Evan Prodromou's blog

It's a pretty dense anniversary time for me, falling between July 1st, Canada Day, the national holiday of my adopted home, and July 4th, Independence Day. the national holiday of my home. The first emphasizes confederation -- coming together for the common good -- while the second emphasizes individual autonomy. In between  is today, July 2nd, is the third anniversary of the launch of identi.ca .

We're having unschedule downtime on the StatusNet Cloud Service, which hosts many *.status.net sites as well as identi.ca.

We'll have updates as we see more progress.

Update: we're back!

There is a cross-site scripting vulnerability in the development (1.0.x) branch of StatusNet, including the alpha4 release previously available for download from the StatusNet site.

The vulnerability is due to insufficient sanitization of user input of the description field in the question-and-answer (QnA) plugin. Attackers could post hostile Javascript or other HTML code into the application that would be seen, and executed, by other users on the network. Versions of the 1.0.x branch below alpha5 are affected.

The Google Summer of Code 2011 student projects were announced today. StatusNet got 5 slots, and here are the projects we'll be mentoring this year:

People familiar with StatusNet know that we're dedicated to the federated social web. They probably also know that our software allows sharing status updates between social networking sites, using a protocol suite we call OStatus.