r Macdonald: Google TV is $300. Enough said. DOA.
- Robert Scoble
Until Super Symmetry pops out of Geneva I won't believe there are 11 dimensions
- Stephen Pickering
Mason was using the Gillmor silence technique at D9
- Kevin Marks
Robert, want to comment on the exceptional reaction to your Quora question: Which tech startups currently (June 2011) need and deserve angel funding?
- r Macdonald
Sure! I loved it. Lots of startups are struggling for attention.
- Robert Scoble
Apple's up 34x since I sold mine at $10
- Kevin Marks
Ouch, Kevin. I know. I bought Baidu a few years ago after making 50% and since then it's gone up 1500%
- Stephen Pickering
Showing up late - is the stream on? I am timing out on building43.com
- Richard
Kevin, Tantek: Do you see a difference between how Schema.org was developed versus how Bradfitz & BSlatkin defined the initial version of (edit) PubSubHubbub? I don't.
- Darren
the difference is that PuSH welcomed development and discussion, and schema.org explictly excludes that
- Kevin Marks
"Google, Bing and Yahoo! are managing schema.org on an ongoing basis. As appropriate, we invite participation from major consumers and producers of structured data on the web."
- Kevin Marks
Open standards move slowly. If you want to compete with Facebook and closed systems you need more agility. I think schema.org was a good move to get something out there that implementors can use and the community can evolve.
- Darren
#SaturdayFF 10 months and I am still grieving, but it has changed. Easier in many ways, harder in some others, a change is the best way to put it. I miss her terribly but am able to remember and smile without tears each time now. Some may not get this. I apologize. I felt the need to say it. also: #suckitlupus
Again, much thanks to friends here and elsewhere (mostly here) for helping me through. Those thinking they didn't do anything: you have.
- Michael W. May
"After a gradual decline from 1990 to 2004, a new study published online in Birth: Issues in Perinatal Care finds that United States births occurring at home increased by 20 percent between 2004 and 2008."
- Shevonne
from Bookmarklet
"A possible landmark ruling in one of the mass-BitTorrent lawsuits in the US may spell the end of the 'pay-up-or-else-schemes' that have targeted over 100,000 Internet users in the last year. District Court Judge Harold Baker has denied a copyright holder the right to subpoena the ISPs of alleged copyright infringers, because an IP-address does not equal a person. Among other things, Judge Baker cited a recent child porn case where the US authorities raided the wrong people, because the real offenders were piggybacking on their Wi-Fi connections.
- Leo Laporte
Shocker, The Serpent and the Rainbow, Red Eye, Swamp Thing, Deadly Friend, Music of the Heart (honestly, Wes Craven's whole filmography may apply)
- Rob H.
Willy Wonka & The Chocolate Factory -- although the more I think about it, the more it sounds like a euphemism for some other biological act.
- Victor Ganata
I was totally gonna read this thread til I saw the expando link that said '350 more comments'. I'm just going to take it on faith that 'Deuce Bigalow' is already in there somewhere.
- Kevin Fox
Alex, just saw your 7 brother comments, so your family must have stronger Y genes, so to speak, as men determine the sex, as all eggs are X as you probably know. So 7 brides for 7 brothers just popped in to my head now! Soooorrrry! :-P
- Halil
Sign Babies President Nancy Cadjan shares the most useful signs to teach your baby, as well as tips to get started
- Kelly W.
from Bookmarklet
We used Baby signs when Nate was a baby, about 20 words or so; it was very helpful for communicating early on. I still find myself doing some of the signs to him in loud rooms or when he's at a distance.
- Kelly W.
Spam is being posted to FriendFeed via what I suspect is a buggy Firefox extension. If you found yourself logged in to FriendFeed as someone else, this is probably the cause. If security is a concern for you, I would avoid extensions. See http://www.net-security.org/secworl... for more info on extension security.
From http://www.net-security.org/secworl...: "Mozilla doesn't have a security model for extensions and Firefox fully trusts the code of the extensions. There are no security boundaries between extensions and, to make things even worse, an extension can silently modify another extension. Any Mozilla application with the extension system is vulnerable to same type of issues. Extensions vulnerabilities are platform independent, and can result in full system compromise. The researchers believe that the weakest link in the chain is the human factor. Many add-on developers do it for a hobby and are not necessarily aware of how dangerous a vulnerable extension can be. The extension reviewers don't need to have great knowledge about Web application security and follow guidelines on finding malicious extensions. This means vulnerable extensions can easily slip through."
- Paul Buchheit
Thanks for the quick response on this. I'll stick to the https:// and kill a few plugins I'm not using. If it comes down to it, I'll go to Safari. Hopefully not!
- Courtney Engle
You would think that after all the bitching about how MSIE is so insecure because of its non-sandboxed extensions that the Mozilla people would have made a secure extension facility. Apparently not.
- Gabe
Gabe, the cross-extension hole is a *head-desk*. But isn't the fundamental problem closely related to MS Office macro risk? (blast to the past: http://www.securityfocus.com/infocus... ). Microsoft rose the ranks with end-users on features first, security later. I'm just thinking out loud. Thoughts?
- Micah
Micah: The fundamental problem is that it's just hard to design systems (computer and otherwise) that are both secure and functional. You can excuse MS by saying that they were implementing features and didn't care about security. But what's Mozilla's excuse? They wrote their whole system after already knowing that non-sandboxed extensions are a massive security hole. The answer, of course, is that it's nearly impossible to sandbox extensions.
- Gabe
Also beware of crude, amateur, incomplete & untested greasemonkey user scripts. This is for all browsers.
- The Real sofarsoShawn
Yes, GreaseMonkey is also another huge security hole.
- Gabe
Interesting (I don't remember this story): http://www.informationweek.com/news... "Earlier this month, the lack of security oversight in the Mozilla Firefox add-on community became apparent when Adblock Plus developer ... criticized [the] creator of the JavaScript-blocking extension NoScript, for altering NoScript to interfere with Adblock Plus."
- Micah
Is bookmarklet a potential security concern too?
- Ashish
from iPhone
what about extensions developed on mozdev?
- LōrÐ ҒarhaÐ
I thought 3.6.x was supposed to fix some of this stuff? As far as greasemonkey goes, though, I'd rather have insecurity and greasemonkey than security and no greasemonkey. It's the only thing that keeps me sane on the web today.
- Mr. Gunn
Just as I suspected--buggy Firefox extensions are massive security holes.
- Bernie Goldbach
Glad i no longer use Firefox. Chrome FTW
- Roberto Bonini
ashish, invoking a bookmarklet is equivalent to typing a javascript: URL in your location bar, so yes, you're taking a security risk when you invoke one. Extensions are worse because they are constantly active.
- Bruce Lewis
Roberto: Chrome extensions are going to suffer from the same failings that FireFox extensions are. Doesn't matter what browser you use, if you use amateur code, you expose yourself to risk. (of course, the same holds true for small executable utilities that you run locally too)
- guruvan (Rob Nelson)
I never liked extensions because they increase the browser loading time and make the webpages load slower than without extensions. I used to have google toolbar(Internet explorer 6) but I got annoyed by slow browsing. Since then I have never thought of installing any toolbar or unnecessary extensions. I think most of the security holes in the browsers are related to add ons/extensions as compare to browser themselves. I also tend to avoid bookmarklet for that reason. Can HTML5 help to avoid such problems?
- Ashish
from iPhone
Ashish, unfortunately not, HTML5 is about site rendering, so it can't modify your browser, as that would be an even larger security risk.
- Jimminy, CoG of FF
Chrome extensions run in separate processes; they can't interact with each other; they only interact with the browser through a well-defined API which can be tuned if vulnerabilities are found; they can't even slow down your browsing experience nor chrome's startup time, if your kernel scheduler doesn't suck. None of the above statements hold true for the mozilla platform, AFAICT.
- Giovanni Bajo
Giovanni: don't be fooled into thinking that Chrome plug-ins are secure. They're still native code that gets run in the user's account context.
- Gabe
What Mozilla, Google, Kynetx, etc. all need is a trusted extensions seal and categorization in their directories. Those get manually approved and the seal gets removed if the app is ever found in violation (and the extension risks removal from the directory). I know I've heard Kynetx talk about this before.
- Jesse Stay
How will that help, Jesse? Adobe's plug-ins will obviously be considered trusted, yet it will still be full of exploitable bugs.
- Gabe
Gabe, Adobe has clearly abused that reputation. If a company is trustworthy enough to ensure only non-exploitable extensions are part of its platform users should be able to trust that source.
- Jesse Stay
But let's put this in another perspective. Many of the services you host your data on store your data on systems with exploitable bugs all the time. The problem is you aren't able to know that because you're putting your trust in a closed system that you have no control over. Storing these extensions on your own system at least gives you the control to determine what is good and what is...
more...
- Jesse Stay
Jesse: who do you trust not to put bugs in their code? There's certainly nobody I'd trust to not release buggy code.
- Gabe
Gabe, exactly, and that includes anything produced by Facebook, Google, Twitter, or any other company out there. It's a matter of who is sticking stuff in their code that tracks you and exploits you that I'm more worried about.
- Jesse Stay
I don't understand what you're saying, Jesse. While malicious extensions can be mitigated by running code only from trusted sources, you can't avoid buggy code. All code (particularly written in C/C++) is buggy, and lots of bugs are exploitable.
- Gabe
There is a difference between buggy native code (Adobe plugins) and buggy-JS(+XUL) code. The browser should be able to do something about the second case, whereas the first is a lot more difficult (although doesn't the Google Native Plugin tackle that harder problem somewhat?)
- Nick Lothian
The second case is going to be hard to solve no matter what. Even a Chrome extension could be tricked into executing arbitrary code on FriendFeed to post spam or steal credentials if written improperly.
- Matt M (inactive)
Buggy extensions (JS code) can be limited so the damages are restricted to what can happen in your browser, (but remember that XSS attacks are all just JS). That still means a buggy extension can be tricked into sending out spam. Buggy plug-ins (even running under limited privileges like in Vista or Win7) can be limited so the damages are restricted to what can happen in your [limited]...
more...
- Gabe
This very thing has happened to my friendfeed account. Here's a response from friendfeed: This is a flawed FireFox extension problem. It seems that you have a vulnerable FireFox extension installed and it is being used to post spam to a variety of web sites.
- David
There is a big difference between buggy code on a good extension and perfectly coded trojan extensions. Not everything is something innocent that gets exploited by the bad guys. Some of it is actually written by them and looks really damn nice to the unsuspecting users that install it and use it.
- April
What about the duplicate comments coming in from Google Reader? Is this related?
- Piaw Na
I have always been thinking about this: a Firrefox plugin or extension or addon (.xpi file) is no different from an .exe file. But they cant be scanned with an antivirus like virustotal before Firefox allows installing them. Atleast they need to have all the addons listed on addons.mozilla.org scanned by themselves so people can be sure that they have been scanned.
- TrafficBug
Trafficbug, I'm pretty sure they started scanning them recently, because they yanked a few for having trojans from the addon store.
- Jimminy, CoG of FF
"Lack of the brain chemical serotonin may be crucial to sudden infant death syndrome (SIDS), new research finds. Babies who died of SIDS had significantly lower levels of serotonin -- an important regulator of involuntary functions such as breathing and heart rate -- compared to babies who died of other causes, the study found. This finding may eventually lead to a test that could screen newborns to spot those most vulnerable to SIDS."
- Jenny R
from Bookmarklet
Love these British accents and guys who sound like they're talking in tunnels
- Francine Hardaway
Just what I need. An explosion of data coming into the stream
- Francine Hardaway
Sorry, Robert. I'm typing. Then again, I'm not on the call... didn't realize it was disruptive ;-)
- Ken Sheppardson
I want tweetdeck or seesmic to be a full "real-time" web browser : with all real-time information in there : Twitter, Facebook... etc, but also Gmail, my RSS feeds,... etc
- Julien
Ken, that doesn't mean we can't hear you.
- Cliff Gerrish
Francine: I haven't seen any of that stuff on my stream yet. Probably has a big impact on search.
- Robert Scoble
Cliff: So you can hear the Blue Angels overhead too then?
- Ken Sheppardson
Keep looking, I have 10.01 via iTunes.
- Ken Morley
I know but the live format isnt always convenient from a timing perspective. some of us work! lol
- Jamie
Francine: I use them less and less, usually only for conferences. And even then I hate them.
- Robert Scoble
Oh, and people now spam by putting hashtags on irrelevant tweets
- Francine Hardaway
I need a visual map on how these things work or I can't adapt easily.
- Arnie Klaus
Bored dog just countersurfed in my kitchen, took the top off the crockpot and tried to take out the chicken! Thank goodness a fail!
- Francine Hardaway
Can someone please move the pointer out of the middle of the screen?
- Matthew Schrock
I like Brizzly's take on a wikified hashtag index right inside the client. It's got flaws but it's a good start. Would love to see an "official" hashtag wiki. Then again, Twitter doesn't feel like a wiki-friendly company. More on Brizzly at http://www.louisgray.com/live...
- Daniel J. Pritchett
Laura's not odd -- just far more like everyone else
- Ian McGee
Matthew, we just have to live with it for this show.
- Cliff Gerrish
Robert, I'm curious, are you aware of Cliqset? Some of the issues you've brought up are problems we're very interested and about to help solve.
- Darren
Yeah, I'm barely aware of Cliqset, I will be interested in trying that out. Probably this weekend.
- Robert Scoble
looks like we need a standard for these activities in a stream... oh wait there's one! What we need is an easy wait to be a "source" with existing clients (ie. making seesmic/tweedeck activity stream clients for many services, not just twitter/facebook)
- Sylvain Carle
Creating a simple and effective way for a social media publishing workflow (avoiding duplication) is very difficult at the moment.
- Mark Krynsky
Yea, the came in the client... but never further than that : Mosaic would have never been the web browser if it couldn't browse any website : http://blog.superfeedr.com/Real-ti...
- Julien
"Privacy" means "multi groups" while "public" means "one group", no ?
- Baptiste Cadiou
Just signing into Cliqset to see if it solves anything
- Francine Hardaway
Public means multiple scale free microcommunities.
- Cliff Gerrish
Public = you determine whether or not you're a member, Private = I do.
- Ken Sheppardson
Agree with Mark K - GR does a good job, feedly is a fine app which also provides suggestions.
- Dave Martin
I wrote about Twitter Times yesterday which Kevin just mentioned http://lifestreamblog.com/custom-... It's a great way to filter Twitter links by the people you follow on Twitter.
- Mark Krynsky
Well, it shouldn't have to be just your friends... I'd like to see some sort of wizard that let you build up groups, e.g. "Create a group of all the peole my friends follow, and show me trending topics among those people"
- Ken Sheppardson
Ken, if Twitter rolls out lists soon and allows that data to be passed to the API Twitter Times could leverage that automatically.
- Mark Krynsky
I want to see the principal that Twitter Times has released to be created on a wider scale. Imagine that logic expanded across multiple social media services and the people you follow on each of them. Then mash the data across all of them. It become far more interesting and useful at that point.
- Mark Krynsky
Kevin, TwitterTimes looks like something actually useful.
- Francine Hardaway
"A new magnificent 800-million-pixel panorama of the entire sky has been unveiled online today. It was stitched together from 1,200 photos by astronomers at the European Southern Observatory from viewing sites in Chile."
- Benjamin Golub
from Bookmarklet
You're not going to see anything like this in the Northern Hemisphere. This is only the night sky for those south of the equator. But it is cool.
- Nina Jansen
hmmm didn't supply a link in the article! Ahh its the Daily Mail, to explain to non-UK-ites, the Daily Mail is the UK equivalent of Fox News.
- Toby Graham
Wondering about hosting for Tornado, Bret Taylor says you might need your own box. If only there were a hosting co. that focused on the real-time web.
- Cliff Gerrish
Bret said you could use EC2, but you will need more than the cgi access most PHP hosts give you - effectively need to run as root to have the python process listening on port 80.
- Kevin Marks
It's interesting to see a framework (Tornado) that takes the changed landscape of internet identity into account - bundles of identities.
- Cliff Gerrish
Well, it could do more there - talking with Bret they don't actually bind them themselves, but by building in support for multiple versions that is useful
- Kevin Marks
Seems like it's the first step in that direction. Now that Tornado has been open sourced, there's a path.
- Cliff Gerrish
Cliff: EC2 is nice, but expensive for a sandbox ($72 / month). Rackspace Cloud has 256 meg virtual servers that are about $11 / month. Great deal if you ask me. I had Tornado running in about 30 seconds on my RC VPS. The ability to programmatically clone servers with their API makes it a really nice place to launch something like a Tornado async app which could makes use of many low cost, low powered servers for dedicated connections.
- Derek Gathright
Steve its great to see Gilmor Gang up and running!
- earl wallace
I'm going to have to catch the rest of this on replay. Issues w/kid overriding attention stream right now. Hope we get this under control soon.
- Karoli
"Just six months ago, Robbie and Susan Goodrich of Marquette, Mich., were expecting their second child. Now Robbie Goodrich is the single father of two young children as he mourns the death of his wife while some two dozen women visit his house in shifts to breast-feed his infant son."
- Rochelle
from Bookmarklet