Month: May 2004

In response to a posting on Chris Scott’s blog, Boss Ross points out what happened with Blogrolling yesterday:

Well, that was a close one: this blogger pointed out to Hossein “Hoder” Derakhshan that there was a security flaw in one of Tucows’ newly-acquired products, Blogrolling.com. Hoder pointed out the flaw and even suggested that people start mucking around with the Blogs for Bush blogroll. Dan Gillmor, Silicon Valley’s best-known journalist, picked up on Hoder’s blog entry and posted a quick blurb about the flaw.

Hoder essentially said “Crackers and electronic maladroits of the
world, here’s a flaw in a piece of software used by thousands of
bloggers, and here’s how you exploit it. Get to work”, and Dan, who’s
got to be one of the most-read guys on the Web, made sure lots of
people found out. But neither of these guys — both of whom are
otherwise generally decent folk — contacted Tucows.

We are lucky that there are a lot of people
with goodwill towards this company (in fact, this goodwill is one of
the reasons I accepted a job here). Brent Ashley and a number of people contacted us,
and we had a fix up in less than an hour.

It irks me that I have to say this, because I thought it would be obvious. Let me put it in large type:

The right thing to do when you discover a security flaw in a product is to contact the vendor.

The wrong thing to do is simply to assume that vendors deserve to get
0wnz0red simply because there’s a flaw in their product. Although we
strive for perfection, no piece of software is perfect; it’s just not
possible this side of paradise. We don’t put security flaws in our
software to “punk” our customers. In this world, you’re always refining
your work to adapt to ever-changing conditions, hence security guru
Bruce Schneier’s famous motto: “Security is a process, not a product.”

We’re all for full disclosure and free speech, but please tell us when our fly is down so we have a chance to pull it back up!

If you ever find a security flaw in any Tucows product, please let us
know. Hey, as the Technical Community Development Coordinator, you can
tell me (my email address is jdevilla@tucows.com),
and I’ll make sure that the appropriate actions are taken and even pull
as many strings as I can to make sure we send an appropriate token of
our gratitude. That’s my job.

As for Hoder and Dan, all I will say is “Shame on you.”

Okay, Blogware users and wanna-users, here’s a new feature that made it into the 1.0 cut for Blogware. If you have a Blogware blog, open the Blogware Control Panel in a new browser window and log in. Once you’ve logged in, click on the Settings tab of the Navigation Bar.

Now take a look near the lower right-hand corner of the page, near the
bottom of the Options sidebar. Notice a new checkbox — the one marked Enable Slideshows?

That checkbox, Gentle Reader, is the gateway to photoblogging coolness.
Checking that checkbox enables Blogware’s new slideshow feature,
which turns your blog’s photo albums into a slideshow with just a click.

Let’s take a look at a photo album I recently posted: one featuring my
photos of a billboard near Queen Street West. Here’s what the photo
album’s main page look like.

Notice the icon above the photos? That’s the slideshow icon. Clicking
that icon opens a new window containing the slideshow. The slideshow
starts, displaying all the photos in the album (click the photo below to start the slideshow):
 

The controls along the top of the window control slideshow playback.
Each photo in the album is shown for a short period of time (which can
be set to 1, 3 or 10 seconds), after which the next photo is shown.
Once the slideshow finishes showing the last photo in the album, it
starts over from the beginning.

We know that the slideshow works fine for the following browsers:

• Windows
• Internet Explorer 6
• Mozilla 1.6
• Firebird 0.8
• Netscape 7
• Mac OS X
• Safari  1.2
• Mozilla 1.6
• Firebird 0.8
• Netscape 7
• Linux
• Mozilla 1.6
• Firebird 0.8

To whet your appetite for Blogware’s slideshows, here are some direct links to some of my own:

The tamer photos (safe for work, gah-ron-teed)

• The Accordion is a Chick Magnet, or: a Lovely Night at a Breast Cancer Fund-Raiser Singles Mixer (November 2003)
• Canmore Scenery (January 2004)
• Active Surplus Renovations (April 2004)

The saucier photos (some images might not be so safe for work)

• The hot tub truck after the White Cowbell Oklahoma concert (October 2003)
• The Hot Tub Truck at my birthday party (November 2003)

I’m going to have a lot of fun with this new feature.

Report On Business Television anchor Mike Hainsworth, whom I know from my days at OpenCola, where he did some sysadmin consulting. 
[Click the photo to see the interview.]

Boss Ross, whom I know from this place where I hang out for hours every weekday.

[Click the photo to see the interview.]

Boss Ross’ interview on Report On Business Television in which he talks
about the launch of Blogware (mentioned in this entry) is available online [Windows Media Player reuqired]. Check it out, and keep and eye on the Blogware site, where I’ll be talking about some cool features that put us ahead of the blog tool pack.

And hey, don’t take my word for it; Suw Charman thinks pretty highly of Blogware too.