Re: Bug#591673: movabletype-plugin-core: zemanta content recommendations on by default?

[Dominic Hargreaves <dom@earth.li>]

On Wed, Aug 04, 2010 at 05:53:17PM +0200, Jozef Kutej wrote:
> It looks to me as that the Zemanta plugin that is suggesting content is sending
> the text of the blog posts to their service. This plugin is *enabled* by default
> and it was activated only via upgrading. While not everyone uses MovableType just
> for public texts I find it really not a good choice and as a security problem
> in a default configuration.

Thanks for pointing this out. It had been mentioned before as a problem
but I hadn't fully appreciated that it was sending the content out.

I think the best thing to do at this stage is probably to split out the
Zemanta plugin into a separate package (with a clear warning about what
it does) in order to avoid the risk of delving into the code and
making configuration changes deviating from upstream at this stage.

Release team, would you approve a new package on this basis?

Thanks,
Dominic.

-- 
Dominic Hargreaves | http://www.larted.org.uk/~dom/
PGP key 5178E2A5 from the.earth.li (keyserver,web,email)