Swiki Repair (was RE: Swiki locked)

Gary Fisher gafisher at sprynet.com
Wed Jul 17 12:38:56 UTC 2002


----- Original Message -----
From: "Peter Crowther" <peter.crowther at networkinference.com
>
> I think the quick hack would be to password-protect all the pages on that
> Swiki and to mail the password to the current members of the list (*not*
to
> the list as the list is archived, and not with the reply-to set to the
> list).
>

This could be easily done by including the password (or even a changing
"Password Of The Month") in the monthly autogenerated "Mailing Lists
Membership Reminder."  The very obvious downside of this password method is
that only list members could effectively use the protected Swikis, while any
Swiki or Swiki page left unprotected for public use would remain vulnerable
to the same problems.

A compromise could be struck by using an email confirmation system whereby
edits or uploads are made "live" only after a response is received from the
email address given by the uploader/editor.  This still limits the freedom
of Swiki users but perhaps not too much, as it does not require any formal
"signup" procedure, yet it puts a reasonably verifiable identity on each
upload or change.

Something will have to be done.  While the effects to this point have been
relatively minor (except to those who have had to clean up the mess) it is
only a matter of time before someone begins using the Swikis for more
malignant purposes, which at the least would limit their usefulness but
could conceivably involve much worse.  Even a password scheme would be
better than being ordered to shut down the Swikis.

Gary





More information about the Squeak-dev mailing list