From websitemaster at cogeco.net Mon Aug 6 10:33:59 2012 From: websitemaster at cogeco.net (Tom) Date: Mon, 6 Aug 2012 10:33:59 -0400 Subject: [geeklog-devel] "OAuth 2.0 is a bad protocol" In-Reply-To: <720D8837-7E8F-4823-8ADE-8DEEE9CC4601@haun-online.de> References: <720D8837-7E8F-4823-8ADE-8DEEE9CC4601@haun-online.de> Message-ID: <007e01cd73e0$8479dd60$8d6d9820$@cogeco.net> Interesting read. Here is what someone from the Drupal community asked about adding OAuth 2 support: ------------------------------------ OAuth 1.0 is being used successfully by thousands of websites using the OAuth Drupal module (http://drupal.org/project/oauth). I currently maintain that module. Should we discard adding OAuth 2 support? Are there any other alternatives? It would be great if you could chime in at http://drupal.org/node/1591692. Many thanks for your had work on this protocol. ------------------------------------ And here is the reply by Eran: ------------------------------------ Not sure what OAuth 2.0 support would look like. The hard part would be deciding what to implement and how. I would put it on hold until you find use cases that justify the effort. ------------------------------------ -----Original Message----- From: geeklog-devel-bounces at lists.geeklog.net [mailto:geeklog-devel-bounces at lists.geeklog.net] On Behalf Of Dirk Haun Sent: July-27-12 4:29 PM To: Geeklog Development Subject: [geeklog-devel] "OAuth 2.0 is a bad protocol" Interesting. Just the other day, I was thinking about OAuth 2.0 again and how we never got around to actually use the code we got for it (via GSoC). And today, I found this article: http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell/ Choice quotes: > Last month I reached the painful conclusion that I can no longer be associated with the OAuth 2.0 standard. I resigned my role as lead author and editor, withdraw my name from the specification, and left the working group. (.) > At the end, I reached the conclusion that OAuth 2.0 is a bad protocol. WS-* bad. It is bad enough that I no longer want to be associated with it. (.) > When compared with OAuth 1.0, the 2.0 specification is more complex, less interoperable, less useful, more incomplete, and most importantly, less secure. (.) > If you are currently using 1.0 successfully, ignore 2.0. It offers no real value over 1.0 Not sure which practical consequences to draw from this (how much of a real-world problem is not supporting OAuth 2.0, now that we allow authentication via Twitter and Facebook?). But at least I don't feel so bad about not using the code any more . bye, Dirk -- http://www.themobilepresenter.com/ _______________________________________________ geeklog-devel mailing list geeklog-devel at lists.geeklog.net http://eight.pairlist.net/mailman/listinfo/geeklog-devel __________ Information from ESET NOD32 Antivirus, version of virus signature database 7322 (20120723) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com From greg.gillis at sillig.com Sat Aug 25 13:37:51 2012 From: greg.gillis at sillig.com (Greg Gillis) Date: Sat, 25 Aug 2012 12:37:51 -0500 Subject: [geeklog-devel] Geeklog 2.0.0b2 In-Reply-To: <8DA917C8-4F02-4729-92AB-4A3571C7393C@haun-online.de> References: <000001cd6036$7d226900$77673b00$@cogeco.net> <8DA917C8-4F02-4729-92AB-4A3571C7393C@haun-online.de> Message-ID: I can't seem to change the theme on 2.0.0b2. No matter what I set is to Professional is always displayed. On Thu, Jul 12, 2012 at 3:05 PM, Dirk Haun wrote: > Tom wrote: > > > I will release Beta 2 tomorrow unless someone has a good reason to hold > off. > > Not a "blocker", but it seems we neglected the Changelog. I've made at > least a quick update with the issues that were resolved according to our > bugtracker. The level of detail is not up to our usual standards, though, > and we should revisit it when we enter the RC phase. > > bye, Dirk > > > -- > http://www.themobilepresenter.com/ > > _______________________________________________ > geeklog-devel mailing list > geeklog-devel at lists.geeklog.net > http://eight.pairlist.net/mailman/listinfo/geeklog-devel > -- Greg Gillis Webmaster www.sillig.com Microsoft Certified Professional Network+ Certified Professional A+ Certified Professional This email message is for the sole use of the intended recipient(s) and may contain confidential, proprietary and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Thank you -------------- next part -------------- An HTML attachment was scrubbed... URL: From greg.gillis at sillig.com Sat Aug 25 16:51:09 2012 From: greg.gillis at sillig.com (Greg Gillis) Date: Sat, 25 Aug 2012 15:51:09 -0500 Subject: [geeklog-devel] Geeklog 2.0.0b2 In-Reply-To: References: <000001cd6036$7d226900$77673b00$@cogeco.net> <8DA917C8-4F02-4729-92AB-4A3571C7393C@haun-online.de> Message-ID: Never mind. Allow User Themes was set to true. On Sat, Aug 25, 2012 at 12:37 PM, Greg Gillis wrote: > I can't seem to change the theme on 2.0.0b2. No matter what I set is to > Professional is always displayed. > > > On Thu, Jul 12, 2012 at 3:05 PM, Dirk Haun wrote: > >> Tom wrote: >> >> > I will release Beta 2 tomorrow unless someone has a good reason to hold >> off. >> >> Not a "blocker", but it seems we neglected the Changelog. I've made at >> least a quick update with the issues that were resolved according to our >> bugtracker. The level of detail is not up to our usual standards, though, >> and we should revisit it when we enter the RC phase. >> >> bye, Dirk >> >> >> -- >> http://www.themobilepresenter.com/ >> >> _______________________________________________ >> geeklog-devel mailing list >> geeklog-devel at lists.geeklog.net >> http://eight.pairlist.net/mailman/listinfo/geeklog-devel >> > > > > -- > Greg Gillis > Webmaster www.sillig.com > > Microsoft Certified Professional > Network+ Certified Professional > A+ Certified Professional > > This email message is for the sole use of the intended recipient(s) and > may contain confidential, proprietary and privileged information. Any > unauthorized review, use, disclosure or distribution is prohibited. If you > are not the intended recipient, please contact the sender by reply email > and destroy all copies of the original message. Thank you > -- Greg Gillis Webmaster www.sillig.com Microsoft Certified Professional Network+ Certified Professional A+ Certified Professional This email message is for the sole use of the intended recipient(s) and may contain confidential, proprietary and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Thank you -------------- next part -------------- An HTML attachment was scrubbed... URL: From websitemaster at cogeco.net Mon Aug 27 07:51:12 2012 From: websitemaster at cogeco.net (Tom) Date: Mon, 27 Aug 2012 07:51:12 -0400 Subject: [geeklog-devel] Geeklog 2.0 and Geeklog.net Message-ID: <00b101cd844a$41d16260$c5742720$@cogeco.net> Hi All, Well I am back from vacation with the family and I have had a good summer. I hope all of you have as well. I have loads of non Geeklog work to catch up on J and I need to get the kids ready for school so my plan to update Geeklog.net with Geeklog 2.0 will not happen this week like I hoped. I see we have a few more bugs so I hope to squash those this week and get to updating Geeklog.net by the end of next week with Geeklog 2.0. With the new update Geeklog.net will be using the new Modern theme. I will also be changing the article Topic and forum structure a bit as discussed before (http://wiki.geeklog.net/index.php/Geeklog.net_Redesign). The forum plugin will also be updated on Geeklog.net with the latest code we have in the repository (http://code.google.com/p/geeklog/). At some point soon I would like to see the homepage overhauled along with a number of other pages found under the resources block . If you have the time and would like to contribute please speak up with your ideas. I would also like to see a Team members page added. As mentioned on the redesign page I think it should contain: A short history of Geeklog with a list of Geeklogs current (and past) team members. The list could include: A photo Their role A short blurb about them Contact Details Thoughts? Tom -------------- next part -------------- An HTML attachment was scrubbed... URL: From ironmax at spacequad.com Mon Aug 27 14:12:10 2012 From: ironmax at spacequad.com (ironmax at spacequad.com) Date: Mon, 27 Aug 2012 14:12:10 -0400 Subject: [geeklog-devel] geeklog-devel Digest, Vol 70, Issue 3 In-Reply-To: References: Message-ID: <8DCBBFE8B9D34D5BBAED1FFE394550C2@spacequad.com> Tom, I have an idea for how you can implement the team members page with static page and sql. I have sent you a separate email directly with the archive. If you do not get it, let me know. Michael ----------------------------------- Message: 1 Date: Mon, 27 Aug 2012 07:51:12 -0400 From: "Tom" Subject: [geeklog-devel] Geeklog 2.0 and Geeklog.net To: "'Geeklog Development'" Message-ID: <00b101cd844a$41d16260$c5742720$@cogeco.net> Content-Type: text/plain; charset="us-ascii" Hi All, Well I am back from vacation with the family and I have had a good summer. I hope all of you have as well. I have loads of non Geeklog work to catch up on J and I need to get the kids ready for school so my plan to update Geeklog.net with Geeklog 2.0 will not happen this week like I hoped. I see we have a few more bugs so I hope to squash those this week and get to updating Geeklog.net by the end of next week with Geeklog 2.0. With the new update Geeklog.net will be using the new Modern theme. I will also be changing the article Topic and forum structure a bit as discussed before (http://wiki.geeklog.net/index.php/Geeklog.net_Redesign). The forum plugin will also be updated on Geeklog.net with the latest code we have in the repository (http://code.google.com/p/geeklog/). At some point soon I would like to see the homepage overhauled along with a number of other pages found under the resources block . If you have the time and would like to contribute please speak up with your ideas. I would also like to see a Team members page added. As mentioned on the redesign page I think it should contain: A short history of Geeklog with a list of Geeklogs current (and past) team members. The list could include: A photo Their role A short blurb about them Contact Details Thoughts? Tom