Letter to Ministry of Sound

Dear sir/madam,
I am writing you to complain about the new ministry of sound website and the lack of data protection with regards to your users.

Earlier today I received an email notification about the new MoS website. The email also notified me that a new password was issued to use on the website. These are two characteristics of a phishing mail – in this case launching a new website and sending out new passwords, they could easily have been sent from a malicious source wanting me to login to their MoS-lookalike website and take my credit card details. You shouldn’t send out a new password unless someone requests it on your website, because email can be forged. You also sent out my password in plain text email rather than on a secure part of your website. Anyone can read it and login to my account and purchase orders.

Also to my surprise while investigating the source of the mail, several of the links point to a http://www.c-f-1.com/ domain (update: this domain name no longer exists!), the name doesn’t help to improve the trust in your email. To my astonishment the link led to a webpage with the html email, again with my password in plain sight. Have a look (link removed), I changed my password already. Let’s wait for Google to index it so that anyone can search for my account information. They already found other newsletters.

Finally, I used mosdownload.com to buy my mp3s online. This site no longer works as an error comes up when it tries to redirect, due to a configuration error. My order history is gone, most of my profile is gone.

I’m very disappointed with your lack of security and care for your customers and unfortunately have come to the conclusion that I won’t be using your service again, and I will recommend my friends and family to do the same, due to these trust issues.

October 28, 2008 at 11:55 AM in Technology, Web

Fixing Trac after upgrading VisualSVN

If you upgraded VisualSVN Server like I have today to 1.61 and have Trac installed as per VisualSvn+Trac then you’ll notice Trac stopped working.

To fix this, follow this part of the instructions:

Add following line at the top of file C:\Program Files\VisualSVN Server\httpd-wrapper.bat:

set PYTHONHOME=%~dp0\Trac\python

Update: Later updates to VisualSvn Server break Trac.

October 22, 2008 at 3:38 PM in Subversion

TracFogbugzPlugin 0.9u-py2.5 Patch for Trac 0.11

If you use both VisualSvn + Trac (or another flavour of Subversion and Trac), and tried to integrate them with Fogbugz , you will have tried the TracFogbugzPlugin.

Trying to get this to work isn’t straightforward as it’s not compatible with Trac 0.11. You will come across the following error:

Traceback (most recent call last):
File “C:\Python25\Lib\site-packages\trac\web\api.py”, line 339, in
File “C:\Python25\Lib\site-packages\trac\web\chrome.py”, line 684, in
data = self.populate_data(req, data)
File “C:\Python25\Lib\site-packages\trac\web\chrome.py”, line 592, in
File “C:\Python25\Lib\site-packages\trac\web\api.py”, line 168, in
value = self.callbacks[name](self)
File “C:\Python25\Lib\site-packages\trac\web\chrome.py”, line 460, in
for category, name, text in contributor.get_navigation_items(req):
ugz.py”, line 22, in get_navigation_items
yield ‘mainnav’, ‘fogbugz’, Markup(‘<a href=”%s”>FogBuz</a>’,
LookupError: unknown encoding: >/”>https://<<myurl>>/

To fix this line 22 needs changed, to read:

yield ‘mainnav’, ‘fogbugz’, Markup(‘<a href=”%s”>FogBuz</a>’%self.baseurl)

Or download the file below and use it as part of the installation instructions (if this is your first Python Egg you want to read about installing Trac plugins. 😉

Now it is loading but the plugin doesn’t seem to work, haha.

Download: Patched tracfogbugzplugin-09u-py25

October 15, 2008 at 11:39 AM in Subversion

Passing and receiving multiple values to VbScript functions

Maintaining code can be a real pain in backside. Especially when you’re using shared code, almost always at a later date you will want to make the code more versatile to accommodate a scenario you hadn’t thought of before.

I’ve had experience this in an ASP / VbScript environment, and therefore I’m going to use the terminology of page and functions as opposed to files and classes:

  1. Rework the code and update all pages. This is obviously a bad idea.
  2. To extend inflexible code: Rename the function and create a wrapper in its place to access the function using default parameters that are compatible with your existing codebase.
  3. Create functions that are extendable.

To use optional parameters, pass them in an Array or dictionary object. This way you can add additional ones. The benefit that Arrays have over Dictionary objects is that they use less resources. This can be important if you are developing for a popular website.

Another advantage of using Arrays is that you’ll use less code calling the function. Using a dictionary object you’ll have to add each parameter separately, then pass the dictionary object as the parameter of the function.

On the other hand, code will be more legible using dictionary objects. Dictionary objects use  key value pairs to tell you that key A has a value B. You’ll not have to bother about the order of parameters, but you’ll have to know the keys of each function. It results in verbose, legible, resource intensive code.

October 9, 2008 at 11:12 AM in Uncategorised