I guess one needs to know how much control over your Sage installation you have. Are you running a local Sage notebook server, or using something like sagenb.org?In the former case you can do most everything...
--
You received this message because you are subscribed to the Google Groups "sage-edu" group.
To view this discussion on the web visit https://groups.google.com/d/msg/sage-edu/-/S1lnTJPhwskJ.
To post to this group, send email to sage...@googlegroups.com.
To unsubscribe from this group, send email to sage-edu+u...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/sage-edu?hl=en.
TIA,
A. Jorge Garcia
Applied Math and CompSci
http://shadowfaxrant.blogspot.com
http://www.youtube.com/calcpage2009
-----Original Message-----
From: michel paul <mpau...@gmail.com>
To: sage-edu <sage...@googlegroups.com>
Sent: Sun, Feb 5, 2012 1:49 pm
Subject: Re: [sage-edu] Re: how to unshare files that have been shared
with you?
Right, I use various forms of *.sagenb.org. I work in a high school and
have no control whatsoever. : )
On Sun, Feb 5, 2012 at 10:18 AM, dimpase <dim...@gmail.com>
We should have that feature; a big +1. Dan Drake worked a bit on also
using email to confirm account registration. In fact, if email address
is required (a setting in the notebook admin page), a "Forgot password"
link appears at the bottom of the login page (see sage.cs.drake.edu, for
example). I don't know how well it works, though. Of course, as
always, patches are welcome!
Should we require email addresses on sagenb.org?
Jason
--
You received this message because you are subscribed to the Google Groups "sage-edu" group.
To post to this group, send email to sage...@googlegroups.co m.
To unsubscribe from this group, send email to sage-edu+u...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/sage-edu?hl=en.
I will probably have to do that and ban all accounts on
http://sagenb.org that don't have emails. This is because as
sagenb.org gets more popular, it'll get abused by spammers, hackers,
etc. Right now, I'm still OK with leaving things as is, but this is
temporary. Maybe http://sagenb.com (which doesn't exactly exist as a
separate site) will be different.
---
There are "only" 80,264 http://sagenb.org accounts. The number of
accounts grows at a rate of about 100-150/day.
Can't we enable the "Forget password" link anyways, and have it work
when accounts have an email address associated with them, but not
otherwise? Just a thought...
>
> Jason
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "sage-edu" group.
> To post to this group, send email to sage...@googlegroups.com.
> To unsubscribe from this group, send email to
> sage-edu+u...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/sage-edu?hl=en.
>
--
William Stein
Professor of Mathematics
University of Washington
http://wstein.org
I had that same thought. First, we'd have to make sure the Forget
Password link works at all. Then it would be easy to put in a check
like that.
Thanks,
Jason
The number of ways they could right now is truly scary. This will
change. I don't really want to post how on a public list.
-- William
The link is actually called "Forgot password", though I guess it should
have a question mark at the end to make it more clear.
Thanks,
Jason
Jason Grout <> wrote:On 2/6/12 9:28 AM, Andrey Novoseltsev wrote:
> It seems that there is email field in users
> profile, can't it be used to reset the password?
We should have that feature; a big +1. Dan Drake worked a bit on also
using email to confirm account registration. In fact, if email address
is required (a setting in the notebook admin page), a "Forgot password"
link appears at the bottom of the login page (see sage.cs.drake.edu, for
example). I don't know how well it works, though. Of course, as
always, patches are welcome!
Should we require email addresses on sagenb.org?
Jason
Requiring email addresses could be a problem. Many schools block email clients. So, the student would not be able to confirm the email until they got home. Creating accounts the first day of class would be a hassle. It's so easy now. I say leave it the way it is!
I'm seriously considering doing that. Then all issues of password
resets disappear, and I can
assume that any user has an account that has been verified by somebody else.
William
> For
> spammers it'd be more hassle to use.
> On the other hand it would need a list of allowed OpenID providers...
>
> Dima
>
>
>>
>> Thanx,
>> A. Jorge Garcia
>> Applied Math and CompSci
>> http://shadowfaxrant.blogspot.com
>> http://www.youtube.com/calcpage2009
>> Sent via DROID on Verizon Wireless
>
> --
> You received this message because you are subscribed to the Google Groups
> "sage-edu" group.
> To view this discussion on the web visit
> https://groups.google.com/d/msg/sage-edu/-/5pR6avMS-HwJ.
>
> To post to this group, send email to sage...@googlegroups.com.
> To unsubscribe from this group, send email to
> sage-edu+u...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/sage-edu?hl=en.
--
+1.
Right now, we don't have a switch to require only OpenID logins, so we'd
have to do that somehow.
A huge plus of this is that passwords would no longer be transmitted
insecurely, if I understand things correctly.
Jason
That's my understanding as well. It's really awesome.
Are there any other major websites that *require* openid? I wonder
what the drawbacks are?
-- William
>
> Jason
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "sage-edu" group.
>> Right now, we don't have a switch to require only OpenID logins, so we'd
>> have to do that somehow.
>>
>> A huge plus of this is that passwords would no longer be transmitted
>> insecurely, if I understand things correctly.
>
> That's my understanding as well. It's really awesome.
>
> Are there any other major websites that *require* openid? I wonder
> what the drawbacks are?
Well, ask.sagemath.org requires it :).
Stackoverflow is another example. It appears that their "own" login
solution is just their own openid server.
Jason
Thank you!
Andrey
This has been fixed in the new Sage notebook. For example, the list is
not available on *.sagenb.org.
Thanks,
Jason
All you have to do with the new server is check a box in the notebook
settings page to turn on OpenID.
>
> On the other hand, will encrypted authentication and unencrypted work
> have the issue of "connecting to an open session"? As outlined here:
> http://lifehacker.com/5672313/sniff-out-user-credentials-at-wi+fi-hotspots-with-firesheep
Probably. If you want security, then use SSL on your server.
Thanks,
Jason