I just discovered tonight that my blog’s WordPress template had malicious javascript in it that did evil things involving stealing data via an ActiveX control in IE 6 and earlier.

1. My apologies to anyone that was affected.
2. If anyone else notices that their WordPress template is doing *very bad* things to IE users, you should look in the WP-config.php file for the malicious code. This isn’t immediately obvious because it’s not available for editing in the theme editor. Had to Grep to find it.
3. This is yet another reason to switch to Firefox, if you have not already done so. The holiday season is a great time to convert your parents’ computers too while you’re home.