Security Incident

Using the phrase "low level" to describe someone gaining complete control of your systems is not something you see in a general PR release for an incident. The friends and family I have recommended wordpress.com to are likely to misunderstand the importance of this event.

Good reminder how honesty and transparency are essential in surviving issues like this. There are currently two PAGES of comments on this post, overwhelmingly positive and thankful for this sort of early disclosure.<p>This reminds me of a talk by Gary Vaynerchuk where he joked that he wished some of his consulting clients (via <a href="http://vaynermedia.com" rel="nofollow">http://vaynermedia.com</a>) would screw up badly so they had an opportunity to apologize. Strong bonds are formed in times of trouble.

This is why startups should always provide users the option to change their password, don't delay this essential funcitonality please.

They didn't post much details, but if you have accounts at wordpress.com/.org, you know what to do (change passwords, etc) :)

Is cleanup on Wordpress.com/org something Sucuri.net can help with? Is there an opportunity for Sucuri to do something at a special rate for affected HN'ers?