Google Blogoscoped

Thursday, March 30, 2006

Lazybase With Lazy Security

Andy Baio pointed to Lazybase, an online database system that’s easy to use. In fact it’s so easy, there’s no login – using a “secret URL” like this one anyone has write access to the tables.

I think it’s only a matter of time before the author changes this, as soon you can do a Google-search for to gain write-access to the databases you find. After all, everyone editing the “secret URL” who also has the Google toolbar with the PageRank bar installed will automatically submit the URL to Google. The author doesn’t even have a robots.txt or meta-tag at this time, but even if he would, a non-password protected “secret” URL is no security at all.

So, right now Lazybase is more of a wiki... which isn’t bad in itself (many good web apps need no registration by design), but I don’t think it’s what the author intended.


Blog  |  Forum     more >> Archive | Feed | Google's blogs | About


This site unofficially covers Google™ and more with some rights reserved. Join our forum!