC/Clock, Clearaudio Performance Wood, Audio Research PH2, Mjölnir KGST, Mjölnir PureBipolar
SWMBO Room: 210, D33
Kitchen: RPi/RoonBridge, Genelec 6010 actives
Desk: Merging Anubis
Server: Roon/ROCK/NUC
Headphones: Stax SR-X9000, Stax SR-007, Stax SR-404LE, Audeze LCD-X...
Oldest audio file: 1889 Edison cylinder
|
|
|
|
|
Joined: May 2004
Posts: 816 Likes: 14
Paranoid android
|
|
Paranoid android
Joined: May 2004
Posts: 816 Likes: 14 |
I have no idea how this has happened, Speaking to the hosting company now.
Changed all passwords etc.
Streaming: Roon Lounge: LG 65 Oled, Wiim Ultra & Neat SX2; Study: Pro-Ject Pre Box S2 Digital, Quad Vena II & MA; In Storage: M1's, Agent 4's, A500's, 500 series, 602/604/606, G51, Prime, M80 & lots of Quad Storage: Synology NAS (100Tb+); HDMI Matrix: 8x8 HDBaseT, SkyHD. Websites: www.meridian-audio.info
|
|
|
|
|
Joined: May 2004
Posts: 816 Likes: 14
Paranoid android
|
|
Paranoid android
Joined: May 2004
Posts: 816 Likes: 14 |
Will re-enable uploading in a couple of days, want to make a few changes first.
Streaming: Roon Lounge: LG 65 Oled, Wiim Ultra & Neat SX2; Study: Pro-Ject Pre Box S2 Digital, Quad Vena II & MA; In Storage: M1's, Agent 4's, A500's, 500 series, 602/604/606, G51, Prime, M80 & lots of Quad Storage: Synology NAS (100Tb+); HDMI Matrix: 8x8 HDBaseT, SkyHD. Websites: www.meridian-audio.info
|
|
|
|
|
Joined: Jul 2004
Posts: 1,869 Likes: 13
Knows where his towel is
|
|
Knows where his towel is
Joined: Jul 2004
Posts: 1,869 Likes: 13 |
Excellent news Duncan, Thanks indeed
Regards I
Under review
|
|
|
|
|
Joined: Mar 2011
Posts: 35
Harmless
|
|
Harmless
Joined: Mar 2011
Posts: 35 |
Duncs,
From my point of view this looks like a (fairly simple) SQL injection or a Cross Site Scripting attack, which uses the "login.php" page on your site. This is a web attack that is easily preventable. However, it could be a server side issue - that is more serious.
I will run the entire domain through my scanners tomorrow; if I find anything vulnerable that could have caused the attack I will let you know.
Just trying to help!
|
|
|
|
|
Joined: Jan 2001
Posts: 4,014
Vogon Civil Servant
|
|
Vogon Civil Servant
Joined: Jan 2001
Posts: 4,014 |
Hoping Duncan won't mind me bringing this up... At ALL times we own Duncan a debt of Gratitude for maintaining both the Unplugged and Product Info sites... and as we can see, it's a time consuming and headache inducing process... even when those reprehensible hackers are not on the prowl. However, by coincidence, I happen to know that Duncan has been away on holiday while all this BS Hacking raised its head over the past several days... yet you would never have guessed it from Duncan's immediate responses and fixes... whilst keeping both sites up and running... all for our pleasure. Duncan, Carl, Nick, Joel and others should be commended by us all for giving up their precious free time in the Maintenance and Moderation of these sites. A big vote of THANKS from me  Cheers Ronnie
-
|
|
|
|
|
Joined: Jul 2007
Posts: 1,053
Pan-dimensional being
|
|
Pan-dimensional being
Joined: Jul 2007
Posts: 1,053 |
+1
Without this site I would no longer be a Meridian owner. Instead, I'm continuing to upgrade my system and enjoying it more by the day.
Ken
Main: G68J, 5K2s, 5Ks, HSU subs, Pio 151FD, Dish VP722, Roku, Wadia I70, Anti Mode Dual Core, Oppo 103D Vanity Lite
Office: SBT, Berkeley Alpha DAC 2/MQA, Magico S3 Mk II, Boulder 2060, Lumin U1 Mini streamer, Roon.
|
|
|
|
|
Joined: Aug 2002
Posts: 4,579 Likes: 22
President of the Imperial Galactic Government
|
|
President of the Imperial Galactic Government
Joined: Aug 2002
Posts: 4,579 Likes: 22 |
Couldn't agree more.
All of your ongoing endeavours are much appreciated.
Cheers
George
|
|
|
|
0 members (),
531
guests, and
3
robots. |
|
Key:
Admin,
Global Mod,
Mod
|
|
|
Forums18
Topics31,224
Posts297,268
Members5,503
| |
Most Online4,788
May 22nd, 2026
|
|
|
|
Google Search
|
Meridian Systems
|
Meridian Streaming
|
Restaurant
|
WiKi
|
Duncan's Meridian Info
|
Board Rules
|
Restaurant Rules
