Defensio and WordPress

April 26, 2008, 8:46am,  896 views

A couple of online services I use regularly have announced security upgrades overnight.

Wordpress 2.51 has been released.

From the announcement: “It includes a number of bug fixes, performance enhancements, and one very important security fix. We recommend everyone update immediately, particularly if your blog has open registration. The vulnerability is not public but it will be shortly.”

In addition to the security fix, 2.5.1 contains many bug fixes.

The anti-spam utility I use on this site and a couple of others is Defensio.

They sent me an intriguing email saying: “We have reasons to believe that a few of our api keys might have been compromised and our research indicates that your key(s) might be among them.”

Filtering was disabled and I had to generate new API keys.

“We are truly sorry for the inconvenience this will cause you, but we thought we’d be upfront about it and prevent any damage from happening. Of course, the proper measures were taken to make sure this doesn’t happen again.”

It sounds like there’s a longer story to tell. I am happy though with Defensio’s frankness and action.

It always puzzles me why people are out there busily try to break into programs to undermine them. If their talents were used to create instead of to wreck …