<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
xmlns:rawvoice="http://www.rawvoice.com/rawvoiceRssModule/"
	>
<channel>
	<title>Comments on: Kashflow&#039;s security nightmare</title>
	<atom:link href="http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/</link>
	<description></description>
	<lastBuildDate>Thu, 09 Feb 2012 10:01:51 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
	<item>
		<title>By: Dell Product Reviews</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6790</link>
		<dc:creator>Dell Product Reviews</dc:creator>
		<pubDate>Sun, 19 Sep 2010 22:53:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6790</guid>
		<description>&lt;strong&gt;Dell Product Reviews...&lt;/strong&gt;

Great! I can always use some extra money. Or at least ways to makes them. I think these ways you present here Donald, prove that if we dig deep, we can find a lot of skills and resources we posses which we can use to make money. And some people think t...</description>
		<content:encoded><![CDATA[<p><strong>Dell Product Reviews&#8230;</strong></p>
<p>Great! I can always use some extra money. Or at least ways to makes them. I think these ways you present here Donald, prove that if we dig deep, we can find a lot of skills and resources we posses which we can use to make money. And some people think t&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: LTech – Holding Hands in the Move to SaaS</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6789</link>
		<dc:creator>LTech – Holding Hands in the Move to SaaS</dc:creator>
		<pubDate>Fri, 20 Aug 2010 17:54:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6789</guid>
		<description>[...] apps. Interestingly it’s a similar play to that of KashGuard and regular users will remember the epic storm that arose over that particular offering. As an aside I wonder if commenters who lambasted KashFlow [...]</description>
		<content:encoded><![CDATA[<p>[...] apps. Interestingly it’s a similar play to that of KashGuard and regular users will remember the epic storm that arose over that particular offering. As an aside I wonder if commenters who lambasted KashFlow [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: LTech – Holding Hands in the Move to SaaS &#124; CloudAve</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6788</link>
		<dc:creator>LTech – Holding Hands in the Move to SaaS &#124; CloudAve</dc:creator>
		<pubDate>Fri, 20 Nov 2009 06:44:30 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6788</guid>
		<description>[...] apps. Interestingly it’s a similar play to that of KashGuard and regular users will remember the epic storm that arose over that particular offering. As an aside I wonder if commenters who lambasted KashFlow [...]</description>
		<content:encoded><![CDATA[<p>[...] apps. Interestingly it’s a similar play to that of KashGuard and regular users will remember the epic storm that arose over that particular offering. As an aside I wonder if commenters who lambasted KashFlow [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Time for SaaS to grow up &#124; AccMan</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6787</link>
		<dc:creator>Time for SaaS to grow up &#124; AccMan</dc:creator>
		<pubDate>Tue, 13 Oct 2009 08:02:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6787</guid>
		<description>[...] The blow up I had over access controls was really the start of what I hope will be a journey of maturity for the industry. If nothing else it made me realize that what the industry perceives as &#8217;secure&#8217; and what customers perceive are worlds apart. Add in the fact that in recent days we&#8217;ve seen a string of fiascos from some of the most mature companies in the tech space and you just know there&#8217;s a wake up call here &#8211; for everyone. [...]</description>
		<content:encoded><![CDATA[<p>[...] The blow up I had over access controls was really the start of what I hope will be a journey of maturity for the industry. If nothing else it made me realize that what the industry perceives as &#8217;secure&#8217; and what customers perceive are worlds apart. Add in the fact that in recent days we&#8217;ve seen a string of fiascos from some of the most mature companies in the tech space and you just know there&#8217;s a wake up call here &#8211; for everyone. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kashflow wants to sue AccMan: allegedly &#124; AccMan</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6786</link>
		<dc:creator>Kashflow wants to sue AccMan: allegedly &#124; AccMan</dc:creator>
		<pubDate>Fri, 18 Sep 2009 06:55:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6786</guid>
		<description>[...] content with the vigorous debate around my post that Kashflow has a security nightmare it seems the company believes this site has libeled it and damaged its business. Software sales is [...]</description>
		<content:encoded><![CDATA[<p>[...] content with the vigorous debate around my post that Kashflow has a security nightmare it seems the company believes this site has libeled it and damaged its business. Software sales is [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SaaS gets heated. Needlessly. &#124; Sanity with Sage</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6785</link>
		<dc:creator>SaaS gets heated. Needlessly. &#124; Sanity with Sage</dc:creator>
		<pubDate>Sat, 22 Aug 2009 08:47:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6785</guid>
		<description>[...] the issue reported by Dennis Howlett is actually very different, as it is really a feature choice (and yes I do know that security is a [...]</description>
		<content:encoded><![CDATA[<p>[...] the issue reported by Dennis Howlett is actually very different, as it is really a feature choice (and yes I do know that security is a [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Chris Padfield</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6784</link>
		<dc:creator>Chris Padfield</dc:creator>
		<pubDate>Tue, 18 Aug 2009 16:20:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6784</guid>
		<description>This argument seems to be very odd given how simple the situation is.

#1 Kashflow does not have user permissions. This may be a reason for you not to buy the software - is so that&#039;s fine. Clearly lots of people don&#039;t care about this given Kashflow has customers.

#2 Kashflow are aware that this is a feature some people might want. They may add it in the future (as they agree there are reasons for having it) but it is not a priority now. There are features their users want more.

#3 Kashflow has a completly open API so another software company can create any sort of limiting aroud that API if they want. There seems to be a lot of misunderstanding about whan an API is and what it is for from Dennis.

#4 Even should Kashflow add user permissions to their system which I presume they will some day, assuming they keep a full API (which they would be crazy to change) then someone could still build a permission system on top of that API if they want that replaced whatever Kashflow had created.

#5 It seems that Dennis problem with the software has changed a lot from the FUD in the first post to it just being a matter of having to pay extra to someone else for a feature *he* belives should be included. Again, this is the exact eco-system I presume Duane is trying to create around Kashflow.

What a storm in a teapot!

Discloser: I am trying out Kashflow and considering being a customer - but not made my mind up yet.</description>
		<content:encoded><![CDATA[<p>This argument seems to be very odd given how simple the situation is.</p>
<p>#1 Kashflow does not have user permissions. This may be a reason for you not to buy the software &#8211; is so that&#039;s fine. Clearly lots of people don&#039;t care about this given Kashflow has customers.</p>
<p>#2 Kashflow are aware that this is a feature some people might want. They may add it in the future (as they agree there are reasons for having it) but it is not a priority now. There are features their users want more.</p>
<p>#3 Kashflow has a completly open API so another software company can create any sort of limiting aroud that API if they want. There seems to be a lot of misunderstanding about whan an API is and what it is for from Dennis.</p>
<p>#4 Even should Kashflow add user permissions to their system which I presume they will some day, assuming they keep a full API (which they would be crazy to change) then someone could still build a permission system on top of that API if they want that replaced whatever Kashflow had created.</p>
<p>#5 It seems that Dennis problem with the software has changed a lot from the FUD in the first post to it just being a matter of having to pay extra to someone else for a feature *he* belives should be included. Again, this is the exact eco-system I presume Duane is trying to create around Kashflow.</p>
<p>What a storm in a teapot!</p>
<p>Discloser: I am trying out Kashflow and considering being a customer &#8211; but not made my mind up yet.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nibbling Around the Edges – KashGuard for KashFlow &#124; CloudAve</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6783</link>
		<dc:creator>Nibbling Around the Edges – KashGuard for KashFlow &#124; CloudAve</dc:creator>
		<pubDate>Mon, 17 Aug 2009 17:36:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6783</guid>
		<description>[...] - this post seems to have caused something of a storm, to say the least. An AccMan post referencing it has generated a flood of comments, some positive, some negative. It also seems to [...]</description>
		<content:encoded><![CDATA[<p>[...] &#8211; this post seems to have caused something of a storm, to say the least. An AccMan post referencing it has generated a flood of comments, some positive, some negative. It also seems to [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dennis Howlett</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6782</link>
		<dc:creator>Dennis Howlett</dc:creator>
		<pubDate>Mon, 17 Aug 2009 17:11:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6782</guid>
		<description>@M: for the sake of clarity and to be 100% fair on this, the industry is not good at setting standards about these issues. Therefore, vendors often have to make it up as they go along as best they can although there are emerging standards.

However, my concern is, and always has been, that allowing a 3rd party to develop multi-level access as a very specific function, I am incurring an extra cost that should be part of the core offering from the main vendor (I don&#039;t know any other that has a separate charge for this) and in turn the main vendor is creating a problem for itself that exposes a level of risk I believe is unacceptable.

Sunir has written a very good comment in this which I have put out as a separate post.

Despite acknowledging the issue in our call, DJ chooses to argue about it rather than see that all but himself see this as an issue. That&#039;s a great shame because as I&#039;ve said in a few places, this is easy to resolve. Buy the code.</description>
		<content:encoded><![CDATA[<p>@M: for the sake of clarity and to be 100% fair on this, the industry is not good at setting standards about these issues. Therefore, vendors often have to make it up as they go along as best they can although there are emerging standards.</p>
<p>However, my concern is, and always has been, that allowing a 3rd party to develop multi-level access as a very specific function, I am incurring an extra cost that should be part of the core offering from the main vendor (I don&#039;t know any other that has a separate charge for this) and in turn the main vendor is creating a problem for itself that exposes a level of risk I believe is unacceptable.</p>
<p>Sunir has written a very good comment in this which I have put out as a separate post.</p>
<p>Despite acknowledging the issue in our call, DJ chooses to argue about it rather than see that all but himself see this as an issue. That&#039;s a great shame because as I&#039;ve said in a few places, this is easy to resolve. Buy the code.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Emily Coltman</title>
		<link>http://www.accmanpro.com/2009/08/13/kashflows-security-nightmare/comment-page-1/#comment-6781</link>
		<dc:creator>Emily Coltman</dc:creator>
		<pubDate>Mon, 17 Aug 2009 16:39:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.accmanpro.com/?p=5366#comment-6781</guid>
		<description>@David: &quot;For me that ability to collaborate is one of the key advantages of a SaaS approach over good, but stand-alone products like MYOB. It could be the accountant, a business partner, a supplier &#8211; any size of business can benefit from that sort of collaboration.&quot;

I agree, David.

I would say that multi-level permissions are more valuable for a SaaS product even than for a desktop product - because of this.

The accessibility of the data in real time to users such as an accountant is one of the big pluses of SaaS.

So then the questions start cropping up as to which areas different users should be able to see.

Why would a business partner / a supplier need to see the bank reconciliation, which they probably wouldn&#039;t understand if it jumped up and bit them on the nose?

And sometimes it&#039;s useful to limit the areas an end user (business owner) can reach, such as journals.

So I would agree that multi-level user permissions are a big plus in the SaaS world.

If KashFlow are providing them, whether through the system itself or a third party, as an idea that&#039;s good news.

I&#039;m not techie enough to know whether that service is secure having read this.  I don&#039;t understand a lot of the terminology.  But I have a high level of respect for Dennis&#039;s expertise and an amber light from him would probably, like Richard, send me running for the hills.

M</description>
		<content:encoded><![CDATA[<p>@David: &quot;For me that ability to collaborate is one of the key advantages of a SaaS approach over good, but stand-alone products like MYOB. It could be the accountant, a business partner, a supplier &ndash; any size of business can benefit from that sort of collaboration.&quot;</p>
<p>I agree, David.</p>
<p>I would say that multi-level permissions are more valuable for a SaaS product even than for a desktop product &#8211; because of this.</p>
<p>The accessibility of the data in real time to users such as an accountant is one of the big pluses of SaaS.</p>
<p>So then the questions start cropping up as to which areas different users should be able to see.</p>
<p>Why would a business partner / a supplier need to see the bank reconciliation, which they probably wouldn&#039;t understand if it jumped up and bit them on the nose?</p>
<p>And sometimes it&#039;s useful to limit the areas an end user (business owner) can reach, such as journals.</p>
<p>So I would agree that multi-level user permissions are a big plus in the SaaS world.</p>
<p>If KashFlow are providing them, whether through the system itself or a third party, as an idea that&#039;s good news.</p>
<p>I&#039;m not techie enough to know whether that service is secure having read this.  I don&#039;t understand a lot of the terminology.  But I have a high level of respect for Dennis&#039;s expertise and an amber light from him would probably, like Richard, send me running for the hills.</p>
<p>M</p>
]]></content:encoded>
	</item>
</channel>
</rss>

