[Owasp-board] Feedblitz

Jim Manico jim.manico at owasp.org
Tue Jul 30 01:51:05 UTC 2013


Options:

NewsBlur
Feedly
NetVibes
DIGG Reader
Feedspot

I personally just use live RSS links in FireFox.

- Jim


> Testing now with another share. It should show as author "owasp"
> 
> Oh, and btw - what other rss readers are we recommending. Sadly
> theoldreader.com is going to die too.
> blog.theoldreader.com/post/56798895350/desperate-times-call-for-desperate-measures
> 
> This doesn't change our overall plan. I just need to find a new rss reader
> 
> 
> --
> Michael Coates | OWASP | @_mwc
> 
> 
> 
> On Mon, Jul 29, 2013 at 5:37 PM, Sarah Baso <sarah.baso at owasp.org> wrote:
> 
>> I updated the admin to owasp.foundation at owasp.org - Can someone please
>> verify that everything looks right before I add users back in?
>>
>> Thanks!
>> Sarah
>>
>>
>> On Mon, Jul 29, 2013 at 12:24 PM, Jim Manico <jim.manico at owasp.org> wrote:
>>
>>>
>>>> The best path forwrard is to add our system account (that sarah and
>>> staff
>>>> have acces to) as the top admin on the blog. This will then show a
>>> generic
>>>> owasp account as the author for these posts. Too bad we can't pass
>>> through
>>>> the original author of the post we're sharing, but at least its a
>>> generic
>>>> owasp account that's listed. For those that havne't followed the whole
>>>> thread, this "author" reference is only in meta data and impacgts some
>>> rss
>>>> readers. When the user views the blog or clicks the link they'll go to
>>> the
>>>> original blog author's page.
>>>
>>> Good deal. You will need to first add owasp at owasp.org as an admin, then
>>> remove all the other users, then add the users back again. I think this
>>> is the way to get owasp at owasp.org as the top blogger account. We don't
>>> even need to use it, it's just there as a placeholder.
>>>
>>> Cool?
>>>
>>> - Jim
>>>
>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Michael Coates | OWASP | @_mwc
>>>>
>>>>
>>>>
>>>> On Mon, Jul 22, 2013 at 6:14 PM, Jim Manico <jim.manico at owasp.org>
>>> wrote:
>>>>
>>>>> I just removed myself from the owasp blogspot admin. I think you are at
>>>>> the top of the list now, can you check?
>>>>>
>>>>>
>>>>> --
>>>>> Jim Manico
>>>>> @Manicode
>>>>> (808) 652-3805
>>>>>
>>>>> On Jul 22, 2013, at 8:12 PM, Michael Coates <michael.coates at owasp.org>
>>>>> wrote:
>>>>>
>>>>> Interesting, whatever you changed made a difference.
>>>>>
>>>>> Now my name is listed at the top of the RSS source (view source for
>>>>> http://feeds.feedblitz.com/owasp&x=1 and search for following:
>>>>> <author><name>Michael Coates</name><email>noreply at blogger.com )
>>>>>
>>>>> See my attached screenshot to see the original problem. Now it shows my
>>>>> name as the author. I did share this link, so things may be fixed. Or,
>>> we
>>>>> may have just changed the problem from showing Jim Manico as the
>>> author for
>>>>> everything to being Michael Coates for everything.
>>>>>
>>>>> To finish our testing of this let's try 1 more thing:
>>>>> 1. Jim creates an account at theoldreader.com"
>>>>> 2. Jim adds his share url as a splice in the feedblitz site
>>>>> 3. Jim and Michael both share some stories
>>>>> 4. We confirm the author changes appropriately.
>>>>>
>>>>> If step #4 fails then my next idea is to make feeds at owasp.org an
>>> account
>>>>> on the blog and configure items so the author is always that generic
>>>>> account.
>>>>>
>>>>> Sound good?
>>>>>
>>>>> <Screen Shot 2013-07-22 at 6.11.21 PM.png>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Michael Coates | OWASP | @_mwc
>>>>>
>>>>>
>>>>>
>>>>> On Mon, Jul 22, 2013 at 5:27 PM, Jim Manico <jim.manico at owasp.org>
>>> wrote:
>>>>>
>>>>>> Michael,
>>>>>>
>>>>>> I created the initial blogspot and feedblitz account, but I do not see
>>>>>> any setting in the blogspot admin or feedblitz admin that references
>>> my
>>>>>> name - except for the roles for editors of blogspot. And I'm at the
>>> top
>>>>>> of that list. I removed myself as a blogspot editor and admin. Can you
>>>>>> see if the problem is still there if you post new articles with no
>>> author?
>>>>>>
>>>>>> And this may be a feedblitz issue, not a blogger issue.
>>>>>>
>>>>>> I dug into feedblitz and I see nothing with my name on it in the
>>>>>> settings. Sarah Baso is listed as the admin of our feedblitz account.
>>>>>>
>>>>>> I looked at the actual feed (feed.feedblitz.com/owasp) and only see
>>> my
>>>>>> name on one occasion, and that is an article I posted to the blogspot
>>>>>> account regarding the mobile call for data.
>>>>>>
>>>>>> I'm not sure I see the problem...
>>>>>>
>>>>>> Aloha,
>>>>>> Jim
>>>>>>
>>>>>>
>>>>>>
>>>>>>> Testing is going well. I've uncovered one item we should try and fix.
>>>>>>>
>>>>>>> Here's the raw RSS of the site -
>>> http://feeds.feedblitz.com/owasp&x=1
>>>>>>>
>>>>>>> You'll notice the stories are coming from 2 places right now:
>>>>>>> 1. The owasp blog owasp.blogspot.com
>>>>>>> 2. My shared RSS stream from theoldreader.com
>>>>>>>
>>>>>>> This works great - the two feeds are spliced together and everyone
>>> sees
>>>>>> all
>>>>>>> the information from the single RSS feedblitz url.
>>>>>>>
>>>>>>> Problem
>>>>>>> - Posts that don't include the meta data <author><name> will end up
>>>>>>> defaulting to the blog author for the RSS field.
>>>>>>> - Theoldereader.com apparently doesn't include this meta data. The
>>>>>> default
>>>>>>> author for the RSS is Jim Manico. So, any story shared via
>>> theoldreader
>>>>>>> shows author "Jim Manico". Depending on the software used (example
>>>>>>> Thurnderbird) this looks like Jim is sharing everything in the feed.
>>>>>>>
>>>>>>> I haven't found a way to fix this yet. I'd be ok if the author was
>>>>>> whoever
>>>>>>> shared the story (best cause is the author data from the original
>>> story
>>>>>>> transfers). But having Jim's name listed everywhere seems not right.
>>>>>>>
>>>>>>> Questions
>>>>>>> Jim - any idea how we could change the owasp.blogspot.com to have
>>> the
>>>>>>> primary author say "OWASP"? I couldn't find an option.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> Michael Coates | OWASP | @_mwc
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> On Fri, Jul 19, 2013 at 12:31 AM, Jim Manico <jim.manico at owasp.org>
>>>>>> wrote:
>>>>>>>
>>>>>>>> Well right on. Perhaps we can support both methods?
>>>>>>>>
>>>>>>>> --
>>>>>>>> Jim Manico
>>>>>>>> @Manicode
>>>>>>>> (808) 652-3805
>>>>>>>>
>>>>>>>> On Jul 18, 2013, at 10:56 PM, Michael Coates <
>>> michael.coates at owasp.org
>>>>>>>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>> Jim,
>>>>>>>>
>>>>>>>> I tested both methods of submitting.
>>>>>>>>
>>>>>>>> *Option 1: *Email to special email address for
>>>>>>>> http://owasp-appsecnews.blogspot.com/2013/07/test-post.html
>>>>>>>> *Pros*: You can email to the special email address (includes secret
>>>>>>>> token) and it automatically posts to the blog. Then feedblitz picks
>>> up
>>>>>> the
>>>>>>>> post and propogates through the primary OWASP RSS
>>>>>>>> *Cons*: It's not easy for sharing news stories at all. You have to
>>>>>>>> construct the entire blog post. This means I have to find a story I
>>>>>> like,
>>>>>>>> copy in the title, the url and the entire contents of the story into
>>>>>> the
>>>>>>>> email
>>>>>>>> *Multi User Support:* Yes, we can create multiple blog authors who
>>> can
>>>>>>>> all use the email feature
>>>>>>>>
>>>>>>>> *Option 2: *Use Feedblitz's RSS split to add the "shared rss" from
>>> my
>>>>>>>> account on theoldreader.com. This let's me view any of my rss news
>>>>>>>> streams in theoldreader and just click "share" on the story. The
>>> story
>>>>>> goes
>>>>>>>> to my theoldreader shared rss feed and it is then propagated to
>>>>>> feedblitz
>>>>>>>> and appears in the primary OWASP RSS
>>>>>>>> *Pros:* Super easy to use. It's the same exact setup as the previous
>>>>>>>> google reader approach
>>>>>>>> *Cons*: None that I can think of. I guess we can't add additional
>>>>>>>> commentary to the shared story, but that's not a big deal
>>>>>>>> *Multi User Support:* Yes, we can configure multiple RSS splits
>>> within
>>>>>>>> feedblitz. This allows the option 2 setup for multiple approved
>>>>>> authors.
>>>>>>>>
>>>>>>>> In terms of replacing our old google reader approach I think option
>>> #2
>>>>>> is
>>>>>>>> the best idea.
>>>>>>>>
>>>>>>>> Jim, your other idea about a blog that has news stories and
>>> reactions
>>>>>> from
>>>>>>>> owasp'ers is still possible too. We'll just create actual blog
>>> posts on
>>>>>>>> owasp-appsecnews.blogspot.com
>>>>>>>>
>>>>>>>>
>>>>>>>> Any other thoughts or ideas on above?
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>> Michael Coates | OWASP | @_mwc
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> On Thu, Jul 18, 2013 at 3:44 PM, Michael Coates <
>>>>>> michael.coates at owasp.org>wrote:
>>>>>>>>
>>>>>>>>> Just verified the combination worked.
>>>>>>>>>
>>>>>>>>> http://feeds.feedblitz.com/owasp
>>>>>>>>>
>>>>>>>>> Shows test post from
>>>>>>>>> http://owasp-appsecnews.blogspot.com/2013/07/test-post.html
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Jim,
>>>>>>>>>
>>>>>>>>> Let's move forward with a test.  I'm going to setup both sharing
>>>>>> options
>>>>>>>>> and get some feedback. (email to news blog and also specific rss
>>> feed
>>>>>>>>> inbound)
>>>>>>>>>
>>>>>>>>> Would you be able to also test a bit?
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> Michael Coates | OWASP | @_mwc
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On Thu, Jul 18, 2013 at 1:36 PM, Jim Manico <jim.manico at owasp.org>
>>>>>> wrote:
>>>>>>>>>
>>>>>>>>>> Even easier, blogspot supports "posting a blog via email". We can
>>>>>> teach
>>>>>>>>>> our "Editors" to just kick an email to the blogspot feed news, and
>>>>>> the
>>>>>>>>>> feedblitz http://feeds.feedblitz.com/owasp feed should pick it up
>>>>>> right
>>>>>>>>>> away. Nice and simple workflow.
>>>>>>>>>>
>>>>>>>>>> Aloha,
>>>>>>>>>> Jim
>>>>>>>>>>
>>>>>>>>>>> Awesome!
>>>>>>>>>>>
>>>>>>>>>>> I found the feature and did the merge. We now have the following
>>> two
>>>>>>>>>> RSS
>>>>>>>>>>> streams:
>>>>>>>>>>>
>>>>>>>>>>> Created From:Main
>>>>>>>>>>> Source<http://www.feedblitz.com/f/f.fbz?RssEdit=13916&ajax=4>:
>>>>>>>>>>> *http://owasp.blogspot.com/feeds/posts/default*
>>>>>>>>>>> + Splice: <
>>> http://www.feedblitz.com/f/f.fbz?RssSplices=13916&ajax=4
>>>>>>>
>>>>>>>>>> * The
>>>>>>>>>>> RSS feed URL:<
>>>>>>>>>> http://owasp-appsecnews.blogspot.com/feeds/posts/default?alt=rss>
>>>>>>>>>>> *
>>> http://owasp-appsecnews.blogspot.com/feeds/posts/default?alt=rss
>>>>>>>>>>>
>>>>>>>>>>> I like jim's idea of adding news with a bit of
>>> thought/commentary to
>>>>>>>>>>> owasp-appsecnews.com
>>>>>>>>>>> Also, we can still maintain the simple 1 click share method by
>>>>>> splice
>>>>>>>>>> in a
>>>>>>>>>>> new feed from an approved individual.
>>>>>>>>>>>
>>>>>>>>>>> The outbound point is here:
>>>>>>>>>>> http://feeds.feedblitz.com/owasp
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Any other thoughts from anyone? If not, I recommend we give this
>>>>>>>>>> approach a
>>>>>>>>>>> try for a few weeks and then decide, if all is good, to promote
>>>>>>>>>> throughout
>>>>>>>>>>> owasp.
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> --
>>>>>>>>>>> Michael Coates | OWASP | @_mwc
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> On Wed, Jul 17, 2013 at 4:42 PM, Jim Manico <
>>> jim.manico at owasp.org>
>>>>>>>>>> wrote:
>>>>>>>>>>>
>>>>>>>>>>>> When you click on the main OWASP feedblitz feed, you can "add
>>> other
>>>>>>>>>>>> feeds" and include twitter, youtube, other RSS feeds and many
>>> other
>>>>>>>>>>>> sources into the main feed.
>>>>>>>>>>>>
>>>>>>>>>>>> So yes we can do this, and no we do not need another agregator.
>>>>>>>>>>>>
>>>>>>>>>>>> :)
>>>>>>>>>>>>
>>>>>>>>>>>> Aloha,
>>>>>>>>>>>> Jim
>>>>>>>>>>>>
>>>>>>>>>>>>> Jim,
>>>>>>>>>>>>>
>>>>>>>>>>>>> Have you found if feedblitz can handle multiple incoming
>>> streams?
>>>>>> If
>>>>>>>>>> so,
>>>>>>>>>>>>> that's awesome and simplifies our process. If not, then we need
>>>>>> to do
>>>>>>>>>>>> step
>>>>>>>>>>>>> 2 (RSS Aggregator) in my other email.
>>>>>>>>>>>>>
>>>>>>>>>>>>> I also like the idea of a moderated news blogs with comments
>>> too.
>>>>>>>>>>>>>
>>>>>>>>>>>>> -Michael
>>>>>>>>>>>>>
>>>>>>>>>>>>>
>>>>>>>>>>>>> --
>>>>>>>>>>>>> Michael Coates | OWASP | @_mwc
>>>>>>>>>>>>>
>>>>>>>>>>>>>
>>>>>>>>>>>>>
>>>>>>>>>>>>> On Sun, Jul 14, 2013 at 2:34 PM, Jim Manico <
>>> jim.manico at owasp.org
>>>>>>>
>>>>>>>>>>>> wrote:
>>>>>>>>>>>>>
>>>>>>>>>>>>>> Feedblitz is a feed aggregation service, among other things.
>>>>>> It's a
>>>>>>>>>>>>>> replacement to feedburner (which is no longer maintained).
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> I set up Feedblitz for OWASP via feed at owasp.org and Sarah
>>> logged
>>>>>>>>>> in and
>>>>>>>>>>>>>> provided payment info.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> The test feed is set up at
>>> https://feeds.feedblitz.com/owaspand is
>>>>>>>>>>>>>> currently only using the OWASP Blog feed to drive it.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> The feed account at feedblitz is very detailed. Solid service.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> I suggest we just have 2 blogs: One for OWASP news (the
>>> current
>>>>>>>>>>>>>> OWASP.blogspot.com) and have another for application security
>>>>>> news
>>>>>>>>>> (
>>>>>>>>>>>>>> owasp-appsecnews.blogspot.com). Both of these blogs will
>>>>>> provide a
>>>>>>>>>> RSS
>>>>>>>>>>>>>> feed that can be fed into Feedblitz.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> (Approved) editors who want to submit an article to
>>>>>>>>>>>>>> owasp-appsecnews.blogspot.com can do so easily. Just send an
>>>>>> email
>>>>>>>>>>>> which
>>>>>>>>>>>>>> auto-posts, or just write an article with the news article
>>> and a
>>>>>> few
>>>>>>>>>>>>>> sentence comment. This is a bit more work that just hitting
>>>>>> "share"
>>>>>>>>>> on a
>>>>>>>>>>>>>> reader, but since it requires real "intention" and not just a
>>>>>>>>>> click, we
>>>>>>>>>>>>>> should get higher quality news.
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Thoughts?
>>>>>>>>>>>>>>
>>>>>>>>>>>>>> Cheers,
>>>>>>>>>>>>>> Jim
>>>>>>>>>>>>>>
>>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>>
>>
>>
>> --
>> Executive Director
>> OWASP Foundation
>>
>> sarah.baso at owasp.org
>> +1.312.869.2779
>>
>>
>>
>>
>>
> 



More information about the Owasp-board mailing list