immediate and widespread access

I really don’t pay much attention to news from the Old Country any more, but sometimes stuff gets through—such as the ongoing budgetary kerfuffle. I’m less interested in FT‘s take on the budget itself, however, than in the seemingly peripheral dramas:

The OBR report found it routinely uploaded its documents before publication time to facilitate “immediate and widespread access” to them at the appropriate time. But it wrongly assumed that it had configured its website, which it managed using WordPress software, to prevent early access.

You’re running a government-appointed arms-length watchdog organisation with the word “Responsibility” in its name, and you’re using fucking WordPress as your “website solution”?

This is what we writers would call a telling detail—an almost incidental-seeming observation that serves to underscore the complete unseriousness of not only the character, but the entire milieu in which they are enmeshed. “First as tragedy, then as farce”, and all that.


(Yes, yes—this site runs on WordPress, and it’s a much more robust bit of software than it was back in the day. But I’m not using it to disseminate my supposedly objective analyses of an entire national economy, am I?)

Posted

in

Comments and pingbacks

One response to “immediate and widespread access”

  1. Jay Springett avatar

    A friend looked at clean install of WordPress and the plugin the OBR were using for their document control.

    The only way for this to happen, was if the webmaster had deleted .htaccess lines, removing access protection from the dlm_uploads (plugin) directory.

    So the mitigation was actually the opposite – a vulnerability was opened up by deliberate action to override the default protections in order to make the plugin work the way they wanted.

    PEBCAK. WordPress was fine and shouldn’t be blamed in any way.

Mentions

  • Jay Springett

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post’s permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post’s URL again. (Find out more about Webmentions.)