A recent post by security analyst David Kierznowske reports that 49 out of 50 WordPress blogs that he checked out were running an exploitable version of the WordPress blogging engine. According to the post, David looked at blogs running on versions as far back as WordPress v1.2 (with v2.2 being the most recent release, as of this writing). So does this mean that WordPress is buggy software that is to be avoided? No, not at all. It just means that those users need to do a better job of dealing with the bugs. The sky is blue and software has bugs...

Phil recently went public with his pending career shift - he's leaving VelocIT to make waves at Koders. Naturally I wish my friend only the best... but I've got to get something off my chest. My gut reaction When Phil first called me to break the news I thought I took it rather well. I mean, I certainly understand where he's coming from when he talks about his love for OSS and the communities that are built around great projects like Subtext - boy do I understand! I also tend to agree with his there are only two kinds of...

UPDATE: Simone found a bug with the recently refreshed Day Dreamin' skin - basically I forgot to update the User.Skins.config file to use the Prototype and script.aculo.us libraries. I uploaded a fix last night and bumped the skin up to version 1.1.1. Be sure to get the update if you're running Subtext 1.9.5 or greater. I just uploaded a new version of the Day Dreamin' skin to the SubtextSkins site. You can get it from the Skin Showcase section of the site. What's New As Phil mentioned in the official Subtext 1.9.5 release announcement, we added a few goodies for...

As I mentioned before, I've recently become wrapped up in the Twitter-craze that is sweeping the web. I'm still a bit of a noob but one think I noticed quickly was some of the Twitter-centric lexicon that was being used by other Twits. Of particular interest is the @username syntax. What does that do? Well as luck would have it the Twitter Help pages have an answer: When someone sends a Twitter that inspires a reply, what can you do? Direct Text the person if your reply is personal and only meant for their eyes.  But sometimes you want everyone...

I was recently peer pressured into the latest social network/application sweeping the intar-web: Twitter. Just for background... or in case you don't already know Twitter is a community of friends and strangers from around the world sending updates about moments in their lives.  Friends near or far can use Twitter to remain somewhat close while far away.  Curious people can make friends.  Bloggers can use it as a mini-blogging tool. Developers can use the API to make Twitter tools of their own. Possibilities are endless! So What? Yeah, that is exactly what I thought. It sounds a bit too...

After stumbling over this a couple of times in the past week I decided to blog-it so I won't forget again. By convention, SubSonic requires that any tables to be auto-generated into the DAL have a primary key. #1 sign you're missing a primary key You have your super-sweet database humming along in it's fully normalized form. You try to generate your DAL with SubSonic but one of your tables isn't being code-gened. For example, if you have a Customer table then SubSonic should generate the following three classes: Customer CustomerCollection CustomerController Note: Customer and CustomerCollection will...