Top > Dave's World > Weblog Archive > 2000 > May > 09Previous/Next


Scripting News, the weblog started in 1997 that bootstrapped the blogging revolution.
 
Permanent link to archive for Tuesday, May 09, 2000. Tuesday, May 09, 2000

Zope discovers a browser security hole

Zope.Org posts a security alert of concern to users of all Web applications, including Manila. We're studying it now.

We believe there is a way to work around it using the Referer attribute of an HTTP request. If you want to be safe, and you have a Manila site, either log off the site, or don't visit any sites that might not be friendly. I know that's not very helpful. We'll post more advice here as we figure it out.

Second line of defense, in your Manila site, in the Editors Only menu, click on Prefs, then Legal Tags. Make sure the <script> tag is turned off. This prevents someone from using your site to compromise your site.

Another way to defend. Use Pike to edit your site. If your home page gets overwritten, you will have a copy of the content on your workstation. Make a minor change and Save. Maybe the (so far imaginary) hacker will give up in frustration.

To EditThisPage.Com editors

Bulletin: "It's clear to me that people in the EditThisPage community would prefer if we continue to host the site, so that's what we'll do."

Honoring the excellence of EditThisPage.Com

StackFrame: Serving up information, opinion and hot-links about hard-core software development.

May snow in Teller County, Colorado.

What did you have for lunch?

Pulldowns for Manila.

Basketball.

Drinks.

Wes.

Joel.

UserLand's third press release

Press release: UserLand Submits SOAP 1.1 to W3C.

Of course it made it onto Yahoo too. Where else?

Oooh they're poppin up: CBS MarketWatch, CNBC.

Full quotes from Tim Bray, Paul Everitt, Fredrik Lundh, Jakob Nielsen, Tod Nielsen, Tim O'Reilly, Doc Searls, Kevin Werbach and myself.

Interesting, all the stocks listed in the press release are going down today. Hmmm. I wonder if this was a sell signal?

SOAP mail lists

On the SOAP weblog, now there's a page of mail lists that discuss XML over HTTP protocols.

On the XML-RPC mail list, Sun's Mark Baker asks why we want a spell-checker as an Internet service.

"The answer is easy," said UserLand CEO Dave Winer. "User interface matters."

(I gotta get out of press-release writing mode!)

Tom Scola: "This convinces me even more that SOAP is a protocol designed for marketing purposes rather than technical reasons."

My response: "Tom, it definitely *is* marketing."

A soldier of peace



     

Last update: Tuesday, May 09, 2000 at 10:22 PM Eastern.

Dave Winer Mailto icon
 

Click here to view the OPML version of Scripting News.

Morning Coffee Notes, an occasional podcast by Scripting News Editor, Dave Winer.

May 2000
Sun
Mon
Tue
Wed
Thu
Fri
Sat
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
 
Apr   Jun


Click here to see an XML representation of the content of this weblog.


          



© Copyright 1997-2005 Dave Winer. The picture at the top of the page may change from time to time. Previous graphics are archived.


Previous/Next