Simon Willison’s Weblog

Phasing out support for IE 6 across all 37signals products on August 15, 2008. Interesting move considering BaseCamp is used for communicating with (often corporate) clients. It would be nice to see the browser stats behind the decision. 4th July 2008, 9:17 am

BUG: XSS Security flaw in BaseCamp Messages (via) BaseCamp lets users include HTML and JavaScript in messages, on the basis that anyone with a BaseCamp account is a trusted party. I’m not convinced: you could use this to circumvent BaseCamp’s access control stuff and read messages you’re not meant to. On the flip side, you could also use this to add brand new features to BaseCamp by using JavaScript in a message as a server-side equivalent to Greasemonkey. 26th June 2008, 9:39 am

OpenID support in Blinksale (via) Blinksale + Highrise + Basecamp means you can run your small business on OpenID. 10th July 2007, 7:45 am

OpenID: Why, how, 37signals. 37signals just enabled OpenID on Basecamp as well as Highrise. This is their excellent attempt at explaining its benefits. 28th June 2007, 1:38 am