I have a Greasemonkey script that does this, IMO, very nicely.  I'm not 100% 
sure how GM script distribution works, but can't a server put files in a 
particular directory to have them be automatically suggested for 
installation by Greasemonkey?

I know it's not a perfect or even nice solution, but it might help reduce 
the incentive for this sort of thing.  "Well, you *could* give your login 
credentials to this unafiliated unknown site, or you could just install this 
WMF-endorsed script on your open source Firefox extension..." isn't a very 
difficult decision...

--HM

"Sage Ross" <ragesoss+wikipe...@gmail.com> wrote in message 
news:40c6a93a0907221207l9ab78fcy20635588c5671...@mail.gmail.com...
> I'm not sure what to do about this; it seems like a good idea but a
> major security risk:
>
> http://www.watchlistr.com/ is a site that creates aggregate watchlists
> across multiple projects. See
> http://en.wikipedia.org/w/index.php?title=Wikipedia:Bounty_board#Transwiki_watchlist_tool
>
> The user who made it has very little editing history, and the site
> aggregates watchlists across multiple projects, but requires inputting
> your Wikimedia password into the watchlistr.com site.  I have no
> specific reason to think it's a scam, but if I was trying to phish
> passwords I would do something like this.
>
> -Sage Ross (User:Ragesoss) 



_______________________________________________
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Reply via email to