Viewing profile — DanielLestrange

The issue affects _all_ models (inclusive the "hidden" guardian codex-auto-review model), and _only_ happens on the PRO plans (both 5x and 20x). It does not, under any circumstance…

Hey, sorry I was offline a while I think we might agree - and my original wording was tainted by emotions. - indeed, there was changes in code that can be sold as “attempted securi…

Thanks for the reply. Actually that code (I mean the one where they started clearing POSTed data) was the "fix" WPE rushed into during the "grace period". The contract existing bef…

Why do you not actually provide some researched facts? I mean, I am all ears to stand corrected. Yet it appears all you (and other automatticians, and/or else employees) can do is …

Are you being sarcastic or a jerk? No issues? At least 50 deleted reviews spoke for themselves! Yeah, you didn’t produce any “technical” issues other than now maintaining a plugin …

If anything, the problem here is call_user_func, which when an attacker HAS ACCESS TO THE CODE, can be dangerous. How on earth does emptying POST or REQUEST solve anything at all i…

For some context how you MIGHT actually “fix” the true security concern in this code: $allowed_callbacks = ['some_function', 'another_function']; // Example of allowed functions if…

The same. Nothing. The “security” issue here would be that the user callback can access post and request data. Tell me one place in the entire wp code base where that is NOT possib…

There is no proof, see my comment above.

Unfortunately you have no proof of that, because the only relevant changes are actually neither introducing fixes, nor ever changing the plugin core code in a way that fixes securi…

Tal Broda made several war glorifying posts and then removed them. Reports on the subject are being deleted left and right (including HN) as if they were fake news. But they aren’t…

They deleted my comment with the only available somewhat proof … so here it goes again. https://twitter.com/fredberinger/status/492863743030591489?t...

Are you sure? https://twitter.com/fredberinger/status/492863743030591489?t... The original post was deleted but the replies match the screenshots 1:1. This doesn’t appear fake news…