[Owasp-board] Feedblitz

Sarah Baso sarah.baso at owasp.org
Tue Jul 30 00:37:56 UTC 2013


I updated the admin to owasp.foundation at owasp.org - Can someone please
verify that everything looks right before I add users back in?

Thanks!
Sarah


On Mon, Jul 29, 2013 at 12:24 PM, Jim Manico <jim.manico at owasp.org> wrote:

>
> > The best path forwrard is to add our system account (that sarah and staff
> > have acces to) as the top admin on the blog. This will then show a
> generic
> > owasp account as the author for these posts. Too bad we can't pass
> through
> > the original author of the post we're sharing, but at least its a generic
> > owasp account that's listed. For those that havne't followed the whole
> > thread, this "author" reference is only in meta data and impacgts some
> rss
> > readers. When the user views the blog or clicks the link they'll go to
> the
> > original blog author's page.
>
> Good deal. You will need to first add owasp at owasp.org as an admin, then
> remove all the other users, then add the users back again. I think this
> is the way to get owasp at owasp.org as the top blogger account. We don't
> even need to use it, it's just there as a placeholder.
>
> Cool?
>
> - Jim
>
>
> >
> >
> >
> >
> > --
> > Michael Coates | OWASP | @_mwc
> >
> >
> >
> > On Mon, Jul 22, 2013 at 6:14 PM, Jim Manico <jim.manico at owasp.org>
> wrote:
> >
> >> I just removed myself from the owasp blogspot admin. I think you are at
> >> the top of the list now, can you check?
> >>
> >>
> >> --
> >> Jim Manico
> >> @Manicode
> >> (808) 652-3805
> >>
> >> On Jul 22, 2013, at 8:12 PM, Michael Coates <michael.coates at owasp.org>
> >> wrote:
> >>
> >> Interesting, whatever you changed made a difference.
> >>
> >> Now my name is listed at the top of the RSS source (view source for
> >> http://feeds.feedblitz.com/owasp&x=1 and search for following:
> >> <author><name>Michael Coates</name><email>noreply at blogger.com )
> >>
> >> See my attached screenshot to see the original problem. Now it shows my
> >> name as the author. I did share this link, so things may be fixed. Or,
> we
> >> may have just changed the problem from showing Jim Manico as the author
> for
> >> everything to being Michael Coates for everything.
> >>
> >> To finish our testing of this let's try 1 more thing:
> >> 1. Jim creates an account at theoldreader.com"
> >> 2. Jim adds his share url as a splice in the feedblitz site
> >> 3. Jim and Michael both share some stories
> >> 4. We confirm the author changes appropriately.
> >>
> >> If step #4 fails then my next idea is to make feeds at owasp.org an
> account
> >> on the blog and configure items so the author is always that generic
> >> account.
> >>
> >> Sound good?
> >>
> >> <Screen Shot 2013-07-22 at 6.11.21 PM.png>
> >>
> >>
> >>
> >>
> >> --
> >> Michael Coates | OWASP | @_mwc
> >>
> >>
> >>
> >> On Mon, Jul 22, 2013 at 5:27 PM, Jim Manico <jim.manico at owasp.org>
> wrote:
> >>
> >>> Michael,
> >>>
> >>> I created the initial blogspot and feedblitz account, but I do not see
> >>> any setting in the blogspot admin or feedblitz admin that references my
> >>> name - except for the roles for editors of blogspot. And I'm at the top
> >>> of that list. I removed myself as a blogspot editor and admin. Can you
> >>> see if the problem is still there if you post new articles with no
> author?
> >>>
> >>> And this may be a feedblitz issue, not a blogger issue.
> >>>
> >>> I dug into feedblitz and I see nothing with my name on it in the
> >>> settings. Sarah Baso is listed as the admin of our feedblitz account.
> >>>
> >>> I looked at the actual feed (feed.feedblitz.com/owasp) and only see my
> >>> name on one occasion, and that is an article I posted to the blogspot
> >>> account regarding the mobile call for data.
> >>>
> >>> I'm not sure I see the problem...
> >>>
> >>> Aloha,
> >>> Jim
> >>>
> >>>
> >>>
> >>>> Testing is going well. I've uncovered one item we should try and fix.
> >>>>
> >>>> Here's the raw RSS of the site - http://feeds.feedblitz.com/owasp&x=1
> >>>>
> >>>> You'll notice the stories are coming from 2 places right now:
> >>>> 1. The owasp blog owasp.blogspot.com
> >>>> 2. My shared RSS stream from theoldreader.com
> >>>>
> >>>> This works great - the two feeds are spliced together and everyone
> sees
> >>> all
> >>>> the information from the single RSS feedblitz url.
> >>>>
> >>>> Problem
> >>>> - Posts that don't include the meta data <author><name> will end up
> >>>> defaulting to the blog author for the RSS field.
> >>>> - Theoldereader.com apparently doesn't include this meta data. The
> >>> default
> >>>> author for the RSS is Jim Manico. So, any story shared via
> theoldreader
> >>>> shows author "Jim Manico". Depending on the software used (example
> >>>> Thurnderbird) this looks like Jim is sharing everything in the feed.
> >>>>
> >>>> I haven't found a way to fix this yet. I'd be ok if the author was
> >>> whoever
> >>>> shared the story (best cause is the author data from the original
> story
> >>>> transfers). But having Jim's name listed everywhere seems not right.
> >>>>
> >>>> Questions
> >>>> Jim - any idea how we could change the owasp.blogspot.com to have the
> >>>> primary author say "OWASP"? I couldn't find an option.
> >>>>
> >>>>
> >>>>
> >>>> --
> >>>> Michael Coates | OWASP | @_mwc
> >>>>
> >>>>
> >>>>
> >>>> On Fri, Jul 19, 2013 at 12:31 AM, Jim Manico <jim.manico at owasp.org>
> >>> wrote:
> >>>>
> >>>>> Well right on. Perhaps we can support both methods?
> >>>>>
> >>>>> --
> >>>>> Jim Manico
> >>>>> @Manicode
> >>>>> (808) 652-3805
> >>>>>
> >>>>> On Jul 18, 2013, at 10:56 PM, Michael Coates <
> michael.coates at owasp.org
> >>>>
> >>>>> wrote:
> >>>>>
> >>>>> Jim,
> >>>>>
> >>>>> I tested both methods of submitting.
> >>>>>
> >>>>> *Option 1: *Email to special email address for
> >>>>> http://owasp-appsecnews.blogspot.com/2013/07/test-post.html
> >>>>> *Pros*: You can email to the special email address (includes secret
> >>>>> token) and it automatically posts to the blog. Then feedblitz picks
> up
> >>> the
> >>>>> post and propogates through the primary OWASP RSS
> >>>>> *Cons*: It's not easy for sharing news stories at all. You have to
> >>>>> construct the entire blog post. This means I have to find a story I
> >>> like,
> >>>>> copy in the title, the url and the entire contents of the story into
> >>> the
> >>>>> email
> >>>>> *Multi User Support:* Yes, we can create multiple blog authors who
> can
> >>>>> all use the email feature
> >>>>>
> >>>>> *Option 2: *Use Feedblitz's RSS split to add the "shared rss" from my
> >>>>> account on theoldreader.com. This let's me view any of my rss news
> >>>>> streams in theoldreader and just click "share" on the story. The
> story
> >>> goes
> >>>>> to my theoldreader shared rss feed and it is then propagated to
> >>> feedblitz
> >>>>> and appears in the primary OWASP RSS
> >>>>> *Pros:* Super easy to use. It's the same exact setup as the previous
> >>>>> google reader approach
> >>>>> *Cons*: None that I can think of. I guess we can't add additional
> >>>>> commentary to the shared story, but that's not a big deal
> >>>>> *Multi User Support:* Yes, we can configure multiple RSS splits
> within
> >>>>> feedblitz. This allows the option 2 setup for multiple approved
> >>> authors.
> >>>>>
> >>>>> In terms of replacing our old google reader approach I think option
> #2
> >>> is
> >>>>> the best idea.
> >>>>>
> >>>>> Jim, your other idea about a blog that has news stories and reactions
> >>> from
> >>>>> owasp'ers is still possible too. We'll just create actual blog posts
> on
> >>>>> owasp-appsecnews.blogspot.com
> >>>>>
> >>>>>
> >>>>> Any other thoughts or ideas on above?
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>> --
> >>>>> Michael Coates | OWASP | @_mwc
> >>>>>
> >>>>>
> >>>>>
> >>>>> On Thu, Jul 18, 2013 at 3:44 PM, Michael Coates <
> >>> michael.coates at owasp.org>wrote:
> >>>>>
> >>>>>> Just verified the combination worked.
> >>>>>>
> >>>>>> http://feeds.feedblitz.com/owasp
> >>>>>>
> >>>>>> Shows test post from
> >>>>>> http://owasp-appsecnews.blogspot.com/2013/07/test-post.html
> >>>>>>
> >>>>>>
> >>>>>> Jim,
> >>>>>>
> >>>>>> Let's move forward with a test.  I'm going to setup both sharing
> >>> options
> >>>>>> and get some feedback. (email to news blog and also specific rss
> feed
> >>>>>> inbound)
> >>>>>>
> >>>>>> Would you be able to also test a bit?
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> --
> >>>>>> Michael Coates | OWASP | @_mwc
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> On Thu, Jul 18, 2013 at 1:36 PM, Jim Manico <jim.manico at owasp.org>
> >>> wrote:
> >>>>>>
> >>>>>>> Even easier, blogspot supports "posting a blog via email". We can
> >>> teach
> >>>>>>> our "Editors" to just kick an email to the blogspot feed news, and
> >>> the
> >>>>>>> feedblitz http://feeds.feedblitz.com/owasp feed should pick it up
> >>> right
> >>>>>>> away. Nice and simple workflow.
> >>>>>>>
> >>>>>>> Aloha,
> >>>>>>> Jim
> >>>>>>>
> >>>>>>>> Awesome!
> >>>>>>>>
> >>>>>>>> I found the feature and did the merge. We now have the following
> two
> >>>>>>> RSS
> >>>>>>>> streams:
> >>>>>>>>
> >>>>>>>> Created From:Main
> >>>>>>>> Source<http://www.feedblitz.com/f/f.fbz?RssEdit=13916&ajax=4>:
> >>>>>>>> *http://owasp.blogspot.com/feeds/posts/default*
> >>>>>>>> + Splice: <
> http://www.feedblitz.com/f/f.fbz?RssSplices=13916&ajax=4
> >>>>
> >>>>>>> * The
> >>>>>>>> RSS feed URL:<
> >>>>>>> http://owasp-appsecnews.blogspot.com/feeds/posts/default?alt=rss>
> >>>>>>>> *
> http://owasp-appsecnews.blogspot.com/feeds/posts/default?alt=rss
> >>>>>>>>
> >>>>>>>> I like jim's idea of adding news with a bit of thought/commentary
> to
> >>>>>>>> owasp-appsecnews.com
> >>>>>>>> Also, we can still maintain the simple 1 click share method by
> >>> splice
> >>>>>>> in a
> >>>>>>>> new feed from an approved individual.
> >>>>>>>>
> >>>>>>>> The outbound point is here:
> >>>>>>>> http://feeds.feedblitz.com/owasp
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> Any other thoughts from anyone? If not, I recommend we give this
> >>>>>>> approach a
> >>>>>>>> try for a few weeks and then decide, if all is good, to promote
> >>>>>>> throughout
> >>>>>>>> owasp.
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> --
> >>>>>>>> Michael Coates | OWASP | @_mwc
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> On Wed, Jul 17, 2013 at 4:42 PM, Jim Manico <jim.manico at owasp.org
> >
> >>>>>>> wrote:
> >>>>>>>>
> >>>>>>>>> When you click on the main OWASP feedblitz feed, you can "add
> other
> >>>>>>>>> feeds" and include twitter, youtube, other RSS feeds and many
> other
> >>>>>>>>> sources into the main feed.
> >>>>>>>>>
> >>>>>>>>> So yes we can do this, and no we do not need another agregator.
> >>>>>>>>>
> >>>>>>>>> :)
> >>>>>>>>>
> >>>>>>>>> Aloha,
> >>>>>>>>> Jim
> >>>>>>>>>
> >>>>>>>>>> Jim,
> >>>>>>>>>>
> >>>>>>>>>> Have you found if feedblitz can handle multiple incoming
> streams?
> >>> If
> >>>>>>> so,
> >>>>>>>>>> that's awesome and simplifies our process. If not, then we need
> >>> to do
> >>>>>>>>> step
> >>>>>>>>>> 2 (RSS Aggregator) in my other email.
> >>>>>>>>>>
> >>>>>>>>>> I also like the idea of a moderated news blogs with comments
> too.
> >>>>>>>>>>
> >>>>>>>>>> -Michael
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> --
> >>>>>>>>>> Michael Coates | OWASP | @_mwc
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> On Sun, Jul 14, 2013 at 2:34 PM, Jim Manico <
> jim.manico at owasp.org
> >>>>
> >>>>>>>>> wrote:
> >>>>>>>>>>
> >>>>>>>>>>> Feedblitz is a feed aggregation service, among other things.
> >>> It's a
> >>>>>>>>>>> replacement to feedburner (which is no longer maintained).
> >>>>>>>>>>>
> >>>>>>>>>>> I set up Feedblitz for OWASP via feed at owasp.org and Sarah
> logged
> >>>>>>> in and
> >>>>>>>>>>> provided payment info.
> >>>>>>>>>>>
> >>>>>>>>>>> The test feed is set up at
> https://feeds.feedblitz.com/owaspand is
> >>>>>>>>>>> currently only using the OWASP Blog feed to drive it.
> >>>>>>>>>>>
> >>>>>>>>>>> The feed account at feedblitz is very detailed. Solid service.
> >>>>>>>>>>>
> >>>>>>>>>>> I suggest we just have 2 blogs: One for OWASP news (the current
> >>>>>>>>>>> OWASP.blogspot.com) and have another for application security
> >>> news
> >>>>>>> (
> >>>>>>>>>>> owasp-appsecnews.blogspot.com). Both of these blogs will
> >>> provide a
> >>>>>>> RSS
> >>>>>>>>>>> feed that can be fed into Feedblitz.
> >>>>>>>>>>>
> >>>>>>>>>>> (Approved) editors who want to submit an article to
> >>>>>>>>>>> owasp-appsecnews.blogspot.com can do so easily. Just send an
> >>> email
> >>>>>>>>> which
> >>>>>>>>>>> auto-posts, or just write an article with the news article and
> a
> >>> few
> >>>>>>>>>>> sentence comment. This is a bit more work that just hitting
> >>> "share"
> >>>>>>> on a
> >>>>>>>>>>> reader, but since it requires real "intention" and not just a
> >>>>>>> click, we
> >>>>>>>>>>> should get higher quality news.
> >>>>>>>>>>>
> >>>>>>>>>>> Thoughts?
> >>>>>>>>>>>
> >>>>>>>>>>> Cheers,
> >>>>>>>>>>> Jim
> >>>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>
> >>>>>
> >>>>
> >>>
> >>>
> >>
> >
>
>


-- 
Executive Director
OWASP Foundation

sarah.baso at owasp.org
+1.312.869.2779
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20130729/ce657cb2/attachment-0001.html>


More information about the Owasp-board mailing list