2020-03-17 Site Update

March 17, 2020, 8:43 a.m. by mkultra329

Due to the early state of this site and its likely consumer, I'll post status updates as security or site functionality moves forward. I also plan to include a "basics" section where the reason behind things can be explained a little more thoroughly. Until then, feel free to comment at the bottom of the page and I'll reply with anything that is unclear. (Note: I apologize for the formatting - I'm currently typing posts right in to the Django admin console due to other development taking priority over a new blog posting page). Today, I moved from the locally ran 'uwsgi' within the pip3 virtual environment to the system wide uwsgi that sets the environment to the same virtual environment location. Also, I modified the form post field values. The model I followed initially set the "From:" address to whatever email you provided and the "To:" email address to mine. This makes sense given that you are sending a message to me, however, if you click that you want an email to be sent to yourself the email appeared to come from you to you. This threw all kinds of warning flags since any basic e-mail provider will notify you that this email is lying to you by saying that you sent it from your email address to your email address. I enjoy the gradual process of walking through the setup and I find the awareness of each layer and its potential vulnerabilities to be much more valuable than throwing up a pre-fab blog framework. And, no offense meant to WordPress since it gives a voice to many people, but I felt dirty the few days that I allowed this blog to exist within its framework. Plus, I received non-stop spam at the same address and form which I can only assume is due to trolling bots looking for WordPress strings on open HTTPS ports. There are a few topics in here that will be explored in further detail later on but the one that I have been itching to write is about favoring simplicity over complexity. I'll leave you with that and a request that you send a message in the provided form. When the posts become something that I feel good about announcing I'll put together the emails and start to let you know when you might expect some valuable info. And as always, if it wasn't assumed from this very post, no mail-chimp processing is planned and certainly no sharing of your information beyond my server and local development machine. Thank you.