I’m excited to let everyone know about a brand new Web-based technology (non-webappsec related) Lex Arquette and I have been developing over the last several years – mainly as a late night side project. It’s called Roxer and represents what we believe is the future of Web page design (screen shots). Targeted mostly for novices, where with Roxer anyone can build just about any Web page they want using a Web browser (no plug-ins) and without a single line of code (example sites). Think Visio, MS Word, or OmniGraffle, but extremely simple and completely on Web-based. I also have a page I treat as a personal playground.
Roxer beta-testers are using it primarily for personal and small business sites. The deal is they get free Web space and access to a cool toy - we get great feedback, a chance to quash bugs, and some insights to how people REALLY want to develop Web pages. Later we thought the readers here, even if all infosec related, might be interested and want to get in on the action. So we opened up beta testing to public registration.
Now I know some reading this blog are probably going to try and hack Roxer to pieces. Nah, not you guys. :) Some may expect a 100% secure system since its been written by Web security experts. Fair enough, have at it, not like we can stop you anyway. But let me first say that we’re not perfect programmers (if only). The code is brand new, considered beta, and largely untested by outsiders. Our primary mission was just to make Roxer functional and we’re sure vulnerabilities exist. So if you find something, whether on purpose or accident, let us know and we’ll fix it. Just please don’t break the website. ;)
Other than that, have fun!