Re: WordPress 2.3 Spies On Users

On 9/25/07, Larry Garfield < larrygarfieldtech.com">larrygarfieldtech.com> wrote:

On Tue, 25 Sep 2007 23:20:18 +0200, Zohar Stolar < stolargmail.com">stolargmail.com> wrote:
>;
> DragonWize wrote:
>;> I have seen many comments against Matt (not mark), the creator of
>&gt; wordpress
>
> Right, it's Matt, not Mark, sorry for that.
>
>
>&gt; Before making such wrong statements about someone please do the
>&gt; research. Here is the the Matt's comment
>>
&gt; (http://groups.google.com/group/wp-hackers/browse_thread/thread/bdced7524fa79a18/2d4e69fb46a6a947#msg_e7794372692b9548 )
>> that the article so wrongly butchers it that slashdot has already
&gt;> updated the article. There is not even a single instance of the word
>&gt; "fork" in the entire thread.
&gt; Here is where that word appears, in the same thread :
> http://groups.google.com/group/wp-hackers/msg/f8b5bc6efc4a4005
&gt;
> Matt may not be rude, but he is ignoring what Morbus Iff elegantly
> called "people's illusion of privacy and choice&quot;.
> Users should have the choice to keep their details private. When you
> launch an open source project, and distribute it freely, you shouldn9;t
> expect everyone to tell you exactly HOW they use it.
> It's the freedom of choice which brings people to open source CMS, and
> the lack of it can scare them away.
>
> The power of Drupal is it's flexibility and the fact that apart from few
> modules that are considered crucial for the system';s operation, all the
> rest is a matter of choice... even if you choose to be less secured.
&gt; opt-in or opt-out - it's the existence of the option that counts.
>
> (and... if I may.... The freedom of choice is one of the most ancient
&gt; theological issues... hasn't it been marked as 'fixed' yet?)

Dude, we can't even get node 8 to be marked fixed. You expect us to RTBC questions about life philosophy?

Seriously though, I think on-by-default is still a good idea for security, but we do need to be clear that it's happening and how it can be disabled.&nbsp; It seems this discussion has now migrated to the issue queue, though, so let's continue there.

--Larry Garfield

On 9/25/07, Oleg Terenchuk < litwolgmail.com">litwolgmail.com> wrote:

why not allow people to check off what modules they want to be installed during /default/ install phase? it should be as simple as scanning modules directory during install and aside from the /must be turned on for system to operate/ modules, the rest should be displayed and given an option to enable during install. making few /advised/ modules more evident than others(perhaps different&nbsp;background on&nbsp;that&nbsp;module&#39;s table row) could do the trick.

On 9/25/07, Larry Garfield < larrygarfieldtech.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"> larrygarfieldtech.com> wrote:

On Tue, 25 Sep 2007 23:20:18 +0200, Zohar Stolar < stolargmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">stolargmail.com> wrote:
>;
> DragonWize wrote:
&gt;> I have seen many comments against Matt (not mark), the creator of
>> wordpress
>
> Right, it's Matt, not Mark, sorry for that.
>
>
>&gt; Before making such wrong statements about someone please do the
>> research. Here is the the Matt's comment
>>
> ( http://groups.google.com/group/wp-hackers/browse_thread/thread/bdced7524fa79a18/2d4e69fb46a6a947#msg_e7794372692b9548 )
>>; that the article so wrongly butchers it that slashdot has already
&gt;> updated the article. There is not even a single instance of the word
>;> "fork" in the entire thread.
&gt; Here is where that word appears, in the same thread :
> http://groups.google.com/group/wp-hackers/msg/f8b5bc6efc4a4005
>
> Matt may not be rude, but he is ignoring what Morbus Iff elegantly
> called "people's illusion of privacy and choice&quot;.
> Users should have the choice to keep their details private. When you
> launch an open source project, and distribute it freely, you shouldn9;t
> expect everyone to tell you exactly HOW they use it.
> It's the freedom of choice which brings people to open source CMS, and
> the lack of it can scare them away.
>
> The power of Drupal is it's flexibility and the fact that apart from few
> modules that are considered crucial for the system';s operation, all the
> rest is a matter of choice... even if you choose to be less secured.
&gt; opt-in or opt-out - it's the existence of the option that counts.
>
&gt; (and... if I may.... The freedom of choice is one of the most ancient
&gt; theological issues... hasn't it been marked as 'fixed' yet?)

Dude, we can't even get node 8 to be marked fixed. You expect us to RTBC questions about life philosophy?

Seriously though, I think on-by-default is still a good idea for security, but we do need to be clear that it's happening and how it can be disabled.&nbsp; It seems this discussion has now migrated to the issue queue, though, so let's continue there.

--Larry Garfield

--
Oleg Terenchuk
Web Manager / Developer
Phone: 917 - 306 - 5653