Have any of you seen this sort of offer, when looking at third party accessories, and contemplating installation?
Not everybody will note a connection between "EZ Install", and the malicious content.
With some, reputable, third party software, this won't be a problem - there's a lot of reliable third party code that only wants to provide their product, and make the install easy for you, just as claimed. But, it's always a possibility - and you would do well to consider the possibility.
Always install third party code with care. If you're going to have the third party code installed for you, do this with greater care.
If I was going to use an "EZ Install" process, here's how I would protect myself.
If I was really paranoid (no, just a small bit paranoid), I would add a precaution:
What the heck, you should backup the template, anyway! Comparing the two backups is just a small extra step.
It's your blog, and you are responsible for its content, both visual (what the readers see), and non visual (what only you see). It's your decision, too.
You don't do a thing! For Blogger blogs, we offer "EZ Install"! Just give us the blog URL, and an account name and password, sit back, and let us do the work!and maybe later, you're posting in BHF: Something Is Broken
Somebody is posting spam posts on my blog!or
Where did these ads come from? I didn't put them there!or worse yet
Why is my blog deleted? I don't post malicious script!All of these concerns have been noted, in real problem reports, and were caused by real mistakes.
Not everybody will note a connection between "EZ Install", and the malicious content.
With some, reputable, third party software, this won't be a problem - there's a lot of reliable third party code that only wants to provide their product, and make the install easy for you, just as claimed. But, it's always a possibility - and you would do well to consider the possibility.
Always install third party code with care. If you're going to have the third party code installed for you, do this with greater care.
If I was going to use an "EZ Install" process, here's how I would protect myself.
- Setup an "EZ Install" Blogger account, made a member of the blog in question.
- Make my "EZ Install" member an administrator.
- Run the "EZ Install" process, and check out the software carefully.
- When satisfied that the new accessory is working properly, revoke Administrative status of the "EZ Install" member.
If I was really paranoid (no, just a small bit paranoid), I would add a precaution:
- Setup an "EZ Install" Blogger account, made a member of the blog in question.
- Upgrade the "EZ Install" member to administrative status.
- Backup the template.
- Run the "EZ Install" process, and check out the software carefully.
- When satisfied that the new accessory is working properly, revoke Administrative status of the "EZ Install" member.
- Backup the template again.
- Compare the two backup copies, and consider carefully each change.
What the heck, you should backup the template, anyway! Comparing the two backups is just a small extra step.
It's your blog, and you are responsible for its content, both visual (what the readers see), and non visual (what only you see). It's your decision, too.
Comments
Assuming they didn't listen to you, here, they should at least export their "normal/most active" blog often.
Another thing, my brain sends up HUGE RED FLAGS when people start asking about usernames, passwords and becoming admins on the blog.... or being able to "join it" all together.
Guess I'm saying don't trust anyone saying "I'll do it for you" unless you actually know the person... and then still not truest them. That's just me, maybe?
Good thinking. Unfortunately, you can only export comments and posts - and template - separately. We're still waiting for Blogger to give us some ability to export gadgets, and until we have that ability, you're sort of out of luck there.
But such a script doesn't explicitly ask for becoming admin, it typically just asks you to input your current account information, and sit back. It doesn't point out that they are trapping the account name / password. And the sheep, who fall for this, don't think twice.
Hang around BHF: Something Is Broken, and see for yourself.