Hi Simon

Thanks for making it clear.
Btw. your permalink (http://faq.tiddlyspot.com/#[[Is%20Tiddlyspot
%20secure%3F]]) from your blog is pointing to an empty tiddler titled:
Is Tiddlyspot secure%3F
A better permalink might be:
http://faq.tiddlyspot.com/#%5B%5BIs%20Tiddlyspot%20secure%3F%5D%5D

Regards Måns Mårtensson

On 10 Nov., 13:45, Simon Baird <[email protected]> wrote:
> Apologies for the lack of response. I don't know why you're seeing what
> you're seeing in Analytics.
>
> However your concern has caused me realise we don't really warn people about
> Tiddlyspot's lack of security.
>
> In short, because tiddlyspot doesn't use SSL it's not a good idea to a).
> consider your data secure and b). use a password that you don't want people
> to discover.
>
> I've posted about this here and updated the FAQ and will shortly place an
> extra warning on the signup 
> page.http://tiddlyspot.blogspot.com/2009/11/warning-about-security.html
>
> Regards,
> Simon.
>
>
>
>
>
> On Tue, Sep 22, 2009 at 10:58 PM, M) <[email protected]> wrote:
>
> > > So I can think of a few explanations:
> > > * someone in Brazil has guessed your password
>
> > If the person guessed the password, I would have seen the different
> > pages visited by this person.  What it looks like to me is that the
> > person attempted to guess the password 12 times.  Possibly, at the
> > 12th, they guessed it though I consider that unlikely because I'm not
> > using an easy password like "qwerty".  I'm less concerned about the
> > Brazil visit because it is a one time visit and since I use an easy
> > domain name like "the", maybe the person mistyped something like
> > "thy".  The Japan one is a recurring visit and this is the one I'm
> > more concerned about.  If I were the evil doer, I'd visit a
> > tiddlyspot, download it and try it from my own computer.  Okay, now
> > that I said that, for this to be true, the evil doer would have to
> > open the tiddlywiki with notepad to strip the GA code and prevent
> > pings from occurring (or unplugging from the web).
>
> > > * your own visits are mistakenly being registered as coming from Brazil
>
> > Unlikely.  I would have seen it happen more than just for one day and
> > it wouldn't have been more than the number of times I visited.  I do
> > notice that my work has provided two different city names
>
> > > * Google Analytics is misconfigured somehow, counting requests from
> > >    other locations
>
> > I notice that "/[object object]" is in the 'pages visited' list.  I
> > don't know what that is.
>
> > I doubt anyone is seeing my content and now that I've moved it to
> > another location and have yet to see odd results in GA, I'm not so
> > worried.  I imagine my old domain name is just an easy one.  What
> > remains to be answered is why GA registers a hit.  Maybe it is just as
> > Jeremy says, they are just false positives.
>
> > I'm keeping the GA code active for this domain to see if anything
> > happens.
>
> --
> [email protected]
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"TiddlyWiki" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/tiddlywiki?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to