Thanks everyone for your thoughts. I think since my site is known by my 
users, I can just remind people to use only my site to download my 
resources.

My concern was that it seems easy to bury a malicious code in a system 
tiddler, but I suppose one could put malicious code in a static html file, 
too.

The other concern is that if someone put malicious code in a TW obtained 
from my site, and I later go and make changes to my own TW, then in a legal 
dispute the hacker could claim the malicious code was in the copy obtained 
from my site but that since then I have changed it, and I would have no way 
to prove it. Again, though, I am not sure how that would be more 
problematic than a plain html file.

Just thoughts...

On Wednesday, September 25, 2019 at 8:24:27 AM UTC-5, David Gifford wrote:
>
> Hi everyone,
>
> I am exploring going back to publishing TiddlyWikis online, rather than 
> exporting and publishing static htmls from tiddlers.
>
> One issue I need to confront, though, is the possibility that someone 
> could download one of my TiddlyWikis, add malicious content (either text 
> that I would not approve of, or a virus or somesuch), and publish it with 
> my name on it elsewhere in a way that makes people think it is from me.
>
> I would like community feedback on what measures I might take to prevent 
> that: hiding the save/download button when the file is online, etc? Or any 
> other relevant feedback on this issue. 
>
> Thanks and blessings, Dave
>

-- 
You received this message because you are subscribed to the Google Groups 
"TiddlyWiki" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/tiddlywiki/bb3bab3d-53a4-4b4b-96cd-4c203340b29c%40googlegroups.com.

Reply via email to