Archive for Tag ‘Security‘

Three Books for WordPress 3.x

Over the last year I’ve served as a reviewer for a few books for Packt Publishing, focused on WordPress:

All three have now been published and are worth checking out. Details of each below.

Read more…

Facebook Platform Updates, SSL, and WPBook

Road to nowhere (Photo by Matthew Connor, cc-by-nc license)

Back in January, I got an unexpected flurry of WPBook support requests, and ultimately discovered they were the result of Facebook’s decision to allow people to browse Facebook in HTTPS mode.

As part of that change, Facebook introduced some new settings: “Secure Canvas URL” and “Secure Tab URL,” which would enable https connections throughout your Facebook application.

WPBook mostly worked with these two variables properly set (thanks to cshiflet for this patch).

Now, however, Facebook has announced they will require ALL apps to support https:

Today, we are announcing an update to our Developer Roadmap that outlines a plan requiring all sites and apps to migrate to OAuth 2.0, process the signed_request parameter, and obtain an SSL certificate by October 1.

What will this mean for WPBook users?

Unfortunately, my guess is that many WPBook users are not prepared to install an SSL certificate and accept https traffic on their blogs. (SSL certificates typically require that your blog have a unique IP address and cost extra at shared hosting facilities).

If you are unable to install an SSL certificate for your blog, and enable https based browsing of it, you may be unable to use WPBook after October 1, 2011 (or whenever Facebook decides to actually enforce this migration step).

More to come as we get closer to that date.

Whoami? Google Account Leakage?

So I’m up working late tonight (well, late for me – 10pm. I normally go to bed by 9 – I’m old) and I fired up Firefox to recheck the time of my flight tomorrow morning (Yay! DrupalCon DC).

I landed on the Firefox Google homepage, as I always do in a new browser window – http://www.google.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official is the address, I believe it is the default shipped with firefox.

But look at what I see in the upper right hand corner where my email address should be (click on the image for full sized one):

Google Homepage Issue

Google Homepage Issue

Very strange. I tried, just for investigation, clicking into “my account” or some of the other google services – I don’t seem to be actually logged in as someone else. Anything which would require login actually asks me to login and doesn’t prefill the box with stephenandmandy or anything. But it is really odd to see someone else’s email in that upper right corner.

Anyone else seeing this?

(For the non *nix folks in the audience, whoami is a shell command on most unix/linux systems that tells you what user account you are currently logged in as – or, as the man page so concisely puts it:

whoami — display effective user id

Try it on your local *nix box today.)

Enterprise Portals, Collaboration, and the Web

I’m in San Diego this week for the Enterprise3 conference, which the organizers describe thusly:

Enterprise3 consists of three separate, but related, components:

  • Enterprise Web and Information Management Conference – a conference that provides technology managers and IT staff with a detailed guide to selecting and implementing technology and product innovations in Web 2.0, portals, collaboration, information management and access, enterprise search, and service-oriented architectures.
  • Enterprise Portal and Collaboration Business Summit – an event designed for business users and technology managers that employs case studies and best practices to show attendees how companies today are gaining business benefit from the latest enterprise portal and business collaboration technologies and products.
  • Microsoft SharePoint in the Enterprise Forum – this forum provides IT staff with the information they need to deploy a Microsoft SharePoint environment that can be integrated with enterprise-level information management and business collaboration systems.


Read more…