blooblog

Microsoft Knowledge Base Article - 834489 announced an upcoming fix for the Internet Explorer username exploit that masked malicious website URLs. If you use any links that look like

http(s)://username:password@server/resource.ext

then any updated browsers will not follow them. The article provides workarounds for server backends and client scripting. The HTTP login URL format was never in the official standard. Note that this does not affect FTP login URLs.

Here is a handy tip for Movable Type 2.64 users if you want to allow anonymous comments but require a name (since MT's anonymous comment option does not require a name). Although it's pretty easy to see the code will work, I tested it anyway to make sure.

Nice template for an RSS 2.0 Feed with Full Posts and Comments for Movable Type. This is the template used here.