Microsoft + Movabletype = Disaster

mrG — Sun, 27 Jun 2004 08:24:20 -0400

This is cool: MT and MS join forces to destroy each other!

Say what? 'Fraid so -- the two are combining mutual weaknesses to create a juggernaut of an attack on their users, and what's the best hoot of all, both companies will earnestly express shock and outrage and like Nero at the sack of Rome, insist it is none of their faults.

Here's what happens: Every MT owner knows the joys of spending hours every week scraping the shite off their site thanks to the naive design of the Movabletype comment-form security (not) -- it's just one more of the costs of using their 'free' kit. Now, you couple this with a new and frightenly gross security flaw in MSIE ... Wide-open ubiquitous auto-posting of any weblink plus a ubiquitous browser that will grant any webpage supreme authority over the O/S, it was only a matter of time

Two days time, in fact: The MS flaw was reported by the BBC only just last week, and it seems the mafia has put two and two together because already I'm scraping comments that all read the most innocent of text, linking the name to a page laced with the MSIE exploit.

TeledyN - Microsoft + Movabletype = Disaster - Comments

Microsoft + Movabletype = Disaster