Blog

Hello StatusNet Community! This is Derek reporting to you from StatusNet in Montreal, and here is the latest StatusNet Update.

One of five students that is participating in this years GSoC for StatusNet has been working on implementing people tags which will be StatusNet's simile to Twitter lists. Shashi has spent many hours
brainstorming with mentors, including Zach and other StatusNet developers. Shashi says that "the

A potential security vulnerability was recently announced affecting many implementations of the OpenID and OAuth authentication protocols, including the open-source libraries used by StatusNet.

As a precaution, OpenID has been temporarily disabled on StatusNet cloud-hosted sites while we confirm the situation and get a proper fix installed. We recognize this may be an inconvenience to some users but prefer to err on the side of caution; OpenID should be re-enabled within a day or two at most to minimize disruption. OAuth access to the API is still enabled, which has a lower threat profile as private account settings and major administrator functions cannot be accessed this way.

As always we are doing our best to work with other open-source projects and are submitting our provisional fixes to the authors of the libraries we use; details and links to patches are below the fold.

Yesterday I spoke about the federated social web – what its structure was and why people are interested.

But what will a federated social web do? We don't know, exactly: these kinds of systems tend to change when put into practical use. It took a while for email to handle file attachments reasonably well, and the HTML 5 process shows how much Web interfaces have changed over the last 15 years.

Hello StatusNet users! This is Derek reporting to you from StatusNet in Montreal. Are you ready for another exciting update on the things that have been going on at StatusNet over the past week? Well wait no longer, lets get started!