By John Gruber
WorkOS launches auth.md — an open protocol for agent registration.
Month-long list of bugs and security vulnerabilities in the PHP core. I’d wager there are a lot of sites out there vulnerable to this one.
“The violence of the lambs.” Could be hilarious. (Thanks to Rich Siegel.)
Matt Mullenweg:
Long story short: If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include a security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately.
Chris Pepper on the Mac OS X keychain and the security and certtool command-line utilities.