Purveyor of Iniquities

Dartblogs Fixes

So, let’s see: fixed one bug in the recent entries display (it now orders by date instead of by post_id, which was just a stupid mistake), wrote a fix for another corner-case bug in the sign-up process (nobody hit it yet, but might as well get rid of it anyway) that I’ll add soon, and am still thinking about the last remaining [known] security flaw.

This one is potentially really bad, but the only good fix that I can think of could probably be overriden by anyone smart enough to take advantage of it to begin with. The only bright spots are that 1) things here are backed up on some schedule, so that, at most, only a day’s worth of data would be lost (note that data integrity is NOT guaranteed; if you really want to be safe, make your own backup using that feature in MT), and 2) this thing is fully auditable. That is, anyone taking advantage of this bug could be nabbed really easily.

Hmmm. While writing this, I may have figured out a fix. We’ll see. (Update: wrote a fix, seems to work)

Also, I should say somewhere that there is a hook that I won’t publicize more than this that can be used to remove a weblog from the front page “recent posts” queue. Email me if you want this done for your own weblog.

DC

Tomorrow and maybe Thursday I’ll be back down in DC for a few meetings. Attitude: cautiously optimistic. Actually, one of the meetings will definitely be a low-stress affair, and so I’m looking forward to that.

Katz

Another Katz interview on Saturday. This is getting to be ridiculous. This will be my fourth interview, and the election is just around the corner in November.

Left off of yesterday’s book list

Illiberal Education by Dinesh D’Souza - How could I forget that? Just finished rereading it a few days ago, and it still makes the blood boil. I’ll have to ask Emmett for a new copy of Shadow University because I think mine was claimed by the Review office a couple years ago.

Enough incoherence

Let’s go outside; it’s nice.