On Kottu’s Security


Ok, er, wow. Now Nibras Bawa is sending out mails threatening to hack Kottu. Is it possible to break Kottu? Yes, I do it all the time. However, it’s simply impossible to destroy peoples content as Bawa claims. Kottu is an aggregator. It doesn’t host any content at all. I’ve completely crashed Kottu and been able to reconstitute it in 10 minutes. It’s basically WordPress plus a few plugins and a blogroll. The beauty of an aggregator is that all the content is on a hundred other sites and the aggregator can be rebuilt anywhere.

I think Bawa is just trying to spread fear, so my recommendation is to just ignore him. Don’t correspond with him over email, when I get to a certain point with trolls I just set up a GMail filter to send their mails directly to trash.

Is Kottu in danger? I dunno, don’t think so, as judging by his mail he doesn’t even seem to understand what it is. Even if he did knock over Kottu it wouldn’t remove any of the posts (which are on other sites). I can just reboot the server and start over.

So basically, even if he can somehow figure out and attack Kottu, it still won’t delete any of the posts he’s worried about. None of those are centrally hosted. Also, Kottu is pretty well secured by now.

So, don’t worry, and feel free to delete any further mails from this character. I seriously recommend cutting off contact with him or forwarding the mails to me. He’s basically threatening ‘violence’ and attacks now. Per Kottu, that site is A) secured B) easily rebuilt and C) not the actual host of any content.

Though I find it distasteful, I have no ‘official’ position on the insults and hurt feelings going around. My only concern is that peoples privacy is being violated. In one of his ultimatums Bawa mentioned that he’d go back to the global blogosphere and leave this scene alone. I hope he does.

RSS feed | Trackback URI

9 Comments »

n
2009-04-27 13:36:46

How are you managing with the massive amount of sites on Kottu? Has scalability become a problem, or have you tweaked the plugin to manage?

 
2009-04-27 13:37:13

Jeez, what a lowlife! To think that this same guy is actually a fairly popular personality….:(

2009-04-27 14:08:15

where? I’ve never heard of him before

 
 
n
2009-04-27 13:39:59

Speaking of Kottu, It’s been a while since you had a kottu meetup right? What do you think about the idea of having one at Barefoot?

 
2009-04-27 17:08:37

[...] seems we’ve been doing that again, and this time I’ve been at the back of the line not getting any of the action; a fine tag [...]

 
2009-04-30 00:59:51

Ohh… poor guy Nibras Bawa show up again! :D

Anyway, after reading his blog posts, I feel that he’s a noob. I don’t want to laugh at others’ inability, but, this guy want’s nothing but to show up.

Dear bloggers, don’t be afraid. Hacking Kottu is not easy as Nibras claims. Indi can do it because he knows how it is organized. But for others it can take some considerable amount of time. No need to be afraid at all — I mean hacking Kottu doesn’t affect the original content as Indi said.

Nibras is not the first person who wanted to hack into another person’s blog. Many people may have tried to hack WordPress. Then, would WordPress developers wait till that? WordPress is pretty secure now.

 
2009-05-04 13:18:41

hey who removed jarabaraas bawa from kottu? dude he was so much fun. please please can we have him back?

 
2009-05-04 13:19:49

oh and while you’re at it, put me back on kottu as well! feed me some kottu!

 
2009-05-04 13:22:45

[...] you removed Jarabaraas from Kottu? Padashow said some pretty nasty things to you but you didn’t kick him out of the [...]

 
Name (required)
E-mail (required - never shown publicly)
URI
Your Comment (smaller size | larger size)
You may use <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> in your comment.

email indi AT indi.ca.


Recent Comments


You’re Nobody Till (45)

Regewaypere2: Asortyment uzupe?nia Outcast przestrzenna uciecha przygodowa i klisza Setnie Speedway. Nu?e na godzin? poprzednio wschodem s?o?ca nieruchomosci odby? wspomnian? z wykorzystaniem Benwolia przechadzk? w gaju sykomorowym mamy w...

Sarath Fonseka And Minority Politics (9)

tastyjujubes: Being more “Tamil 221; is not going to help the Sri Lankan Tamils to be honest. Being even more insular, introverted and ethnocentric is not going to help the Tamil people. The Tamils of Sri Lanka live on an island with a...

Ramesh: Tamils,particul arly those in the norh consider themselves a distinct entity separate from sinhalese people.So if they vote for sinhala political parties, there unique identity gets diluted.When they vote for a tamil party in numbers,they...

New New Kottu (4)

Saj: This looks cool. Without knowing about the upgrade i was accessing kottu from my phone.. Yea it looks like an app. Why dont u think about creating an app? :)

tastyjujubes: Have to say the pink colour used on the dark grey background on the top is a bit of an eyesore. Everything else looks great.

tastyjujubes: I remember the days when Sinhala was basically nonexistent and the blogosphere was dominated by a few folks with narrow minds – look at it now… It’s great.

General Sarath Fonseka Out Soon? (11)

tastyjujubes: I just wrote the above and then went to google news about Lanka and was met with this: Sri Lanka ‘must face war probes’ Sri Lanka must co-operate with any international investigation into alleged war crimes, ex-army chief...

tastyjujubes: Sarath Fonseka is a symbol of division. Even his release has divided society in general (well, at least Sinhalese society in general) and not united it going by the reaction of various people.

Lankan Thinker: I have a suspicion the government will restore SFs right to engage in political activity since his participation will effectively split the opposition votes – and is unlikely to attract any more support from the government&...

Buying Appliances Online (Singer) (5)

indi: Dude, she comes once a week and I pay Rs. 750. It’s a great deal I think.

Why Does India Suck At The Olympics?

Today on the morning show we talked about the Olympics, namely China’s emerging dominance. For me the bigger question is India. Why does India suck so much? In 2008 the US won 110 medals, China won 100 and India won… 3. India has over a billion people, some economic clout and is by all counts an emerging superpower, but they suck at the Olympics. Why?

New New Kottu

Janith has updated Kottu with rims and shit. Seriously, it looks pretty good. You could say the desktop look is cosmetic, but check out the mobile. Kottu now looks like an app with settings and menus and such. The biggest problem with K2 is me, ie, it now takes me up to a month to respond to emails. OMG I’m scared of my email. But Janith’s done this code and design update all by himself and it looks pretty good. Check it out. There was one bug with the previous page link. Lettuce know if there’s any more.

Miss Travel. Alternately, Mistravel

This is highly dubious. Miss Travel is a travel/social networking site that connects ‘Generous’ and ‘Attractive’ travelers. To, like, travel together, I guess. It all seems a bit like arranged prostitution and trafficking. This is part of a broader online trend to connect rich men to younger, attractive women. Sites like seekingarrangement.com connects women to ‘sugar daddies’ already. I guess Miss Travel is just taking that trend international. Wait, I checked, it’s the same guy doing both.

Buying Appliances Online (Singer)

Sri Lankan domestics never say anything, they just stop coming. My maid just stopped coming and when I finally pressed her she said I needed to get a washing machine. I was hoping to ride this one out, but I’ve run out of underwear and I have no choice. I finally caved and bought a washing machine, from Singer, ONLINE. I put the online in all caps because it’s pretty awesome. I ordered the thing in like 15 minutes on Saturday and they just delivered it today. It’s pretty awesome, this brave new world.