A PHP vulnerability with a CVSS score of 9.2 that lets anyone execute code remotely without even logging in — and the official fix only covers 8.2 through 8.5. My server runs 5.6, which has no patch and no backport. This morning I only wanted to confirm how badly I was affected. But one thing led to another, and I ended up giving the site legacy — stacked up and steadily gaining entropy for over a decade — a thorough slimming down.

The new site went into design and development on July 27 this year, mostly in my spare time. And now the construction is finally done — it’s shipped. http://www.mousebomb.org/ the homepage now redirects to the new version — go take a look. The new version really did drag on. Since the 2007 version I hadn’t updated my personal site for ages. In fact, before building this one I designed two other versions — one during Spring Festival 2008, and another in late September 2008. One of them was going to have a star-travel theme. On the first visit a login box would pop up saying “Commander, welcome back” (just like Tiberium Wars). Once inside, you’d see a galaxy where visitors piloted a spaceship to explore planets, could send out cosmic radio waves to chat, and so on.