WordPress 4.2.1 critical security release is now available

Download WordPress 4.2.1 critical security release. WordPress 4.2.1 fixes a critical cross-site scripting (XSS) vulnerability, which could enable commenters to compromise a site.
This is a critical security release for all previous versions and WordPress strongly encourage everyone using WordPress to update your sites immediately.

Vulnerability

The vulnerability was discovered by Jouko Pynnönen.
An overview from Jouko’s website.

Current versions of WordPress are vulnerable to a stored XSS. An unauthenticated attacker can inject JavaScript in WordPress comments. The script is triggered when the comment is viewed.

If triggered by a logged-in administrator, under default settings the attacker can leverage the vulnerability to execute arbitrary code on the server via the plugin and theme editors.

Alternatively the attacker could change the administrator’s password, create new administrator accounts, or do whatever else the currently logged-in administrator can do on the target system.

Solution

  1. To prevent exploitation, administrators should disable comments (Dashboard, Settings/Discussion, select as restrictive options as possible). Do not approve any comments.
  2. Download WordPress 4.2.1
  3. Go to your Dashboard → Updates and simply click “Update Now”.

Sources: WordPress 4.2.1Jouko Pynnönen

Steve Jobs used Zen mindfulness

Apple founder Steve Jobs was committed to the practise of Zen mindfulness. Jobs is mostly known for his legendary ability to create innovative, groundbreaking products like the iPod, iPhone and iPad. What’s less known, though, is that Steve Jobs was a pioneer in the use of Zen mindfulness meditation.

From the book “Steve Jobs” biographer Walter Isaacson’s wrote:

“Coming back after seven months in Indian villages, I saw the craziness of the Western world as well as its capacity for rational thought.”

“If you just sit and observe, you will see how restless your mind is. If you try to calm it, it only makes it worse, but over time it does calm, and when it does, there’s room to hear more subtle things – that’s when your intuition starts to blossom and you start to see things more clearly and be in the present more. Your mind just slows down, and you see a tremendous expanse in the moment. You see so much more than you could see before. It’s a discipline; you have to practice it.”

“Zen has deep influence in my life ever since. At one point I was thinking about going to Japan and trying to get into the Eihei-ji monastery, but mu spiritual advisor urged me to stay here. He said there is nothing over there that isn’t here. I learned the truth of Zen saying that if you are willing to travel around the world to meet a teacher, one will appear next door.”

Steve Jobs is one of the most daring, innovative and creative CEO’s who has shaped the world of technology and media. Get the book Steve Jobs by biographer Walter Isaacson from Amazon.