Mr Mist’s Blog

It’s reported that Captain Pickard, or, in real life, Patrick Stewart, is to be knighted in the New Year honours list. I can only agree, and say “make it so”. A very varied and talented actor, he is.

In other news, we are hearing more confirmation that Schumacher is close to an F1 return with the Mercedes team – though nothing yet from the man himself, or the team. I’m in two minds about this return. I wouldn’t want it to be a damp squib, because he left on a high, but nor would I relish the return to his utter dominance. A good scrap would be interesting.

Loads of peeps were trapped in the Channel Tunnel last night, after freezing temperatures on both sides of the tunnel contributed to a mass break-down of the trains. It appears that on-board staff had not been properly trained in what to do, which is not great. Think everyone is out now, but they were stuck for some time. Not great at all.

Lastly, WordPress 2.9 is out, with bucket loads of new functionality. If you run WordPress on your blog site, you should upgrade now. Make sure your host meets the new requirements first, though – the MySQL and PHP version requirements have increased to 4.1.2 and 4.3 respectively.

Share this article..

WordPress 2.8.3 has been released as a security-related recommended upgrade. The changes fix some loopholes that allowed direct access to a few WordPress include files. Everyone is advised to upgrade their copies as soon as. (Remember with newer versions you can generally use the auto-upgrade functionality especially if your host uses PHP5.)

Share this article..

There seems to be growing evidence that the XSS vunerability in versions of WordPress before 2.8.2 is now being exploited for real in the wild. The manifestation seems to be that, after recieving a maliciously-crafted comment, affected blogs display a login panel

Title: Authentication Required
Text: The server (yourserver) at Magic requires a username and password

It would appear at the moment as though the malicious content can be removed by replacing wp-includes with a fresh copy from the WordPress source for your version. But if I were you I wouldn’t take that chance. I’d upgrade to 2.8.2 now. Otherwise you can’t really be sure that the hack hasn’t stolen any credentials, or caused other changes.

Share this article..

The old – the supposed find of “the missing link” in the shape of a perfectly preserved human-dinosaur hybrid fossil. This must be a fake if ever I heard of one. Already there is a book and TV show around it. Hmm. Impressive media machine, though.

The new – WordPress 2.8 beta 1 is available for testing. If you have a dev platform for your blog, you should get it now and check it out. The more people who test the fewer bugs will hit the release version.

Share this article..

Hi everyone. WordPress 2.7.1 has been released, which fixes a number of issues in the 2.7 release.

Share this article..