[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [] pumped

From: Kuno Woudt
Subject: Re: [] pumped
Date: Fri, 12 Jul 2013 13:47:35 +0200
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130510 Thunderbird/17.0.6


On 07/12/2013 01:17 PM, MJ Ray wrote:
On 12/07/13 02:13, Mike Linksvayer wrote:
As of yesterday (2013-07-10) is running
[]( Congratulations to

Congratulations? Why? is now cut off from other free software
services and seems to put its users at risk of mass spying.

How does it put users at risk of mass spying any more than StatusNet did?

I was an user.  I've lost access from my clients (which I also
use for friendica) and the web page has a "Get Started" button
which replies with a 403 error saying that registrations aren't allowed.
  There's no login link.

The login link is in the top right of the page, which indeed goes to .

I've seen reports (which I've not yet confirmed for myself) from my
friendica network that pump doesn't work without allowing Google API
JavaScripts from permission to run: that seems like an
easy way into the mass spying net, don't you think?

The software does not require this, but the software as it has been configured on does. You can run your own server and disable CDNs (it is on by default, which I think is a bad default).

I think it's also worth noting that supposedly the web interface is "just another client". Everything the web interface can do is exposed through the API, so someone else could come along and write a different web interface which doesn't use any javascript.

Given what a great example was for autonomous services, I feel
this is all really disappointing.

Given how difficult OStatus was to develop for, I feel pump is really exciting. We have a much better chance now that other applications and websites will integrate with Once you get past the OAuth parts (which is not specific to, the protocol is easy to understand and work with.

The one thing I am disappointed about with is how incredibly frustrating and difficult it is to deploy in a sensible manner (so behind a webserver like nginx).

-- kuno / warp.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]