Gossamer's Lake Tahoe Web Design

This morning we received a security warning for php5-5.2.10

Affected package: php5-5.2.10
Type of problem: php5 — Multiple security issues.
Reference: <http://portaudit.FreeBSD.org/437a68cf-b752-11de-b6eb-00e0815b8da8.html>

Since we received the entire 5.2.11 release a day or two ago we went ahead and upgraded the entire php installation. The following modules were upgraded:

• pecl-fribidi-1.0
• php5-5.2.11_1
• php5-bcmath-5.2.11_1
• php5-bz2-5.2.11_1
• php5-calendar-5.2.11_1
• php5-ctype-5.2.11_1
• php5-curl-5.2.11_1
• php5-dba-5.2.11_1
• php5-dbase-5.2.11_1
• php5-dom-5.2.11_1
• php5-exif-5.2.11_1
• php5-ftp-5.2.11_1
• php5-gd-5.2.11_1
• php5-gettext-5.2.11_1
• php5-iconv-5.2.11_1
• php5-imap-5.2.11_1
• php5-mbstring-5.2.11_1
• libltdl-2.2.6a_1
• php5-mcrypt-5.2.11_1
• php5-mhash-5.2.11_1
• php5-mssql-5.2.11_1
• php5-mysql-5.2.11_1
• php5-mysqli-5.2.11_1
• php5-openssl-5.2.11_1
• php5-pcre-5.2.11_1
• php5-pdo-5.2.11_1
• php5-pdo_sqlite-5.2.11_1
• php5-posix-5.2.11_1
• php5-session-5.2.11_1
• php5-simplexml-5.2.11_1
• php5-soap-5.2.11_1
• php5-spl-5.2.11_1
• php5-sqlite-5.2.11_1
• php5-tokenizer-5.2.11_1
• php5-xml-5.2.11_1
• php5-xmlreader-5.2.11_1
• php5-xmlwriter-5.2.11_1
• php5-zip-5.2.11_1
• php5-zlib-5.2.11_1

Yet another WordPress plugin upgrade:

• All in One SEO Pack – Version 1.6.7

The following WordPress plugins were upgraded today:

• eShop for Wordpress – Version 3.7.4
• Page Tree – Version 2.1
• Platinum SEO Pack – Version 1.3
• Sociable – Version 3.5.1
• Wordpress Download Monitor – Version 3.2.3
• WP-SpamFree – Version 2.1.0.9

Since implementing scanning procedures to search and destroy the elusive picscout bot I have noticed other activity which I believe is related. My logs show a great deal of activity from IPs tracing back to amazonaws.com that are direct requests for information that does not exist, nor would any reasonably informed search bot issue such a query.

My guess is that the amazonaws.com legal department is on a search mission for Apple related images and applications. The search is on for apple-touch-icon.png, /m, /mobile, /mobi, /iphone, & /pda.

What’s next? Are they going to search my BlackBerry for iPhone apps?

This type of behavior is unacceptable. The notion that the legal department of amazonaws.com believes that they have the right to search anyone’s server without any type of cause is simply un-American.

It’s this type of behavior I’ll block from my server in an instant.