Comments on: Is Gravatar Secure to Use? http://blogsecurity.net/reflections/gravatar-secure-to-use Always something worth reading... Fri, 12 Mar 2010 11:09:45 +0000 http://wordpress.org/?v= hourly 1 By: Josh http://blogsecurity.net/reflections/gravatar-secure-to-use/comment-page-1#comment-16697 Josh Mon, 03 Aug 2009 12:59:35 +0000 http://blogsecurity.net/reflections/gravatar-secure-to-use/#comment-16697 <blockquote>Your users have no control over Adsense.</blockquote> Well then who is buying up the adsense advertising? He's right, it's the same thing. I can go buy adsense ads if i want and put the content that I want in them. Now, Google probably scans the ads to a certain degree, but I'm sure there are ads in there that I wouldn't want on my site.

Your users have no control over Adsense.

Well then who is buying up the adsense advertising? He’s right, it’s the same thing. I can go buy adsense ads if i want and put the content that I want in them. Now, Google probably scans the ads to a certain degree, but I’m sure there are ads in there that I wouldn’t want on my site.

]]> By: DK http://blogsecurity.net/reflections/gravatar-secure-to-use/comment-page-1#comment-10975 DK Thu, 01 May 2008 23:06:13 +0000 http://blogsecurity.net/reflections/gravatar-secure-to-use/#comment-10975 Joseph, you could change your image now couldn't you? My point is that every approved comment gives that commenter a degree of control over that page on your website. Your users have no control over Adsense. However, I do get your point about trusting third party code in general. Thanks. Joseph, you could change your image now couldn’t you? My point is that every approved comment gives that commenter a degree of control over that page on your website. Your users have no control over Adsense.

However, I do get your point about trusting third party code in general.

Thanks.

]]> By: Joseph Scott http://blogsecurity.net/reflections/gravatar-secure-to-use/comment-page-1#comment-10972 Joseph Scott Thu, 01 May 2008 16:01:54 +0000 http://blogsecurity.net/reflections/gravatar-secure-to-use/#comment-10972 Gravatar only involves your site and Gravatar, so I'm not sure what your point was there. Google AdSense (just like Gravatar) gives Google a place to potentially "deface" your site as well. My point is that using third party code (images/Javascript) is an open door to your site, so there is a degree of trust involved. If Google or Gravatar were broken into, they could easily deface the sites they are used on. This issue isn't limited to just Google or Gravatar, but to the concept of using third party code on your site in the first place. I'm not suggesting people never use third party code, just that this isn't a Gravatar specific issue. Gravatar only involves your site and Gravatar, so I’m not sure what your point was there.

Google AdSense (just like Gravatar) gives Google a place to potentially “deface” your site as well.

My point is that using third party code (images/Javascript) is an open door to your site, so there is a degree of trust involved. If Google or Gravatar were broken into, they could easily deface the sites they are used on. This issue isn’t limited to just Google or Gravatar, but to the concept of using third party code on your site in the first place.

I’m not suggesting people never use third party code, just that this isn’t a Gravatar specific issue.

]]> By: DK http://blogsecurity.net/reflections/gravatar-secure-to-use/comment-page-1#comment-10903 DK Tue, 29 Apr 2008 19:17:04 +0000 http://blogsecurity.net/reflections/gravatar-secure-to-use/#comment-10903 Joseph, its not the same. Google Adsense only involves your site and Google. Gravatar gives individuals a portion of your site to potentially "deface". I haven't look at MyBlogLog, this may be similar. Thanks. Joseph, its not the same. Google Adsense only involves your site and Google. Gravatar gives individuals a portion of your site to potentially “deface”.

I haven’t look at MyBlogLog, this may be similar.

Thanks.

]]> By: Joseph Scott http://blogsecurity.net/reflections/gravatar-secure-to-use/comment-page-1#comment-10885 Joseph Scott Tue, 29 Apr 2008 17:09:04 +0000 http://blogsecurity.net/reflections/gravatar-secure-to-use/#comment-10885 Some of these issues aren't unique to Gravatar, but stem from including third party code in your site. So the same would true for things like Google AdSense and MyBlogLog. Some of these issues aren’t unique to Gravatar, but stem from including third party code in your site. So the same would true for things like Google AdSense and MyBlogLog.

]]>