Friday, November 30, 2007

Strange WHOIS from Lithuania's registrar

Here's an odd WHOIS record from Lithuania:


$ whois -h whois.domreg.lt nic.lt
[Querying whois.domreg.lt]
[whois.domreg.lt]
% Hello, this is the DOMREG whois service.
...
%
Domain: nic.lt
Status: registered
Registered: 2002-01-08


Everything looks normal enough until we get to the "Contact organization" field:


Contact organization: <script>alert('Cia galetu buti nepageidaujama programa \n This could be dangerous program');</script>


Someone put a line of Javascript where the name of the contact organization is supposed to be. Thus, when you do a web-based whois lookup for this domain you are greeted with a scary looking message suggesting there may be danger is your WHOIS lookup.

There appears to be no danger, and perhaps this "warning" was placed as a gag of some sort. But it makes me wonder if WHOIS records are filtered for malware or other bad content. I can imagine rogue domain name owners putting a Javascript src link in their contact info and waiting for someone to bite.

UPDATE:
I changed the code under my WHOIS lookup to prevent script execution. So you will see no scary popup message. To see the problem in action, check this domain name at uwhois

Tuesday, November 27, 2007

My Response to Shoeboxed.com

Someone at Shoeboxed.com has written the strangest review of My Receipts.

I attempted to respond to the Shoeboxed article on their site using the "Comments" feature on their blog, but I guess my comment was not approved.

Shoeboxed is one of many companies offering receipt management solutions. NeatReceipts is probably the best known maker of this type of product, though it differs from Shoeboxed in many ways.

With no disrespect to either NeatReceipts of Shoeboxed, I have no use for such a service. This is why the Shoeboxed article about My Receipts is so strange. It seems to portray me as a competitor or unworthy participant in the world of receipts management.

I would think that even a casual glance at My Receipts would reveal that the project is not an effort to organize or catalog my expenses. For lack of a less pretentious description I guess we could call it an art project.

My reasons for continuing the receipts project all these years are mine and mine alone. I feel no need to explain myself. I have avoided any public explanation partly because people do "get it," but also because I believe artists' attempts to voluntarily explain themselves is usually self-serving.

At any rate, if a casual glance at My Receipts does not convey the spirit of the project then a not-so-casual glance at the rest of my web sites might reveal a few clues: Randomness, as I have said many time and in many places, is everything to me. Without randomness and without chaos of ideas there is nothing.

I take issue with Shoeboxed.com's assertion that My Receipts site makes "a strong case for the existence of a site such as Shoeboxed."

This statement lacks merit as my site exists for reasons entirely different from those of Shoeboxed. Using me as an example does not validate their business plan or accomplish anything productive, and I can not help but be a little piqued at being laid out to dry in this preposterously misguided manner.

Someone at Shoeboxed claims:


"... the security and organization are lacking with Thomas’ method."


This is, simply, like comparing apples to oranges. "Security" has a different meaning in the context of my project, and is a marginal priority. "Organization" was, is, and never will be part of the spirit of this project.


"At the same time, with a personal and secure account, Thomas would not have to put all his receipts on display to everyone."


I do not "have to put all [my] receipts on display to everyone." There is no compromise occurring here. In fact that statement in particular is so puzzling to me that I will not attempt a meaningful comment.


"Shoeboxed can work for him ..."


No. It can not.

Read the whole review here and make up your own mind about My Receipts.