Weekly Blog Round Up

Great stuff as always, Andy, and thanks again. I hadn't seen that one about how easily passwords can be sniffed from popular services. Many on cable modems will also be surprised to learn that they're just as open to clear text sniffing as on a hotspot.

I think he overstates his case, though, with Amazon. The default is to use SSL whenever you log in anywhere on the Amazon site, so it's not fair for him to denigrate them if people choose to use the non-SSL link.

Lastly, though, I did find it interesting that the Amazon login stream referred to Flex. I have a hard time believing that has anything to do with Adobe's flex (I see nothing flash-like ever in the Amazon process). If anyone else has more info, I would be interested. :-)

Hey one last thing: if you missed it I did an entry last week on simplifying captchas (and why it can be ok), including the specific code to simply the lyla captcha which underlies BlogCFC. I see your captcha below (awaiting my confirmation) is the default one. If you would care to simplify it (such as to make it more readable and require fewer characters for us commenters to type), check out:

http://www.carehart.org/blog/client/index.cfm/2006...