Ann: forums webservices disabled

[Jochem van Dieten]

Adobe announced the following:

A security vulnerability was identified in one of the web service calls. We will be coordinating a patch to address this issue in January once everyone is back from the holiday break. As an interim measure, we will be disabling web services in order to prevent anyone from taking advantage of this security vulnerability. This change goes into effect today shortly after 10pm Pacific time.

This today 10 PM Pacific time is approximately 12 hours ago. As of then all attempts to access the webservices will result in a 403 error for the REST services and a 404 for the SOAP services.

[Phillip_M_Jones]

Jochem:

What does this represent for a lowly user. Does this affects the forums. or is it related to the LiveCycle Sever Acrobat uses  to serve FDF info for acroabt Windows PC Users?

[~graffiti]

And who is Ann?

[John T Smith]

I think that would Ann ouncement (but without the space)

[the_wine_snob]

I think that that refers to Ann Nouncement, who works in shipping, or someplace similar. I see a lot of posts dedicated to her. Maybe she wins the Employee of the Month quite often?

Now, kidding aside, I too would love to know the impact on us, "lowly users," just as Phillip asked. Will this impact the fora, or something much different.

Thanks for that info,

Hunt

[MichaelKazlow]

If you use these fora through a web browser, it should not have any effect.

[Phillip_M_Jones]

Would that affect the email announcements? While other hate the idea of the announcments. I embrace them. I haven't got time to sift through all the post to read what ne today (or when ever).

So I have email announcements turne on. This allow me to scan what will be in post, and I can decide whether I want to view it in the browser and post a message. Its a time saver. If you don't wish to clutter you mail box just delete them when finished.

[the_wine_snob]

If you use these fora through a web browser, it should not have any effect.

Michael,

Thanks for that. I have to admit that 99.9% of the post went over my head, but the fear was still there.

Appreciated,

Hunt

[Jochem van Dieten]

This affects those who use the webservices to access these forums. Not RSS, not email, not the web interface, just the webservices.

[Harbs.]

In other words: Jochem's AIR app will not work until further

notice...

Harbs

[Jochem van Dieten]

Harbs. wrote:

In other words: Jochem's AIR app will not work until further 

notice...

Unless Adobe is doing something internally with the webservices that is probably the biggest victim. There were 2 other people playing around with the webservices, but I don't know how far they got so it might even be the only victim. (At least until Flash Player 10.1 for Android / Windows Mobile is released.)

It is really quite unfortunate that all he security vulnerabilities I find only affect the webservices. Upgrades would happen much more frequently if if they affected the web interface instead

[the_wine_snob]

Jochem,

I appreciate that clarification. Sorry to be so dense.

Thanks,

Hunt

[shunithD]

jochemd wrote:

This affects those who use the webservices to access these forums. Not RSS, not email, not the web interface, just the webservices.

Mmmm... and Michael K wrote: "If you use these fora through a web browser, it should not have any effect."

Interesting.... Mmmm

Edit: Just saw that Jochem said 'web services' not, not web browser...

[Harbs.]

There seems to be a lot of confusion here over very simple concepts...

webservices has nothing at all to do with using a web browser or any

of the standard methods of accessing the forums.

web interface = web browser use.

webservices = AIR App use (or any other local program not using

standard http to get data DIRECTLY from the forum software).

Email and RSS are totally Server provided, and again have nothing to

do with webservices.

Clear now?

Harbs

[the_wine_snob]

Harbs,

Thanks for the additional info.

There seems to be a lot of confusion here over very simple concepts...

Remember, what is simple to many is totally abstract to others. I am definitely one of those others.

I'll just sit back, read this thread, and hope that it does not portend disaster for me - and my lowly little Web browser.

Appreciated,

Hunt

[Harbs.]

Hi Hunt,

My comment was not meant to insult anyone's intelligence. While the

concepts are simple, the terminology can confuse people not familiar

with them.

Web services are services which provide data from the web servers

directly to external applications, bypassing normal (http) transfer

methods. Web browsers do not use web services. They simply request an

http web page (file), and the web server simply feeds it the page.

When a web browser is used, any processing of data is done on the

server side. When web services are used, the data processing is done

on the client side.

If "web services" were called "application services", I think it would

be clear to everyone that it is something specific to serve

specialized applications. The reason it's called "web services"

instead of "application services", is that it's referred to from the

point of view of the application, as opposed to the point of view from

the web server.

Harbs

[shunithD]

Harbs. wrote:

<snipped>

Web services are services which provide data from the web servers 

directly to external applications, bypassing normal (http) transfer 

methods. Web browsers do not use web services. They simply request an 

http web page (file), and the web server simply feeds it the page.

When a web browser is used, any processing of data is done on the 

server side. When web services are used, the data processing is done 

on the client side.

</snipped>

Clearer now...

Thanks...

[Harbs.]

The truth is, my explanation is probably an over-simplification, but

it should do for our purposes...

Harbs

[the_wine_snob]

Harbs,

No insult implied, or taken. I freely admit where my knowledge and expertise end. You helped me relate the terms above to my situation. While I might not understand all of the concepts mentioned, I found out that they do not apply to me. That was all that I needed to know.

Thanks for taking the time to explain. I rested a bit easier after that.

Hunt

[shunithD]

Harbs. wrote:

Clear now?

Not really... A bit more explanation and elucidation would be welcom...

[Jacob Bugge]

What Hunt said. I still have no clue what a webservice is; until somewhere into this thread I thought it was a browser.

Maybe Dense & Denser will be one of the next film titles.

[Harbs.]

http://en.wikipedia.org/wiki/Web_service

In plain English: It's the API which allows accessing the forums

through an external application.

Harbs

http://www.in-tools.com

Innovations in Automation

[the_wine_snob]

Maybe Dense & Denser will be one of the next film titles.

Can I have the part of Denser? I'll have my agent contact your people. Maybe we can do lunch and talk over the script.

I greatly appreciate the details. First, fear gripped my heart. Then Phillip (who knows almost everything) asked, and the fear grew. Jochem did make me feel so much better, and I do appreciate that. The more I learn, the more I realize that how very much I do not know.

Still, I am breathing much more easily now, thanks to the clarifications.

Hunt

[Phillip_M_Jones]

I flattered by to compliment

(even if it was said as sarcasm). I

knew everything I wouldn't be living in a

rental house built in 1944. And I wouldn't worry about whe

ther I will have enough money from SS

to make it to the end of the month.

(crazy line feeds added dutifully by adobe.forums)

[the_wine_snob]

Phillip,

No sarcasm intended. I always appreciate your insight. You have managed to take some topics, that were totally abstract to me and distill them into terms that even I could understand. For that, I say thanks!

Only a compliment - I assure you.

Hunt