A blog about life amidst technology.

Site Was Hacked Last Night


My apolo­gies if you saw a cou­ple of posts about finan­cial news last night on the site or via RSS — some­how a person/​bot cre­ated a user account on my blog with admin­is­tra­tor priv­i­leges and posted a cou­ple of arti­cles. I haven’t fig­ured out any­thing else they might have done but I will be scan­ning the site through­out the day and watch­ing for any­thing else odd.

The place I noticed an odd set­ting was under Set­tings -> Gen­eral (/wp-admin/options-general.php on your Word­Press install):

How My Install Was Configured:

WordPress Settings Anyone Can Register

How It Should Be Configured:

WordPress Settings Anyone Can Register

I don’t think I set it up the way it was with any­one being able to reg­is­ter AND be given Admin­is­tra­tor access — but I have had this blog run­ning for a long time so maybe I did at one point and for­got to turn it off. Or maybe there’s a back­door some­where in one of my plugins?

Sucuri didn’t turn any­thing up but like I said, I’ll keep scan­ning through­out the day. Thanks to @claybitner for point­ing it out to me this morning.

Markdown on Save Improved 2.3 Released

Pre­vi­ously on Twitter:


It went from being a “why would I ever use that?” to “I can’t run a web­site with­out it” in the short­est time of any plu­gin I’ve used on WordPress.

The plu­gin hadn’t been updated in an embar­rass­ingly long time, but I finally got around to fix­ing some bugs around mobile pub­lish­ing and updat­ing the included Mark­down Extra library to the lat­est ver­sion. It won’t go with­out updates so long again.

Mark­down on Save Improved (or MOSI as I pre­fer to call it when I never say it out loud) is devel­oped by Matt Wiebe.

Too Lazy to Blog Episode 9 with Matt Wiebe

Play

Matt Wiebe of Automat­tic joins me to talk all things Word­Press — ver­sion 3.5 was just released as of the record­ing and Matt had a hand in part of the fea­tures. We talk CMS, Word​Press​.com vs Word​Press​.org and how Win­nipeg is sur­viv­ing with­out the Jets this year. (Ok, we didn’t actu­ally cover that last one.)

Notes and Links Discussed

Sub­scribe

Faraway, So Close

Buy This WordPress Theme or Others for 25% Off

Want to buy the theme this blog is cur­rently based on? You can pick it up or one of many other designs this week/​end (until Mon­day at 5pm Pacific Time) for 25% off by vis­it­ing Copy­blog­ger Media’s Black Fri­day Sale.

Genesis Framework

  • Get the Gen­e­sis Frame­work for only $45.
  • Pick up a Gen­e­sis child theme design for less than $20.
  • Snag a Gen­e­sis /​ design combo and save close to $20 (or more).
  • Wipe the entire shop clean by get­ting our Pro Plus All-​​Theme Pack­age. Get Gen­e­sis plus all 46 cur­rent designs, plus every design we make in the future, and save over $950 off the retail price of just the exist­ing 46 designs!

I get an affil­i­ate pay­ment if you do pick up a theme or two so thanks in advance!

Twenty Twelve — WordPress’ New Default Theme Released

The fact that the stock home­page is no longer a list of blog entries (see twen­tyeleven and twen­tyten for the last 2 default themes) says a lot about the direc­tion Automat­tic is hop­ing to take WordPress.

WordPress for iOS Update

Ver­sion 3.1 brings a new user inter­face along with a bunch of other improve­ments to their free iOS app (App Store link):

  • Major UI Refresh!
  • New side­bar menu for quick navigation.
  • Slid­ing pan­els on the iPad for greatly improved nav­i­ga­tion and ease of use.
  • Updated col­ors and graphics.
  • Improved sign up experience.
  • New app icon.
  • Sup­port for Post Formats.
  • Word​Press​.com Reader and Quick Photo added for the iPad.
  • New Sim­ple post pre­view fea­ture for the iPad.
  • All new Word​Press​.com stats.
  • New Word​Press​.com Friend Finder fea­ture helps you find your friends blog­ging on Word​Press​.com.
  • Land­scape ori­en­ta­tion sup­port through­out the app.
  • Easy access to your site – view it and access the web dash­board right from the app.
  • Last but not least — many reli­a­bil­ity improve­ments and per­for­mance tweaks.

Screen­shots

WordPress - Automattic