there are now separate child issues or linked issues to most of the relevant
points raised, linked to http://jira.secondlife.com/browse/web-3494 so if
people don't agree with parts, they can now vote for the parts they do agree
with. I've also toned down some of the language.
From: q...@lindenlab.com
Subject: Re: [opensource-dev] web profiles.
Date: Wed, 12 Jan 2011 10:36:01 -0500
To: angel_of_crim...@hotmail.com
Hey, Erin. Without commenting on the merits of this post (hint: it has many),
you hurt your own cause when you can't resist throwing in insults at the end of
it (web monkey comment with an imagined motivation).
You'd probably get more traction on items like this if you can manage to
separate things into categories -- for example, a security issues email (or as
yoz suggests, separate JIRAs) and a separate prefs request.
I don't have a dog in this hunt (profiles didn't come from my team) so I'm just
trying to give you a suggestion that will make your requests more effective.
Q
On Jan 11, 2011, at 11:48 PM, Erin Mallory wrote:some of us were using html to
cover up the darn twitter and facebook widgets....
security issues: the twitter widget and facebook like button you cant get rid
of.
security issue: if you want your profile visible in SL or at least searchable
it HAS to be open to the entire world... (only gets protected by passord if you
remove it from search
security issue: RL tab is displayed ON THE WEB ... that alone is frightening
security issue: people are already linking in other peoples profiles into
webpages, facebook, even other applications now.
Security issue: with html scrubbed from the text you cant hide profiles, even
locked ones from bots, or cover up the facebook and twitter widgets.
Seucrity issue: many groups that should be hidden in the profile by group
preferences are still being show.
preference issue: many users do NOT want their profiles shown ANYWHERE but in
the game.
preference issue: many users do not like the facebook feel
preference issue: many users like having the partner, payment info, etc
displayed.
preference issue: most users would have preferred seeing web bugs fixed then
resources wasted on facebook style profiles because a few web monkeys think
that they will attract a few teenagers into SL.
within moments of creation https://jira.secondlife.com/browse/WEB-3494 has
already gotten votes as have many other issues related to getting rid of these
new profiles.
> Date: Tue, 11 Jan 2011 19:54:00 -0800
> From: kadah.c...@gmail.com
> To: opensource-dev@lists.secondlife.com
> Subject: Re: [opensource-dev] web profiles.
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> If its about the possible XSS and html injection, that was fixed today.
> All profile text info gets escaped now.
>
> On 1/11/2011 7:47 PM, Simon Quinnell wrote:
> > How about you specify the security and privacy issues? No-one here is a
> > mind reader.
> >
> > On Wed, Jan 12, 2011 at 1:05 PM, Erin Mallory
> > <angel_of_crim...@hotmail.com <mailto:angel_of_crim...@hotmail.com>> wrote:
> >
> > because of security and privacy issues with the new profiles can we
> > please have option to keep the older ones until someone with the
> > profile team gets their act together?
> >
> > seriously, these new profiles are creepy.
> >
> > _______________________________________________
> > Policies and (un)subscribe information available here:
> > http://wiki.secondlife.com/wiki/OpenSource-Dev
> > Please read the policies before posting to keep unmoderated posting
> > privileges
> >
> >
> >
> >
> > _______________________________________________
> > Policies and (un)subscribe information available here:
> > http://wiki.secondlife.com/wiki/OpenSource-Dev
> > Please read the policies before posting to keep unmoderated posting
> > privileges
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQEcBAEBAgAGBQJNLSXYAAoJEIdLfPRu7qE2c1UIALye/0KE3XRvTxSS7ZhBW0i/
> kE857hMOK8B9sbvbN08m8af8oas30cfIl/a/XvY8Fhf49tMrMlPC28X0OID1DtOs
> Dt50xkHTp56YqsmMHzcCRHgJN8lb6IonbX44U1VHah8/NEYQ7EejMuyBpnD9Wjvg
> KPUDsQOBl4vVhaJQ6GHbRQe54PpUzBnWpyecdZ8AvCldLk8L0KJAKVGMVXAKQSpe
> cFAZUo343UAA6Q15Ymoug4MTN4Z8s3snsL0llIF/XGD71H90KYL9cnxtbj7BmZus
> G8E3xpdUgPQGXkIwqKQUrZMQlOcINIUo4YuKyE+mK+Sdy6z9B9yOp1kecI70MFE=
> =djz5
> -----END PGP SIGNATURE-----
> _______________________________________________
> Policies and (un)subscribe information available here:
> http://wiki.secondlife.com/wiki/OpenSource-Dev
> Please read the policies before posting to keep unmoderated posting privileges
_______________________________________________
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges
_______________________________________________
Policies and (un)subscribe information available here:
http://wiki.secondlife.com/wiki/OpenSource-Dev
Please read the policies before posting to keep unmoderated posting privileges
