I need to post more in here… time to blow off some of the dust.
So, what has been keeping me busy? Well, earlier this year I finished my new “food blog” which I talked about here. It’s really great… I’m spending 90% of my time over there, so please go check it out:
Food Geekery: Real Food. Real Geek.
I even gave it its own Facebook fan page (go be a fan… I’d appreciate it):
Food Geekery on Facebook
So what does this mean for FlishFun.com? Nothing. Don’t worry, I’ll still be around to postmy randomness… more updates will be on the food side of things (as it is my new hobby), but I still need a place to put my political, technical and other random posts, so don’t you worry. Just be sure to head over to Food Geekery and look around the place! 
I decided to bite the bullet and upgrade to WordPress 2.7b3. In a word… beautiful. They’ve completely redesigned the dashboard and it makes the entire thing seem very modern.
You can download the Beta here:
WordPress 2.7 Beta 3
Here is some info about it (new features, at least):
So far I don’t seem to be having any issues, so, fingers crossed!!
WordPress 2.6.3 is out, I’ve updated, and all seems well in the world! Hooray for progress!
Updated to WordPress 2.6.2… seems there’s a big issue with previous versions:
Stefan Esser recently warned developers of the dangers of SQL Column Truncation and the weakness of mt_rand(). With his help we worked around these problems and are now releasing WordPress 2.6.2. If you allow open registration on your blog, you should definitely upgrade. With open registration enabled, it is possible in WordPress versions 2.6.1 and earlier to craft a username such that it will allow resetting another user’s password to a randomly generated password. The randomly generated password is not disclosed to the attacker, so this problem by itself is annoying but not a security exploit. However, this attack coupled with a weakness in the random number seeding in mt_rand() could be used to predict the randomly generated password. Stefan Esser will release details of the complete attack shortly. The attack is difficult to accomplish, but its mere possibility means we recommend upgrading to 2.6.2.
Other PHP apps are susceptible to this class of attack. To protect all of your apps, grab the latest version of Suhosin. If you’ve already updated Suhosin, your existing WordPress install is already protected from the full exploit. You should still upgrade to 2.6.2 if you allow open user registration so as to prevent the possibility of passwords being randomized.
Go download now!
Speaking yesterday at the Black Hat Security Conference in Las Vegas, Microsoft has now introduced a new group of security related programs that share advanced information with partners about upcoming security threats.
As many in the tech industry know, within hours, and sometimes minutes of monthly security patches being released, exploits are already booming for the security holes fixed by these updates. The Microsoft Active Protections Program (MAPP) will allow security software providers to provide protection to their customers quickly and effectively.
“The introduction of these new programs helps address evolving online threats and provides more practical guidance to assess and manage risk,” said Andrew Cushman, director of security response and outreach at Microsoft. “In the race between exploit and protection, Microsoft is committed to shifting the advantage to the security industry. The Microsoft Active Protections Program gives security software providers the information and resources they need to help better protect customers.”
read more | digg story
