Security Concerns Paramount After Early Reviews of Diaspora Code

Stoobalou writes with this excerpt from Thinq.co.uk: "Following the release of the source code for the Diaspora social networking platform, hackers and tinkerers the world over have been poring over the code in order to improve, enhance, and otherwise help the project in its attempt to unsettle Facebook. Sadly, the current opinion is that the code just isn't up to scratch. While the team clearly stated that 'we know there are security holes and bugs' in the code that was released, it's possible that they weren't aware of just how many show-stopping issues there are — issues which make it hard to recommend that you roll your own Diaspora server just yet."

Re:Freetard fail

[Anonymous Coward]

You're wrong. I'm 99% confident that 2011 will be the year of Diaspora on the desktop.

But how does it compare with the alternatives?

[Linux_ho]

The release of pre-alpha source code for their Diaspora social Website was only a few hours old on Wednesday when hackers began identifying flaws they said could seriously compromise the security of those who used it. Among other things, the mistakes make it possible to hijack accounts, friend users without their permission, and delete their photos.

"The bottom line is currently there is nothing that you cannot do to someone's Diaspora account, absolutely nothing," said Patrick McKenzie, owner of Bingo Card Creator, a software company in Ogaki, Japan.

So in other words, yes, it's a little bit worse than Facebook at this point.

How to clean up the code

[killmenow]

The Diaspora guys should hire Austin Heap.

Re:After how long?

[Posting=!Working]

Yeah, students with no real-world big project experience should all just get jobs with large companies and stop trying to be innovative until they've spent a few years updating comments and doing bugfixes in other people's code.

After all, no one has ever gotten ahead in computers by jumping into a huge project they had no experience in while they were young. They need to wait until they're in their 40's so they have enough experience and then start a small project.

Security problems in pre-Alpha code? The whole project is obviously a failure and should be abandoned. What idiots they are for trying!

Re:Freetard fail

[hierophanta]

article and this comment sponsored by the makers of Facebook: the original and premier stalker tool and dont you forget it

Re:Specialized servers offering ad-free accounts

[plazman30]

So this is going to be a network of server all sending messages back and forth? Wow! Fidonet is back!