@elena @aral I couldn't resist, so I've wasted my precious time looking at "W Identity" today.

Things are not right.

It is basically a repurposed https://github.com/PeterWaher/IoTGateway

Just look here: https://root.widentity.eu/Settings/Master.md

It has a socks4(?) open on port 1080, some xmpp stuff on 5222 and 5269, another (seemingly broken) version of the website on 8088.

The following pages are accessible without auth:

(found by a simple "egrep -LR 'Privilege:|Login:' * |grep md | grep Root" through the source)

/Settings/PersonalData/LocalDatabase.md
/Settings/PersonalData/LocalSensorsAndDevices.md
/Settings/PersonalData/EventLogs.md
/Settings/PersonalData/NetworkIdentity.md
/Settings/PersonalData/WebPages.md
/Settings/PersonalData/Backups.md
/Settings/Master.md
/Copyright.md
/Starting.md [http response 307]
/Login.md
/Entities.md
/Templates/Repeat.md
/AdminDropdownComponent.md
/Script.md
/AdminDropdown.md
/AlertPopup.md
/Master.md
/PromptPopup.md
/ConfirmPopup.md
/Markdown.md
/Emojis.md
/Smileys.md
/Index.md
/MarkdownEditor.md
/ScriptColors.md
/Master.md

Others pages also exist (no 404), but are only available after login.

Which brings me to the biggest problem of all.

This is an ADMIN interface.

Nobody should ever put an admin interface to an identity management platform on the internet.

#WSocial #Widentity

@elena

Sarcasm is gone, it doesn't exist. Not in this economy. I mean timeline.

@elena

Thanks for clarifying your previous post. I also took it as you were endorsing Wsocial.