Just a headsup if you're using a theme that uses TimThumb. Due to all the security issues with the plugin / script (it's a single file) the developers issued a number of updates over the last few days which culminated in the release of version 2. You should also update the file in any themes that are not active OR delete the themes, as the vulnerability is potentially … [Read more...] about TimThumb Updated To Version 2
security
Fine Gael New Website Defaced
Fine Gael's new website has been defaced.Screenshot below:They were the only major political party to still host their website in Ireland up until very recently.UPDATE 2135: The Fine Gael site is now completely offline with this default holder up instead:By the sounds of things the defacement was due to bad coding. People were able to post comments including Javascript which … [Read more...] about Fine Gael New Website Defaced
Hack Eire and Irish CERT Conference
I hate paying to attend events. More often than not the organisers use the event as a "money spinner" and attendees get very little value from it. So it's nice to see that another event is taking place next month which is going to be free to attend and promises to be interesting.IRISS-CERT's Annual Conference is being held on November 19th in the D4 Berkley Court hotel. While … [Read more...] about Hack Eire and Irish CERT Conference
Which Mac OSX Antivirus?
While Macs are a lot less likely to get targetted by viruses there are still some viruses "in the wild" that target them.So which antivirus software should I be using?Which is the best?Which is the worst?Why is one better (or worse) than another?I'm not concerned about costs, but I am concerned about functionality etc., ie. I don't want some RAM hogging pile of junk that leaves … [Read more...] about Which Mac OSX Antivirus?
Scaremongering Stupidity
At some time in the last couple of months an Irish website got hacked and its member database was stolen. The database contained email addresses and the associated passwords to login to the website. The list of email addresses and these passwords was published on a website which has since been taken offline (though you could find it in Google's cache as recently as 48 hours … [Read more...] about Scaremongering Stupidity