Re: bug in derivatives blog-polling scripts?

[Paul Wise <pabs@debian.org>]

Thanks for the report Nick!

Neither of thse IP addresses are the Debian machines that run any part
of the derivatives census code:

pabs@chianamo ~ $ resolveip planet.debian.org
IP address of planet.debian.org is 128.31.0.51
pabs@chianamo ~ $ resolveip stabile.debian.org
IP address of stabile.debian.org is 206.12.19.13
pabs@chianamo ~ $ resolveip alioth.debian.org
IP address of alioth.debian.org is 217.196.43.134

Here is the Planet configuration for SprezzOS:

http://dex.alioth.debian.org/census/SprezzOS/planet-config

It points at this RSS feed:

http://www.sprezzatech.com/rss.xml

That doesn't seem to contain the links.

I notice that the Planet Debian derivatives page contains stuff like
this (for all derivatives):

       <script type="text/javascript">
	  <!--
		 document.write( "<a href=\"#\"
id=\"http://www.sprezzatech.com/blog/0009-a-disquisition-into-the-sadly-slovenly-takeup-of-10gbase-t.html_hide\";
onClick=\"exclude(
'http://www.sprezzatech.com/blog/0009-a-disquisition-into-the-sadly-slovenly-takeup-of-10gbase-t.html'
); hideHosts(); return false;\"><img src=\"common/minus-8.png\"
style=\"border: none;\" title=\"Hide Author\" alt=\"Hide Author\"
height=\"8\" width=\"8\"><\/a> <a href=\"#\"
id=\"http://www.sprezzatech.com/blog/0009-a-disquisition-into-the-sadly-slovenly-takeup-of-10gbase-t.html_show\";
 style=\"display:none;\" onClick=\"show(
'http://www.sprezzatech.com/blog/0009-a-disquisition-into-the-sadly-slovenly-takeup-of-10gbase-t.html'
);  return false;\"><img src=\"common/plus-8.png\" style=\"border:
none;\" title=\"Show Author\" alt=\"Show Author\" height=\"8\"
width=\"8\"><\/a>" );
	  -->
       </script>

So it looks like somehow those id=..._show are getting leaked to a
href somehow. At least in Iceweasel this doesn't happen when clicking
on the +- buttons so I'm not sure what is going on. Do you know which
User-Agent these weird clients are using?

-- 
bye,
pabs

http://wiki.debian.org/PaulWise