Re: [OSM-dev] Osmosis: Subtiling the planet with nice ways proposal

2008-01-14 Thread Stuart Poulton
> Agreed. I was thinking it might be nice to have a method where you > could have a directory full of "tile definition" files (or all in one > XML file) which could specify the tiles as any arbitrary size, maybe > along with some rules that say what to do with the data. I think we > want to stick w

Re: [OSM-dev] OSM Database Infrastructure

2008-01-14 Thread Tom Hughes
In message <[EMAIL PROTECTED]> Stefan de Konink <[EMAIL PROTECTED]> wrote: > SteveC schreef: > > > I think the single-server still works very well. It does so by > > ignoring doctrine on postgis and gis extensions and a bunch of scary C > > extensions thought up by Nick Hill and implemen

Re: [OSM-dev] Osmosis: Subtiling the planet with nice ways proposal

2008-01-14 Thread Karl Newman
On Jan 14, 2008 4:13 PM, Steve Ratcliffe <[EMAIL PROTECTED]> wrote: > > Hi > > One thing to add is that ideally you want to split tiles so that they are > smaller where there is more detail and larger elsewhere. If you look at > the map viewer on the Garmin web site, for example - Metro Guide Eur

Re: [OSM-dev] OSM Database Infrastructure

2008-01-14 Thread Tom Hughes
In message <[EMAIL PROTECTED]> SteveC <[EMAIL PROTECTED]> wrote: > I think the single-server still works very well. It does so by > ignoring doctrine on postgis and gis extensions and a bunch of scary C > extensions thought up by Nick Hill and implemented by TomH. jburgess > is doing sim

Re: [OSM-dev] Osmosis: Subtiling the planet with nice ways proposal

2008-01-14 Thread Brett Henderson
Lambertus wrote: > Hi Brett, > > Lets see if I can put this down nice and short: I've had a little chat > on the IRC today about splitting the planet file into subtiles for my > Garmin endeavors. I complained about missing ways where they cross > tile boundaries because of how the bboxes are ext

Re: [OSM-dev] XSS Vulnerabilities

2008-01-14 Thread Tom Hughes
In message <[EMAIL PROTECTED]> Frederik Ramm <[EMAIL PROTECTED]> wrote: > Fixing the particular problem is probably a one-liner for our ruby > heroes but as you said in your initial E-Mail, the problem may be > widespread and should be investigated thoroughly. Maybe I can even > create a

Re: [OSM-dev] XSS Vulnerabilities

2008-01-14 Thread Tom Hughes
In message <[EMAIL PROTECTED]> Callum Noble <[EMAIL PROTECTED]> wrote: > I notice that the message sending section of the openstreetmap.org site > is vulnerable to type 2 XSS attacks. Well thank you for announcing that on a public mailing list. Do you not think an email to webmaster mig

Re: [OSM-dev] Osmosis: Subtiling the planet with nice ways proposal

2008-01-14 Thread Steve Ratcliffe
Hi One thing to add is that ideally you want to split tiles so that they are smaller where there is more detail and larger elsewhere. If you look at the map viewer on the Garmin web site, for example - Metro Guide Europe, you can see the tile outlines. Over London they are much smaller than any

Re: [OSM-dev] XSS Vulnerabilities

2008-01-14 Thread Frederik Ramm
Hi, > I should have been a little more clear in my mail. I wasn't trying to belittle the problem; I'm aware that if you can get a through you can do a lot more. On second thought, my posting was perhaps not that useful because those with an understanding of security will probably have known what

Re: [OSM-dev] XSS Vulnerabilities

2008-01-14 Thread Callum Noble
Frederik Ramm wrote: > Hi, > >> I notice that the message sending section of the openstreetmap.org >> site is vulnerable to type 2 XSS attacks. > > Had to look this up on Wikipedia. What he means is that you can send a > message to someone else that contains a "" and when that message is > displa

Re: [OSM-dev] XSS Vulnerabilities

2008-01-14 Thread Frederik Ramm
Hi, > I notice that the message sending section of the openstreetmap.org > site is vulnerable to type 2 XSS attacks. Had to look this up on Wikipedia. What he means is that you can send a message to someone else that contains a "" and when that message is displayed, the "" is not escaped properly

[OSM-dev] XSS Vulnerabilities

2008-01-14 Thread Callum Noble
Hi all, I notice that the message sending section of the openstreetmap.org site is vulnerable to type 2 XSS attacks. I mentioned this on IRC and someone said that there were other places on the site that this issue could be found. I think that this is potentially quite serious. I don't know an

Re: [OSM-dev] Osmosis: Subtiling the planet with nice ways proposal

2008-01-14 Thread Karl Newman
On Jan 14, 2008 10:22 AM, Karl Newman <[EMAIL PROTECTED]> wrote: > On Jan 14, 2008 10:11 AM, Lambertus <[EMAIL PROTECTED]> wrote: > > > Hi Brett, > > > > Lets see if I can put this down nice and short: I've had a little chat > > on the IRC today about splitting the planet file into subtiles for my

Re: [OSM-dev] Osmosis: Subtiling the planet with nice ways proposal

2008-01-14 Thread Karl Newman
On Jan 14, 2008 10:11 AM, Lambertus <[EMAIL PROTECTED]> wrote: > Hi Brett, > > Lets see if I can put this down nice and short: I've had a little chat > on the IRC today about splitting the planet file into subtiles for my > Garmin endeavors. I complained about missing ways where they cross tile >

Re: [OSM-dev] OSM Database Infrastructure

2008-01-14 Thread Robert (Jamie) Munro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 SteveC wrote: | On 5 Jan 2008, at 20:51, Ian Dees wrote: | |> Hello, |> |> Last week I started editing OSM data and found it to be a very |> interesting and fulfilling experience. Of all the community-driven |> and open-source projects I've seen, OSM i

Re: [OSM-dev] OSM Database Infrastructure

2008-01-14 Thread Stefan de Konink
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 SteveC schreef: > Stefan > > someone (me?) put up an anonymised apache log with a sample of the > queries the db receives, I think its on the wiki > > an updated version of that should give you a representative sample to use http://wiki.openstreet

Re: [OSM-dev] OSM Database Infrastructure

2008-01-14 Thread SteveC
Stefan someone (me?) put up an anonymised apache log with a sample of the queries the db receives, I think its on the wiki an updated version of that should give you a representative sample to use On 14 Jan 2008, at 16:36, Stefan de Konink wrote: > -BEGIN PGP SIGNED MESSAGE- > Has

Re: [OSM-dev] OSM Database Infrastructure

2008-01-14 Thread Stefan de Konink
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 SteveC schreef: > I think the single-server still works very well. It does so by > ignoring doctrine on postgis and gis extensions and a bunch of scary C > extensions thought up by Nick Hill and implemented by TomH. jburgess > is doing similarl

Re: [OSM-dev] OSM Database Infrastructure

2008-01-14 Thread SteveC
Ian I think the single-server still works very well. It does so by ignoring doctrine on postgis and gis extensions and a bunch of scary C extensions thought up by Nick Hill and implemented by TomH. jburgess is doing similarly scary things with apache modules for shipping out tiles. People