Comments on: How to Handle Security Flaws http://technosailor.com/2007/01/05/how-to-handle-security-flaws/ Business and Technology with Common Sense Wed, 23 May 2012 22:55:36 +0000 hourly 1 http://wordpress.org/?v=3.4-beta4-20841 By: Andy Merrett http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41403 Andy Merrett Thu, 11 Jan 2007 00:24:44 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41403 "If people have lowered standards of it" Oh well that bit didn't make sense. I meant. "If people have lost respect or lowered their opinion of it," “If people have lowered standards of it”

Oh well that bit didn’t make sense.

I meant.

“If people have lost respect or lowered their opinion of it,”

]]> By: Andy Merrett http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41402 Andy Merrett Thu, 11 Jan 2007 00:23:09 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41402 "Blog Herald is just going down the toilet." "Blog Herald’s reputation slipped with me after the purchase from Matt Craven and BlogMedia" Wow I like a challenge, seeing as some are quite happy to tarnish every new writer at the Blog Herald with the same brush. That'd be like me dissing everyone who writes a blog at b5media because of "issues" I have with them as an organisation. Every individual deserves their own chance. BH is evolving. If people have lowered standards of it, or think it's going down the toilet, then that's fine - just stop reading it. It's what I've done (generally) for blogs I dislike. “Blog Herald is just going down the toilet.”

“Blog Herald’s reputation slipped with me after the purchase from Matt Craven and BlogMedia”

Wow I like a challenge, seeing as some are quite happy to tarnish every new writer at the Blog Herald with the same brush.

That’d be like me dissing everyone who writes a blog at b5media because of “issues” I have with them as an organisation.

Every individual deserves their own chance. BH is evolving. If people have lowered standards of it, or think it’s going down the toilet, then that’s fine – just stop reading it. It’s what I’ve done (generally) for blogs I dislike.

]]> By: Ryan http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41401 Ryan Mon, 08 Jan 2007 17:50:07 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41401 BTW Aaron, I love your site and all that you do for the WordPress community. Hope there are no hard feelings. BTW Aaron, I love your site and all that you do for the WordPress community.

Hope there are no hard feelings.

]]> By: Aaron Brazell http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41400 Aaron Brazell Mon, 08 Jan 2007 17:33:36 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41400 No, frankly, the topic is 3 days old, I've already cleared the air with Tony Hung at BH, and I don't really want to rehash things. You take it as you want it, Ryan. By the way, BH failed to mention 2 other issues that were fixed in 2.0.6. Recommend actually upgrading instead of thinking you're safe by taking Blog Herald's suggestion. No, frankly, the topic is 3 days old, I’ve already cleared the air with Tony Hung at BH, and I don’t really want to rehash things. You take it as you want it, Ryan.

By the way, BH failed to mention 2 other issues that were fixed in 2.0.6. Recommend actually upgrading instead of thinking you’re safe by taking Blog Herald’s suggestion.

]]> By: Ryan http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41399 Ryan Mon, 08 Jan 2007 17:31:02 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41399 Yeah, it wouldn't have been applicable to the post if you hadn't mentioned your resentment towards them explicitly in the closing paragraph in your post. When you take a pot shot in the body of your post, not to mention the closing comment, the pot shot becomes applicable. In any case, it seems clear to me that you are totally taking this further then "here's what not to do, do X in the future." You're using this as an opportunity to blast Blog Herald for something that, to me, seemed like a positive act in the general interest of the blogging community. Script Kiddies don't have quick turnaround. So there was no worry there. Hacker communities are already privy to this sort of knowledge, so that's obviousvly not an issue. I for one took the Blog Herald's advice and fixed the templates.php file on all my blogs, without having to go through the arduous task of upgrading each one to WP 2.06 Yeah, it wouldn’t have been applicable to the post if you hadn’t mentioned your resentment towards them explicitly in the closing paragraph in your post. When you take a pot shot in the body of your post, not to mention the closing comment, the pot shot becomes applicable.

In any case, it seems clear to me that you are totally taking this further then “here’s what not to do, do X in the future.” You’re using this as an opportunity to blast Blog Herald for something that, to me, seemed like a positive act in the general interest of the blogging community.

Script Kiddies don’t have quick turnaround. So there was no worry there. Hacker communities are already privy to this sort of knowledge, so that’s obviousvly not an issue.

I for one took the Blog Herald’s advice and fixed the templates.php file on all my blogs, without having to go through the arduous task of upgrading each one to WP 2.06

]]> By: Aaron Brazell http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41398 Aaron Brazell Mon, 08 Jan 2007 17:22:18 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41398 It really doesn't matter, Ryan, as my issue with BH has nothing really applicable to this post. It really doesn’t matter, Ryan, as my issue with BH has nothing really applicable to this post.

]]> By: Ryan http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41397 Ryan Mon, 08 Jan 2007 17:20:33 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41397 Blog Herald’s reputation slipped with me after the purchase from Matt Craven and BlogMedia So what exactly caused their reputation to slide in your mind? Was it the way the site has been operated post-sale? Or do you have something against the new owners? My hope is that you're simply unhappy with the post-sale operation, and that my perception of seeping axe-to-grind cronyism in this post is just an illusion/delusion on my part. Blog Herald’s reputation slipped with me after the purchase from Matt Craven and BlogMedia

So what exactly caused their reputation to slide in your mind? Was it the way the site has been operated post-sale? Or do you have something against the new owners?

My hope is that you’re simply unhappy with the post-sale operation, and that my perception of seeping axe-to-grind cronyism in this post is just an illusion/delusion on my part.

]]> By: Tony http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41396 Tony Mon, 08 Jan 2007 06:44:05 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41396 I agree with you Aaron. Blog Herald is just going down the toilet. It has obviously become an ATM for the new owners and that is said. I'm glad David spun up 901am. I agree with you Aaron. Blog Herald is just going down the toilet. It has obviously become an ATM for the new owners and that is said. I’m glad David spun up 901am.

]]> By: David Krug http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41395 David Krug Mon, 08 Jan 2007 03:22:40 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41395 Dangerous precidents are set by showing idiots holes they should never know. Dangerous precidents are set by showing idiots holes they should never know.

]]> By: Aaron Brazell http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41394 Aaron Brazell Sat, 06 Jan 2007 18:26:28 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41394 Hart: Hackers may not need Abe or me. Script Kiddies do. Until a flaw is publically pointed out, it has to be discovered first. Hart: Hackers may not need Abe or me. Script Kiddies do. Until a flaw is publically pointed out, it has to be discovered first.

]]> By: HART (1-800-HART) http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41393 HART (1-800-HART) Sat, 06 Jan 2007 18:23:58 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41393 I'll have to be 100% opposite advocate on this one. For a layman who is not a hacker or capable of hacking. If you knew about the problem and there was a patch in beta .. you should have mentioned it just as much as you claim he should not have mentioned it. I am assuming that the people crazy enough to do the hacking doesn't need Abe or the Blog Herald to instruct them how to do it for them. And .. now you are using beta 2.1? What problems in 2.0.6 is there that makes you want to use 2.1 instead? Just a little harsh i.m.o. I’ll have to be 100% opposite advocate on this one. For a layman who is not a hacker or capable of hacking. If you knew about the problem and there was a patch in beta .. you should have mentioned it just as much as you claim he should not have mentioned it. I am assuming that the people crazy enough to do the hacking doesn’t need Abe or the Blog Herald to instruct them how to do it for them.

And .. now you are using beta 2.1? What problems in 2.0.6 is there that makes you want to use 2.1 instead?

Just a little harsh i.m.o.

]]> By: David http://technosailor.com/2007/01/05/how-to-handle-security-flaws/comment-page-1/#comment-41392 David Sat, 06 Jan 2007 17:27:18 +0000 http://www.technosailor.com/how-to-handle-security-flaws/#comment-41392 I guess its kinda silly for me to comment on this, but I will anyways. I 100% agree with everything you have said here... I guess its kinda silly for me to comment on this, but I will anyways.

I 100% agree with everything you have said here…

]]>