6 Responses

1. Jack Shedd

   February 17th, 2006 at 9:46 pm

   1

   It should be pretty easy to secure the posting using server sessions, wouldn’t it?

2. cocolo

   February 25th, 2006 at 10:07 am

   2

   You’re so cool !
   But I think I prefer the 37 Signal guys.
   You say you’re app doesn’t do anything. It could but the only thing it could do is harm. Really, you are so powerful ! Thanks for the community that needed another one like you.

3. nata2

   February 25th, 2006 at 5:05 pm

   3

   Yea.. the 37signals guys are pretty cool. I like their stuff.

   Well. I guess i feel that if a webapp has some exploits and the people who created the webapp are not interested in listening to problems with it - then those problems should be released. Not to exploit the webapp - but to make sure that developers see how security vulnerabilities happen and how they exist. This should and will allow people to develop better applications. EVEN the 37signals guys.. OMG.

   And it is obviously not about power. but you are right.. it is about being cool.

   And.. i DO think that the community needs more people interested in talking about PROBLEMS and security issues within web applications. Especially if applications are targetted towards businesses and what not.

   Security through obscurity is not security.

4. youpy

   February 26th, 2006 at 8:13 am

   4

   Here’s another campfire bot (greasemonkey script).

   http://www.bigbold.com/snippets/posts/show/1517

5. nata2

   February 26th, 2006 at 10:46 pm

   5

   Nice work..

6. Mark Coates

   October 24th, 2006 at 12:57 pm

   6

   The only way that we can grow these apps together is through pushing the limits, like Harper has done. nata2 is right, too:

   “Security through obscurity is not security.”

   At least 37signals are being transparent, sharing the API and seem at least willing to acknowledge limitations and holes.

   We recently wrote a bot mod for Campfire, too. Check it out. Keep posting!