alixtii: The OTW Logo. Text: "Fandom is My Fandom." (Fandom)
[personal profile] alixtii
The notion of "transformational" versus "affirmative" fandoms found via this metafandom'd post by [personal profile] damned_colonial is really a genius ones. What those two posts only really begin to come to terms with in the comments, though, is just how affirmational much of female-dominated LJ/DW-located media fanfiction fandom really is.

Which isn't a bad thing in and of itself--I'm down with loving things, really--except when it begins functioning as a normative standard. But I remember just how often during the Diana Gabaldon affair and the discussions which followed, how often it was put forward that fanficcers were doing what we do out of love, as if that should matter somehow, and how problematic it was, this implication that it'd be right for us to be ashamed of what we do if we did it--when we do it--out of hate or anger or merely mild interest or simply because we can, that it's only because it's being done out of love that what we do is okay. And I really can't begin to describe just how damaging that seems to me, how pernicious I find the notion that really, fanfiction ought to be celebratory.

(Also how every year everyone angsts so much on whether their remixee for [livejournal.com profile] remixredux will like the remix they write despite being repeatedly told that's not really the point.)

It's helpful, I think, to have names--and names which don't begin with "Cult of," although they do I think they map fairly neatly onto what in years past have been called the Cult of Nice and the Cult of Mean--for these strands of media fandom, because they better help understand the diversity of opinion on some subjects such as the role of warnings, about concrit, or about the appropriateness of writing fanfiction with/out (asking) permission. The affirmational school focuses on privileging authors (including fan authors of fanfic) and their feelings; the transformational school, on open discussion and critique.

If there's any doubt about my own allegience, it's with the latter school, which has a wonderful history of producing such wonderfully rich, "thick" (in the litcrit sense) texts such as [personal profile] helenish's Take Off Clothes as Directed which subverts assumption about the use of BDSM as a fanfic trope, or these stories which do something similar with genderswap tropes, or the hilariously wonderful J2 fic Common Knowledge. (Recs for more fics with fall more on the transformative rather than affirmational side of fandom are totally welcome in the comments.)

These do not really seem to be, insofar as I can tell, particularly gendered phenomenon, no matter how much we might like to wave them off as being such. (It's interesting to look at how our instinctive gendering of the Cult of Mean/Cult of Nice divide and of the Affirmational/Transformative divide are actually completely opposite.)

This seems to me to be linked somehow also to this meme of "Fandom is my fandom": the notion that insofar as (what we have been calling) transformative fandom is affirmational, it's affirmational not of a text or an author but of a community readers who are also authors (and vice versa), a group of online contacts, and perhaps most of all a set of values which promotes dialogue and dicussion, critical response and critique, and, well, transformation.

ETA: For some background/context on the Cult of Nice/Cult of Mean discussions, see this post by [personal profile] synecdochic.

MMAzylsDYec

Date: 2012-07-25 02:23 am (UTC)
From: (Anonymous)
Mike August 22nd, 20113:11 pm@LukeWFrom a UX perspective, these are all ietirnsteng and more user-friendly approaches to traditional login forms. However, some of the examples you list make TERRIBLE security decisions in order to achieve this simplified user experience. Bagcheck & Gowalla are the worst in this regard—they're just begging to be brute force hacked. Here's why:First, both sites tell you if the user you've entered is a valid user. Heck, Bagcheck even SUGGESTS users for you. Strike 1!But a public user name (or real name) is public whether or not there is an auto-suggest feature , you say. The auto-suggest just makes it easier to log in. Sure, and it makes it even easier for others to find out your username since it's all nice and AJAXified (no trial-and-error necessary). With one look at the network inspector, I now have the URL to get your user ID (or whomever's I want): (urls stripped by comment system)Second, both allow a seemingly unlimited number of invalid password attempts without any ReCaptcha or lockout. C'mon, this is web security 101. Strike 2!Finally, both password entry pages are accessible via a simple GET request with the user ID as a query parameter. Strike 3!Bagcheck: (urls stripped by comment system)Gowalla: (urls stripped by comment system)Guess how long it would take someone to write a simple Perl script that takes a list of randomly-generated user IDs and hits the above URLs with a set of common passwords?These issues can be resolved very simply without throwing away your trendy new login flow:(a) Show a ReCaptcha form after X number of failed password attempts(b) Make the password entry page a POST, not a GET request. Ironically, this comes straight from the W3C and your former employer's own security best practices document: developer dot yahoo dot com slash securityI apologize if I came off a bit harsh, but I cannot let insecure practices like these be lauded and spread without educating others about their risks. I hope you understand the severity of these risks and take the necessary steps to protect your users while maintaining your desired UX.Cheers

October 2023

S M T W T F S
1234567
891011121314
15 161718192021
22232425262728
293031    

Most Popular Tags

Page Summary

Style Credit

Expand Cut Tags

No cut tags