A long, long time ago, together with an awesome team of people, I happened to co-organize Ursynalia. Maybe “co-organize” is too big a word, because it was mostly their work… greetings to Kasia, Stefan, and many others.

Sometimes I check their website, impatiently waiting for news about what will happen this year…

And here is a curiosity… Am I really supposed to wait 35 days?! Still, at least it is not a site made in Paint ;-P

Let us see what the page source hides…

Hmm… WordPress 3.8.3 looks a bit old. The current version is already 3.9. But maybe that is a decoy.

Since it is WordPress with a changed front page, let us search further; maybe we can find out who will perform. In another fragment of the code, information is visible that the page has ID = 17.

Let us check:

http://ursynalia.pl/?p=17

It works! For the curious, I recommend changing the ID to others…

http://ursynalia.pl/hello-world/

…but that one could already have been removed ;-P

Let us see whether there are any other posts or subpages not visible from the home page. Check the RSS feed:

http://ursynalia.pl/feed/

This way we learn about… (I will not write it here; you have to click the link yourself)

http://ursynalia.pl/ursynalia-2014-mastodon-i-jelonek-pierwszymi-artystami/

All right, that is enough (legal) playing with the Ursynalia 2014 website.

From a more professional point of view, I will only suggest that an account named “Admin” is worth deleting right away.

Update: Norton Safe Web found “computer threats” on the site: “drive-by downloads”. The report is available there. Screenshot below.