[]
FYI on all that blog spam from people trying to get you to
visit their Blogspot blogs:

In an attack that showcases what cyber criminals have in
store for Web 2.0 next year, the individual or group
behind the Storm worm is distributing new versions of
the malware with the help of hijacked and newly-created
Google Blogspot blogs.

[ ... ]

Security Fix recently was made aware of another,
unrelated way that criminals are using Blogspot blogs to
redirect traffic toward malicious sites. Clicking on
links anywhere on this Blogspot site -- which appears to
be a strange mock-up of a Bank of America phishing
e-mail - takes you to a nicely-done Bank of America
phishing site that is still active as of this writing.

This particular phishing site uses what's known as a
man-in-the-middle attack, so when you pass your logon
credentials to the phishing site, it will actually log
you in at the real Bank of America Web site while
stealing your credentials.

http://blog.washingtonpost.com/secur...=news-col-blog
--
Melinda Shore - Software longa, hardware brevis -

Prouder than ever to be a member of the reality-based community

(Melinda Shore) wrote in news:fl2ns4$bqq$1
@panix3.panix.com:

[]
FYI on all that blog spam from people trying to get you to
visit their Blogspot blogs:

In an attack that showcases what cyber criminals have in
store for Web 2.0 next year, the individual or group
behind the Storm worm is distributing new versions of
the malware with the help of hijacked and newly-created
Google Blogspot blogs.

[ ... ]

Security Fix recently was made aware of another,
unrelated way that criminals are using Blogspot blogs to
redirect traffic toward malicious sites. Clicking on
links anywhere on this Blogspot site -- which appears to
be a strange mock-up of a Bank of America phishing
e-mail - takes you to a nicely-done Bank of America
phishing site that is still active as of this writing.

This particular phishing site uses what's known as a
man-in-the-middle attack, so when you pass your logon
credentials to the phishing site, it will actually log
you in at the real Bank of America Web site while
stealing your credentials.

http://blog.washingtonpost.com/secur...=news-col-blog

I use blogspot and I don't understand this post. Can my site be hijacked
without my knowing about it? Wouldn't it look different? Mine is just a
blog, I'm not selling anything. Is it safe to keep my blog on blogspot?
What do you think? Would any of the other basic blogging sites be safer,
if blogspot it not?

--
Catherine
& Zoe, Queenie, & Max, 3 black dogs of varying sizes
& Rosalie the calico cat
www.ourladyofperfection.blogspot.com

In article ,
ceb wrote:
I use blogspot and I don't understand this post. Can my site be hijacked
without my knowing about it?

I don't know. Apparently there's some consensus that the
worm links are being inserted through some sort of hole in
the feature that allows you to mail in blog posts.

Is it safe to keep my blog on blogspot?
What do you think? Would any of the other basic blogging sites be safer,
if blogspot it not?

I really don't know. I'd try to shore things up the best I
could, in any event. If there are Blogspot settings that
allow you to disable submitting via email, for example, I'd
go with that, and I expect I wouldn't use my most commonly-
used email addresses as the address associated with the
blog, or use the same administrative email address as the
blog email address (if you can dissociate them), and so on.

I think the main risk is to visitors, who might find the
titillating descriptions of the links irresistible.
--
Melinda Shore - Software longa, hardware brevis -

Prouder than ever to be a member of the reality-based community

(Melinda Shore) wrote in news:fl344k$kef$1
@panix3.panix.com:

I think the main risk is to visitors, who might find the
titillating descriptions of the links irresistible.


Are you making fun of my total inability to think up interesting
titles???

Thanks for the info. I'll disable the email submission, which I don't use
anyway because I don't know why I would. I don't think my email addy is
up there but I'll double-check.

Thanks, Melinda.

--
Catherine
& Zoe, Queenie, & Max, 3 black dogs of varying sizes
& Rosalie the calico cat
www.ourladyofperfection.blogspot.com