This site will look much better in a web browser that supports web standards. Click here for more information. Regardless, it is still accessible to any browser or Internet device. It just won't look nearly as pretty. :)

Cultivation:
Bhavatu sabba mangalam.
"May all beings be happy."
Vipassana meditation.
www.dhamma.org
Huh?
• Who: Eric Case FOAF
• What: Weblog (Archive | Atom)
• Where: Woodside, CA, USA
• Work: Google/Blogger
• More: Photos/Referrers
← Moblog: @ BuzzNet (XML)
• Materialism: To be consumed

Reading blogs at work? Click to escape to a suitable site!
Latest Project:
Biodiesel Blog
[Biodiesel Blog]
del.icio.us (XML):
» Archive: http://del.icio.us/case/
Latest photos (XML):
• 2004/03/25: Newsweek
• 2004/01/31: Alpine
• 2004/01/30: Squaw Valley
• 2004/01/29: Squaw Valley
• 2003/12/31: Commute
• Comments
Dead tree (XML):
completed | queue | current:

Search:

Upcoming (profile):
Latest comments:
• natalie on "Little Wanganui"
• Ryan on "Little Wanganui"
• Alex on "Little Wanganui"
• Chuck on "cape foulwind sunset"
• Chuck on "Little Wanganui"
Recently on NetFlix (XML):
• 10/2004: A Passage to India
• 8/2004: City of God • 8/2004: The Bourne Identity
• 6/2004: Himalaya
• 5/2004: The Trials of Henry Kissinger
Recently on iTunes:
• Ottmar Liebert - "live-desert-elysium" from Web 2003/07
• Ottmar Liebert - "live-bombay" from Web 2003/07
• Ottmar Liebert - "lava-untitled10" from Web 2003/07
• Ottmar Liebert - "live-turkish-night" from Web 2003/06
• Ottmar Liebert - "live-santa-fe" from Web 2003/06
• Ottmar Liebert - "live-barcelona-nights" from Web 2003/06

Thanks, Kung-Tunes
Miscellaneous:
Atom 0.3
GeoURL
Dreamhost
Movable Type
Powered by Blogger
Creative Commons
Web Standards Project
Built with BBEdit
Apple

(Steal these buttons)

BlogRolling:
EgoRolling:
Blogdex | BlogTree | Popdex | Technorati (profile) | Futuristic Book Club
« Clueful Media | Main | Constantinople »

November 25, 2003

MovableType security hole

Uh-oh, it was bound to happen eventually:

If you run MT or host people who run MT, run, don't walk, to your box and disable the ms-send-entry.cgi. They don't verify that just a single email address has been submitted. Nor do they do any other basic security checks. And, guess what? Right. The spammers have discovered the hole.
I'm patched...

[via Andy Baio]

Posted at 22:06
TrackBack URL for this entry:
http://vedana.net/mt/mt-tb.cgi/619

Listed below are links to weblogs that reference 'MovableType security hole' from vedana.net.