<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Recovering from swine&#8217;s infection (my blog, that is)</title>
	<atom:link href="http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/</link>
	<description>Musings of a computer scientist on predictions, odds, and markets</description>
	<lastBuildDate>Thu, 09 Sep 2010 14:37:02 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
	<item>
		<title>By: gisearch</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-1506</link>
		<dc:creator>gisearch</dc:creator>
		<pubDate>Wed, 13 Jan 2010 06:29:08 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-1506</guid>
		<description>I am a retired military man and also have 2-3 social sites running on server and to keep safe from hackers I use dedicated server and have done all things to keep my sites safe and secured.I read this posts and learnt a lot.Thanks!!</description>
		<content:encoded><![CDATA[<p>I am a retired military man and also have 2-3 social sites running on server and to keep safe from hackers I use dedicated server and have done all things to keep my sites safe and secured.I read this posts and learnt a lot.Thanks!!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: chess online</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-1502</link>
		<dc:creator>chess online</dc:creator>
		<pubDate>Mon, 11 Jan 2010 07:09:16 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-1502</guid>
		<description>I find squidoo, facebook, tumblr blogs very safe.
I always follow these blogs for game related topics and they are really very informative.</description>
		<content:encoded><![CDATA[<p>I find squidoo, facebook, tumblr blogs very safe.<br />
I always follow these blogs for game related topics and they are really very informative.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ricky Deez</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-1400</link>
		<dc:creator>Ricky Deez</dc:creator>
		<pubDate>Thu, 03 Dec 2009 17:45:07 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-1400</guid>
		<description>Wow, sorry to say but corrupting your rss feed only inside Google Reader is actually smart. Like you said, &quot;a virus that sickens but does not kill the patient.&quot; These damn spammers are trying to think of anything they can to sustain their practices.

In my experience, more then likely the file was able to be uploaded through a bad plugin or WordPress hope. My suggestion would be to make sure your WordPress and plugins are always up-to-date.

I was able to find more info on remv.php at: http://www.earnersblog.com/wordpress-remv-hack/</description>
		<content:encoded><![CDATA[<p>Wow, sorry to say but corrupting your rss feed only inside Google Reader is actually smart. Like you said, &#8220;a virus that sickens but does not kill the patient.&#8221; These damn spammers are trying to think of anything they can to sustain their practices.</p>
<p>In my experience, more then likely the file was able to be uploaded through a bad plugin or WordPress hope. My suggestion would be to make sure your WordPress and plugins are always up-to-date.</p>
<p>I was able to find more info on remv.php at: <a href="http://www.earnersblog.com/wordpress-remv-hack/" rel="nofollow">http://www.earnersblog.com/wordpress-remv-hack/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: cubrikaska</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-996</link>
		<dc:creator>cubrikaska</dc:creator>
		<pubDate>Sat, 03 Oct 2009 13:47:39 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-996</guid>
		<description>Felicito, su pensamiento es magnГ­fico</description>
		<content:encoded><![CDATA[<p>Felicito, su pensamiento es magnГ­fico</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Angeline @ change management</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-927</link>
		<dc:creator>Angeline @ change management</dc:creator>
		<pubDate>Wed, 23 Sep 2009 04:46:52 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-927</guid>
		<description>The same happened to one of my friend&#039;s also. His blog was added to spam list of Google search. His account was even banned. The reason behind it was he included adsense and he himself clicked on the advertisements on his blog. Alas! he started off with different account and he learned that he shouldn&#039;t do it :) Angeline @ &lt;a href=&quot;http://www.sunrisesoftware.co.uk&quot; rel=&quot;nofollow&quot;&gt; change management &lt;/a&gt;</description>
		<content:encoded><![CDATA[<p>The same happened to one of my friend&#8217;s also. His blog was added to spam list of Google search. His account was even banned. The reason behind it was he included adsense and he himself clicked on the advertisements on his blog. Alas! he started off with different account and he learned that he shouldn&#8217;t do it <img src='http://blog.oddhead.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  Angeline @ <a href="http://www.sunrisesoftware.co.uk" rel="nofollow"> change management </a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Running WordPress.org on your own servers is a lot harder than just having them hosted {for free} on WordPress.com. &#124; Midas Oracle .ORG</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-840</link>
		<dc:creator>Running WordPress.org on your own servers is a lot harder than just having them hosted {for free} on WordPress.com. &#124; Midas Oracle .ORG</dc:creator>
		<pubDate>Sun, 06 Sep 2009 08:36:52 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-840</guid>
		<description>[...]   Written by Chris F. Masse on September 6, 2009 &#8212; Leave a Comment     That was the hard lesson that life taught to our good doctor David Pennock. And now, it&#8217;s Robert Scobble&#8217;s turn &#8212;some hackers deleted 2 months of his [...]</description>
		<content:encoded><![CDATA[<p>[...]   Written by Chris F. Masse on September 6, 2009 &mdash; Leave a Comment     That was the hard lesson that life taught to our good doctor David Pennock. And now, it&#8217;s Robert Scobble&#8217;s turn &#8212;some hackers deleted 2 months of his [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David Pennock</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-570</link>
		<dc:creator>David Pennock</dc:creator>
		<pubDate>Mon, 20 Jul 2009 15:37:45 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-570</guid>
		<description>Gareth: Sorry to hear. I don&#039;t have precise advice as I never completely diagnosed the problem, but rather I just did a complete backup and restore. It turned out to be less painful than I thought, so you might consider that option if you can&#039;t isolate the problem more directly. Good luck.</description>
		<content:encoded><![CDATA[<p>Gareth: Sorry to hear. I don&#8217;t have precise advice as I never completely diagnosed the problem, but rather I just did a complete backup and restore. It turned out to be less painful than I thought, so you might consider that option if you can&#8217;t isolate the problem more directly. Good luck.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Gareth</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-543</link>
		<dc:creator>Gareth</dc:creator>
		<pubDate>Wed, 15 Jul 2009 09:46:27 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-543</guid>
		<description>Hello... I&#039;ve just had something similar happen, and I&#039;ve looked for odd bits of php... But I can&#039;t find anything.

It seems to only be Google Reader and Google search results... the site itself is fine...

Don&#039;t know what to do! Help, if you have chance, would be very much appreciated.

Some sample search results:

http://www.google.com/search?q=site:http://www.scribeoflight.org/+viagra&amp;hl=en&amp;start=60&amp;sa=N&amp;filter=0</description>
		<content:encoded><![CDATA[<p>Hello&#8230; I&#8217;ve just had something similar happen, and I&#8217;ve looked for odd bits of php&#8230; But I can&#8217;t find anything.</p>
<p>It seems to only be Google Reader and Google search results&#8230; the site itself is fine&#8230;</p>
<p>Don&#8217;t know what to do! Help, if you have chance, would be very much appreciated.</p>
<p>Some sample search results:</p>
<p><a href="http://www.google.com/search?q=site:http://www.scribeoflight.org/+viagra&amp;hl=en&amp;start=60&amp;sa=N&amp;filter=0" rel="nofollow">http://www.google.com/search?q=site:http://www.scribeoflight.org/+viagra&amp;hl=en&amp;start=60&amp;sa=N&amp;filter=0</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David Pennock</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-505</link>
		<dc:creator>David Pennock</dc:creator>
		<pubDate>Wed, 24 Jun 2009 12:06:57 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-505</guid>
		<description>FoolsGold: But how did mucking up my Google Reader feed help sell more viagra? It was just an unintelligible string of spammy keywords and there weren&#039;t even any links. The only plausible theory I&#039;ve heard (from &lt;a href=&quot;http://www.jakehofman.com/&quot; rel=&quot;nofollow&quot;&gt;Jake&lt;/a&gt;) is that they may have been trying to confuse Google&#039;s spam filters.

Robert: Actually I was running an older version of WordPress for some time, so the hacker might have &quot;come in&quot; via an insecure instance of WordPress, not necessarily by breaking in to my hosting service.</description>
		<content:encoded><![CDATA[<p>FoolsGold: But how did mucking up my Google Reader feed help sell more viagra? It was just an unintelligible string of spammy keywords and there weren&#8217;t even any links. The only plausible theory I&#8217;ve heard (from <a href="http://www.jakehofman.com/" rel="nofollow">Jake</a>) is that they may have been trying to confuse Google&#8217;s spam filters.</p>
<p>Robert: Actually I was running an older version of WordPress for some time, so the hacker might have &#8220;come in&#8221; via an insecure instance of WordPress, not necessarily by breaking in to my hosting service.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Robert Felty</title>
		<link>http://blog.oddhead.com/2009/06/22/un-hacking-my-blog/#comment-504</link>
		<dc:creator>Robert Felty</dc:creator>
		<pubDate>Tue, 23 Jun 2009 19:11:08 +0000</pubDate>
		<guid isPermaLink="false">http://blog.oddhead.com/?p=708#comment-504</guid>
		<description>So it sounds like someone else who has an account on your server hacked it. Would there be any other way of someone else uploading files onto your server?</description>
		<content:encoded><![CDATA[<p>So it sounds like someone else who has an account on your server hacked it. Would there be any other way of someone else uploading files onto your server?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
