
Ah finally some clarification from Network Solutions regarding the recent hacker fiasco. While we were treated to some helpful blog posts telling us what we could do to ‘harden’ our WordPress blogs, suggesting to me at least WordPress had some inherent soft spots – right? – NS has finally manned up and now “owns” this problem:
“Sorry to the WordPress community and customers for any misunderstanding. This issue resulted from a complex combination of factors and we own it.“
Well Shashi from NS has clarified their official position thanks to this little post by WordPress creator (and all-around cool guy and cool hi-fi owner) Matt Mullenweg on the WordPress site:
Secure File Permissions Matter
Posted April 13, 2010 by Matt. Filed under Development.
Summary: A web host had a crappy server configuration that allowed people on the same box to read each others’ configuration files, and some members of the “security” press have tried to turn this into a “WordPress vulnerability” story.
…
I’m not even going to link any of the articles because they have so many inaccuracies you become stupider by reading them.
If you’re a web host and you turn a bad file permissions story into a WordPress story, you’re doing something wrong.
P.S. Network Solutions, it’s “WordPress” not “Word Press.”
See the entire post.
By the way, I’m certain Shashi edited his post to delete a playful response to Matt’s correcting his misspelling of WordPress (Word Press). Who’s your Daddy?