Technosailor - Latest Comments in How to Handle Security Flaws

Re: How to Handle Security Flaws

Andy Merrett — Thu, 11 Jan 2007 00:24:44 -0000

"If people have lowered standards of it"

Oh well that bit didn't make sense.

I meant.

"If people have lost respect or lowered their opinion of it,"

Re: How to Handle Security Flaws

Andy Merrett — Thu, 11 Jan 2007 00:23:09 -0000

"Blog Herald is just going down the toilet."

"Blog Heraldâ€™s reputation slipped with me after the purchase from Matt Craven and BlogMedia"

Wow I like a challenge, seeing as some are quite happy to tarnish every new writer at the Blog Herald with the same brush.

That'd be like me dissing everyone who writes a blog at b5media because of "issues" I have with them as an organisation.

Every individual deserves their own chance. BH is evolving. If people have lowered standards of it, or think it's going down the toilet, then that's fine - just stop reading it. It's what I've done (generally) for blogs I dislike.

Re: How to Handle Security Flaws

Ryan — Mon, 08 Jan 2007 17:50:07 -0000

BTW Aaron, I love your site and all that you do for the WordPress community.

Hope there are no hard feelings.

Re: How to Handle Security Flaws

Aaron Brazell — Mon, 08 Jan 2007 17:33:36 -0000

No, frankly, the topic is 3 days old, I've already cleared the air with Tony Hung at BH, and I don't really want to rehash things. You take it as you want it, Ryan.

By the way, BH failed to mention 2 other issues that were fixed in 2.0.6. Recommend actually upgrading instead of thinking you're safe by taking Blog Herald's suggestion.

Re: How to Handle Security Flaws

Ryan — Mon, 08 Jan 2007 17:31:02 -0000

Yeah, it wouldn't have been applicable to the post if you hadn't mentioned your resentment towards them explicitly in the closing paragraph in your post. When you take a pot shot in the body of your post, not to mention the closing comment, the pot shot becomes applicable.

In any case, it seems clear to me that you are totally taking this further then "here's what not to do, do X in the future." You're using this as an opportunity to blast Blog Herald for something that, to me, seemed like a positive act in the general interest of the blogging community.

Script Kiddies don't have quick turnaround. So there was no worry there. Hacker communities are already privy to this sort of knowledge, so that's obviousvly not an issue.

I for one took the Blog Herald's advice and fixed the templates.php file on all my blogs, without having to go through the arduous task of upgrading each one to WP 2.06

Re: How to Handle Security Flaws

Aaron Brazell — Mon, 08 Jan 2007 17:22:18 -0000

It really doesn't matter, Ryan, as my issue with BH has nothing really applicable to this post.

Re: How to Handle Security Flaws

Ryan — Mon, 08 Jan 2007 17:20:33 -0000

Blog Heraldâ€™s reputation slipped with me after the purchase from Matt Craven and BlogMedia

So what exactly caused their reputation to slide in your mind? Was it the way the site has been operated post-sale? Or do you have something against the new owners?

My hope is that you're simply unhappy with the post-sale operation, and that my perception of seeping axe-to-grind cronyism in this post is just an illusion/delusion on my part.

Re: How to Handle Security Flaws

Tony — Mon, 08 Jan 2007 06:44:05 -0000

I agree with you Aaron. Blog Herald is just going down the toilet. It has obviously become an ATM for the new owners and that is said. I'm glad David spun up 901am.

Re: How to Handle Security Flaws

David Krug — Mon, 08 Jan 2007 03:22:40 -0000

Dangerous precidents are set by showing idiots holes they should never know.

Re: How to Handle Security Flaws

Aaron Brazell — Sat, 06 Jan 2007 18:26:28 -0000

Hart: Hackers may not need Abe or me. Script Kiddies do. Until a flaw is publically pointed out, it has to be discovered first.

Re: How to Handle Security Flaws

HART (1-800-HART) — Sat, 06 Jan 2007 18:23:58 -0000

I'll have to be 100% opposite advocate on this one. For a layman who is not a hacker or capable of hacking. If you knew about the problem and there was a patch in beta .. you should have mentioned it just as much as you claim he should not have mentioned it. I am assuming that the people crazy enough to do the hacking doesn't need Abe or the Blog Herald to instruct them how to do it for them.

And .. now you are using beta 2.1? What problems in 2.0.6 is there that makes you want to use 2.1 instead?

Just a little harsh i.m.o.

Re: How to Handle Security Flaws

David — Sat, 06 Jan 2007 17:27:18 -0000

I guess its kinda silly for me to comment on this, but I will anyways.

I 100% agree with everything you have said here...