Comments for jodhpuriGuy | Avi Mehta http://jodhpuriguy.com tech, internet and the rest of life... Wed, 10 Dec 2008 10:31:25 +0000 http://wordpress.org/?v=2.6.5 33.650813-117.817711 Comment on DAIICT by Tools for a Web Developer | jodhpuriGuy | Avi Mehta http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/hKCabypIFOE/ Tools for a Web Developer | jodhpuriGuy | Avi Mehta Tue, 09 Dec 2008 05:17:41 +0000 http://jodhpuriguy.com/?p=73#comment-64 [...] internet for more then 5 years now. I started out as a script kiddie when I was in first year at DAIICT. I started out by creating simple websites using Microsoft Frontpageand publishing them on [...] [...] internet for more then 5 years now. I started out as a script kiddie when I was in first year at DAIICT. I started out by creating simple websites using Microsoft Frontpageand publishing them on [...]

]]> http://jodhpuriguy.com/wordpress/2008/10/daiict/#comment-64 Comment on Updates by Avi Mehta http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/Cl4JVdzNBEw/ Avi Mehta Tue, 25 Nov 2008 22:05:30 +0000 http://jodhpuriguy.com/?p=127#comment-63 Providing the service at a central location may serve the purpose of running the application but in that case, the Users are basically handing out their personal information and the information is going to be stored at server. imo, that's something that requires proper security. In case we dont store the information then the local file will have to send username and password everytime it wants to reload the calendar(might happen every two mins?). In such a situation, The password will have to be stored with the sidebar gadget. I guess this can be done if it is really required but there are too many loose ends to it. About the wrapper, All the requests are sent by a Google library(a js file) that is downloaded remotely from Google. The library probably uses window.location or something that is not so easy to manipulate. In addition, it does not change the fact that we are still using a token that was generated for some other domain. Providing the service at a central location may serve the purpose of running the application but in that case, the Users are basically handing out their personal information and the information is going to be stored at server. imo, that’s something that requires proper security. In case we dont store the information then the local file will have to send username and password everytime it wants to reload the calendar(might happen every two mins?). In such a situation, The password will have to be stored with the sidebar gadget.

I guess this can be done if it is really required but there are too many loose ends to it.

About the wrapper, All the requests are sent by a Google library(a js file) that is downloaded remotely from Google. The library probably uses window.location or something that is not so easy to manipulate. In addition, it does not change the fact that we are still using a token that was generated for some other domain.

]]> http://jodhpuriguy.com/wordpress/2008/11/updates/#comment-63 Comment on Updates by Ramnath R Iyer http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/hhmOCgUfr9Q/ Ramnath R Iyer Tue, 25 Nov 2008 19:35:20 +0000 http://jodhpuriguy.com/?p=127#comment-61 It doesn't need to be installed on every computer; you could provide a service at a central location, something like a NAT. Authentication can also be handled by passing on the cookie etc. It may not be terribly easy, but I think it's feasible. Alternatively, you could also look at the mechanism by which the Google library is picking up the name of the HTML file and write some kind of wrapper that returns a dummy http: URL instead. It doesn’t need to be installed on every computer; you could provide a service at a central location, something like a NAT. Authentication can also be handled by passing on the cookie etc. It may not be terribly easy, but I think it’s feasible. Alternatively, you could also look at the mechanism by which the Google library is picking up the name of the HTML file and write some kind of wrapper that returns a dummy http: URL instead.

]]> http://jodhpuriguy.com/wordpress/2008/11/updates/#comment-61 Comment on Updates by Avi Mehta http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/oMx85n3AJIA/ Avi Mehta Tue, 25 Nov 2008 17:52:42 +0000 http://jodhpuriguy.com/?p=127#comment-60 The problem with keeping a decorator is that it is not technically feasible to create it on every computer where you want to install the Widget. The other problem with the approach is that I am not pretty sure how the auth Token that google returns on being authorized is going to be handled. The Auth token is valid for a particular Domain and might not work in other locations. For now the only way out seems to be doing some XSS and hope that Microsoft does not fix it =) . The problem with keeping a decorator is that it is not technically feasible to create it on every computer where you want to install the Widget.
The other problem with the approach is that I am not pretty sure how the auth Token that google returns on being authorized is going to be handled. The Auth token is valid for a particular Domain and might not work in other locations.

For now the only way out seems to be doing some XSS and hope that Microsoft does not fix it =) .

]]> http://jodhpuriguy.com/wordpress/2008/11/updates/#comment-60 Comment on Updates by Ramnath R Iyer http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/oZgnoJUnk8U/ Ramnath R Iyer Tue, 25 Nov 2008 04:01:36 +0000 http://jodhpuriguy.com/?p=127#comment-58 You probably need a decorator: a server sitting on localhost receives the request, replaces file://path with http://localhost/callbackURL and forwards the request to Google. When the callback URL is invoked, the gadget loads the required page. You probably need a decorator: a server sitting on localhost receives the request, replaces file://path with http://localhost/callbackURL and forwards the request to Google. When the callback URL is invoked, the gadget loads the required page.

]]> http://jodhpuriguy.com/wordpress/2008/11/updates/#comment-58 Comment on Updates by Avi Mehta http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/Tk67JDrZJwk/ Avi Mehta Mon, 24 Nov 2008 06:33:14 +0000 http://jodhpuriguy.com/?p=127#comment-57 Actually.. the problem that I described only occurs in case the returnURL is of the form file://path. If you use localhost or something similar, it dose work out properly. The current project that I am working on does that(through AuthSub of course...). Actually.. the problem that I described only occurs in case the returnURL is of the form file://path. If you use localhost or something similar, it dose work out properly. The current project that I am working on does that(through AuthSub of course…).

]]> http://jodhpuriguy.com/wordpress/2008/11/updates/#comment-57 Comment on Updates by Ujj http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/4tYkbbb2BZg/ Ujj Mon, 24 Nov 2008 05:58:37 +0000 http://jodhpuriguy.com/?p=127#comment-56 Nice to read your blog after a while. AuthSaub API's generally do not work on localhosts. Try uploading it a live site (like this), wont be a problem then. Besides, if you are interested in python, you could give Google App Engine a whirl, it has AuthSub built in, via a user object. Looking forward to your Adobe Air stuff (but its way too flaky on linux :( ) Nice to read your blog after a while. AuthSaub API’s generally do not work on localhosts. Try uploading it a live site (like this), wont be a problem then. Besides, if you are interested in python, you could give Google App Engine a whirl, it has AuthSub built in, via a user object.

Looking forward to your Adobe Air stuff (but its way too flaky on linux :( )

]]> http://jodhpuriguy.com/wordpress/2008/11/updates/#comment-56 Comment on Vitamins and Pain Killers by Updates | jodhpuriGuy | Avi Mehta http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/b3xzjb8jgNE/ Updates | jodhpuriGuy | Avi Mehta Mon, 24 Nov 2008 05:47:41 +0000 http://jodhpuriguy.com/?p=68#comment-55 [...] my life is to organize my time. I tend to be a bit late, and somewhat disorganized. To relieve the pain, I decided to I started out with developing a calendar gadget for windows Sidebar. The gadget was [...] [...] my life is to organize my time. I tend to be a bit late, and somewhat disorganized. To relieve the pain, I decided to I started out with developing a calendar gadget for windows Sidebar. The gadget was [...]

]]> http://jodhpuriguy.com/wordpress/2008/10/vitamins-and-pain-killers/#comment-55 Comment on Blogging is difficult by Avi Mehta http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/nWj2PIaRT5E/ Avi Mehta Wed, 05 Nov 2008 23:23:35 +0000 http://jodhpuriguy.com/?p=120#comment-52 i know :) i know :)

]]> http://jodhpuriguy.com/wordpress/2008/10/blogging-is-difficult/#comment-52 Comment on Blogging is difficult by Ramnath R Iyer http://feedproxy.google.com/~r/CommentsOnJodhpuriguy/~3/q39pJIYqG1Q/ Ramnath R Iyer Wed, 05 Nov 2008 07:28:47 +0000 http://jodhpuriguy.com/?p=120#comment-51 You seem to be trying very hard.... :-) You seem to be trying very hard…. :-)

]]> http://jodhpuriguy.com/wordpress/2008/10/blogging-is-difficult/#comment-51