Outdated Software Alerts
Search This Blog
-
Recent Posts
- Websense’s Claim of Vulnerability in WordPress 3.2.1 Completely Baseless
- Looking at the Claimed WordPress setup-config.php Security Issues
- Claims of Vulnerability in WordPress 3.2.1 Supported by False Information
- DreamHost Does Store Non-Hashed Passwords
- Outdated Software Running on Websites of WordPress and Other Web Software
RSS/Atom Feed
Web Software Updates
WordPress Version
We are running WordPress 3.3.1 and despite what many supposed "security experts" claim letting you know what version we are running does not make us less secure.Did We Make a Mistake?
While it seems to be acceptable for blogs discussing web security to contain numerous factual mistakes, we hold ourselves to a higher standard. We only write about things that we actually understand and only after we have double checked the information. So if you see a mistake in one of our posts please leave a comment on the post or contact us so that we can add a correction.
Monthly Archives: November 2009
Google to Add Notification of Outdated Applications to Webmaster Toolsations
Google will soon begin sending messages via the Webmaster Tools alerting webmaster that “content management systems (CMSs), forum/bulletin-board applications, stat-trackers”, and other web applications on their websites are out of date. This is an expansion of the alerts that Google began sending in October of 2008 to alert webmaster that they were running versions of applications that were known to contain security vulnerabilities. The notification will be limited to applications that Google is able to determine the version that is on the website by parsing the source code of the website’s pages. While some applications, most notably WordPress, include this information there are many other high profile applications including Joomla and Drupal do not. In their post announcing the feature, Google proposed that developers begin including a generator meta tag that includes the version number of the application in the web pages generated by the application.
Posted in Google
Leave a comment
Google Starts Incorporating Breadcrumb Links into Search Results
Google has announced that they have begun to incorporate website’s breadcrumb links into some search results. Breadcrumbs links are used to aid users in navigating the hierarchy of a website. For a small number of websites, Google will trim the URL shown under a search results snippet to just the domain name and then display breadcrumb links. Depending on how many how many and how long the breadcrumbs are they may exclude some of them. Google said that the intent of the feature was to provide “useful information about the page” and to allow users to “easily access information on broader topics”. They also said that they hope to expand the feature use in the future.
Posted in Google, Search Engines
Leave a comment
Google Adds Malware Warnings to Mobile Search Results
Earlier this week Google began labeling results that are suspected of containing malware in the mobile version of Google search. Since August of 2006 Google has been labeling suspected websites and blocking access to them in their standard search results. The only change made for the mobile version is that label placed under the result states “This site may harm your device.”. The message in the standard search uses the word computer instead of device.
Posted in Google, Search Engines, Website Malware
Leave a comment
Gumblar Malware Becomes Infectious Again With New Hosts
Last week the Gumblar malware was neutralized when the files containing its malware infection code were replaced with code that attempted to neutralize iframes. Today, those files have been modified to redirect users to files on other websites that contain the malware code. Like the original websites that hosted the malware code, these new hosts are websites that have been compromised by the malware. This is different than most attacks where the malware code is stored on a website controlled by the individuals behind the malware.
Posted in Website Malware
Leave a comment