WordPress Security Scanner

Wordpress users should think about their system's security more carefully. It's not only because Wordpress is getting a lot of attacks lately, but also due to the introduction of Wordpress Security Scanner (WPScan) which is developed by Ryan Dewhurstand hosted at Google Code.

WPScan is a black box WordPress Security Scanner written in Ruby which attempts to find known security weaknesses within WordPress installations. Its intended use it to be for security professionals or WordPress administrators to asses the security posture of their WordPress installations. The code base is Open Source and licensed under the GPLv3.

Features include:

• Username enumeration (from ?author)
• Weak password cracking (multithreaded)
• Version enumeration (from generator meta tag)
• Vulnerability enumeration (based on version)
• Plugin enumeration (todo)
• Plugin vulnerability enumeration (based on version) (todo)
• Other miscellaneous checks

Better Accessibility Support in Firefox 3.1

Marco Zehe wrote on his blog about better accessibility support in Firefox 3.1. There will be text attributes and spell checking support!. This means that assistive technologies now have access to the attributes of any text run on a page. This patch has been included in Firefox 3.1 Alpha 1 (Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1a1pre) Gecko/2008071803 Minefield/3.1a1pre).

Right now, accessibility has become dominant and more interesting for many people. Lot's of application are focusing on accessibility, for example WordPress 2.6