{"id":1146,"date":"2010-12-22T18:48:58","date_gmt":"2010-12-22T17:48:58","guid":{"rendered":"http:\/\/t-machine.org\/?p=1146"},"modified":"2010-12-22T18:49:23","modified_gmt":"2010-12-22T17:49:23","slug":"flickredit-looks-like-a-virus","status":"publish","type":"post","link":"http:\/\/new.t-machine.org\/index.php\/2010\/12\/22\/flickredit-looks-like-a-virus\/","title":{"rendered":"FlickrEdit &#8211; looks like a virus?"},"content":{"rendered":"<p>IMHO, Flickr\/Yahoo has one of the best user-authentication systems I&#8217;ve ever seen. I&#8217;m sure it&#8217;s no accident that Twitter (eventually) moved to a system that is extremely similar.<\/p>\n<p>(NB: I don&#8217;t know if flickr copied if from someone else, but they were the first I remember seeing like this, many years ago)<\/p>\n<h4>You want sensitivity in your security? Yeah!<\/h4>\n<p>It&#8217;s so sensitive that it&#8217;s currently blocking FlickrEdit&#8217;s (bad, broken, buggy) implementation. Not just with an error; not even with a warning &#8230; but with giant red letters, a yellow background, and a warning icon:<\/p>\n<p><a href=\"https:\/\/t-machine.org\/wp-content\/uploads\/Screen-shot-2010-12-22-at-17.46.37.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/t-machine.org\/wp-content\/uploads\/Screen-shot-2010-12-22-at-17.46.37.png\" alt=\"\" title=\"Screen shot 2010-12-22 at 17.46.37\" width=\"528\" height=\"225\" class=\"aligncenter size-full wp-image-1147\" srcset=\"https:\/\/t-machine.org\/wp-content\/uploads\/Screen-shot-2010-12-22-at-17.46.37.png 528w, https:\/\/t-machine.org\/wp-content\/uploads\/Screen-shot-2010-12-22-at-17.46.37-150x63.png 150w, https:\/\/t-machine.org\/wp-content\/uploads\/Screen-shot-2010-12-22-at-17.46.37-300x127.png 300w\" sizes=\"(max-width: 528px) 100vw, 528px\" \/><\/a><\/p>\n<p>I was pretty annoyed that the app was seemingly so poorly written it wasn&#8217;t doing the desktop-based auth that it should be &#8211; and that it popped-open a web browser and &#8220;told&#8221; me to login (Flickr&#8217;s auth-system is slightly more seamless than that, and a much better user-experience).<\/p>\n<p>But I was very impressed that Flickr noticed it too, and decided to warn me that this might be a scam of some kind&#8230;<\/p>\n<h4>Leaving just one question&#8230;<\/h4>\n<p>&#8230;is this open-source project buggy, or has someone hacked the source and put in a virus? Hmm&#8230;<\/p>\n<p>Well. I&#8217;ve contacted the project owners, and informed them. Interesting to see what they say.<\/p>\n<p>In the meantime, I have so much faith in Flickr&#8217;s authentication system (e.g. I know that it doesn&#8217;t share passwords) that I&#8217;m happy to go ahead and use the application. There are very few systems where I&#8217;d do this, but flickr&#8217;s (approach) is one of them.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>IMHO, Flickr\/Yahoo has one of the best user-authentication systems I&#8217;ve ever seen. I&#8217;m sure it&#8217;s no accident that Twitter (eventually) moved to a system that is extremely similar. (NB: I don&#8217;t know if flickr copied if from someone else, but they were the first I remember seeing like this, many years ago) You want sensitivity [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,10,6,17,3],"tags":[],"_links":{"self":[{"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/posts\/1146"}],"collection":[{"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/comments?post=1146"}],"version-history":[{"count":0,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/posts\/1146\/revisions"}],"wp:attachment":[{"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/media?parent=1146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/categories?post=1146"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/new.t-machine.org\/index.php\/wp-json\/wp\/v2\/tags?post=1146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}