4 ms·
My two cents: I guess they were using xmlrpc to post to the blog. The incutio xmlrpc library (or rather the metaweblog api which wordpress uses) requires that y
by chaosprophet 17y ago
My two cents: I guess they were using xmlrpc to post to the blog. The incutio xmlrpc library (or rather the metaweblog api which wordpress uses) requires that you send the username and password in the clear, so a man in the middle could easily gain access to their wordpress install.
- ComputerGuru 17y agoI think a bigger problem is that they didn't separate the posting accounts from the admin accounts. Otherwise, the only damage that could have been incurred is to mess with posts.