s l a m

Updated: 10/21/02; 12:20:17 AM.

activeRenderer vs 1.2.1 Released

Features OPML inclusion - a step towards transclusion

today

categories:

or search:

Tuesday, May 14, 2002

Better Tool Updating Security
When he is not busily plundering my mailbox, Paolo has some good ideas on how to enforce better security, or at least trustability for Frontier tools auto-updating.
Turning Radio's www folder into a sandbox is a very clever solution to limit risks. I don't know how to enforce such a mechanism without touching Frontier's kernel though. This is probably a job for UserLand.
When activeRenderer becomes public, I intend to announce all modifications to the tool in a dedicated rss feed, matching an activeRenderer category on s l a m. Subscribing to this feed will enable activeRenderer users to learn about the latest legal updates.
To check on updates, I'm currently investigating a way to log all tool updates in Radio's Event Log. More on this later.
Once this is operational, any unannounced update appearing in the log will be suspect by definition.

7:27:27 PM comments: Google It!

Xml-rpc Tool Registration Service
I've just sent out half a dozen beta versions of the activeRenderer tool. If you want to try one, drop me a line . activeOutiner features an auto-update function, just like Radio Userland. It relies on the server behind eVector's upcoming Tool Registration Service.
activeRenderer is very much a byproduct of my current project. It is and will remain free. Yet, I am curious of who actually is interested in outlines and outline rendering.
So, when the first version of activeRenderer will be released, you will have to register to benefit from the auto-update feature.
Registering means entrusting me with a name (preferably yours :-) and an email address (has to be a real one to receive the registration key). You will be able to read about eVectors' and my own privacy protection policy on the registration page.
Not registering will not prevent you from using activeRenderer, but you won't get updated and upgraded versions automagically.
Auto-update is a great convenience from a developer's point of view: it means not having to maintain previous, older versions.
From a security conscious sysadmin p.o.v., it is a mixed blessing though. The mechanism built into Frontier that makes Radio and any Frontier Tool autoupdate a snap (thanks so much UserLand :-) makes it also the ideal Trojan horse.
If UserLand (in Radio's case) or eVectors (in activeRenderer's case) get compromised by evil minded no-goodniks, they have unlimited access to your workstation, with an active connection to the Internet. Yumm.
In my opinion, it is a risk worth taking. In any case, it is a risk definitely worth measuring.

3:09:38 PM comments: Google It!