security

Just in time for August, another security release for the WordPress 2.8.x code line is now available to the public. According to Ryan, there were some security vulnerabilities that were uncaught by the previous release (2.8.2), that were noticed and fixed for this latest version. Like the previous version of WordPress, this one is recommended [...]

As many of you who happen to blog via WordPress are waking up to this, you may have noticed that WordPress 2.8.2 is now available for download/updating. Yep, that’s right: version 2.8.2. For those of you who have just completed your due diligence and your blog upgrades, this may be one of those “Gotcha!” moments [...]

During today’s security patching of Javamancy, there were a few syntax errors in one of the configuration files. As a result, you may have experienced a HTTP Error 500 on at least one of the pages that comprise the weblog. The outage lasted for a little over one hour, but it may have felt a [...]

I managed to catch part of the broadcast of Obama’s town hall meeting earlier today. It was quite interesting in the response from the public, especially those who were leveraging the Internet to tap into it and, in some cases, actually pose questions for the President to answer. The town hall meeting was touted by [...]

Javamancy Updated VIII

December 17, 2008 at 2:00 PM · 1 comment

in Operations

Earlier today, Javamancy has completed the upgrade to WordPress 2.7…

Javamancy Updated VII

November 29, 2008 at 7:18 AM · 1 comment

in Operations

Javamancy has completed the upgrade to WordPress 2.6.5. Thanks for being patient with us. A lot of you fellow bloggers have been upgrading your WordPress blogs as well, so hopefully it’s been relatively uneventful for you. There was a lot of cruft excised as well (hopefully you won’t see any of it!), so it certainly [...]

WordPress 2.6.5 was released yesterday to address one critical security exploit and three additional bugs. The major security issue: there appears to be an interesting quirk that manifests as a potential cross-site scripting (XSS) exploit that impacts Apache 2.x IP-based virtual hosts. As reported by the WordPress folks themselves, they’ve released version 2.6.5 once they [...]

Trojaned WordPress Being Circulated

November 6, 2008 at 3:15 PM

in Social Software

Peter Westwood has described in his blog an attempt by an unscrupulous punk to distribute a trojaned version of WordPress. Warning to WordPress Developers, Users, and Aficionados We at DevPal and Javamancy do not condone retrieval of un-vetted copies of the WordPress software. When downloading WordPress, please fetch it directly from wordpress.org; rather than blindly following [...]

Javamancy Updated IV

October 26, 2008 at 4:15 PM

in Operations

Javamancy has completed the upgrade to WordPress 2.6.3. Thanks for being patient with us. A lot of you fellow bloggers have been upgrading your WordPress blogs as well, so hopefully it’s been relatively uneventful for you. For us, we’ve been experimenting with a new technique for managing the Javamancy comment system during software upgrades, so [...]

WordPress 2.6.3 was released yesterday amidst statements that the PHP Snoopy library that WordPress uses to populate the RSS feeds in the Dashboard has a vulnerability (according to the Secunia folks). Secunia has reported on security vulnerabilities and exploits found in WordPress in the past. Secunia’s advisory on this subject simply recommends upgrading the Snoopy [...]