Sign in
in
   
"It is the mark of an educated mind to be able to entertain a thought without accepting it."
-Aristotle

About Me

I am a co-founder of Notches, an early stage startup currently based in NYC. We are building a free, open reviews network that anyone can participate in and anyone can build on top of. You can find out more on our official blog.

Read more about my background.

Connect with me on...

Recent Readers

Flickr Photos

 

Warning:

This article is more than 45 days old. Given the speed at which the technology world moves, this post is probably somewhat out of date. Please keep this in mind when reading the post. If this is a tutorial, please check whether you are using the same versions mentioned in the article.

Security implications of MyBlogLog vs. BlogRovr

According to a TechCrunch story, Citibank is putting a warning message up for users of comment and blog tracking services.

citi

As it turns out, there is a known issue with the coComment plug-in and, though I'm not familiar with the service, it sounds like BlogRovr also has a browser extension.

Since I use MyBlogLog here, I want to re-emphasize that this message above doesn't apply to this service. MyBlogLog works by saving a cookie to your machine under the @mybloglog.com domain. When you go to a site that has included the MyBlogLog JavaScript, it can interact with that cookie and know who you are. The MyBlogLog tracking script does have some logic for tracking clicks within an IFRAME (to handle Google AdSense clicks). Since Citibank doesn't include the MyBlogLog script on their page, it doesn't interact with the service. When you're here or on any other blog that uses MyBlogLog, the service doesn't even know you were on the Citibank page much less being able to track what you've done there.

When you're using a JavaScript-based service like MyBlogLog or Intense Debate, the code runs in a sandbox with limited rights. On the other hand, if you're installing a browser extension, it has the ability - by design - to interact with every page you use and completely track your usage and what you type. Obviously, it makes sense to exercise caution in what extensions you install.

Anyway, I just wanted to reassure everyone that these kinds of warnings don't apply to the comment and tracking services I'm using here.

Only published comments... Nov 27 2007, 03:22 PM by Tim

View related posts

No Comments