<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
        <title>Security Problems on Nico Maas</title>
        <link>https://www.nico-maas.de/tags/security-problems/</link>
        <description>Recent content in Security Problems on Nico Maas</description>
        <generator>Hugo -- gohugo.io</generator>
        <language>en-us</language>
        <lastBuildDate>Tue, 28 Feb 2017 15:43:32 +0000</lastBuildDate><atom:link href="https://www.nico-maas.de/tags/security-problems/index.xml" rel="self" type="application/rss+xml" /><item>
            <title>Blog Defacement</title>
            <link>https://www.nico-maas.de/posts/2017-02-28-blog-defacement/</link>
            <pubDate>Tue, 28 Feb 2017 15:43:32 +0000</pubDate>
            <guid>https://www.nico-maas.de/posts/2017-02-28-blog-defacement/</guid>
            <description>&lt;p&gt;While I am now hosting this blog for nearly 9 years - without any incident - problems tend to happen sooner or later. A lot of hassle and problems has been reduced due to the WordPress Auto Update system - so to update WordPress itself, as well as its plugins - and it works great. However, WordPress introduced - and enabled by default - a REST API - which has a great deal of security problems. And without me always checking each installed version - well, I did not know that&amp;hellip; The REST API problems should be fixed by now, but - that came a bit too late for my blog. Nonetheless, I would recommend going to Jetpack -&amp;gt; Settings and disabling JSON API - especially if you&amp;rsquo;re not using it&amp;hellip; I learned it the hard way ^^&amp;rsquo;..&lt;/p&gt;</description>
        </item></channel>
</rss>
