{"id":27,"date":"2007-05-07T16:01:45","date_gmt":"2007-05-07T16:01:45","guid":{"rendered":"http:\/\/davidgerard.co.uk\/notes\/2007\/05\/07\/tubgirl-is-love\/"},"modified":"2007-05-07T16:43:18","modified_gmt":"2007-05-07T16:43:18","slug":"tubgirl-is-love","status":"publish","type":"post","link":"https:\/\/davidgerard.co.uk\/notes\/2007\/05\/07\/tubgirl-is-love\/","title":{"rendered":"Tubgirl is Love."},"content":{"rendered":"<p>An English Wikipedia admin account just got compromised and <a href=\"http:\/\/en.wikipedia.org\/w\/index.php?title=Special%3ALog&#038;type=&#038;user=Jiang&#038;page=\">abused<\/a> <i>again<\/i>, because the admin <a href=\"http:\/\/en.wikipedia.org\/wiki\/User_talk:Jiang#Blocked\">used &#8220;fuckyou&#8221; as a password<\/a>. That&#8217;s the sixth most <a href=\"http:\/\/geodsoft.com\/howto\/password\/common.htm\">common password<\/a>, I think. The main page was deleted for five minutes and <a href=\"http:\/\/en.wikipedia.org\/wiki\/Shock_site#Tubgirl.com\">Tubgirl<\/a> was put in the <a href=\"http:\/\/en.wikipedia.org\/wiki\/MediaWiki:Sitenotice\">sitenotice<\/a>.<\/p>\n<p><a href=\"http:\/\/meta.wikimedia.org\/wiki\/User:Brion_VIBBER\">Brion<\/a> and <a href=\"http:\/\/commons.wikimedia.org\/wiki\/User:Gmaxwell\">Greg<\/a> are (right now) running a password cracker over the <a href=\"http:\/\/en.wikipedia.org\/wiki\/Special:Listusers?group=sysop\">admin accounts<\/a>. If you want to keep your admin bit and know, deep in your heart, that your password is a bit rubbish, I strongly suggest changing it or it <i>will<\/i> be locked. Hint: if it shows up in Google, it&#8217;s a rubbish password. Or enter it into the search box at the right of this page with your username &mdash; I have a, uh, phishing detector running there. Yes, that&#8217;s it. A note on the subject has been added to <a href=\"http:\/\/en.wikipedia.org\/wiki\/Wikipedia:Administrators#Becoming_an_administrator\">Wikipedia:Administrators<\/a>.<\/p>\n<p>Now we eagerly await <a href=\"http:\/\/meta.wikimedia.org\/wiki\/Help:Unified_login\">Single Crack 0wnz0ring<\/a>. Normal people just <i>don&#8217;t get<\/i> passwords. I used to do dial-up Internet tech support. &#8220;What do you want for a password?&#8221; &#8220;Oh, [<i>username<\/i>].&#8221; &#8220;I&#8217;m sorry, you can&#8217;t have it be the same.&#8221; &#8220;Oh, [<i>username<\/i>]1.&#8221; Suggestions? Assume we can&#8217;t require an <a href=\"http:\/\/www.rsa.com\/node.aspx?id=1311\">RSA keyfob<\/a> for all editors.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An English Wikipedia admin account just got compromised and abused again, because the admin used &#8220;fuckyou&#8221; as a password. That&#8217;s the sixth most common password, I think. The main page was deleted for five minutes and Tubgirl was put in the sitenotice. Brion and Greg are (right now) running a password cracker over the admin &hellip; <a href=\"https:\/\/davidgerard.co.uk\/notes\/2007\/05\/07\/tubgirl-is-love\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Tubgirl is Love.&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4],"tags":[],"class_list":["post-27","post","type-post","status-publish","format-standard","hentry","category-wiki"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4FmVR-r","_links":{"self":[{"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/posts\/27","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/comments?post=27"}],"version-history":[{"count":0,"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/posts\/27\/revisions"}],"wp:attachment":[{"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/media?parent=27"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/categories?post=27"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/davidgerard.co.uk\/notes\/wp-json\/wp\/v2\/tags?post=27"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}