Simon Willison’s Weblog

OpenID phishing demo (via) A demonstration of the OpenID man-in-the-middle phishing attack. idproxy.net OpenIDs are immune to this particular variant due to the landing page not asking for your password (the phishing site could still provide their own redesigned landing page and hope users don’t notice though).

# 8:09 am / phishing, openid, idproxy, security

Using Memcache with Google App Engine. Brad Fitzpatrick’s 20% time project.

# 11:11 pm / brad-fitzpatrick, memcache, googleappengine, google

Google Earth in a browser (sort of), Scriptable, a quick peek and poke. Dan Catt on Google’s new browser plugin version of Google Earth... which conveniently exposes a JavaScript API to the browser in the form of the “ge” object, which can then be poked at interactively using Firebug.

# 11:13 pm / firebug, javascript, google-earth, dan-catt, google