Firefang.net

Google groups security hole

omry — Fri, 29 Jun 2007 13:47:30 +0000

While managing my firestats-users google group, all the sudden I noticed I am logged in under a different user - Victoria from Washington D.C.
just like that, one moment I am under my own user, and in the next I am under Victoria’s user.
I could see what groups she is reading, send myself an invitation for one of her groups and even edit her profile(!).
I emailed her and Google about it.

Google, you messed up.

This is how it looks (a slightly censored version):

Update:
Google claim to have fixed it:

Thank you for contacting us. We’ve made some changes recently that should
have resolved the problem you reported in our discussion group. Please let
us know if this issue persists.

Regards,
The Google Team

Easy IP2Country - a new wordpress plugin

omry — Sat, 28 Oct 2006 11:32:46 +0000

I released Easy IP2Country - a new Wordpress plugin that shows an country icon flag next to the comment author name.
the plugin is based on IP2C, and is very simple to install: simply unzip in your plugins directory and activate.

Screenshot

IP2C

omry — Fri, 27 Oct 2006 12:32:26 +0000

I released a small library to resolve the country an IP address belongs to.
The library, IP2C - is released under GPL2, and supports PHP, Java and command line.
Performance is great:
250 searches a second for PHP, ~~and 330,000 searches a second for Java (too good to be true, but those are my results)~~. it IS too good to be true. I wrote a benchmark program and it shows about 7000 searches/sec on directly on the file, and about 170,000 searches/sec with memory cache.
The library works on a binary file so you don’t need to mess with a database to use it.

FireStats Dutch translation!

omry — Mon, 23 Oct 2006 21:38:21 +0000

Martijn ten Heuvel contributed Dutch translation to FireStats, thanks!

FireStats French translation

omry — Sun, 22 Oct 2006 08:00:47 +0000

Arnaud contributed French translation to FireStats, thanks!
This translation adds to the ever growing list that now contains English, Hebrew, Spanish and French.

FireStats mailing lists

omry — Sat, 14 Oct 2006 20:20:00 +0000

I created new two discussion groups for FireStats:

General discussions, suggestions, bug reports etc:
firestats-users

Release announcements, security updates etc (very low traffic) :
firestats-announce

FireStats 0.9.8-beta released

omry — Sat, 14 Oct 2006 16:22:50 +0000

FireStats 0.9.8-beta was released.
I didn’t skip 0.9.7, it was released as well, but had some serious problems.
New in 0.9.7 - 0.9.8 :
* Significant security updates, including the option to lock the database configuration.
* Initial Media Wiki support.
* Initial Drupal support
* The ability to choose a language from the settings tab.
* Control over the parameters of popular pages and recent referers.
* Many bugs fixed.

As usual, all the information can be found at the project site.

FireStats 0.9.6-beta

omry — Mon, 02 Oct 2006 17:02:50 +0000

FireStats 0.9.6-beta was released.

License change, FireStats is now licensed under Creative Commons Attribution-Noncommercial-Share Alike 1.0 Israel License.
Merged WordPress and StandAlone versions.
Added a tabbed pane.
Created a database configuration tab.
Network operations feedback (Except for IE6 or older due to lack of css-fixed support)
Initial Gregarius support

A Call for FireStats beta testers

omry — Sun, 01 Oct 2006 07:04:30 +0000

I am looking for beta testers for the development version of FireStats.

Access to a test blog is recommanded (not recommanded to run on a live blog, things might break occasionally)
Access to an SVN client on the server is recommanded - it simplfies things

To test under Wordpress, enter your plugin directory and run:
svn co http://firefang.net/svn/firestats

To test without Wordpress simply get the files to a directory under your web server and access it via your browser.

If you don’t have shell access to your server you can check-out the files locally and upload them to the server.
Please report bugs here.

Cellulars!

omry — Fri, 29 Sep 2006 22:51:37 +0000

Many cellulars, and one little dinosaur!
Opened:

Closed: