IBNeko's Journal-Nyo~!

Found this thing called Trac [ http://trac.edgewall.org/ ]. Looks spiffy. Got it installed after about 3 hours of mussing around on windows XP.

Note: I already had Apache 2.0 installed, along with svn 1.4.[something?].

steps:
Installed Python 2.4.4.
Discovered that it was conflicting with XAMPP's outdated python install that I had forced onto the system. Whoops.
Discovered that it didn't set my path for me. Bah. Path set (My Computer > Properties > Advanced > Environment Variables). Modified PATH to include C:\Python24. Added a PYTHONPATH=C:\Python24\. Probably not necessary.
Installed trac 0.10.3 using the binary installer/executable.
Installed pysqlite-2.3.2.win32-py2.4.exe.
Installed svn-python-1.4.2.win32-py24.exe.
Installed mod_pythong-3.3.1.win32-py24.exe.
Installed clearsilver-0.9.14.win32-py24.exe.

Added to httpd.conf: LoadModule python_module modules/mod_python.so

<Location /some/location>
   SetHandler mod_python
   PythonHandler trac.web-modpythong_frontend
   PythonOption TracEnv "C:\Pythong24\Scripts\trac\highbrow"
   PythonOption TracUriRoot /some/location
</Location>

Discovered that I couldn't view sources. Was annoyed.
Installed enscript-1.6.3-9-bin.exe
Installed docutils.
Installed SilverCity-0.9.7win32-py24.exe.

Modified trac.ini (in C:\Python24\Scripts\trac\[project]\conf):
[mimeviewer]
...
enscript_path = "C:\Program Files\GnuWin32\bin\enscript.exe"
...
php_path = "C:\Program Files\xampp\php\php.exe"
...
tab_width = 4

So I now have trac working. It's pretty. Yayness.

The alternative would have been ViewCV, which livejournal uses. Doesn't include the bug ticket support, extra wiki, milestones, etc, though. But I imagine it would have been easier to install. Although 3 hours isn't too bad...

I don't recall if I posted about it or not, but there used to be an antispam vendor called Blue Security. Blue Security was based on the idea that users could install software called Blue Frog [wiki link - contains more information about Blue Security, the takedown story, etc.], which would contact Blue Security about each new piece of spam, and then Blue Security would reply with instructions for Blue Frog to contact the spammer (usually by way of links provided, to use the web forms there) once per spam e-mail recieved, on how to remove all Blue Security e-mails from their spam lists.

However, spammers got pissed at all the extra not-information they were being flooded with, and did a massive DDoS attack (distributed denial of service attack) on Blue Security, as well as the company blog, which was hosted on blogs.com, a subsidiary of Six Apart. (Who runs LiveJournal as well, remember?) This was the cause of that decently long LiveJournal outage some time back.

Essentially, Blue Security withdrew, but since Blue Frog was opensource, people picked it up, named it Okopipi that'll work by using P2P methods to automatically send unsubscribe messages to spammers and/or file reports with the proper authorities.

---
The problem with this, as several security professionals have noted, is that it's quite vulnerable to spammer attacks and misuages, such as including bogus information in the unsubscribe links that would point to a legit site, which would cause the legit site to be flooded. Also, IP addresses of the users would be exposed. Although, if there was enough people, it'd be really hard to spammers to take down everyone.

Also, there's still central server(s) in use, but the location's kept secret... which, security by obscurity, is never good...

I think, a variable blacklist/whitelist might work... to protect legit sites... Users would get to vote a site up or down, and the more accurate your ratings are, the heavier your vote is... this should keep spammers from making a bot to abuse the voting system.

IP addresses, I think, could be protected if there were enough people...... maybe. Can't think of anything else.

You'll find the okopipi website here: http://www.okopipi.org/

That frog reminds me of Azureus ^^;;

"Now there are two Facebooks: one for people in college and one for people in high school."
...how are they going to verify that people are really in a high school, given that most people don't have an e-mail address that connects them to their high school....?

Huh. The college and high school sites are completely separate. Nobody in high school can search for you, see your profile or even send you a message. You can't interact with them either, but you can help your friends in high school get on facebook by inviting them to join.
Righty then... I've got 7 invites.