 | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —Eric Joslin
|
| | | (...) I think it could be cookie based (he said, while simulteneously knowing nothing about cookies). After all, posting identity is cookie based, is it not? Do we really need to worry about "rogue cancellers" cancelling all kinds of Lugnet posts (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | |
| | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —David Eaton
|
| | | | | (...) Not really, although it can be. The problem being mainly that the web interface will still let you post if you don't have a cookie. It can actually give you a new one in some cases. So if I post a message as Bob Shmoe, I can get a cookie as (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | | |
| | | | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —Dan Boger
|
| | | | | | | (...) eh? the only way you can get an id cookie is by putting in the confirmation code, isn't it? Also, if you can cancel messages only by you, and only if you're logged in (have to be a member), that's pretty secure... No way to get the member (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | | | | |
| | | | | | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —David Eaton
|
| | | | | | | | | (...) Oh? I could easily be wrong-- being a still-starting-out web programmer my browser's cookies are always being rewritten, etc, so I'm not sure. But I thought that there were something like three different cookies that Lugnet can drop you? - (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | | | | | | |
| | | | | | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —Larry Pieniazek
|
| | | | | | | | Do we have numbers on relative mail/nntp/web POSTING usage? (...) NNTP already allows cancel. It is possible for someone who knows the NNTP protocol to forge cancels, I believe, but I am not sure. I would be OK with web cancel only working when you (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | | | | | |
| | | | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —Todd Lehman
|
| | | | | | (...) Ug, that's kinda gross. I think the cleanest way is what someone suggested earlier: When you request that a post be cancelled, the server simply send a confirmation e-mail to the person who posted the message. If they get the e-mail, it proves (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | | | |
| | | | | Re: Web interface cancels (was Re: Let's define what an auction announcement/update is) —Larry Pieniazek
|
| | | | (...) One amelioration for the rogue cancel problem would be for the web interface to "stash" a cancelled post somewhere safe. Lots of variations on that possible. In addition to the stash, send it in email to the address given in the posting (...) (24 years ago, 28-Nov-00, to lugnet.admin.general)
|
| | | | |
