Re: [microsound] TWiki

[Phil Thomson <hellomynameisphil@xxxxxxxxx>]

> hi
>
> On 10/6/05, Phil Thomson <hellomynameisphil@xxxxxxxxx> wrote:
> > Is Twiki the most secure wiki solution?
>
> i'm not sure- how do we measure that?

I don't have a scientific method of measuring wiki security, but I
have been hearing more about security issues with Twiki than with
other wikis.

> > I've been hearing a lot of bad stuff about Twiki
> > security-wise.
>
> TWiki has been open about their security problems [like an open source
> project should] and i have been patching the source. so just because
> we hear about security problems is not necessarily bad [as hiding
> security problems is much worse, in my book ...]

Of course, but hearing about Twiki security issues and then having our
wiki getting hacked turns me off from wanting to use Twiki again. I'm
glad to hear you've patched the source, but my understanding is that
you patched the source even *before* it was hacked and it was still
hacked. Maybe Twiki will be fine now, but I'm just trying to open the
question of whether or not we should stick with this particular
engine.

> > I don't really have a specific suggestion, but MediaWiki is nice
>
> that sounds suspiciously like a specific suggestion ...

I mean I'm not trying to advocate for a particular engine, just trying
to open the question so we can discuss what we want.

> i'm not opposed to other wikis. i think we should have an idea of what
> we'd like that's better than TWIki instead of just changing it because
> we can. we should know what would be better with something else ...

If the general consensus is that Twiki leaves something to be desired,
I volunteer to look into other solutions and make suggestions to the
list and to js. I personally am queasy about Twiki's security, but
that's not a rational criterion. I also don't particularly like the
way Twiki deals with file uploads, but I don't know if there's
anything that's much better.

±pt



> --
> \js  [ http://or8.net/~johns/ ]



--
Phil Thomson, BFA, MFA
010100000110100001101001011011000010000001010100011010000110111101101101011100110110111101101110
hellomynameisphil@xxxxxxxxx
http://philnews.ca/blog/
http://www.sfu.ca/~pthomson/

---------------------------------------------------------------------
To unsubscribe, e-mail: microsound-unsubscribe@xxxxxxxxxxxxx
For additional commands, e-mail: microsound-help@xxxxxxxxxxxxx
website: http://www.microsound.org