<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: WordPress Vulnerability: Take a little time to check.</title>
	<atom:link href="http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/feed/" rel="self" type="application/rss+xml" />
	<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/</link>
	<description>Comments on blogs about making money blogging.</description>
	<lastBuildDate>Sat, 13 Mar 2010 16:31:57 -0800</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Lucia</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3410</link>
		<dc:creator>Lucia</dc:creator>
		<pubDate>Sat, 10 Nov 2007 17:21:22 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3410</guid>
		<description>@5ubliminal: My first plugin was to nofollow links in a certain domain. :)

I learned to code long ago -- but I worked on mechanical engineering problems. So, the challenges associated with developing the al-gore-rithms are often quite different. (If you looked at my codes, you&#039;d probably also laugh for ohhh soooo many reasons. One of these days I need to force myself to use OOP when it&#039;s helpful, which it often would be with plugins, but rarely is with problems in mechanics and heat transfer!)  

But, they work, and I try to avoid security holes. (I can tell I need to read a bit. But then, that&#039;s one of the reasons I read your blog. You explain hacks that exist, then you explain how to secure. Sebastian&#039;s Pamphlets is a good for me too.)</description>
		<content:encoded><![CDATA[<p>@5ubliminal: My first plugin was to nofollow links in a certain domain. <img src='http://money.bigbucksblogger.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>I learned to code long ago &#8212; but I worked on mechanical engineering problems. So, the challenges associated with developing the al-gore-rithms are often quite different. (If you looked at my codes, you&#8217;d probably also laugh for ohhh soooo many reasons. One of these days I need to force myself to use OOP when it&#8217;s helpful, which it often would be with plugins, but rarely is with problems in mechanics and heat transfer!)  </p>
<p>But, they work, and I try to avoid security holes. (I can tell I need to read a bit. But then, that&#8217;s one of the reasons I read your blog. You explain hacks that exist, then you explain how to secure. Sebastian&#8217;s Pamphlets is a good for me too.)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 5ubliminal</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3409</link>
		<dc:creator>5ubliminal</dc:creator>
		<pubDate>Sat, 10 Nov 2007 14:52:36 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3409</guid>
		<description>Thanks :)
You can also create rules. Reject a link, nofollow a link and dofollow a link. And allow users to set rules for domains. This would indeed be useful to WP users. And you can allow users to create groups of domains. So let&#039;s say: u make a group named sponsors and you nofollow them but if, in time, u change your mind you dofollow the whole pack not one by one.

Actually I&#039;m working on this for my blog. To add some domains to the trusted links and allow Google to see them.

PS: 9 years of coding are behind the way I think. If you ever need advice on smth you work on, mail me. I&#039;ll consult U :)</description>
		<content:encoded><![CDATA[<p>Thanks <img src='http://money.bigbucksblogger.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
You can also create rules. Reject a link, nofollow a link and dofollow a link. And allow users to set rules for domains. This would indeed be useful to WP users. And you can allow users to create groups of domains. So let&#8217;s say: u make a group named sponsors and you nofollow them but if, in time, u change your mind you dofollow the whole pack not one by one.</p>
<p>Actually I&#8217;m working on this for my blog. To add some domains to the trusted links and allow Google to see them.</p>
<p>PS: 9 years of coding are behind the way I think. If you ever need advice on smth you work on, mail me. I&#8217;ll consult U <img src='http://money.bigbucksblogger.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Lucia</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3407</link>
		<dc:creator>Lucia</dc:creator>
		<pubDate>Sat, 10 Nov 2007 13:58:08 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3407</guid>
		<description>@5ubliminal That&#039;s a good idea!  Now, I do know how to do it effectively. My first thought had been to fish out all the links, present them as a list, and let the user look at them.  Then, they could do that every now and then.

Then, also, give then a tool with a blacklist. 

One idea a lot of work for the  user to do regularly (Which means they won&#039;t do it-- and makes the tool useless.)

The other idea is ineffective because individual blacklists don&#039;t work for this sort of thing. My knitting blog is  spammed with comment SEO stuff like &quot;dog sweater&quot;, not &quot;viagra&quot;.

But your idea is elegant and effective. (Which... doesn&#039;t surprise me. :) )

I can code that, and possibly also go for overkill. In WP, I can both keep track of what&#039;s a &quot;good link&quot; &lt;i&gt;and&lt;/i&gt; record the ID of the post it&#039;s in &lt;i&gt;and&lt;/i&gt; keep track of whether it follows. It would take little more coding, almost no extra CPU, and would ensure that if a blogger does include a &quot;bad&quot; link once, no one can sneak in another one later in a different post! (This is useful if -- overtime-- a company decides to pay for sponsored posts and then later insert the links.)</description>
		<content:encoded><![CDATA[<p>@5ubliminal That&#8217;s a good idea!  Now, I do know how to do it effectively. My first thought had been to fish out all the links, present them as a list, and let the user look at them.  Then, they could do that every now and then.</p>
<p>Then, also, give then a tool with a blacklist. </p>
<p>One idea a lot of work for the  user to do regularly (Which means they won&#8217;t do it&#8211; and makes the tool useless.)</p>
<p>The other idea is ineffective because individual blacklists don&#8217;t work for this sort of thing. My knitting blog is  spammed with comment SEO stuff like &#8220;dog sweater&#8221;, not &#8220;viagra&#8221;.</p>
<p>But your idea is elegant and effective. (Which&#8230; doesn&#8217;t surprise me. <img src='http://money.bigbucksblogger.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  )</p>
<p>I can code that, and possibly also go for overkill. In WP, I can both keep track of what&#8217;s a &#8220;good link&#8221; <i>and</i> record the ID of the post it&#8217;s in <i>and</i> keep track of whether it follows. It would take little more coding, almost no extra CPU, and would ensure that if a blogger does include a &#8220;bad&#8221; link once, no one can sneak in another one later in a different post! (This is useful if &#8212; overtime&#8211; a company decides to pay for sponsored posts and then later insert the links.)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 5ubliminal</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3406</link>
		<dc:creator>5ubliminal</dc:creator>
		<pubDate>Sat, 10 Nov 2007 13:07:56 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3406</guid>
		<description>Everytime you check your list the script should extract the hostname from url and present a structure based on host names.
Once you validate a hostname (domain) the script should hide that one. So if you add a new link to google.com and you tell the script google.com is cool the script should not show you again google.com unless u use a special button to view all or smth like this. This way you could ban domains and discard any link to them.

This way ou would have a bit of work upfront but you would keep control over your links and the work wold be much smaller as you keep adding links.

This is easy for me to do but I have no idea how wordpress works and make a plugin so I&#039;ll just leave it to Lucia expert in WP plugins.</description>
		<content:encoded><![CDATA[<p>Everytime you check your list the script should extract the hostname from url and present a structure based on host names.<br />
Once you validate a hostname (domain) the script should hide that one. So if you add a new link to google.com and you tell the script google.com is cool the script should not show you again google.com unless u use a special button to view all or smth like this. This way you could ban domains and discard any link to them.</p>
<p>This way ou would have a bit of work upfront but you would keep control over your links and the work wold be much smaller as you keep adding links.</p>
<p>This is easy for me to do but I have no idea how wordpress works and make a plugin so I&#8217;ll just leave it to Lucia expert in WP plugins.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Stephen Cronin</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3405</link>
		<dc:creator>Stephen Cronin</dc:creator>
		<pubDate>Sat, 10 Nov 2007 04:16:15 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3405</guid>
		<description>Lucia, I&#039;m clean (it seems). It would be a useful plugin if you write it. 

Subliminal, are you saying the plugin should simply build a big list of external links for you to check manually? For some blogs that would be a huge list! I think having a blacklist of terms to check for (in the link text or URL) is the way to go, as long as you can add / delete things from the blacklist.</description>
		<content:encoded><![CDATA[<p>Lucia, I&#8217;m clean (it seems). It would be a useful plugin if you write it. </p>
<p>Subliminal, are you saying the plugin should simply build a big list of external links for you to check manually? For some blogs that would be a huge list! I think having a blacklist of terms to check for (in the link text or URL) is the way to go, as long as you can add / delete things from the blacklist.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 5ubliminal</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3375</link>
		<dc:creator>5ubliminal</dc:creator>
		<pubDate>Thu, 08 Nov 2007 17:02:42 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3375</guid>
		<description>Obviously, I was refering to a plugin to parse the source code  of WP files and MySQL tables data.

PS: If this comment came in twice delete one :)</description>
		<content:encoded><![CDATA[<p>Obviously, I was refering to a plugin to parse the source code  of WP files and MySQL tables data.</p>
<p>PS: If this comment came in twice delete one <img src='http://money.bigbucksblogger.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 5ubliminal</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3374</link>
		<dc:creator>5ubliminal</dc:creator>
		<pubDate>Thu, 08 Nov 2007 17:01:55 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3374</guid>
		<description>Obviously, I was refering to a plugin to parse the source code of WP files. :)</description>
		<content:encoded><![CDATA[<p>Obviously, I was refering to a plugin to parse the source code of WP files. <img src='http://money.bigbucksblogger.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Lucia</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3373</link>
		<dc:creator>Lucia</dc:creator>
		<pubDate>Thu, 08 Nov 2007 16:58:52 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3373</guid>
		<description>@5ubliminal: Your solution would probably be useful if I wrote this as a plugin (which is probably the right way to do this).  But for now, it&#039;s not an easy way to check things using WP&#039;s search tool.

I&#039;ll write the plugin &lt;i&gt;if&lt;/i&gt; anyone actually finds themselve&#039;s infected this way. Otherwise, I&#039;m not sure it&#039;s worth it. (Though, it would be easy enough to do, and people may want to periodically check every link in their database even without the hacking threat.)</description>
		<content:encoded><![CDATA[<p>@5ubliminal: Your solution would probably be useful if I wrote this as a plugin (which is probably the right way to do this).  But for now, it&#8217;s not an easy way to check things using WP&#8217;s search tool.</p>
<p>I&#8217;ll write the plugin <i>if</i> anyone actually finds themselve&#8217;s infected this way. Otherwise, I&#8217;m not sure it&#8217;s worth it. (Though, it would be easy enough to do, and people may want to periodically check every link in their database even without the hacking threat.)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: 5ubliminal</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3371</link>
		<dc:creator>5ubliminal</dc:creator>
		<pubDate>Thu, 08 Nov 2007 16:41:41 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3371</guid>
		<description>Just scan blogs for outgoing links not for blacklist terms. You can not know all blacklist terms but searching for external links is easier and you can quickly figure out if you put it there or it was &#039;planted&#039;.</description>
		<content:encoded><![CDATA[<p>Just scan blogs for outgoing links not for blacklist terms. You can not know all blacklist terms but searching for external links is easier and you can quickly figure out if you put it there or it was &#8216;planted&#8217;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Karl Erfurt</title>
		<link>http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/comment-page-1/#comment-3318</link>
		<dc:creator>Karl Erfurt</dc:creator>
		<pubDate>Sun, 04 Nov 2007 06:16:32 +0000</pubDate>
		<guid isPermaLink="false">http://money.bigbucksblogger.com/wordpress-vulnerability-take-a-little-time-to-check/#comment-3318</guid>
		<description>Wow, thanks for the &quot;heads up&quot; on this one! I haven&#039;t had as much of a problem with spam (yet) as many of the other bloggers out there, but this is definitely something that needs to be monitored in the future. 

Your plugin idea is a good one, especially if this particular form of spam becomes much more prevalent. And to think that only a few years ago, I thought that Spam was something that came out of a can!</description>
		<content:encoded><![CDATA[<p>Wow, thanks for the &#8220;heads up&#8221; on this one! I haven&#8217;t had as much of a problem with spam (yet) as many of the other bloggers out there, but this is definitely something that needs to be monitored in the future. </p>
<p>Your plugin idea is a good one, especially if this particular form of spam becomes much more prevalent. And to think that only a few years ago, I thought that Spam was something that came out of a can!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.380 seconds -->
