I was reading some blogs and came across this serious vulnerability in the way Wordpress handles the blogroll posting by unregistered users. The “wp-admin/link.php” script does not check the permissions of the user before adding a new Blogroll link.

BlogSecurity has posted a fix already, so it is highly recommended to fix it before you start to get spam on your blog. to fix it you just have to change some lines of code inside wp-admin/link.php.

if ( ! current_user_can('manage_links') )
wp_die( __('You do not have sufficient permissions
to edit the links for this blog.') );

If you want, there is a fixed link.php file here. Just backup your current file and replace it with this one.

Website

I just found out that Adobe released version 8.1.1 of their Reader program. There were some security flaws disclosed in the past few months and i think they are solved now with this new release. Go get it.

Website Download

Microsoft Live Labs has released a tech preview of Listas, a site where you can create and share all kinds of lists. Be it bookmarks, to-do lists, notes and more…

They also have a community-shared list so you can share your lists with the world as well as be able to read the lists from others. The lists has tags so they can be easy to find.

In the link below you can read the full description and access the Listas website where you can sign up.

Website

People are already talking about the upcoming Windows 7 While it might be a little early, there is a live demonstration made by Microsoft’s Eric Traut. While thre is a video of that presentation, mostly he talks about virtualization and gives only a glimpse on Windows 7 development.

An interesting thing is that the Core of Windows is only about 25mb. Yes, 25!

Website

This freeware program let you make web galleries from images or photos. Has many customization options and has plugins and skins capabilities. The look of the resulting web pages is great and can be altered in many ways.

There are several templates for download so you have more options to choose from.

* You need java installed in order for the program to work.

Website Download

If you have more than one Windows Live account now you can link them together.

Windows Live Linked IDs Shipped
Got multiple Windows Live accounts? Sick and tired of having to log out and back in again to switch between them? Well, no more! You can now link your Windows Live IDs together so you can switch identities in one click from the menu on the top right of most Windows Live pages.

To set this up, go to https://account.live.com and look for the section called Linked Windows Live IDs. There’s a link there to manage your linked IDs and if you click that, you’ll get a screen where you can add IDs.

Just make sure you read the two security notes at the end of that page.

This is an useful tool for cleaning drivers. Many vendor installers detect if previous versions of its drivers are installed before installing the new ones but always there are some files or registry entries left.

It is recommended to uninstall previous drivers, reboot then install the new ones.

With Driver Sweeper you can clean Nvidia, ATI, Realtek, AGEIA, Creative and Microsoft drivers before you install their latest drivers.

There is a build without an installer so you can take it with you.

Website Download

A new version of Firefox is available. Mozilla just released version 2.0.0.8.

Website Download