KarlKopp.com

Was logging on to my AFL Dreamteam site last night (http://afl.virtualsports.com.au), and noticed that the username and password are passed as clear text in the query string! Easily picked up in any proxies / reverse proxies as well as browser histories! Given the competition has prizes, I'm sure there is a duty of care the the AFL or Telstra (their online service provider) have to protect this information. The technology to do so has existed since Feb 1995!!

I'm also sure that the body responsible for giving out permits needs a confirmation of data security and integrity completed as well. The AFL surely fail in this regard!

PS - the links to Dreamteam don't even work on the front page of the AFL.com.au we site.

Been a fan of WordPress for a while now, and eventually managed to get a day off and create a new site for Ducale Coffee. Check it out, keen to get any feedback from the WP pro's :)

I am surprised it wasn't there from day 0, but Google has eventually added email support to Google Sync - the Exchange ActiveSync compatible syncing framework.

One gotcha - you need to enable it in the settings of your iPhone. Go to Settings, Mail Contacts Calendars, and select the Google Sync profile to enable Mail. Previously mail could only be synced using a separate, non-push enabled profile. Very nice :)

Was sent this useful site this morning by Mark, the Next Digital DM&M Director and thought I would share:

http://browsershots.org

It a great way to get a bunch of screenshot of different operating systems and browser combinations. We have a large test team, but this is a nice, quick way to test on far more platforms than we have access too :)

Nuff Ced!