Performancing For Firefox 1.3 has been released. Lots and lots of changes are included in this release. There’s now support for themes and addons. The performancing team has also open sourced Performancing For Firefox, which means anyone can get the source code and modify it as they please.
Some of the new features are listed below:
I’m writing this post with this new version of Performancing. So far nothing unusual. The addons and themes API additions are sweet, hopefully some worthy developers will hack together some neat addons. I’m excited about this new version, it’s opened a lot more doors for Performancing.
Popularity: 4% [?]
Look at the beautiful Ubuntu Billboard WildBill got a photo of as he was driving by.
Pretty neat huh? I’m not a huge Ubuntu fan, but I do appreciate it. If I wasn’t such an avid Slackware user, Ubuntu would be my distro of choice. In fact, I just used the Ubuntu LiveCd yesterday at work to get some needed files off a dying hard drive. Pretty neat, I expect Microsoft billboards, but not Ubuntu. Wonder what it’d take to get a Slackware billboard put up somewhere?
Oh, and as you’d expect, the Ubuntu Blog author is pretty excited about the billboard too.
Popularity: 5% [?]
Isn’t it about time for Beta 1 of Slackware 11 to be released? I’d surely think so, especially with all the updates being made to the slackware-current changelog lately. I was thinking that Patrick would take a chance and make 2.6 the default kernel in Slackware 11, I don’t think that’ll happen now. 2.4.32 or 2.4.33 will most likely be the default kernel found in Slackware 11. I say this due to the changes that have been made to the kernel 2.4.32 packages in -current.
I’ll continue waiting patiently for Slackware 11 Beta 1…
Popularity: 4% [?]
WordPress 2.0.4 has been released.
WordPress 2.0.4, the latest stable release in our Duke series, is available for immediate download. This release contains several important security fixes, so it’s highly recommended for all users. We’ve also rolled in a number of bug fixes (over 50!), so it’s a pretty solid release across the board.
I can’t find any documentation stating the user registration vulnerability has been fixed, but Kelson is reporting it has been taken care of in WordPress 2.0.4. I believe this WordPress release was pushed out quickly due to some information revealed by Dr. Dave earlier in the week.
I’m still not 100% sure that the problems pointed out by Dr. Dave have been fixed. Can anyone confirm that it has been? For those interested, here’s a list of bugs that have been closed as of the 2.0.4 release [via Dougal Campbell].
UPDATE: WordPress 2.0.4 does indeed fix the user registration vulnerability. Dr. Dave has done some testing of his own and seems pretty sure this vuln is fixed. It’s still probably a good idea to disable user registration just to be safe:
As for the “users can register” option: enabling it back should be OK.
I personally will leave it off on my blogs, as I just don’t feel like entrusting strangers with access to wp-admin in the current state of the code (I insist that the aforementioned exploit has been fixed now, I am only being paranoid here).
Popularity: 3% [?]
Dr. Dave, the dude behind Spam Karma, has issued a warning to all WordPress users. A message popped up on my Spam Karma 2 dashboard warning of a potential security vulnerability in WordPress. Here’s part of the warning:
If you are running Wordpress as your blogging platform and if you have been trusting enough to leave User registration enabled for guests, DISABLE IT IMMEDIATELY (in wp-admin >> options: make sure “Anyone can register” is not checked).
Additionally, delete or disable ANY guest account already created by people you are not sure about.
Leaving it open and letting people sign-up for guest accounts on your Wordpress blog could lead to incredibly nasty stuff happening if anybody so desired. And trust me I am not exaggerating this. So don’t wait a second to disable this option and please relay the message.
Now, the WordPress development team was apparently notified a “while back”. They supposedly haven’t done anything yet to rectify this problem. Dr. Dave has received a lot of questions due to his initial post. In turn, he’s made another post in which he addresses some of those questions.
Hopefully we’ll see WordPress 2.0.4 out within a few days.
UPDATE: WordPress 2.0.4 Beta is out. It should be safe to open user registrations under WordPress 2.0.4. I’d expect to see the final 2.0.4 release next week.
[via Ryan Boren]
Popularity: 4% [?]
