Bugday reminder

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey everybody.

It's getting close and close ... is it a bird? is it a
plane, no, it's
BUGDAY 

Hehe, and this time it's on April 1. , no, it's no april
fools joke.

Something interresting has happend since last, the new
bugday site has
gone into official beta, and can been seen on
http://bugday.gen
too.org/bugdaytest . Please do some testing with it,
and report any bugs you find back to me.

Best regards, and happy bug hunting.
GurliGebis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


iD8DBQFEK+ZEO+Ewtpi9rLERAhvWAKC7oO2apSJhFVit1O8DKGfJWxlTQwCg
l3a+
fdlJF/tpDZCmvIz+Eo5j680=
=Wu+k
-----END PGP SIGNATURE-----
-- 
gentoo-devgentoo.org mailing list

Bjarke Istrup Pedersen wrote:

> Something interresting has happend since last, the new
bugday site has
> gone into official beta, and can been seen on
> http://bugday.gen
too.org/bugdaytest . Please do some testing with it,
> and report any bugs you find back to me.

Bug #1:
Do *NOT* ask for Bugzilla credentials over plain HTTP!

Even if it is just beta testing, you are using real account
information
and that is a very bad approach as far as security practices
go.

Add SSL support (or fix it, 'cause https://bugday.
gentoo.org/bugdaytest/
is a 404 and https://bugday.gentoo.org/
 is plain bugs.gentoo org or is it?)

Bug #2:
Add an error page explaining what is wrong with a login
attempt

If you try to login, you are just thrown back to the
original URL (slightly
dressed up as http:/
/bugday.gentoo.org/bugdaytest/bugday.php) without any
notice of a failed login attempt.

When Bug #1 gets fixed, I can further test.

Kalin.

-- 
|[ ~~~~~~~~~~~~~~~~~~~~~~ ]|
+-> http://ThinRope.net/ <-+
|[ ______________________ ]|

-- 
gentoo-devgentoo.org mailing list