[tw] Re: tiddlyspot security issue?

2009-11-10 Thread Simon Baird
Apologies for the lack of response. I don't know why you're seeing what you're seeing in Analytics. However your concern has caused me realise we don't really warn people about Tiddlyspot's lack of security. In short, because tiddlyspot doesn't use SSL it's not a good idea to a). consider your

[tw] Re: tiddlyspot security issue?

2009-11-10 Thread Måns
Hi Simon Thanks for making it clear. Btw. your permalink (http://faq.tiddlyspot.com/#[[Is%20Tiddlyspot %20secure%3F]]) from your blog is pointing to an empty tiddler titled: Is Tiddlyspot secure%3F A better permalink might be: http://faq.tiddlyspot.com/#%5B%5BIs%20Tiddlyspot%20secure%3F%5D%5D

[tw] Re: tiddlyspot security issue?

2009-11-10 Thread Måns
Hmm - same problem... It's google chrome which makes trouble - sorry for the false alert.. Regards måns Mårtensson On 10 Nov., 18:51, Måns humam...@gmail.com wrote: Hi Simon Thanks for making it clear. Btw. your permalink (http://faq.tiddlyspot.com/#[[Is%20Tiddlyspot %20secure%3F]]) from

[tw] Re: tiddlyspot security issue?

2009-09-22 Thread M)
So I can think of a few explanations: * someone in Brazil has guessed your password If the person guessed the password, I would have seen the different pages visited by this person. What it looks like to me is that the person attempted to guess the password 12 times. Possibly, at the 12th,

[tw] Re: tiddlyspot security issue?

2009-09-22 Thread Eric Shulman
I notice that /[object object] is in the 'pages visited' list.  I don't know what that is. Just a guess (I haven't looked at any plugin or GA code): In order to track the viewing of individual tiddlers, I assume that the TW implementation for Google Analytics (GA) is hijacking the core's

[tw] Re: tiddlyspot security issue?

2009-09-17 Thread FND
I would try to access your site from an other computer without entering the password, and than check if such attempts would be reported by Google. Or you might get Firebug and watch the Net tab for requests to GA. If you tell me the URL, I can take a quick look. I'm fairly sure only presents

[tw] Re: tiddlyspot security issue?

2009-09-17 Thread FND
If you tell me the URL, I can take a quick look. Marc has sent me the URL. As predicted, all I get is a static 401 page that does not trigger any Google Analytics requests. So I can think of a few explanations: * someone in Brazil has guessed your password * your own visits are mistakenly

[tw] Re: tiddlyspot security issue?

2009-09-15 Thread M)
I had someone in Brazil try 12 times to enter my TW. I'm finding this disturbing (FYI, I've never shared my site with anyone). I don't think people are successful in visiting my content, but the number of visits is uncomfortable. I must have a Tiddlyspot sub-domain name that is easy to mixup

[tw] Re: tiddlyspot security issue?

2009-09-15 Thread wolfgang
Hi M, understand is how Google Analytics could possibly record a visit if the visitor cannot login. I believe if GA is to get a ping, the visitor has seen my content. I would try to access your site from an other computer without entering the password, and than check if such attempts would

[tw] Re: tiddlyspot security issue?

2009-09-06 Thread Eric Shulman
Since I had this implemented, I've had three visits from someone in Ichikawa Japan (about 1/mth).  Analytics shows me that this person visits the root directory only.  Interestingly, the source of the visits come from three different sites with the .jp domain. My site is set to restricted