 |
|
| FriendFeed is the easiest way to share online. Learn more » |
Alan Hoskins › Comments
My blog was just hacked into. You MUST upgrade your Wordpress to avoid being hacked. We fixed my version.
Shivanand Velmurugan, Mitchell Tsai, CG and 52 other people liked this
Yeah, this is why I wouldn't touch Wordpress with a 10-foot pole for our stuff.
- Andru Edwards
what version were you using that got comprimised?
- Ron George
I assume he was using 2.8.3. They released 2.8.4 today to fix the vulnerability in 2.8.3
- Alan Hoskins
http://wordpress.org/develop...
- Alan Hoskins
saw a report about this and just updated my blogs
- Rachel Clarke
also, love that Friendfeed now has the 'comment' button at the bottom even when viewing as part of stream,A change that happened in the last few days
- Rachel Clarke
I upgraded mine to 2.8.4 this morning, and then later saw a report about the 2.8.3 vulnerability.
- Joey Gibson
It's a pain in the butt, but I upgraded all of my sites this morning.
- Derek Coward
yikes
- Mike
Alan: it was worse than that. We were still on 2.7x.
- Robert Scoble
Someone might want to warn the Techcrunch blog(s), they appear to be on 2.7.1 still.
- Mo Kargas
No, don't tell Techcrunch, they are too busy reporting on stuff.
- Scoble, Alex Scoble
Mo: oh, boy.
- Robert Scoble
I did today too and it was easier than usual, except my FTP client kept timing out. New hosting anyone?
- Aron Michalski
Yikes.
- DGentry
I tried calling Arrington, he didn't pick up the phone. Oh well. I did leave him a message.
- Robert Scoble
I use Thesis on four blogs. It is well worth it. I ran K2 before that, which was good, but the things you can do with openhook on Thesis takes it to another class.
- david
Sounds like a pretty benign vulnerability. Sounds like the Wordpress maintainers are doing a good job, especially considering it's PHP.
- Bruce Lewis
I just upgraded. Thanks a lot.
- Ben Hanten
Upgrade to what?
- Suzen Sam
folks Scoble was running WordPress 2.7 with Thesis theme like a ton of blogs out there! Thesis is cool.
- Susan Beebe
from BuddyFeed
time to upgrade WP 2.7x to the latest version
- Susan Beebe
from BuddyFeed
I upgraded both my blogs tonite.
- Mark Krynsky
Done and done
- WoH: Minding her Steves
I don't personally use Wordpress currently but for the "we wouldn't touch wordpress etc.." crew, what makes you think your choice of CMS/blog is any more secure? Even if you use static HTML, http servers can still sometimes be exploited. Being complacent about security because you chose some other software, is almost recklessly naive.
- dannystaple
The "vulnerability" found the other day was more of an annoyance, really. It didn't offer a way into the site, just a way to reset the password and mail the new password to the admin.
- Otto
Thanks for the heads up. Sorry it happened.
- Mathew A. Koeneker
Richard: or you could switch to a managed wordpress.com blog and import all your posts easily. then you dont have to worry about upgrading. A upgraded Wordpress.com site is better than a squarespace site IMO.
- Logan Lindquist
From what I understand the admin password vuln isn't that big a deal because they would need access to your email as well and if they have that your already screwed.
- Logan Lindquist
Everyone managing a wordpress site sign up for the RELEASE NOTIFICATION here. http://wordpress.org/download/
- Logan Lindquist
This once more raises the question: is wordpress really worth all the hassles? It's far from the clean, intuitive system it once was, as anyone who has tried to show someone how to use it to build and maintain a reasonably full featured solution will find out.
- Iphigenie
I'm sorry to hear you were hacked. Yes, I upgraded to 2.8.4 when I read about the vulnerabilities.
- Shevonne
"my FTP client kept timing out." - Have you tried the automatic updater in the control panel?
- John Craft
Joelle: its not a hassle. yes its worth it. if you dont like managing the upgrades pay for a wordpress.com.
- Logan Lindquist
what do you mean hacked? 2.8.3 only meant someone could do something that reset your password and emailed it to you (happened to me) but they wouldnt know your password. (this all assuming you were on 2.8.3?)
- Paul Stamatiou
Paul: well, I was on 2.7x and someone reset my password AND posted some porn links into a blog post of mine.
- Robert Scoble
Done. Thanks for the heads up.
- Chris Nixon
I'm going purple to protest the injustice. http://digg.com/celebri...
John D Reasor, Joe Geeting, Daniel Rowley and 28 other people liked this
i've gone red avatar on twitter. it contrasts the green & makes it more like the holidays. heh
- sɹǝɥʇɐǝɟʞɔɐןq
I'm thinking maybe a red ribbon in the corner of my pic :)
- Thomas
Murphy-Goode went bad. @agoodjob ? No.
- Robert Scoble
Seriously?
- Jason Nunnelley
Jason: seriously: http://friendfeed.com/search...
- Robert Scoble
Wow, you're all so sensitive to world events. Are you all oblivious to the events in Iran or do you just not care?
- Kevin Arth
We all like Martin at the TWiT Army to be honest. We are not happy at all about this.
- Mark
Kevin: screw off.
- Robert Scoble
Oh Kevin fuck off
- Mark
by that logic one would never discuss anything but the bad news in the world
- Mark
Kevin: I've been covering the events in Iran from the beginning. You are a real jerk for trying to bring that up in this conversation.
- Robert Scoble
Kevin: that got you very close to a block. You want to go further?
- Robert Scoble
I love how Kevins theory is that we must at all times endlessly discuss shit things going on in this messed up world. The moment we go off-topic: BOOM!
- Mark
Hmmm... Martin's cool and all, and Murphy-Goode screwed up bad, but doesn't going the color avatar route for something like this kind of cheapen the token for something more weighty - like people being killed on Iran or Peru or whereever?
- Michael Turro
You're comparing the snubbing of Martin Sargent to the treatment of protesters in Iran?!? You're JUST like a Republican!
- The Web's Wendell Wittler
Wendell: give me a break. We are now using colors to protest anything, not just Iran.
- Robert Scoble
http://kevinarth.posterous.com/ Kevin's Website xx
- Mark
And if Mark Teixeira is not the starting 1b for the AL in the All-Star game I'm going to go with Yankee blue...
- Michael Turro
Michael, since when does having a colored avatar have to represent people being killed? It doesn't make the green avatars any less effective or meaningful
- Alan Hoskins
Actually it can have exactly that effect
- Michael Turro
Perfect opportunity for @garyvee...
- Brian Hill
Brian: yeah, isn't it?
- Robert Scoble
Seriously, the Martin Sargent kerfuffle is more like how Farrah Fawcett got ignored after Michael Jackson died.
- The Web's Wendell Wittler
Hey Robert
- Brian Hill
Oh god PLEASE NOT HIM! I have a headache as it is ;)
- Mark
@dahowlett just unfollowed.
- Mark
Mark: I'd engage with him, but it's not worth the time either.
- Robert Scoble
The reason the green works is because it is identifiable, singular, easy to see. If we all start using colors for anything we find offensive we're going to need a play book to know what color corresponds to which injustice. After a while the gesture empties of any significance.
- Michael Turro
Scoble, what color to protest Adam Savage's phone bill?
- The Web's Wendell Wittler
Wendell: I don't even know who that is. So Orange. :-)
- Robert Scoble
The winery motto is: "We take our wines seriously. Ourselves.... not so much." Doesn't that sound like Martin?
- Chris Pugh
Adam Savage is the Mythbuster's guy with the $11,000 AT&T bill
- Alan Hoskins
Adam Savage is the guy on MythBusters. And Wendell, AT&T fixed that issue about two hours ago.
- Wizetux
Okay, then, what color for Michelle Bachmann's crazy Census protest? Or to protest crazy Michelle Bachmann?
- The Web's Wendell Wittler
Wendell: start a wiki.
- Robert Scoble
You chaps talk a spiffing amount of nonsense sometimes xx
- Mark
Sometimes?
- Robert Scoble
Why do I feel like "start a wiki" is a euphemism for something unpleasant? Or should be?
- The Web's Wendell Wittler
What color can I use to protest the fact that AT&T hasn't shipped my 3GS yet?
- Michael Turro
It could be a dysphemism for something wonderful.
- Mark
Wendell: start a wiki. You keep asking questions that need to be answered on a wiki. Sort of like a hashtag list. That's a wiki too.
- Robert Scoble
I can confirm Twitter is buying Friendfeed for £299.10
- Mark
haha
- Mark
I am afraid I am the worst Friendfeeder in the world so don't subscribe to me.
- Mark
Didn't somebody already do a wiki for all the different colored ribbons? Should append onto that.
- The Web's Wendell Wittler
Christopher: yeah, but it isn't cacophemism like dahowlett practices.
- Robert Scoble
cacophemism, thats a new one for me
- Mark
Mark: it's on the wikipedia entry for dysphemism. :-)
- Robert Scoble
A word or expression that is generally perceived as harsh, impolite, or offensive. Similar to dysphemism. Contrast with euphemism. Adjective: cacophemistic.
- Mark
I had to look those words up. They are above my pay grade.
- Robert Scoble
Robert: - you just looked at the wikipedia entry for dysphemism, didn' you?
- Michael Turro
The way I was tought about the two was like this: a eup is "The knife entered him and his life force dripped away. dys: "The knife entered him and he slowly bled to death in angonising pain"
- Mark
one implicit one explicit i guess
- Mark
Michael: I did! Took me back to my childhood when my mom made me look up words I didn't know in the dictionary. Me? I stick them into Google and the wikipedia entry came up.
- Robert Scoble
I just don't want to use up all the good colors right away; then if North Korea nukes South Korea, in order to protest that we'll have to use some awful color like Fuchsia that nobody can even spell (I had to look it up).
- The Web's Wendell Wittler
I ask Bill Hill if I need help with tricky words http://billhillsblog.blogspot.com/
- Mark
Mark: Bill Hill is too smart for me. Again, above my pay grade.
- Robert Scoble
We are all homosapien version 1.0 after all.
- Mark
I know... because I did the exact same thing and read the exact same words at probably (almost) the same exact time - real time, dig it
- Michael Turro
Mark: actually I'm 1.03. :-)
- Robert Scoble
words are cool
- Michael Turro
I'm just glad I stuck around for all the -phemisms.
- The Web's Wendell Wittler
Yes Bill Heslin, the cleverer, sexier Bill ;) Bill Hill. Microsoft man of many years
- Mark
Mark: laid off by Microsoft recently. Sad.
- Robert Scoble
Bill Hill: the man who introduced me to Scoble on Channel9
- Mark
Yeah I know Rob :(
- Mark
Scoble, 1.03 had some bugs that were fixed in 1.03.1
- The Web's Wendell Wittler
Mark: Bill HIll was my first interview on Channel 9.
- Robert Scoble
Who ever watched Scoble and Bill on video crawling about all over MS campus talking about everything under the sun?
- Mark
Stonkingly good video that
- Mark
I must find a link for it right now
- Mark
Wendell: Maryam and I are in development on 1.05.
- Robert Scoble
http://channel9.msdn.com/posts... From 2005
- Mark
I think in the end I'll go with what can pretty much encompass everything I could possibly protest. All white.
- Thomas
R.S.: I've heard about your beta testing...
- The Web's Wendell Wittler
This is a comment Robert made in 2005 when asked about video quantity while working at Channel9: "There's a ton of stuff still to come. I can only post six vids a day."
- Mark
Six videos a day! Insanity!
- Mark
Mark: those are the good old days! :-)
- Robert Scoble
I remember when you got that video with the IE team and they were all super pleased they were bringing RSS To IE7. They Had "IE7 Loves RSS" tee shirts on.
- Mark
Another favourite was when you interviewed Larry Osterman about pranks at MS.
- Mark
Folks if you haven't been following Rob for more than a few years you should check out some of his stuff at channel 9. http://channel9.msdn.com/posts...
- Mark
...catching up on Bill Hill... joined Microsoft running its Typography group in 1994... way too late to blame him for Arial... good for him... but why couldn't he kill Comic Sans?
- The Web's Wendell Wittler
his team invented Cleartype Wendell, We all take that for granted these days
- Mark
I miss Osterman. By the way, on Channel 9 they just announced they are making changes to come. http://channel9.msdn.com sounds like good stuff to come.
- Robert Scoble
he is a very special guy, dont know what bone head manager decided to sack him
- Mark
that video on channel9 announcing changes reminded me of the first video ever on channel9 when you all discussed why it was going to be a bit special
- Mark
Mark: yeah, even if they didn't need his skills anymore they should have made him into a public spokesperson for Microsoft. Sad that they couldn't see some other way to use him.
- Robert Scoble
Welcome to Channel 9. We are five guys at Microsoft who want a new level of communication between Microsoft and developers. We believe that we will all benefit from a little dialogue these days. This is our first attempt to move beyond the newsgroup, the blog, and the press release to talk with each other, human to human.
- Mark
I, for one, do NOT take ClearType for granted. When I got my last recon'd laptop (I live on old ThinkPads), it didn't have it switched on. My eyes! My eyes! The goggles did nothing but the ClearType made it all better.
- The Web's Wendell Wittler
ClearType <3
- Mark
I've been told health care already has purple. I think yellow is still available.
- Leo Laporte
I'll stick with my catch-all color...
- Thomas
Who remembers the color wars from last year?
- Jesse Stay
JEEZUS!!!! signal-to-noise ratio here is zeeeeero (at least during the beginning of this thread, which is what counts, right, Leo?)
- Jason Miller
Leo, at least give Martin a color he can do schtick with, like Burnt Umber... because he got Burnt, right?
- The Web's Wendell Wittler
I've gone purple on my twitter now. I'll have to wait and see who asks about it.
- Tom Silk
@leolaporte - injustice indeed!!!! I'd go purple, but my GIMP is limp.
- Jason Miller
105 comments because Leo colored is avatar purple wow.
- Kim Landwehr
That's show business Kim.
- Mark
Wow, this thread went on a while. But, did anyone start a Wiki?
- Jason Nunnelley
Seriously, needs a Wikipedia page. I know you guys were razzing, but it's not a bad idea. "protest avatar" sounds more descriptive than "colored avatar." And, colored and coloured, there's a English to English translation issue with one of those.
- Jason Nunnelley
I made this during TWiF... http://www.flickr.com/photos...
- Andrew Johnson
What was the first protest avatar?
- Jason Nunnelley
found out murphy goode has 2 twitter accounts -one w/ an e & one w/o: @areallygoodjob & @areallygoodejob
- sɹǝɥʇɐǝɟʞɔɐןq
I'm looking up avatar protests for the Wikipedia page. Got any links?
- Jason Nunnelley
this is interesting, just found out about this whole deal.. watching the beginning of TWIF now
- Anthony Kam
I see Leo's changed his avatar to something new - not purple.
- Jason Nunnelley
It was purple last night. I don't think he was being totally serious when he made the post anyways.
- Chris Heath
Man I feel like going out buying some Wine for some reason.
- John D Reasor
You're on my list Murphy-Goode (and it ain't a shopping list). "Murphy says Martin Sargent's #1 spot isn't good enough" http://digg.com/celebri...
Paul Tudor, Roger Kondrat, TheHenry and 34 other people liked this
It's mind-boggling that he isn't the clear winner.
- Eric Geller
I think going out of our way to not buy their product is in order...
- Thomas
I support their decision. There are lots of good quality candidates with more credentials than Martin. I'm sorry, I like the guy, but just because he has a powerful internet posse at Revision 3 does not mean he deserves the job. There are lots of great candidates out there--some without a job--that don't have the extra pull of a podcast community to support them. I know I'm in the minority, but I had to say it.
- Fleagle
Unfortunately Fleagle, they don't specify that they're looking for a candidate without "the extra pull of a podcast community to support them." On the contrary, they WANT someone as connected as Martin to prop up their activities in the Web 2.0 community.
- Eric Geller
I wonder if the nature of his past works and the image that it portrayed onto him had anything to do with their choice. Would you, as a business owner, really want the host of such shows as infected, Web drifter, and Internet Superstar to be the spokes internet person for your company?
- Wizetux
And I'm not upset that he didn't get the job, but to not even be in the top 50?
- Thomas
Can we get a "Screw you!" at Murphy-Goode, Leo?
- Mike Nayyar
Eric, if all they want is someone with 'connections', then I guess they did miss the mark here. It's not my company, so I can only assume they have an idea what they want.
- Fleagle
Yes, i would have thought atleast martin would get in the top 50...
- Bryce Campbell
If the goal of this was to connect to users in the new media, I would've thought having a built in base would have been a plus for him...
- Thomas
Never mind the fact that he actually knows a bit about wine and can speak knowledgeably on the subject. Or the fact he has previous experience not only producing content but the technical side of it.
- Johnny
Fleagle: That *is* all they want. They have said that before. That's why we're both angry AND confused.
- Eric Geller
Pretty simple then I guess. If that's really all they wanted, then they dropped the ball here.
- Fleagle
Let the Bad PR spread across the wires, then who ever gets the job will really have their work cut out for them.
- Wizetux
They didn't just drop the ball, they let go of it while holding it over a cliff.
- Eric Geller
Looking at their rules for applying, the only thing I can think of at this point is that maybe they thought there would be an issue with the "irrevocable and perpetual right to use your name, likeness, appearance, voice, biographical information and video anywhere in the world, without your further consent" part.
- Thomas
I think they already failed at the Social meida
- Fee501st
Thomas: If you're saying that Murphy Goode had that thought, then I'm confused. It's their rule, why would they disqualify someone if that person applied knowing the rule?
- Eric Geller
Because he's well know (relatively), maybe they thought that clause would be an issue with him. Not saying it's really what caused it, though... http://www.areallygoodejob.com/finepri...
- Thomas
Thomas: I agree with you that Martin could have had that thought, but that's for him to decide. Murphy Goode shouldn't disqualify someone because they assume that their own rule will be a problem. They should let Martin take that into his own hands. (Which he did by applying anyway.)
- Eric Geller
True
- Thomas
Kevin Rose just tweeted about this - even more bad press for the winery...
- Thomas
I think maybe the biggest blunder on their part was of course posting the top 50. It would be different if they just announced the winner I think. That way, even though most probably would've disagreed, you'd have to respect a little bit that it was their decision to make. But not even having Martin in the top 50 is probably going to bite them in the arse in the coming days.
- Fleagle
I definitely agree on that point. If you put something to a vote and then have a top 50, make sure the top vote getters are on the list - even if you don't intend on picking them.
- Thomas
Absolutely right.
- Eric Geller
hmm. Anyone else see a comparison between the Iranian election and this selection process?
- Wizetux
Getting to be the #1 most popular video on the topic should have earned Martin a spot on the top 50 list. I'm not saying it should have gotten Martin the final job, either.
- Robert Scoble
Wizetux: I think they must have the same person who decided on Twitter's Suggested User List doing the judging. Really lame. Yes, it's the same thing as an Iranian Election. Exactly.
- Robert Scoble
LOL Scoble.
- Chris Heath
Agreed Fleagle,
- Kim Landwehr
Kevin Rose: http://friendfeed.com/kevinro...
- Robert Scoble
Murphy-Goode are getting great exposure and all they have to do is give a valid point of view as to why he wasn't chosen. So...?
- Michael Turro
If you look at the digg comments, I'm not sure that's the exposure they were looking for... :)
- Thomas
I wonder if anybody at Murphy-Goode knows they screwed this up - they could spin this as the very reason they NEED a social media consultant.
- Michael Turro
murphy goode = murphy badde
- sɹǝɥʇɐǝɟʞɔɐןq
Need to correct myself, actually they did have to name the top 50 since the top 10 will be pick from the top 50, still doesn't explain why Martin wasn't on it, guess he wasn't what they were looking for.
- Kim Landwehr
this reminds me of that election in iran
- sɹǝɥʇɐǝɟʞɔɐןq
Michael: that would be a great spin, but that would require having someone who understood what was going on and the time for that kind of spin is when a story is just getting going. I would just apologize and say "I don't know how we missed Martin." But then I would have made sure the guy with the #1 YouTube video would be on the list in the first place.
- Robert Scoble
True enough... number one is hard to "miss"
- Michael Turro
if their objective was to find someone best fit for the job, they didn't present the voting facilities in a representatively clear fashion. why bother creating a voting system? it implies that number one would be in the list.
- sɹǝɥʇɐǝɟʞɔɐןq
They should have given the top 50 vote getters an automatic bid and then augmented with 10 or so of their own choices that might not have made the top 50
- Michael Turro
apparently @areallygoodjob uses twitter to broadcast their thoughts. there's no interaction or @ replies. i have a feeling they may be elite-ist snobs.
- sɹǝɥʇɐǝɟʞɔɐןq
Elitist snobs? In the wine industry?
- Michael Turro
kinda contrary for them to use social media in the first place, huh? freermor, their twitter says they use the web as their twitter client.
- sɹǝɥʇɐǝɟʞɔɐןq
LOL Leo (purple)
- Kim Landwehr
Check out all the results: http://friendfeed.com/search...
- Robert Scoble
There was a small mistake there wasn't there? did you spot it?
- Mark
what does Vay Ner Chuk have to say about this?
- Chris Pugh
Their fine print states "Murphy-Good retains the right to exclude candidates from the hiring process or terminate the successful candidate for any lawful reason", but if they were going to exclude him after the voting then they should have not even posted or accepted his video in the first place.
- Alan Hoskins
Alan: they should have explained their thinking. Personally I wouldn't have had a final 50. I would have only posted a final three. Then if he didn't make that list it would seem better. But that's after the play quarterbacking. Now they have a bit of a mess on their hands and they have saddled their new social media expert with a mess that won't go away.
- Robert Scoble
I think we're probably seeing a classic case of a traditional business mired in traditional processes trying to leap into the interwebs without actually being willing to embrace the change in attitudes, content, image, and style of outreach that may accompany it. It reminds me of people who want to optimize Web pages, but are unwilling to use the language that searchers use. They want...
more...
- Brad
I want to learn python. Is there a way I can write a script to query the Purphy-Goode site (e.g., for a site that explains why the #1 vote getter isn't good enough for them?) once a day for something? Twice a day?
- Jason Miller
+2 Matthew.
- guruvan (Rob Nelson)
http://www.empirereport.org .. Report in there will remind folks that included in the terms of the offer, Murphy-Goode is NOT required to hire ANYBODY - Hello? Perfectly reasonable, on their part? Perfectly reasonable to understand that and take advantage for oneself? WHAT WILL THE REACTION BE ... IF THEY DON'T HIRE ANYONE?
- Bob Kennedy
As Tara Hunt will put it: They've just lost a great deal of whuffie.
- Jorge
Where's my vote? Note to PR: It is 2009- If you want participation (key word) in your brand, then deliver and reciprocate (key word #2). We all know this.
- E-Advocate Network
Jim Louderback did a great analysis/whatever of this whole situation yesterday http://louderback.com/2009...
- Chris Heath
Sorry, that was @areallygoodjob screw up. Murphy-Goode's social media campaign is getting tons of bad press now. See: http://friendfeed.com/scoblei...
Robert James Massey, Jason Miller and alok patra liked this
I wonder if they know how to see who is @ replying to them. If they do they should be seeing the aftermath of this decision
- Alan Hoskins
Alan: they should be, yes.
- Robert Scoble
They overplayed their hand. Now people see them as milking it instead of being cool
- Stephen Pickering
There is no such thing as bad press. The guys are clever..
- Charbax
Charbax: I disagree.
- Robert Scoble
Well they got you talking, and tons of others are talking. Leo Laporte is even launching a whole new avatar coloring for that company. How can this be any better for them. Soon enough the whole world will know about that wine comany.
- Charbax
Yeah and know to stay away from them.
- Chris Heath
OK, I'm behind on the story here. Anyone care to bring me up to speed?
- ChiliMac
How much did http://twitter.com/areally... screw up? Just look at the search and weep: http://friendfeed.com/search... @leolaporte is boycotting!
Alistair Nicholson, Roy Pledge, Edwin Khodabakchian and 6 other people liked this
Leo is boycotting the company?
- Mark
Yeah. Check out http://ff.im/4udQ9
- Robert Scoble
It's @areallygoodjob with no "e" on "good". The other is a fake account, but either way they are wrong in what they've done (or not done)
- Alan Hoskins
Alan: yup, sorry about that. The Twitter account for the Winery is here: http://twitter.com/areally...
- Robert Scoble
Boo. #fail
- Edwin Khodabakchian
It is really lame to ask people to vote to try to get traffic but then make your own selection.
- Edwin Khodabakchian
I came in in the middle. Murphy-Goode posted their top 50 candidates and asked people to vote on them, then didn't pick the one with the most votes?
- RobinDotNet
Other ways to read this feed:
