[ACFUG Discuss] Ultimate Centaur/Bolt User Group Tour event, online Monday at noon EDT

[Charlie Arehart]

Hey folks, hope you won't mind me sharing this here but I assume many will
be interested.

 

This coming Monday (July 13) at noon US EDT we'll be having an extra special
session of the online CF Meetup (coldfusionmeetup.com), where Adobe has
offered to host a special two-hour session, "Centaur and Bolt Uncensored",
the Ultimate Centaur/Bolt User Group Tour event, with Terry Ryan of Adobe.

 

More at http://www.meetup.com/coldfusionmeetup/calendar/10841349/

 

Here's the most significant part of the description, but there's more info
there:

 

".while Adobe has been doing Centaur/Bolt user group tour event over the
past few weeks, at each meeting they've shared more and different things.
This event will be the capstone tour event, revealing all the features
shared to this point, and more. Adobe ColdFusion Evangelist Terry Ryan
assures me that nothing will be held back as he talks about both Centaur and
Bolt.

 

While this will be recorded, like all meetings, it's a unique chance to get
your questions answered as well as hear the most info yet available on
Centaur (the next release of ColdFusion) and Bolt (the new CFML integrated
development environment). Spread the word, pointing people to this page
(http://www.meetup.com/coldfusionmeetup/calendar/10841349/) for more
information, and join us online on the day at experts.acrobat.com/cfmeetup."

 

I realize you may have some other questions, but please do check out the
page above first. :-) And again, note that it's a special day (Monday,
versus our normal Thursday) and it's two hours, and it promises more
Centaur/Bolt info than has been shared at other tour events.

 

Please do help me spread the word by blogging/twittering as you'd like. No
pressure, though. As long as a few do, that'll be great. And apologies if
you may see me spreading this news on other lists where we are mutually
members. I suspect this will be the most popular CFMeetup event so far!

 

/charlie 

 

(The online CFMeetup is a an official Adobe CF user group that meets weekly,
typically Thursdays, entirely online. More at
http://www.coldfusionmeetup.com.)




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

RE: broken urls in email RE: [ACFUG Discuss] ColdFusion and MySQL

[Charlie Arehart]

Just posted it (on the meetup site), and was about to send it to the group 
here. Coming right up.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Teddy R. Payne
Sent: Thursday, July 09, 2009 3:13 PM
To: discussion@acfug.org
Subject: Re: broken urls in email RE: [ACFUG Discuss] ColdFusion and MySQL

 

Charlie/Jasun,
Excellent! And we look forward to the "special" announcement for the CF Meetup. 
 

Teddy




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

Re: broken urls in email RE: [ACFUG Discuss] ColdFusion and MySQL

[Teddy R. Payne]

Charlie/Jasun,
Excellent! And we look forward to the "special" announcement for the CF
Meetup.

Teddy

RE: broken urls in email RE: [ACFUG Discuss] ColdFusion and MySQL

[Charlie Arehart]

Ah, ok. Thanks. :-) 

 

And to be clear, Teddy, I did in my reply say that you could have meant
either form of bandwidth. Meant to clarify that in my note below. 

 

Juggling many things today, including a very cool announcement to come later
today about a special CF Meetup event. Will share more after I post that
later today.

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Jasun
Sent: Thursday, July 09, 2009 2:16 PM
To: discussion@acfug.org
Subject: Re: broken urls in email RE: [ACFUG Discuss] ColdFusion and MySQL

 

I wasn't laughing at what you said Charlie. To the contrary... I had to
agree.

What I found amusing had to do with the irony that some of us may not have
the "bandwidth" to deal with links broken by a line wrap, but we will go to
great lengths to point out that it IS "broken".

And Teddy... no offense intended. You should always feel free to take my
comments and throw them in a vat of acid... ;) 

 




-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

Re: broken urls in email RE: [ACFUG Discuss] ColdFusion and MySQL

[Jasun]

I wasn't laughing at what you said Charlie. To the contrary... I had to
agree.

What I found amusing had to do with the irony that some of us may not have
the "bandwidth" to deal with links broken by a line wrap, but we will go to
great lengths to point out that it IS "broken".

And Teddy... no offense intended. You should always feel free to take my
comments and throw them in a vat of acid... ;)

On Thu, Jul 9, 2009 at 1:47 PM, Charlie Arehart wrote:

>  Just to be clear, I didn’t take it as patronizing. “We cool.” :-)
>
>
>
> But I stand by my statement (and confused by Jasun’s laughter. I was being
> serious. But maybe that’s what he was laughing at.)
>
>
>
> /charlie
>
>
>
> *From:* ad...@acfug.org [mailto:ad...@acfug.org] *On Behalf Of *Teddy R.
> Payne
> *Sent:* Wednesday, July 08, 2009 5:36 PM
> *To:* discussion@acfug.org
> *Subject:* Re: broken urls in email RE: [ACFUG Discuss] ColdFusion and
> MySQL
>
>
>
> All,
> And allow me to apologize here as I did not hit the correct "reply" to send
> a personal note to Charlie.  I am by no means trying to be patronizing in
> public here.  I was attempting to resolve a difference in vernacular.
>
> Mia culpa Charlie,
> Teddy
>
> -
> To unsubscribe from this list, manage your profile @
> http://www.acfug.org?fa=login.edituserform
>
> For more info, see http://www.acfug.org/mailinglists
> Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> List hosted by FusionLink 
> -
>

RE: broken urls in email RE: [ACFUG Discuss] ColdFusion and MySQL

[Charlie Arehart]

Just to be clear, I didn’t take it as patronizing. “We cool.” :-) 

 

But I stand by my statement (and confused by Jasun’s laughter. I was being 
serious. But maybe that’s what he was laughing at.)

 

/charlie

 

From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Teddy R. Payne
Sent: Wednesday, July 08, 2009 5:36 PM
To: discussion@acfug.org
Subject: Re: broken urls in email RE: [ACFUG Discuss] ColdFusion and MySQL

 

All,
And allow me to apologize here as I did not hit the correct "reply" to send a 
personal note to Charlie.  I am by no means trying to be patronizing in public 
here.  I was attempting to resolve a difference in vernacular.

Mia culpa Charlie,
Teddy




-

To unsubscribe from this list, manage your profile @ 

http://www.acfug.org?fa=login.edituserform



For more info, see http://www.acfug.org/mailinglists

Archive @ http://www.mail-archive.com/discussion%40acfug.org/

List hosted by http://www.fusionlink.com

-

Re: [ACFUG Discuss] Flash Camp Atlanta Announcement

[Andrew Powell]

I've actually got all the details up on my site:

http://www.infoaccelerator.net/blog/post.cfm/flash-camp-atlanta-2009



On Jul 9, 2009, at 11:32 AM, Emile Melbourne wrote:


Hey Andrew,

Can you post all the details to the Flash Camp in this email thread.
Such as where to register, registration deadlines additional details.

Thanks
Emile

On Thu, Jul 9, 2009 at 9:45 AM, Andrew Powell   
wrote:
We're trying to keep the cost below $75.  We will be having a  
morning session that is an intro to the Flash Platform covering  
Flash, Flex, & AIR.


On Jul 8, 2009, at 5:02 PM, Timothy Grice wrote:

What is the cost to attend one of these. I have heard a lot about  
these camps but I am new to Flash and Flex and have never  
investigated what that are all about. I would love to attend.




--- On Wed, 7/8/09, Andrew Powell  wrote:

From: Andrew Powell 
Subject: [ACFUG Discuss] Flash Camp Atlanta Announcement
To: discussion@acfug.org
Date: Wednesday, July 8, 2009, 4:05 PM

Flash Camp Atlanta is a full-day event featuring some top industry  
experts on the Adobe Flash Platform from both inside and outside  
Adobe. Come advance your Flex and Flash skills, meet members of the  
Adobe team and network with local companies and fellow developers.  
Sessions will be geared towards developers and designers with  
little to advanced level of experience with Flex and/or  
ActionScript. There will be plenty of giveaways, raffles and swag  
(and lunch).


Where:  Georgia World Congress Center - Room B405
When: August 28th, 2009

Confirmed Speakers:

Doug Knudsen - Universal Mind
Christian Saylor - Universal Mind
Carl Smith - nGen Works
Jesse Warden
Ben Stucki
David Tucker - Universal Mind
Greg Wilson - Adobe



-
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by FusionLink
-

Re: [ACFUG Discuss] Flash Camp Atlanta Announcement

[Emile Melbourne]

Hey Andrew,

Can you post all the details to the Flash Camp in this email thread.
Such as where to register, registration deadlines additional details.

Thanks
Emile

On Thu, Jul 9, 2009 at 9:45 AM, Andrew Powell  wrote:

> We're trying to keep the cost below $75.  We will be having a morning
> session that is an intro to the Flash Platform covering Flash, Flex, & AIR.
>
> On Jul 8, 2009, at 5:02 PM, Timothy Grice wrote:
>
> What is the cost to attend one of these. I have heard a lot about these
> camps but I am new to Flash and Flex and have never investigated what that
> are all about. I would love to attend.
>
>
>
> --- On *Wed, 7/8/09, Andrew Powell * wrote:
>
>
> From: Andrew Powell 
> Subject: [ACFUG Discuss] Flash Camp Atlanta Announcement
> To: discussion@acfug.org
> Date: Wednesday, July 8, 2009, 4:05 PM
>
> *Flash Camp Atlanta is a full-day event featuring some top industry
> experts on the Adobe Flash Platform from both inside and outside Adobe. Come
> advance your Flex and Flash skills, meet members of the Adobe team and
> network with local companies and fellow developers. Sessions will be geared
> towards developers and designers with little to advanced level of experience
> with Flex and/or ActionScript. There will be plenty of giveaways, raffles
> and swag (and lunch).
>
> Where*:  Georgia World Congress Center - Room B405*When*: August 28th,
> 2009
>
> *Confirmed Speakers:*
>
> Doug Knudsen - Universal Mind
> Christian Saylor - Universal Mind
> Carl Smith - nGen Works
> Jesse Warden
> Ben Stucki
> David Tucker - Universal Mind
> Greg Wilson - Adobe
>
>
>
> -
> To unsubscribe from this list, manage your profile @
> http://www.acfug.org?fa=login.edituserform
>
> For more info, see http://www.acfug.org/mailinglists
> Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> List hosted by FusionLink 
> -
>
>
>

[ACFUG Discuss] Flash Camp ATL Registration Now Open

[Andrew Powell]

http://flashcampatlanta-ACFUG.eventbrite.com

In addition to a great Main Session (9am-5pm) there will also be a  
special Introductory Session (8-9am) for developers who are new to the  
Adobe Flash Platform.  This special session only costs an additional  
$15 (until July 30th and $25 thereafter).  This session will get these  
developers up to speed aspects of the Flash Platform like Adobe Flex,  
AIR, and Flash Builder.



-
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform


For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-

Re: [ACFUG Discuss] Flash Camp Atlanta Announcement

[Andrew Powell]

We're trying to keep the cost below $75.  We will be having a morning  
session that is an intro to the Flash Platform covering Flash, Flex, &  
AIR.


On Jul 8, 2009, at 5:02 PM, Timothy Grice wrote:

What is the cost to attend one of these. I have heard a lot about  
these camps but I am new to Flash and Flex and have never  
investigated what that are all about. I would love to attend.




--- On Wed, 7/8/09, Andrew Powell  wrote:

From: Andrew Powell 
Subject: [ACFUG Discuss] Flash Camp Atlanta Announcement
To: discussion@acfug.org
Date: Wednesday, July 8, 2009, 4:05 PM

Flash Camp Atlanta is a full-day event featuring some top industry  
experts on the Adobe Flash Platform from both inside and outside  
Adobe. Come advance your Flex and Flash skills, meet members of the  
Adobe team and network with local companies and fellow developers.  
Sessions will be geared towards developers and designers with little  
to advanced level of experience with Flex and/or ActionScript. There  
will be plenty of giveaways, raffles and swag (and lunch).


Where:  Georgia World Congress Center - Room B405
When: August 28th, 2009

Confirmed Speakers:

Doug Knudsen - Universal Mind
Christian Saylor - Universal Mind
Carl Smith - nGen Works
Jesse Warden
Ben Stucki
David Tucker - Universal Mind
Greg Wilson - Adobe



-
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by FusionLink
-

Re: [ACFUG Discuss] CF Attacks in the wild

[Steve Drucker]

To paraphrase everyone's favorite movie...

"The needs of the many outweight the needs of the few... Or the one"

And notwithstanding the events of the last week...

"I have been... And always shall be... Your friend"

Regards,
Steve Drucker
Founder
Fig Leaf Software
http://www.figleaf.com
http://training.figleaf.com


On Jul 9, 2009, at 2:44 AM, Josh Adams  wrote:

There are numerous points in this chain where I could now drop in  
and mention the Hotfix that was released today but I think this is  
the best point.  But before it gets lost in the weeds:




As I just posted to my blog at http://blog.joshuaadams.com/index.cfm/2009/7/9/ColdFusion-8-Security-Bulletin-Has-Been-Posted-re-FCKEditor-Security-Vulnerability 
, we (Adobe) have released a Hotfix for the FCKEditor Security  
Vulnerability that has been discussed here in this thread.  Please  
see the accompanying Security Bulletin at http://www.adobe.com/support/security/bulletins/apsb09-09.html 
 for more information.




Okay, now to addressing Steve’s message below:  I hear you.  If you  
haven’t already, take a look at Terry Ryan’s post from Monday at http://www.terrenceryan.com/blog/index.cfm/2009/7/6/Questions-about-the-FCKEditor-Vulnerability-in-ColdFu 
sion.  As explained there, there were some complications here, but u 
ltimately, as Terry says of that process:  “in this case it ended up 
 biting us and you. We now know we should have released the workarou 
nd as soon as we knew about it.”  Sorry that didn’t happen.   
Hopefully we’ll learn from this and avoid problems of this type in t 
he future.




Josh



From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Steve  
Drucker

Sent: Thursday, July 02, 2009 7:48 PM
To: discussion@acfug.org
Subject: Re: [ACFUG Discuss] CF Attacks in the wild



Yeah, I just looked at it.

Ugly. Very ugly.

I can't believe Adobe didn't issue an immediate patch.

On Thu, Jul 2, 2009 at 7:41 PM, Howard Fore   
wrote:


Yes not older. In fact, an 8.0.1 installation is more vulnerable  
than 8.0.0 due to a change at line 29 of CFIDE\


scripts\ajaxFCKeditor\editor\filemanager\connectors\cfm\config.cfm


--
Howard Fore, howard.f...@hofo.com
"The worthwhile problems are the ones you can really solve or help  
solve, the ones you can really contribute something to. ... No  
problem is too small or too trivial if we can really do something  
about it." - Richard P. Feynman





On Thu, Jul 2, 2009 at 6:51 PM, John Mason   
wrote:


Just a bit goofy writing in that article but this involves the  
richtext feature that was introduced in CF 8. So not older version  
at all.


John






Charlie Arehart wrote:

I'm curious about their phrasing of "older installations of Cold  
Fusion

applications" and FCKEditor. It was only included as of CF8 (codenamed
scorpio, as mentioned in this news from the fckeditor folks:
http://www.fckeditor.net/Adobe_to_embed_FCKeditor_in_ColdFusion). So  
it's

too bad that the opening lines suggest it affects only "older
installations".
Also, FWIW, this blog entry by an Adobe engineer
(http://www.rakshith.net/blog/?p=41), from 2007, says specifically  
that the
file upload feature in FCKEditor was disabled by default in CF8, so  
it would

seem only those who enabled that who would have the issue.
Not diminishing the concern. Just saying the info shared by the  
seems rather
incomplete, and potentially confusing. But as someone already added  
as a
comment there, perhaps the real issue is the cffile upload aspect,  
and they

point readers to Pete F's recent blog entry on that.

/charlie




-Original Message-
From: ad...@acfug.org [mailto:ad...@acfug.org] On Behalf Of Dean H.
Saxe
Sent: Thursday, July 02, 2009 5:14 PM
To: discussion@acfug.org
Subject: [ACFUG Discuss] CF Attacks in the wild

FYI http://bit.ly/dUdvv

"There have been a high number of Cold Fusion web sites being
compromised in last 24 hours. We received several e-mails about this.

It appears that the attackers are exploiting web sites which have
older installations of some Cold Fusion applications. These
applications have vulnerable installations of FCKEditor, which is a
very popular HTML text editor, or CKFinder, which is an Ajax file
manager. The vulnerable installations allow the attackers to upload
ASP or Cold Fusion shells which further allow them to take complete
control over the server."

I have known about this for a few months now, but had to be silent on
it.  Adobe hasn't patched it (yet) but the attacks are in the wild...

-dhs

Dean H. Saxe, CISSP, CEH
d...@fullfrontalnerdity.com
"If liberty means anything at all, it means the right to tell people
what they do not want to hear."
-- George Orwell, 1945





-
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http