<b><span style="font-weight: bold;"><span style="font-weight: bold;">From the slashdot article: <a href="http://yro.slashdot.org/yro/07/09/25/1632246.shtml">http://yro.slashdot.org/yro/07/09/25/1632246.shtml</a></span><br>
<br></span>Update: 09/25 17:52 GMT</b> by <b> <a href="http://slashdot.org/%7Ekdawson/">KD</a> </b>: This article is misleading enough to be called "just wrong." Matt Mullenweg writes: <i>"As mentioned in <a href="http://wordpress.org/development/2007/09/wordpress-23/">
our release announcement</a>, the update notification sends your blog URL, plugins, and version info when it checks <em><a href="http://api.wordpress.org">api.wordpress.org</a></em>
for new and compatible updates. It does not include $_SERVER dumps, or
any settings beyond version numbers (for checking compatibility), or
your blog name, or your credit card number. We do provide a way of
disabling this feature; in fact I link to one of the plugins in the
release announcement and in <a href="http://groups.google.com/group/wp-hackers/msg/e7794372692b9548">my original response</a> to Morty's thread."</i>