Thursday, March 30, 2006

Lazybase With Lazy Security

Andy Baio pointed to Lazybase, an online database system that’s easy to use. In fact it’s so easy, there’s no login – using a “secret URL” like this one anyone has write access to the tables.

I think it’s only a matter of time before the author changes this, as soon you can do a Google-search for site:lazybase.com to gain write-access to the databases you find. After all, everyone editing the “secret URL” who also has the Google toolbar with the PageRank bar installed will automatically submit the URL to Google. The author doesn’t even have a robots.txt or meta-tag at this time, but even if he would, a non-password protected “secret” URL is no security at all.

So, right now Lazybase is more of a wiki... which isn’t bad in itself (many good web apps need no registration by design), but I don’t think it’s what the author intended.

Lazybase With Lazy Securi ... by Philipp Lenssen | Comments (5)

>> More posts

Advertisement