How to use this Page

The WorldCat Search API has been enhanced, so that now library developers can build apps that show only their library's results. I know from talking with the product manager and being at the Hackathon and Mashathon that LOTS of people have been eager to see this feature go in. Read all about it over on the Developer Network blog.

The BIG news is that there is a new WorldCat API coming, called the WorldCat Basic API. One awesome thing about it, is that it will be accessible and available to anyone and everyone for noncommercial use.

Did you read that right?
Everyone will have the chance to include library results in their apps? Anyone? Even me?
Yes, I am pleased to report that WorldCat API access is becoming more like the Hard Rock Cafe: Love all, Serve all.

I'll let you know when the WorldCat Basic API is available. For now, if they haven't already requested it, have your developers request a WorldCat Search API key if you're a qualifying library.

A few of us are gearing up for Code4Lib 2009 in Providence, RI next week. Very fun. I am going to be at the OCLC Grid Services Boot Camp, to learn, take photos and I hope take a few videos as well. Promises to be a good time, given the list of attendees. Wish I could stay for the whole conference, but someone has to mind the store (as they say).

As a techhead warm-up and the start of a continuing series of somewhat random but helpful tidbits, I was chatting with one of the security officers at OCLC and he compiled a list of tips for surviving a network attack. I'll give these to you in bite-sized pieces.

Here's the first one:

Reduce the likelihood of an attack.

Like campers who tie their food up in trees to keep bears away, you’ll want to make sure you don’t have any enticing tidbits for Internet attackers.

Here are a few key findings to look out for:

* Unpatched systems: Attackers wanting an easy target will look for systems that are behind in updates.
* Open web proxies: Misconfigured proxies can attract a lot of traffic because they may allow remote users to get around firewall restrictions or to get unauthorized free access to resources.
* Cross-site scripting vulnerabilities: Cross-site scripting (XSS) is a type of web application vulnerability where an attacker can use your web pages to attack other users.

Stay a step ahead of the attackers and identify these and other weaknesses in your systems with a vulnerability scanner like Nessus. Nessus is a very powerful and potentially dangerous tool, so make sure that you have the proper authorization, that you have familiarized yourself with how it works, and that you choose your targets carefully.