[ZendTo] Re: Security Issue - Data Leakage Prevention

[Joerg Streibhardt]

Hi Jules,

we do not need/want anonymous users to upload files without prior contact.
If a file is required, our contact will send out a request to the user. We
try to maintain a single contact address for most requests to cope with
absent contacts. While ZendTo would allow to send every message to one
recipient it would severely limit its usability.

Cheers Jörg
Am 02.03.2012 09:34 schrieb "Jules" <Jules at zend.to>:

>  But half the point of ZendTo is that anonymous users *can* create
> drop-offs. Otherwise how do people outside your organisation send files to
> you?
>
> On 01/03/2012 16:47, Joerg Streibhardt wrote:
>
> Hello everyone
>
> it appears this may be a use case for a part of my initial patch submitted
> for SQLite 3. If the new function is enabled it would not be possible for
> an anonymous user to create a dropoff at all.
> Registered users on the other hand are able to send files and request
> others to send files to them.
>
> Let me know if this is an option for you.
>
> Cheers
> Jörg
>
>
> _______________________________________________
> ZendTo mailing listZendTo at zend.tohttp://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>
>
> Jules
>
> --
> Julian Field MEng CITP CEngwww.Zend.To
>
> Follow me at twitter.com/JulesFM
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> 'It's okay to live without all the answers' - Charlie Eppes, 2011
> 'All programs have a desire to be useful' - Tron, 1982
> 'That is the land of lost content,
>  I see it shining plain,
>  The happy highways where I went,
>  And cannot come again.' - A.E. Houseman
>
>
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20120302/bb053849/attachment-0001.html