Re: Google Web Accelerator
This WebDNA talk-list message is from 2005
It keeps the original formatting.
numero = 62012
interpreted = N
texte = Doesn't this kind of activity expose Google to serious liability, such as, say, a whole bunch of web-developers who have had their sites damaged by this 'feature', getting together and filing a class-action lawsuit? I know that I give some users of my sites password-protected access to portions of the back-end, but I don't recall ever giving Google that kind of access... or does the 'ability' to prevent the 'feature' from accessing our sites (via non-billable time that we have to waste), shield them from liabilty? Any lawyers on the house? -Dan On Thu, 12 May 2005 08:33:27 -0700 sal danna
wrote: > If one of your customers is using it, and they log into your an admin > section, it will start going through all the links including any > delete function you might have made for them. It won't even see any > safe guards that have been put in place like a pop up that says "are > you sure you want to delete this record", etc. It will just start > deleting. > > Sal D'Anna > >> >> >> On 5/12/05, Donovan Brooke wrote: >> > sal danna wrote: >> > > [snip]They can't get to password protected areas, they don't cache >> > > https links, they don't cache news or large files. If you have the >> > > ability to "delete" or "cancel" something sensitive without all of those >> > > protections you are just asking for it to be deleted or canceled.[/snip] >> > > >> > > Doesn't matter if it's password protected or not because Google Web >> > > Accelerator is software you install in your browser so it's seeing >> > > whatever you are seeing (even if it's password protected). This is >> > > what the first link says you should do to protect your site: >> > > >> > > "If you have a web app, it might be worth returning a 403 when the >> > > HTTP_X_MOZ is set to "prefetch" header is sent. This will keep Web >> > > Accelerator from clicking destructive links." >> > > >> > > Sal D'Anna >> > >> > I guess I don't get your point Sal, if its installed on someoneelses >> > browser that doesn't have access to my sensitive content, how is that >> > a problem? >> > >> > Donovan >> > >> > -- >> > =o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o >> > DONOVAN D. BROOKE Eucalyptus Design >> > <-Web Development (specializing in eCommerce), -> >> > <- Graphic Design, Custom Tags and Labels -> >> > >> > ADDRESS:> Donovan Brooke >> > DBA Eucalyptus Design >> > N2862 Summerville Park Rd. >> > Lodi, WI 53555 >> > PH:> 1.608.592.3567 >> > Web:> http://www.euca.us >> > =o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o >> > >> > ------------------------------------------------------------- >> > This message is sent to you because you are subscribed to >> > the mailing list . >> > To unsubscribe, E-mail to: >> > To switch to the DIGEST mode, E-mail to >> > Web Archive of this list is at: http://webdna.smithmicro.com/ >> > >> >> > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > Web Archive of this list is at: http://webdna.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Doesn't this kind of activity expose Google to serious liability, such as, say, a whole bunch of web-developers who have had their sites damaged by this 'feature', getting together and filing a class-action lawsuit? I know that I give some users of my sites password-protected access to portions of the back-end, but I don't recall ever giving Google that kind of access... or does the 'ability' to prevent the 'feature' from accessing our sites (via non-billable time that we have to waste), shield them from liabilty? Any lawyers on the house? -Dan On Thu, 12 May 2005 08:33:27 -0700 sal danna wrote: > If one of your customers is using it, and they log into your an admin > section, it will start going through all the links including any > delete function you might have made for them. It won't even see any > safe guards that have been put in place like a pop up that says "are > you sure you want to delete this record", etc. It will just start > deleting. > > Sal D'Anna > >> >> >> On 5/12/05, Donovan Brooke wrote: >> > sal danna wrote: >> > > [snip]They can't get to password protected areas, they don't cache >> > > https links, they don't cache news or large files. If you have the >> > > ability to "delete" or "cancel" something sensitive without all of those >> > > protections you are just asking for it to be deleted or canceled.[/snip] >> > > >> > > Doesn't matter if it's password protected or not because Google Web >> > > Accelerator is software you install in your browser so it's seeing >> > > whatever you are seeing (even if it's password protected). This is >> > > what the first link says you should do to protect your site: >> > > >> > > "If you have a web app, it might be worth returning a 403 when the >> > > HTTP_X_MOZ is set to "prefetch" header is sent. This will keep Web >> > > Accelerator from clicking destructive links." >> > > >> > > Sal D'Anna >> > >> > I guess I don't get your point Sal, if its installed on someoneelses >> > browser that doesn't have access to my sensitive content, how is that >> > a problem? >> > >> > Donovan >> > >> > -- >> > =o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o >> > DONOVAN D. BROOKE Eucalyptus Design >> > <-Web Development (specializing in eCommerce), -> >> > <- Graphic Design, Custom Tags and Labels -> >> > >> > ADDRESS:> Donovan Brooke >> > DBA Eucalyptus Design >> > N2862 Summerville Park Rd. >> > Lodi, WI 53555 >> > PH:> 1.608.592.3567 >> > Web:> http://www.euca.us >> > =o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o=o >> > >> > ------------------------------------------------------------- >> > This message is sent to you because you are subscribed to >> > the mailing list . >> > To unsubscribe, E-mail to: >> > To switch to the DIGEST mode, E-mail to >> > Web Archive of this list is at: http://webdna.smithmicro.com/ >> > >> >> > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > Web Archive of this list is at: http://webdna.smithmicro.com/ ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
"Dan Strong"
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Can't use old cart file (was One more try) (1997)
New Mac Public Beta Available (1997)
Exclamation point (1997)
Location of Browser Info.txt file (1997)
GetPOPmail (2000)
SKU (1997)
OT: Need (a tiny bit) of help setting up MySQL (2000)
[WebDNA] High-profile WebDNA sites? (2008)
Re:2nd WebCatalog2 Feature Request (1996)
Multiple prices (1997)
Extended [ConvertChars] (1997)
ics2api.dll Error Message (2000)
Setting up shop (1997)
eCommerce software pricing (1998)
2cd pare of eyes. (2001)
Realtor Search (2000)
Can you do this??? and other stuff (1997)
Copyright ? (1997)
Searching for the end (1998)
Updating database (1998)