Archive for April, 2011
Tough note to communicate today: Automattic had a low-level (root) break-in to several of our servers, and potentially anything on those servers could have been revealed.
We have been diligently reviewing logs and records about the break-in to determine the extent of the information exposed, and re-securing avenues used to gain access. We presume our source code was exposed and copied. While much of our code is Open Source, there are sensitive bits of our and our partners’ code. Beyond that, however, it appears information disclosed was limited.
Based on what we’ve found, we don’t have any specific suggestions for our users beyond reiterating these security fundamentals:
- Use a strong password, meaning something random with numbers and punctuation.
- Use different passwords for different sites.
- If you have used the same password on different sites, switch it to something more secure.
(Tools like 1Password, LastPass, and KeePass make it easy to keep track of different unique logins.)
Our investigation into this matter is ongoing and will take time to complete. As I said above, we’ve taken comprehensive steps to prevent an incident like this from occurring again. If you have any questions or concerns, please leave a comment below or contact our support.
Tough note to communicate today: Automattic had a low-level (root) break-in to several of our servers, and potentially anything on those servers could have been revealed.
We have been diligently reviewing logs and records about the break-in to determine the extent of the information exposed, and re-securing avenues used to gain access. We presume our source code was exposed and copied. While much of our code is Open Source, there are sensitive bits of our and our partners’ code. Beyond that, however, it appears information disclosed was limited.
Based on what we’ve found, we don’t have any specific suggestions for our users beyond reiterating these security fundamentals:
- Use a strong password, meaning something random with numbers and punctuation.
- Use different passwords for different sites.
- If you have used the same password on different sites, switch it to something more secure.
(Tools like 1Password, LastPass, and KeePass make it easy to keep track of different unique logins.)
Our investigation into this matter is ongoing and will take time to complete. As I said above, we’ve taken comprehensive steps to prevent an incident like this from occurring again. If you have any questions or concerns, please leave a comment below or contact our support.
Say hello to The Morning After, a classic and popular magazine-style theme that has withstood the test of time. Based on its great success for self-hosted sites we’re excited to bring it to you for the first time on WordPress.com.
Introduced in 2007 by Arun Kale, The Morning After was a game-changer as the first magazine style theme for WordPress; it is still considered by many to be the top of its class. In June 2010 WooThemes announced it was taking over the theme:
Considering the significance of this theme, we jumped at the opportunity. We felt that [The Morning After] started so many things in the WordPress community… and we wanted to put our weight behind one of the “pillars” of that community.
The Morning After sports a special home page template with featured posts, three available widget areas, and special styles for posts in the “Aside” format. Also included is an optional full-width page template that removes the sidebar and full support for a custom menu, header and background. A robust theme options menu allows for further customization: header links, page headings, full or partial content an archive pages, and more.
Read more about The Morning After on the Theme Showcase.
The Morning After is now available in your WordPress.com dashboard and, for self-hosted sites as a download from WooThemes.
Say hello to The Morning After, a classic and popular magazine-style theme that has withstood the test of time. Based on its great success for self-hosted sites we’re excited to bring it to you for the first time on WordPress.com.
Introduced in 2007 by Arun Kale, The Morning After was a game-changer as the first magazine style theme for WordPress; it is still considered by many to be the top of its class. In June 2010 WooThemes announced it was taking over the theme:
Considering the significance of this theme, we jumped at the opportunity. We felt that [The Morning After] started so many things in the WordPress community… and we wanted to put our weight behind one of the “pillars” of that community.
The Morning After sports a special home page template with featured posts, three available widget areas, and special styles for posts in the “Aside” format. Also included is an optional full-width page template that removes the sidebar and full support for a custom menu, header and background. A robust theme options menu allows for further customization: header links, page headings, full or partial content an archive pages, and more.
Read more about The Morning After on the Theme Showcase.
The Morning After is now available in your WordPress.com dashboard and, for self-hosted sites as a download from WooThemes.
Last November we launched Twitter Blackbird Pie, a quick and easy way to reproduce beautiful, full-fledged tweets — not just static screenshots of tweets — in your posts, pages, and even comments.
Today we are happy to announce that we’ve made it even easier for you to interact with tweets on WordPress.com. Thanks to the new set of tools that Twitter just announced, you can now reply to, retweet, or favorite content without ever leaving the page you’re on.
Try it out on the tweet below!
@wordpressdotcomWordPress.com
This improvement takes effect immediately for all tweets on WordPress.com, so there’s no action necessary on your part. Enjoy!
Bonus Tip: Drive Traffic to Your Twitter Account
To gain additional exposure on Twitter, add your account as a verified external service in your public profile under Users -> My Profile in your dashboard. Anytime someone replies to, retweets, or favorites one of your tweets on WordPress.com, they’ll be prompted to follow you on Twitter.
Additional Ways to Integrate Twitter with WordPress.com
- Display your latest tweets in your blog’s sidebar using the Twitter Widget
- Add a Twitter sharing button to the bottom of your posts or pages with the Sharing feature
- Tweet new blog posts automatically to your Twitter account with Publicize
Last November we launched Twitter Blackbird Pie, a quick and easy way to reproduce beautiful, full-fledged tweets — not just static screenshots of tweets — in your posts, pages, and even comments.
Today we are happy to announce that we’ve made it even easier for you to interact with tweets on WordPress.com. Thanks to the new set of tools that Twitter just announced, you can now reply to, retweet, or favorite content without ever leaving the page you’re on.
Try it out on the tweet below!
@wordpressdotcomWordPress.com
This improvement takes effect immediately for all tweets on WordPress.com, so there’s no action necessary on your part. Enjoy!
Bonus Tip: Drive Traffic to Your Twitter Account
To gain additional exposure on Twitter, add your account as a verified external service in your public profile under Users -> My Profile in your dashboard. Anytime someone replies to, retweets, or favorites one of your tweets on WordPress.com, they’ll be prompted to follow you on Twitter.
Additional Ways to Integrate Twitter with WordPress.com
- Display your latest tweets in your blog’s sidebar using the Twitter Widget
- Add a Twitter sharing button to the bottom of your posts or pages with the Sharing feature
- Tweet new blog posts automatically to your Twitter account with Publicize