Mostly about my amusement
Your WordPress site (or any web site you put on the Internet) has value. Take care of it, it is your front yard and what the neighbors see. It’s your front office where you invite people to talk or do business with. Own it and take responsibility for it. Recently on the WordPress support forums,… Read more WordPress Is About Responsibility
Sometimes I do overthink things. I wrote a plugin to protect Gravatar image URLs.
It reads a little like a rant, but you really can’t blame him. I’m not even going to link any of the articles because they have so many inaccuracies you become stupider by reading them. If you’re a web host and you turn a bad file permissions story into a WordPress story, you’re doing something… Read more Yes, but how does Matt really feel?
Here we go. “He’s really an unwelcome guest,” Lautenberg told The Record of Bergen County. “He should be returned to his homeland.” via Controversy swirls over graduate student who breached security at Newark Airport | New Jersey Real-Time News – – NJ.com. This translates into “I’m 85 years old but may want to get re-elected… Read more Village Idiot wants to punish the Newark Scare guy
Nice to see Senator Lautenberg still goes for the sound bite. Is he up for re-election? “This was a terrible deed in its outcome — it wasn’t some prank that didn’t do any harm — it did a lot of harm because it sent out an alert that people can get away with something like… Read more Woo, they got the Newark Scare Guy
WordPress 2.8.6 is out and it’s a security release so update now. I’m expecting the usual complaints on the support forum but so far it’s been pretty sedate. I’ve been using WordPress since version 1.5.2 and I’ve never had a bad upgrade. Of course, I have a good idea what I’m doing and have never… Read more Get your red hot WordPress 2.8.6
Well not really panic, just your usual vulnerability patching day at the office. When I saw Dan Kaminsky demonstrate voice over DNS, I was convinced that he dreams in BIND source code. It was a neat demonstration. Now he has uncovered another vulnerability in BIND regarding UDP source port prediction. It’s causing some excitement in… Read more DNS excitement! Panic at the office!
Over a week ago I complained about WordPress users crying security wolf and not being able to recover their blog when the “Bad Thing(tm)” happens. Since then a real brawl developed on the support forum that could be summed up like so: One or more users is insisting that there is an XMLRPC exploit in… Read more WordPress file monitoring
If you are not running the latest version of WordPress and you get hacked, don’t go to the WordPress forum and tell the world. Odds are you invited the disaster yourself. When WordPress 2.5 came out I was disappointed to find that the old version 2.3.x was basically abandoned. There would be no more planned… Read more Sigh, WordPress users and hacking
See the BUGTRAQ explanation here. By passing arguments to wp-pass.php, the wp-pass.php file will send the requesting browser to the URL that wp_http_refferer points to. By using a simple script the WordPress installation is easily verified as susceptible.