Upgrading to WordPress 2.8.4 – Easy, and now vital!

September 5th saw the launch of an exploit based attack on WordPress blogs worldwide.

The warning comes from Lorelle on WordPress after it was discovered that the pernicious attack is exploiting security holes in previous versions of the blogging software, creating a new “hidden” Administrator account and penetrating right down to the database level.

The attacks are said to be “growing by the hour”. Lorelle writes:

There are two clues that your WordPress site has been attacked.

There are strange additions to the pretty permalinks, such as example.com/category/post-title/%&(%7B$%7Beval(base64_decode($_SERVER%5BHTTP_REFERER%5D))%7D%7D|.+)&%/. The keywords are “eval” and “base64_decode.”

The second clue is that a “back door” was created by a “hidden” Administrator. Check your site users for “Administrator (2)” or a name you do not recognize. You will probably be unable to access that account.

All users are advised to upgrade to the latest version of WordPress immediately.

Reports indicate that hacked sites are extremely difficult to repair. As the damage reaches all the way down to the database, a simple reinstall will leave the hack in place. The generally accepted remedy appears to be to export your content and to import it into a new, clean, installation. That means binding a fond farewell to your settings and configuration.

Endless emnity for the thoughtless protagonists behind all this aside, there is a heart-warming amount of support in the WordPress community (of which I am a contributing member) for those affected. It really is nothing more than outright destructiveness and vandalism, the fact that it is being perpetrated digitally making it no less annoying, viscious, mindless, or upsetting for the victim.

Thankfully, WordPress is very easy to install. My upgrade to 2.8.4 was a simple click on a link at the top of my dashboard, and the wonderful WordPress has done everything else for me. Perhaps I should thanks the script kiddies out there messing with people’s lovingly crafted blogs … I now have new features to play with :-D

Alan Turing: A modern day hero.

I am proud to have added my name to those calling for the government for formally apologize for the prosecution of Alan Turing that many believe led to his untimely death by suicide.

I, like many, regard Alan Turing as a modern day hero. A genius, an athlete, a war hero, and the father of computer science as we know it today, Turing would be deserving of the recognition of his country and his countrymen even he had not been, by our modern sensibilities, brutalised and criminalised by the state that he loyally served. (If you want to know about Turin, his Wikipedia entry is excellent, or you could watch the marvelous “Breaking the Code” starring Derek Jacobi).

I rarely agree with the notion of one generation apologising for the mistakes, transgressions, and sins of another. The apology seems somewhat hollow, an embarrased nod in the direction of culpability at best. We must accept, surely, that the accepted morality of any time has a “sell by” date and, as we move into what we believe to be a more understanding and compassionate world, it seems churlish to feel that we have to make amends for the mistakes of people living in a different time for whom the world would have seemed very different and for whom morality would have been very different indeed. By its very definition, the “progress” that makes our world better and brighter must make the past dimmer and darker by comparison. On the other hand, perhaps this objection is nothing more than a latent fear that someday some ancestor of mine will have to apologize for some transgression on my part, some poorly informed misjudgment that I make today with all good intentions.

Plaque at Turing's HomeWhatever the case, my rare agreement today exists that something should be done to formally honour Turing, who is without doubt one of the most important minds of the last 100 years and one of our most significant thinkers.

With this in mind, if I could control the form the apology would take, it would be as much needed funding for Bletchley Park, the place in which Turin achieved his greatest breakthroughs and with which he will forever be associated. That, or enough money to create an AI that would finally past the Turing Test.

And we shall call it Alan.

Your support is needed.