Categories
Weblogging

Wordform: Rewriting metadata lawyer

Recovered from the Wayback Machine. I’ve decided that the current implementation of the metadata layer is unworkable. Too vulnerable, and becoming too cumbersome for developers to work with. Additionally, since it has a significant overhead, and not everyone is interested in it, I’m pulling it out as an integrated component and adding it as a […]

Categories
Technology

The open source dance

While I struggle with my own security demons, Thomas Waldegger emailed to let me know that the BugTraq security alert for WordPress has gone live. I am still getting requests for a patch file for this issue, and would rather that the WordPress team respond to these since the notice has gone public. This alert does […]

Categories
Technology

Securing the form

Wordform’s metadata extensions require form elements with a minimum of a button to push — usually with fields to fill in. These form elements are incorporated into the general gen_metadata.php page, depending on which extension is currently being invoked. The gen_metadata.php (see source) file accesses the extension directory and outputs a list of available extensions — […]

Categories
Technology Weblogging

CVS Check-in

In order to help faciliate code walk throughs for those who are willing to help examine the Wordform source code for security and other problems, I’ll be looking at checking this code into SourceForge CVS in the next couple of days. I’ll probably also re-release the source code then–without the metadata extensions, until these are […]

Categories
Weblogging

Wordform: CVS Check In

Recovered from Wayback Machine. In order to help faciliate code walk throughs for those who are willing to help examine the Wordform source code for security and other problems, I’ll be looking at checking this code into SourceForge CVS in the next couple of days. I’ll probably also re-release the source code then–without the metadata […]