[Owasp-board] Feedblitz

Eoin eoin.keary at owasp.org
Wed Jul 31 12:49:21 UTC 2013


How do we pick what goes into the feed?



On 30 July 2013 22:01, Michael Coates <michael.coates at owasp.org> wrote:

> Works! See screenshot. The top most article correctly says author "OWASP
> Foundation"
>
> So, to summarize. If we use feedblitz's RSS splice option we can integrate
> a shared rss feed and the stories will correctly show up in RSS readers
> with the author "OWASP Foundation". If someone clicks on the story it will
> take them to the original site the post was made on.
>
>
>
>
> --
> Michael Coates | OWASP | @_mwc
>
>
>
> On Mon, Jul 29, 2013 at 6:47 PM, Michael Coates <michael.coates at owasp.org>wrote:
>
>> Testing now with another share. It should show as author "owasp"
>>
>> Oh, and btw - what other rss readers are we recommending. Sadly
>> theoldreader.com is going to die too.
>> blog.theoldreader.com/post/56798895350/desperate-times-call-for-desperate-measures
>>
>> This doesn't change our overall plan. I just need to find a new rss
>> reader
>>
>>
>> --
>> Michael Coates | OWASP | @_mwc
>>
>>
>>
>> On Mon, Jul 29, 2013 at 5:37 PM, Sarah Baso <sarah.baso at owasp.org> wrote:
>>
>>> I updated the admin to owasp.foundation at owasp.org - Can someone please
>>> verify that everything looks right before I add users back in?
>>>
>>> Thanks!
>>> Sarah
>>>
>>>
>>> On Mon, Jul 29, 2013 at 12:24 PM, Jim Manico <jim.manico at owasp.org>wrote:
>>>
>>>>
>>>> > The best path forwrard is to add our system account (that sarah and
>>>> staff
>>>> > have acces to) as the top admin on the blog. This will then show a
>>>> generic
>>>> > owasp account as the author for these posts. Too bad we can't pass
>>>> through
>>>> > the original author of the post we're sharing, but at least its a
>>>> generic
>>>> > owasp account that's listed. For those that havne't followed the whole
>>>> > thread, this "author" reference is only in meta data and impacgts
>>>> some rss
>>>> > readers. When the user views the blog or clicks the link they'll go
>>>> to the
>>>> > original blog author's page.
>>>>
>>>> Good deal. You will need to first add owasp at owasp.org as an admin, then
>>>> remove all the other users, then add the users back again. I think this
>>>> is the way to get owasp at owasp.org as the top blogger account. We don't
>>>> even need to use it, it's just there as a placeholder.
>>>>
>>>> Cool?
>>>>
>>>> - Jim
>>>>
>>>>
>>>> >
>>>> >
>>>> >
>>>> >
>>>> > --
>>>> > Michael Coates | OWASP | @_mwc
>>>> >
>>>> >
>>>> >
>>>> > On Mon, Jul 22, 2013 at 6:14 PM, Jim Manico <jim.manico at owasp.org>
>>>> wrote:
>>>> >
>>>> >> I just removed myself from the owasp blogspot admin. I think you are
>>>> at
>>>> >> the top of the list now, can you check?
>>>> >>
>>>> >>
>>>> >> --
>>>> >> Jim Manico
>>>> >> @Manicode
>>>> >> (808) 652-3805
>>>> >>
>>>> >> On Jul 22, 2013, at 8:12 PM, Michael Coates <
>>>> michael.coates at owasp.org>
>>>> >> wrote:
>>>> >>
>>>> >> Interesting, whatever you changed made a difference.
>>>> >>
>>>> >> Now my name is listed at the top of the RSS source (view source for
>>>> >> http://feeds.feedblitz.com/owasp&x=1 and search for following:
>>>> >> <author><name>Michael Coates</name><email>noreply at blogger.com )
>>>> >>
>>>> >> See my attached screenshot to see the original problem. Now it shows
>>>> my
>>>> >> name as the author. I did share this link, so things may be fixed.
>>>> Or, we
>>>> >> may have just changed the problem from showing Jim Manico as the
>>>> author for
>>>> >> everything to being Michael Coates for everything.
>>>> >>
>>>> >> To finish our testing of this let's try 1 more thing:
>>>> >> 1. Jim creates an account at theoldreader.com"
>>>> >> 2. Jim adds his share url as a splice in the feedblitz site
>>>> >> 3. Jim and Michael both share some stories
>>>> >> 4. We confirm the author changes appropriately.
>>>> >>
>>>> >> If step #4 fails then my next idea is to make feeds at owasp.org an
>>>> account
>>>> >> on the blog and configure items so the author is always that generic
>>>> >> account.
>>>> >>
>>>> >> Sound good?
>>>> >>
>>>> >> <Screen Shot 2013-07-22 at 6.11.21 PM.png>
>>>> >>
>>>> >>
>>>> >>
>>>> >>
>>>> >> --
>>>> >> Michael Coates | OWASP | @_mwc
>>>> >>
>>>> >>
>>>> >>
>>>> >> On Mon, Jul 22, 2013 at 5:27 PM, Jim Manico <jim.manico at owasp.org>
>>>> wrote:
>>>> >>
>>>> >>> Michael,
>>>> >>>
>>>> >>> I created the initial blogspot and feedblitz account, but I do not
>>>> see
>>>> >>> any setting in the blogspot admin or feedblitz admin that
>>>> references my
>>>> >>> name - except for the roles for editors of blogspot. And I'm at the
>>>> top
>>>> >>> of that list. I removed myself as a blogspot editor and admin. Can
>>>> you
>>>> >>> see if the problem is still there if you post new articles with no
>>>> author?
>>>> >>>
>>>> >>> And this may be a feedblitz issue, not a blogger issue.
>>>> >>>
>>>> >>> I dug into feedblitz and I see nothing with my name on it in the
>>>> >>> settings. Sarah Baso is listed as the admin of our feedblitz
>>>> account.
>>>> >>>
>>>> >>> I looked at the actual feed (feed.feedblitz.com/owasp) and only
>>>> see my
>>>> >>> name on one occasion, and that is an article I posted to the
>>>> blogspot
>>>> >>> account regarding the mobile call for data.
>>>> >>>
>>>> >>> I'm not sure I see the problem...
>>>> >>>
>>>> >>> Aloha,
>>>> >>> Jim
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>>> Testing is going well. I've uncovered one item we should try and
>>>> fix.
>>>> >>>>
>>>> >>>> Here's the raw RSS of the site -
>>>> http://feeds.feedblitz.com/owasp&x=1
>>>> >>>>
>>>> >>>> You'll notice the stories are coming from 2 places right now:
>>>> >>>> 1. The owasp blog owasp.blogspot.com
>>>> >>>> 2. My shared RSS stream from theoldreader.com
>>>> >>>>
>>>> >>>> This works great - the two feeds are spliced together and everyone
>>>> sees
>>>> >>> all
>>>> >>>> the information from the single RSS feedblitz url.
>>>> >>>>
>>>> >>>> Problem
>>>> >>>> - Posts that don't include the meta data <author><name> will end up
>>>> >>>> defaulting to the blog author for the RSS field.
>>>> >>>> - Theoldereader.com apparently doesn't include this meta data. The
>>>> >>> default
>>>> >>>> author for the RSS is Jim Manico. So, any story shared via
>>>> theoldreader
>>>> >>>> shows author "Jim Manico". Depending on the software used (example
>>>> >>>> Thurnderbird) this looks like Jim is sharing everything in the
>>>> feed.
>>>> >>>>
>>>> >>>> I haven't found a way to fix this yet. I'd be ok if the author was
>>>> >>> whoever
>>>> >>>> shared the story (best cause is the author data from the original
>>>> story
>>>> >>>> transfers). But having Jim's name listed everywhere seems not
>>>> right.
>>>> >>>>
>>>> >>>> Questions
>>>> >>>> Jim - any idea how we could change the owasp.blogspot.com to have
>>>> the
>>>> >>>> primary author say "OWASP"? I couldn't find an option.
>>>> >>>>
>>>> >>>>
>>>> >>>>
>>>> >>>> --
>>>> >>>> Michael Coates | OWASP | @_mwc
>>>> >>>>
>>>> >>>>
>>>> >>>>
>>>> >>>> On Fri, Jul 19, 2013 at 12:31 AM, Jim Manico <jim.manico at owasp.org
>>>> >
>>>> >>> wrote:
>>>> >>>>
>>>> >>>>> Well right on. Perhaps we can support both methods?
>>>> >>>>>
>>>> >>>>> --
>>>> >>>>> Jim Manico
>>>> >>>>> @Manicode
>>>> >>>>> (808) 652-3805
>>>> >>>>>
>>>> >>>>> On Jul 18, 2013, at 10:56 PM, Michael Coates <
>>>> michael.coates at owasp.org
>>>> >>>>
>>>> >>>>> wrote:
>>>> >>>>>
>>>> >>>>> Jim,
>>>> >>>>>
>>>> >>>>> I tested both methods of submitting.
>>>> >>>>>
>>>> >>>>> *Option 1: *Email to special email address for
>>>> >>>>> http://owasp-appsecnews.blogspot.com/2013/07/test-post.html
>>>> >>>>> *Pros*: You can email to the special email address (includes
>>>> secret
>>>> >>>>> token) and it automatically posts to the blog. Then feedblitz
>>>> picks up
>>>> >>> the
>>>> >>>>> post and propogates through the primary OWASP RSS
>>>> >>>>> *Cons*: It's not easy for sharing news stories at all. You have to
>>>> >>>>> construct the entire blog post. This means I have to find a story
>>>> I
>>>> >>> like,
>>>> >>>>> copy in the title, the url and the entire contents of the story
>>>> into
>>>> >>> the
>>>> >>>>> email
>>>> >>>>> *Multi User Support:* Yes, we can create multiple blog authors
>>>> who can
>>>> >>>>> all use the email feature
>>>> >>>>>
>>>> >>>>> *Option 2: *Use Feedblitz's RSS split to add the "shared rss"
>>>> from my
>>>> >>>>> account on theoldreader.com. This let's me view any of my rss
>>>> news
>>>> >>>>> streams in theoldreader and just click "share" on the story. The
>>>> story
>>>> >>> goes
>>>> >>>>> to my theoldreader shared rss feed and it is then propagated to
>>>> >>> feedblitz
>>>> >>>>> and appears in the primary OWASP RSS
>>>> >>>>> *Pros:* Super easy to use. It's the same exact setup as the
>>>> previous
>>>> >>>>> google reader approach
>>>> >>>>> *Cons*: None that I can think of. I guess we can't add additional
>>>> >>>>> commentary to the shared story, but that's not a big deal
>>>> >>>>> *Multi User Support:* Yes, we can configure multiple RSS splits
>>>> within
>>>> >>>>> feedblitz. This allows the option 2 setup for multiple approved
>>>> >>> authors.
>>>> >>>>>
>>>> >>>>> In terms of replacing our old google reader approach I think
>>>> option #2
>>>> >>> is
>>>> >>>>> the best idea.
>>>> >>>>>
>>>> >>>>> Jim, your other idea about a blog that has news stories and
>>>> reactions
>>>> >>> from
>>>> >>>>> owasp'ers is still possible too. We'll just create actual blog
>>>> posts on
>>>> >>>>> owasp-appsecnews.blogspot.com
>>>> >>>>>
>>>> >>>>>
>>>> >>>>> Any other thoughts or ideas on above?
>>>> >>>>>
>>>> >>>>>
>>>> >>>>>
>>>> >>>>>
>>>> >>>>>
>>>> >>>>> --
>>>> >>>>> Michael Coates | OWASP | @_mwc
>>>> >>>>>
>>>> >>>>>
>>>> >>>>>
>>>> >>>>> On Thu, Jul 18, 2013 at 3:44 PM, Michael Coates <
>>>> >>> michael.coates at owasp.org>wrote:
>>>> >>>>>
>>>> >>>>>> Just verified the combination worked.
>>>> >>>>>>
>>>> >>>>>> http://feeds.feedblitz.com/owasp
>>>> >>>>>>
>>>> >>>>>> Shows test post from
>>>> >>>>>> http://owasp-appsecnews.blogspot.com/2013/07/test-post.html
>>>> >>>>>>
>>>> >>>>>>
>>>> >>>>>> Jim,
>>>> >>>>>>
>>>> >>>>>> Let's move forward with a test.  I'm going to setup both sharing
>>>> >>> options
>>>> >>>>>> and get some feedback. (email to news blog and also specific rss
>>>> feed
>>>> >>>>>> inbound)
>>>> >>>>>>
>>>> >>>>>> Would you be able to also test a bit?
>>>> >>>>>>
>>>> >>>>>>
>>>> >>>>>>
>>>> >>>>>> --
>>>> >>>>>> Michael Coates | OWASP | @_mwc
>>>> >>>>>>
>>>> >>>>>>
>>>> >>>>>>
>>>> >>>>>> On Thu, Jul 18, 2013 at 1:36 PM, Jim Manico <
>>>> jim.manico at owasp.org>
>>>> >>> wrote:
>>>> >>>>>>
>>>> >>>>>>> Even easier, blogspot supports "posting a blog via email". We
>>>> can
>>>> >>> teach
>>>> >>>>>>> our "Editors" to just kick an email to the blogspot feed news,
>>>> and
>>>> >>> the
>>>> >>>>>>> feedblitz http://feeds.feedblitz.com/owasp feed should pick it
>>>> up
>>>> >>> right
>>>> >>>>>>> away. Nice and simple workflow.
>>>> >>>>>>>
>>>> >>>>>>> Aloha,
>>>> >>>>>>> Jim
>>>> >>>>>>>
>>>> >>>>>>>> Awesome!
>>>> >>>>>>>>
>>>> >>>>>>>> I found the feature and did the merge. We now have the
>>>> following two
>>>> >>>>>>> RSS
>>>> >>>>>>>> streams:
>>>> >>>>>>>>
>>>> >>>>>>>> Created From:Main
>>>> >>>>>>>> Source<http://www.feedblitz.com/f/f.fbz?RssEdit=13916&ajax=4>:
>>>> >>>>>>>> *http://owasp.blogspot.com/feeds/posts/default*
>>>> >>>>>>>> + Splice: <
>>>> http://www.feedblitz.com/f/f.fbz?RssSplices=13916&ajax=4
>>>> >>>>
>>>> >>>>>>> * The
>>>> >>>>>>>> RSS feed URL:<
>>>> >>>>>>>
>>>> http://owasp-appsecnews.blogspot.com/feeds/posts/default?alt=rss>
>>>> >>>>>>>> *
>>>> http://owasp-appsecnews.blogspot.com/feeds/posts/default?alt=rss
>>>> >>>>>>>>
>>>> >>>>>>>> I like jim's idea of adding news with a bit of
>>>> thought/commentary to
>>>> >>>>>>>> owasp-appsecnews.com
>>>> >>>>>>>> Also, we can still maintain the simple 1 click share method by
>>>> >>> splice
>>>> >>>>>>> in a
>>>> >>>>>>>> new feed from an approved individual.
>>>> >>>>>>>>
>>>> >>>>>>>> The outbound point is here:
>>>> >>>>>>>> http://feeds.feedblitz.com/owasp
>>>> >>>>>>>>
>>>> >>>>>>>>
>>>> >>>>>>>> Any other thoughts from anyone? If not, I recommend we give
>>>> this
>>>> >>>>>>> approach a
>>>> >>>>>>>> try for a few weeks and then decide, if all is good, to promote
>>>> >>>>>>> throughout
>>>> >>>>>>>> owasp.
>>>> >>>>>>>>
>>>> >>>>>>>>
>>>> >>>>>>>>
>>>> >>>>>>>> --
>>>> >>>>>>>> Michael Coates | OWASP | @_mwc
>>>> >>>>>>>>
>>>> >>>>>>>>
>>>> >>>>>>>>
>>>> >>>>>>>> On Wed, Jul 17, 2013 at 4:42 PM, Jim Manico <
>>>> jim.manico at owasp.org>
>>>> >>>>>>> wrote:
>>>> >>>>>>>>
>>>> >>>>>>>>> When you click on the main OWASP feedblitz feed, you can "add
>>>> other
>>>> >>>>>>>>> feeds" and include twitter, youtube, other RSS feeds and many
>>>> other
>>>> >>>>>>>>> sources into the main feed.
>>>> >>>>>>>>>
>>>> >>>>>>>>> So yes we can do this, and no we do not need another
>>>> agregator.
>>>> >>>>>>>>>
>>>> >>>>>>>>> :)
>>>> >>>>>>>>>
>>>> >>>>>>>>> Aloha,
>>>> >>>>>>>>> Jim
>>>> >>>>>>>>>
>>>> >>>>>>>>>> Jim,
>>>> >>>>>>>>>>
>>>> >>>>>>>>>> Have you found if feedblitz can handle multiple incoming
>>>> streams?
>>>> >>> If
>>>> >>>>>>> so,
>>>> >>>>>>>>>> that's awesome and simplifies our process. If not, then we
>>>> need
>>>> >>> to do
>>>> >>>>>>>>> step
>>>> >>>>>>>>>> 2 (RSS Aggregator) in my other email.
>>>> >>>>>>>>>>
>>>> >>>>>>>>>> I also like the idea of a moderated news blogs with comments
>>>> too.
>>>> >>>>>>>>>>
>>>> >>>>>>>>>> -Michael
>>>> >>>>>>>>>>
>>>> >>>>>>>>>>
>>>> >>>>>>>>>> --
>>>> >>>>>>>>>> Michael Coates | OWASP | @_mwc
>>>> >>>>>>>>>>
>>>> >>>>>>>>>>
>>>> >>>>>>>>>>
>>>> >>>>>>>>>> On Sun, Jul 14, 2013 at 2:34 PM, Jim Manico <
>>>> jim.manico at owasp.org
>>>> >>>>
>>>> >>>>>>>>> wrote:
>>>> >>>>>>>>>>
>>>> >>>>>>>>>>> Feedblitz is a feed aggregation service, among other things.
>>>> >>> It's a
>>>> >>>>>>>>>>> replacement to feedburner (which is no longer maintained).
>>>> >>>>>>>>>>>
>>>> >>>>>>>>>>> I set up Feedblitz for OWASP via feed at owasp.org and Sarah
>>>> logged
>>>> >>>>>>> in and
>>>> >>>>>>>>>>> provided payment info.
>>>> >>>>>>>>>>>
>>>> >>>>>>>>>>> The test feed is set up at
>>>> https://feeds.feedblitz.com/owaspand is
>>>> >>>>>>>>>>> currently only using the OWASP Blog feed to drive it.
>>>> >>>>>>>>>>>
>>>> >>>>>>>>>>> The feed account at feedblitz is very detailed. Solid
>>>> service.
>>>> >>>>>>>>>>>
>>>> >>>>>>>>>>> I suggest we just have 2 blogs: One for OWASP news (the
>>>> current
>>>> >>>>>>>>>>> OWASP.blogspot.com) and have another for application
>>>> security
>>>> >>> news
>>>> >>>>>>> (
>>>> >>>>>>>>>>> owasp-appsecnews.blogspot.com). Both of these blogs will
>>>> >>> provide a
>>>> >>>>>>> RSS
>>>> >>>>>>>>>>> feed that can be fed into Feedblitz.
>>>> >>>>>>>>>>>
>>>> >>>>>>>>>>> (Approved) editors who want to submit an article to
>>>> >>>>>>>>>>> owasp-appsecnews.blogspot.com can do so easily. Just send
>>>> an
>>>> >>> email
>>>> >>>>>>>>> which
>>>> >>>>>>>>>>> auto-posts, or just write an article with the news article
>>>> and a
>>>> >>> few
>>>> >>>>>>>>>>> sentence comment. This is a bit more work that just hitting
>>>> >>> "share"
>>>> >>>>>>> on a
>>>> >>>>>>>>>>> reader, but since it requires real "intention" and not just
>>>> a
>>>> >>>>>>> click, we
>>>> >>>>>>>>>>> should get higher quality news.
>>>> >>>>>>>>>>>
>>>> >>>>>>>>>>> Thoughts?
>>>> >>>>>>>>>>>
>>>> >>>>>>>>>>> Cheers,
>>>> >>>>>>>>>>> Jim
>>>> >>>>>>>>>>>
>>>> >>>>>>>>>>
>>>> >>>>>>>>>
>>>> >>>>>>>>>
>>>> >>>>>>>>
>>>> >>>>>>>
>>>> >>>>>>>
>>>> >>>>>>
>>>> >>>>>
>>>> >>>>
>>>> >>>
>>>> >>>
>>>> >>
>>>> >
>>>>
>>>>
>>>
>>>
>>> --
>>> Executive Director
>>> OWASP Foundation
>>>
>>> sarah.baso at owasp.org
>>> +1.312.869.2779
>>>
>>>
>>>
>>>
>>>
>>
>
> _______________________________________________
> Owasp-board mailing list
> Owasp-board at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-board
>
>


-- 
Eoin Keary
OWASP Member
https://twitter.com/EoinKeary
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20130731/9dd58dcb/attachment-0001.html>


More information about the Owasp-board mailing list