spamtrap

About Murder | Configuration Information | Included Plugins | Live Demo

Included Plugins

foaf.rdf

The foaf.rdf plug-in adds support for RDF export of your information to the standard FOAF format

Configuration

There are no plug-in specific configurations for this plug-in.

Limitations

This is an export-only plug-in.

Security Implications

  • This plug-in makes your data publicly visible on the Internet. It could be seen by people or spiders.
  • This plug-in is not suggested if you are actively trying to hide from anyone or are actively protecting your privacy.

History

The foaf.rdf plug-in has been included since version 0.1.

lightopenid

The lightopenid plug-in allows for authentication of external users via OpenID using the lightopenid library. It does not provide a means for local authentication, or for an OpenID provider.

Configuration

There are no plug-in specific configurations for this plug-in.

Limitations

This plug-in does not provide OpenID provider support

Security Implications

  • This plug-in will enable external authentication in murder.
  • This plug-in uses external code which may not have been thoroughly auditted.
  • This plug-in is not suggested if you are actively trying to hide from anyone or are actively protecting your privacy.

History

The lightopenid plug-in has been included since version 0.2.

mailboard

The mailboard plug-in provides an interactive message board on a user's profile page.

Configuration

mailboard uses user-specific configurations inside of USER_BASE (usually $HOME/.murder/). It looks at the following values in the config file located there:

board
The mailbox to use, relative to the user's home directory.
board_mail
The eMail address to publish for replies or messages. This is useful if using filters or mail delivery agents to move messages automatically into the board mailbox.

These values should be enumerated as key=value pairs. board_mail is optional and will default to the user's eMail address. board is required for this plug-in to function.

Limitations

This plug-in does not provide storage and response directly. Because murder requires only limitted permissions, messaging functionality is handled out-of-band, via standard eMail.

At the moment, messages must be stored locally, in a maildir. Plans are scheduled for mbox support and possibly external IMAP.

Prior to v0.3.1 this plug-in did not affect the cache-staleness of the profile page.

Security Implications

  • This plug-in will surface your eMail address, or that specified for messages.
  • This plug-in will make messages in the specified mailbox publicly viewable.
  • This plug-in is not suggested if you are actively trying to hide from anyone or are actively protecting your privacy.

History

The mailboard plug-in has been included since version 0.3.

me.img

The me.img plug-in servers an image and thumbnail for local users if such are provided. It looks for these as me.img and me.thumb inside of USER_BASE (usually $HOME/.murder/).

Configuration

There are no plug-in specific configurations for this plug-in.

Security Implications

  • This plug-in is not suggested if you are actively trying to hide from anyone or are actively protecting your privacy.

History

The me.img plug-in has been included since version 0.1.

pgp.key

The pgp.key plug-in adds support for accessing a PGP key if the user provides one. Currently, it is required for a fully functioning murder system; we hope to fix this in the next release.

Configuration

There are no plug-in specific configurations for this plug-in. This plug-in uses USER_PGPKEY among other variables in the CORE namespace.

Limitations

This is an export-only plug-in.

Security Implications

  • PGP public keys contain personal information such as your name and eMail address. This will be publicly available and could be seen by people or spiders who understand PGP key data.
  • This plug-in is not suggested if you are actively trying to hide from anyone or are actively protecting your privacy.

History

The pgp.key plug-in has been included since version 0.1.

request.add

The request.add plug-in allows for remotely authenticated users to ask that they be added to a local users' known list.

Configuration

There are no plug-in specific configurations for this plug-in.

Limitations

This plug-in does not automatically handle the addition. Because murder requires only limitted permissions, the user will need to manually copy the appropriate lines sent in the eMail to a new file.

This plug-in does not handle authentication itself. A separate plug-in must be installed that provides and authentication mechanism.

Security Implications

  • This plug-in could allow a means for specific eMails to flood a local user.
  • This plug-in is not suggested if you are actively trying to hide from anyone or are actively protecting your privacy.

History

The request.add plug-in has been included since version 0.2.

simplepie

The simplepie plug-in provides a means of automatically publishing headlines to a user's profile by defining syndication (RSS) feeds to use.

Configuration

simplepie uses user-specific configurations inside of USER_BASE (usually $HOME/.murder/). It looks for a list of syndicated feeds to use in the feeds file located there.

Limitations

  • Feeds are fetched at request-time, and cached for a period of time.
  • Prior to v0.3.1, this plug-in did not affect the cache staleness of the profile page.

Security Implications

  • This plug-in relies on the simplepie library which may not have been as thoroughly audited.
  • This plug-in is not suggested if you are actively trying to hide from anyone or are actively protecting your privacy.

History

The simplepie plug-in has been included since version 0.3.

The simplepie also registers as a picture component as of 0.3.1

web

The web plug-in provides a behaviour similar to that of the Apache userdir module.

Configuration

This plug-in uses the WEB component namespace.

INDEX
Index contains a space separated list of file names for which the plug-in should search when the requested URI is a directory. The default values of index default home cover the standard file names most servers use. A suffix may be provided or elided. Note that, as the value is space-delimitted, index files may not contain a space (ASCII 32) character in their file names.

In addition to its own configurations, this plug-in also uses CORE configurations, most notably WEB_DIR which specifies where under a given-user's home directory the Web root will be.

Limitations

  • This plug-in does not understand server-specific configuration files such as Apache httpd's .htaccess.
  • This plug-in does not provide a means of listing a directory's contents automatically.

Security Implications

  • This plug-in does not provide any access control mechanism at the moment. Files that are made publicly readable underneath the public_html directory (or the configured directory) will be visible via a standard Web browser.
  • This plug-in is not suggested if you are actively trying to hide from anyone or are actively protecting your privacy.

History

The web plug-in has been included since version 0.1.

About Murder | Configuration Information | Included Plugins | Live Demo

--