Just ran into this news story on Slashdot. Even though these kind of news usually turn out to be somewhat sensationalistic, I thought some of you might like to discuss this here.Full Story

If you are trying to start a discussion, I think this demonstrates the necessity of good security practices, particularly with web servers. As far as I could tell, ngix, was simply the tool a hacker used to serve the malicious web pages. It appears ngix is web server software similar to tomcat. The key is to get it running, and it appears that the hackers gained root access on the machines to do this.

Remember to change the root password frequently, and to use twenty or more random characters for the password. Yes, I know its a pain, but which is more important, convenience or safety.