Linked List: January 25, 2005

Tuesday, 25 January 2005

TidBITS: Why Go Pro (Audio Hijack Pro, That Is) ★

Matt Neuburg, writing for TidBITS:

Rogue Amoeba’s Audio Hijack Pro is a great program, but it seems to me that the developer’s own Web pages fail to explain exactly why. The conceptual difficulty is that Audio Hijack Pro occupies two niches at once — it does two quite different things. So, in reading about it, if you don’t particularly want it for the first thing it does, the second thing it does might not even register upon your consciousness. Yet this second thing is extremely cool and, as far as I can tell, quite unique.

Photon Now Freeware ★

Photon is an iPhoto plug-in that allows you to export pictures to weblogs using Movable Type, TypePad, Blosjom, and WordPress. Supports iPhoto ’05. Used to cost $7; now freeware.

MT Bug Allows Spammers to Send Email Through mt-comments.cgi ★

Ouch. A bug in Movable Type allows spammers to send email via the mt-comments.cgi script. MT 3.15 fixes the bug; but word is out, and MT installations which haven’t yet updated are getting hammered by spammers. Six Apart has also released a small plug-in that fixes the same bug, for those running older versions of MT or who simply want to close the hole as quickly as possible.

The bug was that MT was allowing newline characters within email addresses, which allowed spammers to inject additional message headers in notification emails. Inject a couple of thousand addresses in a Bcc: header, and blammo.