technozid

A fun ride through the cyperspace

Category : Typo3

Sick of crusading Joomla! advocates trying to silence criticism

What do you do if you are promoting a piece of software which had – partly due to its popularity and partly due to inherent design concepts – several security issues more or less since its initial release?
Make a joint effort with core- and add-on developers to educate the user base and get rid of those issues once and for all?
No, way too much effort. Instead Joomla! activists seem to prefer to come down on anyone who dares to mention those issues like the wrath of God! It is now the third time I came across this type of immature reaction from Joomla! supporters, and I’m really sick about it.

If you are interested in the facts, and a distinctive yet critical point of view, read on. For those of you just wanting to flame me because I dared to mention “security issues” and “Joomla!” in the same sentence, save yourselves some time and proceed directly to the comment form.
Read More…

New Joomla vulnerabilities

Will they ever get it right? Again there is a new vulnerability targeting Joomla (the CMS formerly known as Mambo) sites. Don’t these guys learn? Mambo/Joomla has a whole track record of vulnerabilities, and the story of the split-up doesn’t sound reassuring too – yet its becoming more and more popular even among professional webmasters! Admittedly, the learning curve is much smoother compared to Typo3 – but for Typo3 we only had one security issue so far and it was dealt with within a day. There’s no such thing as a free lunch – and if you want it easy and shiny, something has to give. In Joomlas case it seems that security is the tradeoff. Go figure.

Google Trends

Steve Rubel did a nice list of “25 Things I Learned on Google Trends“. I couldn’t resist to do a few on my own:

And finally:

  • George W. Bush is only slightly more popular than Osama bin Laden, but bin Laden gets more press coverage.

Oh, and by the way, yes, Mark, your 15 minutes of fame are clearly over… here is the proof!

Mambo worm in the wild

Mambo worm via Outpost24.com

Linux/Elxbot is a backdoor for the Mambo vulnerability. It will search on Google for vulnerable targets. Once it infects a computer it will connect to a predetermined IRC server where the attackers will wait and have the possibility to gain access to the infected computer.

I know why I am sticking to Typo3 and do not jump on the Mambo bandwagon…

Finally! Staging for Typo3!

It’s TYCon3 – the first Typo3 conference ever – and I didn’t go. In fact I’m still miffed that they declined my lecture, but the real reason is that I suffer from a huge workload and actually NEED my weekends…

Fortunately, Kai is there and gives a short report on his blog. The biggest news (for me) was the bit about the Workspaces, which allows to have TWO versions of any content element. The “online workspace” is the one shown on the site, the “offline workspace” is a copy in which an editor can work, without altering the online version. This as one of the most basic things missing in Typo3 so far – from my point of view.

New Typo3 Logo

Typo3 LogoThe newly found Typo3 design team has come up with a custom font and a new logo for Typo3. I’m surprised in a positive way about the logo, mostly because the search for a mascot looked more like a freak show…

I'm miffed…

My paper for a lecture during the first Typo3 conference was declined!

Your paper(s) got the following voting:

not accepted: Typo3 and Search Engine Optimization / Friendlyness

In total, we had more than 60 proposals to select from, but due to limited time and space available only 24 could make it into the conference. We want to mention that due to these constraints we had to reject many interesting proposals. However, we are sure we have compiled an interesting mix for the benefit of all speakers and visitors of TYCON3.

With only 60 proposals I had wished for a more personal answer instead of this standard-letter. Yes, I’m hurt!

WordPress and Typo3

Nuclear Moose has a bad hair day because of WordPress:

WordPress is a tremendous tool. It’s being developed by an outstanding group of people but it is the master of the community, not the servant like it should be.

Actually I never heard of Nuclear Moose before, and I only came across his blog because of one of the many “wonders” which blogging has to offer to me. This time it is pubsub’s, something I came across due to a hint of Mark. Again.

I wrote before about the striking similarities between WordPress and Typo3. What Nuclear Moose now pointed out in a rather disappointed way are the dissimilarities between those two open source projects.

Yep, there’s the Codex, and drDave’s plug-in site, and the developer-friendly-but-user-unfriendly-official-wordpress-plugin site, not to mention some avid community members who have extensive lists on their own sites.

This is actually the single most obvious thing which occurred to me during my first few days with WordPress. In Typo3, you have the TER (Typo3 Extension Repository), a single resource where all public extensions reside. The extensions in the repository can be accessed from within a Typo3 installation with a simple click. Everybody is invited to create new extensions. If they are intended to be public extensions (or may become public at a later stage), you need to register an extension key, which allows you to upload the extensions into the TER. Extensions get assigned alpha/beta/stable status flags as well as version numbers. The documentation to each extension is available online inside the TER and can be annotated by any user. The TER automatically creates a forum for each extension, and registered translators can start translating any newly uploaded extension, so that the extension author can use the translations for the next release. When I wrote my first own extension it got translated into Finnish within the same day.
Of course this centralized TER has its drawbacks too: the server load increased tremendously over the last year, so that the bandwidth needed to be increased and a concept for synchronized decentralization needed to be developed. And we are talking about an unfunded open source project!

How very different for WordPress! What comes closest to the Typo3 extension repository is the WordPress Plugin Database by dr Dave. He actually made the attempt to create a plug-in manager for WordPress, but unfortunately the project is on hold for the time being:

People… sorry if I may sound a bit crude, but WPPM is currently off-download and off-support (has been for the past month): the latest version had many things broken, and I simultaneously realized that I just didn’t have the time to take care of it any more.

WordPress reality is, that every extension author hosts his work on his own site. There are a few sites which try to host copies of the plug-ins or at least keep a concise linklist, but they are all far from the Typo3 TER and – as Nuclear Moose said:

What an utter waste of time and energy this has become. WordPress has become the choice of personality types who live for *nix operating systems. If you want to spend all of your time trying to get something to fucking work, then fine, fly at it.

As a final comment of reconciliation let me point out again, that Typo3 and WordPress are in fact very similar. To me it seems that they are cousins, maybe even brothers. The WordPress community may gain quite a lot from the professionalism of the Typo3 community. And in return, Typo3 may benefit from the living proof of the word-smiths who use WordPress because of its simplicity – something Typo3 has not quite mastered. Yet.

So why not profit from each other? I’m sure Kaspar and Robert and all the other core guys from Typo3 would be more than willing to talk to whoever wants to do a WPPR (WordPress Plugin Repository). I’m sure the source code for the TER is not a Danish state secret. I’m sure whoever feels inclined to invest time and work only needs to ask politely to get a copy. Go for it! Profit from each other!

Captain's log, stardate 318346.75

Day two of my journey into the blogosphere (a word which I actually don’t like too much – it just doesn’t sound “right” to me). The response so far has been – Ahem – overwhelming. Apart from (blog-)search-engine spiders – I had only three presumably human visitors so far, including Mark who gained the prize for being the first commenter. But that’s not surprising, since I told nobody about the blog…

Read More…