GuitarAngel.net

If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include a security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately.

It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. We have locked down that server for further forensics, but at this time it appears that the 2.1.1 download was the only thing touched by the attack. They modified two files in WP to include code that would allow for remote PHP execution.

Via Wordpress.org

As I type, I am updating all the Wordpress sites I run. Poor Wordpress. Don't people have anything better to do than to make stupid hacks. I remember one time I was running a phpBB forum for something and some random jerk hacked its index file. The dumb thing about it was that all he did was create a floating layer with an image saying "You've been hacked by blahblah! HAHA!". Seriously. How is that supposed to be worth the 5 minutes it takes to probably insert those lines of code. It took me two seconds to clean it up. Lame.

And what would be the point of hacking a bunch of blogs? I bet its some scammer from Nigeria who is mad that no one is taking his "PRINCE CALLABALLA NEEDS YOU" emails seriously anymore because we all got smart. So he wanted to hack a bunch of blogs in order to mass post his scams so some poor little old lady who is surfing on her dial up connection just to buy a new set of knitting needles will be bombarded with "I NEED TO TRANSFER A MILLION DOLLARS" blog entries all over the Internet. And she will feel bad for this desperate soul all by himself in a foreign country and send him all her pension checks.

What a sad, sad goal in life. To scam poor little old ladies.