On the recent LJ changes

[winter]

While I'm not very happy with LJ right now for keeping us in the dark, there was an lj_dev post that seems to be deleted now. It explains the problem (limited to Mozilla and Firefox, for once) and what LJ exactly did to do away with it.

Here's the explanation of what happened to LJ.

Here's hoping they'll fix that stylesheet security hole in the next edition of Firefox. Offhand, I can see how even after that fix it can be used to cause wank and drama by forging comments.

Or, you can bind your login cookie to your IP address. Unless you're on a bloody dynamic IP like I am :/

For my own memory: I need to make a backup of my LJs with ljArchive.

Comments

[smtfhw.livejournal.com]

For my own memory: I need to make a backup of my LJs with ljArchive.

That looks very useful...

[winter]

It seems to be the only archiver that also archives comments, and the archive browsing interface looks useful. I don't expect LJ to stick around for decades and centuries, so I have to think about future literature students ^___~

[murasaki99.livejournal.com]

Hmm, the article also says it is purely a Mozilla/Firefox vulnerability. We could use IE or something else to LJ while they fix the problem. Whatta pain. -_-

[winter]

I was slowly gearing up to switching to Firefox, but now I have my doubts. If they left a hole this big - Javascript execution through CSS, WTFBBQ, any kid could figure out this can be malicious Big Time - is it really that secure?

Then again, supposing that in Firefox you can set different security levels for various sites the way you can do with IE, if all you care about are your LJ cookies, you can just switch Javascript off for LJ and use the Dystopia skin. And surf carefully.

[shisakura.livejournal.com]

Archiving entries, huh? I'll have to try that one day :E