Antti-Juhani Kaijanaho
Rumors of a WordPress security hole

« Moved — Teeveessä tänään Pirk »
27.7.2006 klo 11:21 — Blogistan, English —

See Dr Dave » Blog Archive » Critical Announcement affecting ALL WordPress users. I don’t know if this is a hoax or for real, but since the price for believing this in the first case is merely a slight embarrassment, I’m taking this advice.

5 kommenttia

Johannes Berg sanoo:
27.7.2006 klo 12:08
Maybe this is along the lines of http://www.lightbluetouchpaper.org/2006/06/22/oracle-attack-on-wordpress/
Jon sanoo:
27.7.2006 klo 17:51
When I last evaluated wordpress for security, I was annoyed particularly with

a) the announce mailing list not being posted to when releases are made
b) bundling security fixes up with other, more major changes
c) releasing more than one release with the same version number *without telling anyone*
sdf sanoo:
27.7.2006 klo 18:59
when dr. dave is talking, i believe. for good reason. his spam karma 2 is still one of the best solutions for blogspam.

matt (wp-”guru”) on the other hand found it ok to sell a hidden frame on wordpress to google spammers.

i leave it to the readers to decide who’s stories are more plausible.
The Code Cave sanoo:
28.7.2006 klo 6:37
[...] Thanks to some drastic and controversial actions taken by SpamKarma creator Dr. Dave, a large percentage of the blogging populace has been alerted to a security hole in WordPress. He even went to the effort of activating a warning message that was sent out to everyone who uses his SK2 plugin. This has resulted in a lot of fear spreading amoung a huge number of bloggers. This sort of thing just spreads exponentialy. Here’s a quasi random sampling of two dozen of the first posts on it: ………………….. And these were just from the English blogs that post about this on the same day as the notice going out. The neat thing is that these are some of the most on-top-of-things bloggers out there. Those 24 blogs have some great content and gread visual styles. The are well worth perusing… [...]
wolfgang.lonien.de » Blog Archive » Wordpress vulnerability? sanoo:
4.8.2006 klo 12:30
[...] There could be a vulnerability in WordPress. First I read about it here (via Planet Debian), then on the OP (original poster)’s blog. [...]