Original ExistDifferently.com Weblog of David, a Christian Network and Systems Manager, with topics ranging from Apologetics to Worldview, and some crypto, open source, programming, opinion, and daily life thrown in between.

Fri, 2007-03-09 (Mar 09)

Parisian: Highest Prices?

Filed under: Funny,Photos — David @ 00:01

Parisian Price Guarantee?

We were strolling through a mall with my in-laws about a month ago and my father in law pointed out the irony of this sign.

If I ever own a store, remind me not to advertise to customers about our most expensive prices ever!

Or at least, remind me to hire someone (my wife’s good at it!) to proofread the materials!

Because it’s a guarantee, I wonder if I were to buy something (hypothetically), if the price went up would I have to return it and pay the higher price to keep them honest?

Sun, 2007-03-04 (Mar 04)

WordPress 2.1.1 Dangerous, upgrade!

The official WordPress development blog is reporting that WordPress version 2.1.1 was compromised by a malicious hacker and anyone who downloaded that version in the past several days needs to upgrade immediately to version 2.1.2. Many more details at that link; I checked the two files they mentioned (feed.php and theme.php in the wp-includes folder) and I got one of the infected versions! If you do a “diff” and compare an infected file with one from the 2.1.2 download the infected line becomes obvious. The vulnerability, as far as I can tell, allows an attacker to easily execute any command on the system that’s allowed by the user PHP is running as by using a specially (but easily) crafted query string.

I’m still running 2.0.3 here as I write this, but I’m going to upgrade to 2.0.9 soon; I can’t run the 2.1.* series yet because I don’t have MySQL 4+ installed on my server yet.

Thanks to a post from security blogger Martin McKeay that was my first warning!

Powered by WordPress