Re: [fossil-users] Removing the need for anonymous login...

2011-02-19 Thread Zed A. Shaw
On Sat, Feb 19, 2011 at 11:13:30AM -0500, Ron Wilson wrote: > Out of curiosity, wouldn't bots be able to use the onClick JS on the > login page to automatically fill-in the captcha the same way people > do? It's possible, but not probable. I could write bots made with Selenium or Watir and such t

Re: [fossil-users] Removing the need for anonymous login...

2011-02-19 Thread Kevin Kenny
On 02/19/2011 11:21 AM, Richard Hipp wrote: > Out of curiosity, wouldn't bots be able to use the onClick JS on the > login page to automatically fill-in the captcha the same way people > do? > > > They could, but that have not been observed to do so. > > Perhaps the thing to do (for un

Re: [fossil-users] Removing the need for anonymous login...

2011-02-19 Thread Richard Hipp
On Sat, Feb 19, 2011 at 11:13 AM, Ron Wilson wrote: > On Sat, Feb 19, 2011 at 6:23 AM, Remigiusz Modrzejewski > wrote: > > > > On Feb 19, 2011, at 11:15 , Stephan Beal wrote: > > > >> i no longer believe that all bots are unaware of JS, though. In > particular, > >> now that google has their own

Re: [fossil-users] Removing the need for anonymous login...

2011-02-19 Thread Ron Wilson
On Sat, Feb 19, 2011 at 6:23 AM, Remigiusz Modrzejewski wrote: > > On Feb 19, 2011, at 11:15 , Stephan Beal wrote: > >> i no longer believe that all bots are unaware of JS, though. In particular, >> now that google has their own js engine, i suspect that their crawlers can >> (or will soon be able

Re: [fossil-users] Removing the need for anonymous login...

2011-02-19 Thread Remigiusz Modrzejewski
On Feb 17, 2011, at 16:03 , Richard Hipp wrote: > Another idea might be to add a "cheap history" capability that grants access > to timelines and wiki pages, but does not show hyperlinks for expensive > operations such as downloading ZIP Archives or computing large diffs. Then, > users could ena

Re: [fossil-users] Removing the need for anonymous login...

2011-02-19 Thread Remigiusz Modrzejewski
On Feb 19, 2011, at 12:23 , Remigiusz Modrzejewski wrote: > On Feb 19, 2011, at 11:15 , Stephan Beal wrote: > >> i no longer believe that all bots are unaware of JS, though. In particular, >> now that google has their own js engine, i suspect that their crawlers can >> (or will soon be able to)

[fossil-users] fossil backend for zsh vcs_info...

2011-02-19 Thread Mike Meyer
Any other zsh users out there? If so I couldn't find a fossil backend for the vcs_info facilities in zsh (an API to extract info from various vcs's to display in your prompt), so I wrote one. No archives yet, but it's available from a chiselap repo at: https://chiselapp.com/user/mwm/reposito

Re: [fossil-users] Removing the need for anonymous login...

2011-02-19 Thread Remigiusz Modrzejewski
On Feb 19, 2011, at 11:15 , Stephan Beal wrote: > i no longer believe that all bots are unaware of JS, though. In particular, > now that google has their own js engine, i suspect that their crawlers can > (or will soon be able to) understand js. They actually are fully js capable now. As fully A

Re: [fossil-users] Removing the need for anonymous login...

2011-02-19 Thread Stephan Beal
On Thu, Feb 17, 2011 at 7:10 PM, Richard Hipp wrote: > Or what if the href= component of hyperlinks was mangled in some way (for > user "nobody") but then some javascript is run after the page loads to > unmangle the hyperlinks. Would that work? > > That would be trivial to do: generate links wi