WordPress is breached, again. I guess I run an unsecure version of WordPress, but I’m not sure. All I am told is that i don’t runt he latest version of WordPress and that I should upgrade, because upgrading is easy. No, it’s not easy. I keep history of my webpage in Subversion, so every time [...]

[Les mer →]

Oracle Weblogic (former BEA Weblogic) enforces a security model by default that is unhealthy for developers writing REST web services or other kinds of web applications using HTTP Authentication for security. By default, when sending an HTTP Authentication header, Weblogic will check its own security realms for users matching the username and password. If there [...]

[Les mer →]