|
|
Subject: Re: https YubNub access - msg#00158
List: search.yubnub
hey jake,
i think my query has less to do with trust than it does with simply
providing users with the option of security.
i host the scrape command, so theoretically, i could track and trace
all the sites people are scraping. i don't do this, but it would be
nice to assure users that i'm not.
i believe https provides a secure connection between 2 machines where
all data is encrypted. (currently, there are a few commands that have
been created that employ passwords or email addresses.)
it would be cool if we had a set of yubnub security commands. not sure
if this even possible though.
sean
website: http://www.eigology.com
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"YubNub" group.
To post to this group, send email to
YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
To unsubscribe from this group, send email to
YubNub-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
For more options, visit this group at http://groups.google.com/group/YubNub
-~----------~----~----~----~------~----~------~--~---
Was this page helpful?
Thread at a glance:
Previous Message by Date:
click to view message preview
RE: gmailme alias idea.
Hi Jake - Do you just want to send an email with the From set to your email
address? You could probably get away with using a PHP email library and just
set From to your gmail addy.
--
Jon Aquino (Victoria BC Canada)
http://jonathanaquino.com
-----Original Message-----
From: YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
[mailto:YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx] On Behalf Of
magicjj
Sent: Thursday, February 16, 2006 7:11 PM
To: YubNub
Subject: Re: gmailme alias idea.
I'm trying to find a way to use the get2post PHP script in order to make a
gmail alias which you don't have to hit send after it. I posted something on
one of Gmails google groups we'll see if they can help me out!
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"YubNub" group.
To post to this group, send email to
YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
To unsubscribe from this group, send email to
YubNub-unsubscribe@xxxxxxxxxxxxxxxx
For more options, visit this group at http://groups.google.com/group/YubNub
-~----------~----~----~----~------~----~------~--~---
Next Message by Date:
click to view message preview
RE: Adding a button to google toolbar
Hi Jake - the ge's are in an xml file -
http://yubnub.org/all_golden_eggs.xml
--
Jon Aquino (Victoria BC Canada)
http://jonathanaquino.com
-----Original Message-----
From: YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
[mailto:YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx] On Behalf Of
magicjj
Sent: Thursday, February 16, 2006 1:34 PM
To: YubNub
Subject: Re: Adding a button to google toolbar
That is really cool! I didn't know about that capability. I'm using this at
school, since we have IE I can't just make my address bar a yubnub bar.
I think the LS and GE command lists are in an XML file... Anybody have any
information about this?
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"YubNub" group.
To post to this group, send email to
YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
To unsubscribe from this group, send email to
YubNub-unsubscribe@xxxxxxxxxxxxxxxx
For more options, visit this group at http://groups.google.com/group/YubNub
-~----------~----~----~----~------~----~------~--~---
Previous Message by Thread:
click to view message preview
Re: https YubNub access
I'm not expert on this man, but I'd say he's fairly respectable. The
only reason he'd look at other peoples aliases would be if they
specifically asked him for help.
Currently (aliases) is not using a one-way encryption such as MD5,
because this is impossible! It can use this for usernames and
passwords, but for the commands, if it used a one-way encryption it
wouldn't be able to read the command URL or return your memos to you,
thus making the system not do anything. I could program it to use a
backwards-compatible encryption if you'd like it to though, which would
add more security to it, though would slow down everything from
searching, to setting, to viewing your variables.
I personally haven't used the secure hypertext transfer protocol, and
to be honest I'm not sure how it works, or how it makes anything more
secure. I'll have to read up on it.
The only reason he'd touch the database though was if he was making
changes to the application. I say you trust The Programmer though, he
seems like a nice guy. =P ; ]
Jake
jjefferydesign.com
jjefferydesign.com/aliases
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"YubNub" group.
To post to this group, send email to
YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
To unsubscribe from this group, send email to
YubNub-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
For more options, visit this group at http://groups.google.com/group/YubNub
-~----------~----~----~----~------~----~------~--~---
Next Message by Thread:
click to view message preview
Re: https YubNub access
> i host the scrape command, so theoretically, i could track and trace
> all the sites people are scraping. i don't do this, but it would be
> nice to assure users that i'm not.
>
https does not accomplish this task. Clearly, your server has to be
able to decrypt the encrypted text in order to interpret the request
and display results. There is nothing other than your word that
assures users that you are not writing every request into a database.
https would however provide protection from clear text data being
captured in transit.
They only technical means I can think of to assure users that their
data is handled in a specific way on your server is to provide source
to any program that operates on their data, and read access to the file
system of the server so that an md5 hash of the relevant files could be
verified. This becomes impractical quickly as you can probably see.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"YubNub" group.
To post to this group, send email to
YubNub-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
To unsubscribe from this group, send email to
YubNub-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@xxxxxxxxxxxxxxxx
For more options, visit this group at http://groups.google.com/group/YubNub
-~----------~----~----~----~------~----~------~--~---
|
|