http://jezlyn.posterous.com I really like using it to feed content to my Wordpress blog and other sites at the same time. It's the only easy way I know of to e-mail posts "to" my Wordpress.com blog.
- Cheryl Jones
from BuddyFeed
Kol - it's great how one FF post can start a little movement. I've used it more today than since I signed up whenever a long time ago. Thanks.
- phil baumann
@phil couldn't you do the embed feature... ? post something to posterous.. and then 'edit' the post and paste the embed? Or maybe simply email it?
- Sean
Phil, click on the 'Share' link of the FF entry, then copy the embed code. Create a new Posterous entry, select HTML mode and paste in the embed code. You'll need to edit the width and height (looks like 500 for width). Then post. :-)
- Kol Tregaskes
Don't forget to tag your posts like this ((tag: posterous, friendfeed)) in the subject line of your emails. That way your posts will be seen easier by all other Posterous users when they use the global posterous search.
- Svartling
Kol, yes I see.. I added it, I guess Twitter does not have anything but javascript and flash widgets.. It doesnt matter, since I autopost to twitter there is a button there..
- David Gross
from email
How do you all add the little twitter and friendfeed images with links to your profiles here on posterous. I don't know the code to do that. :( Help when u can.
- Amani
http://mylescrew.posterous.com/ Right now I'm just testing, the import from Blogger was REALLY easy. I'm trying to "port" BlurbBits (http://ff.im/4tlY2) to make them work better on posterous. The iframe style parameter gets removed, which is different than Blogger (there is *always* something).
- Chris Myles
Amani, the little images for twitter etc you get if you autopost to those sites but you might end up with duplicate posts that way. There is a friendfeed badge you can put in your posterous profile at http://friendfeed.com/embed... use the image format, not javascript.
- David Gross
from email
Check out Wayne Suttons Posterous (he posted his URL in this thread). You see that he has changed some colors. That is a private beta feature that is coming soon to the public.
- Svartling
http://lizasperling.posterous.com/ Thanks - you are making this a very helpful Sunday:) AND for those of you trying to embed other images, etc...I did it in my profie and mash in friendfeed, zemanta, gmail, wisestamp,etc..FUN - happy to help.
- Liza
YOU are a great example of engaging followers and using tools to help us connect in many other ways. THANK YOU.
- Liza
the usual: bigstarlet.posterous.com. I use it as alternative picture posting device to Pixelpipe and also as an alternative to Ping.fm. Thanks for subbing to me there, Kol. :)
- Helen Sventitsky
@koltregaskes, my posterous is at http://alexschleber.posterous.com "Quick Hits Business Mindhacks". Had been using it quite a bit the first 6 months of this year. I'm a big fan of Garry & Sachin, but really wish posterous would hurry up with some of the much needed feature upgrades (skins and/or CSS, Retweet button - just use Tweetmeme, custom sidebar HTML, WYSIWIG bookmarklet, etc.) Seems like they're stalling a bit right now, no?
- Alex Schleber
They have to be careful not to mess with the simplicity of it, though; that's why so many people like it. If they tart it all up, it might as well just be Tumblr. Which already exists.
- Megen
from email
@koltregaskes weird that you're "what's your GReader/Posterous/FB?" entries from the last few days seem to presage in a way what happened today..
- Alex Schleber
Keep 'em coming, I'll add you all later today. :-)
- Kol Tregaskes
Thank God for this thread. I'm going to (slowly) subscribe to all the people I'm subbed to on FF. I have a hunch posterous is going to replace part of the puzzle for me. Thanks Kol.
- Ahsan Ali aka. Slick
I tried a post asking everyone to share their Google Reader shared items link, but I guess I don't have many followers. Maybe you can?
- Mahendra (SkepticGeek)
My url is http://dave6.posterous.com I just tried out the "((nogallery))" feature that lets you post pictures not in gallery format by putting ((nogallery)) in email subject http://dave6.posterous.com/where-d... only problem is that it takes a while to load pictures if not using really high-speed internet.
- David Gross
from email
Well, if you have fixed the hole by upgrading; you should feel a lot safer now. I guess strong user adoption does bring the wrong kind of attention.
- Anindya Chatterjee
Anindya: we're watching. Looks like they haven't gotten back in since the upgrade and some of the other changes we made. Knock on wood.
- Robert Scoble
I'm very tempted to switch to a SixApart install. As a Perl programmer I'd be much more familiar with the backend.
- Jesse Stay
Robert, btw, I'm sure between all your users you can find a backup. I have a bunch via Google Reader I could get to Rackspace to import for you. I'm sure others have even older entries than I have. Let us know if you want help restoring the old scobleizer.com!
- Jesse Stay
robert - i can tell you this - you need to watch it like a hawk - when i thought i was safe - i wasn't - InsideTransit continues to get hit - and I still believe there is some patches and stuff that RS can do as well - the bigger issue is what's on the server - because that's where they put the shells and then they can do whatever they want.
- Allen Stern
Not cool, hopefully things will work out.
- Kim Landwehr
Jesse: luckily it was July and August, when I wasn't doing much blogging. No biggie. Thanks. Allen: yes, Rackspace Cloud has a security team now and they are actively looking at ways to make Wordpress safer for our customers. It really sucks getting hacked. Let me know if you find any other ways to protect the systems.
- Robert Scoble
Robert: Yea getting hacked sucks. My early days with my blog aboutonlinematters.com I got hacked and luckily my ISP had a backup. Since then I have treated my Wordpress blog like any dev site - with a subversion repository and complete backup. But there are days... like today... when I think strongly about a platform like typepad.
- Arthur Coleman
what i have found is locking down the files helps - but you need to ftp into your site and make sure that nothing has been edited or added - in my case, on all my sites, the hackers put files all over that were base64 files - and what they do is include them into WP or they just run them direct - nearly a full shell. i've asked RS to create a way so that i can be notified of any changes to files - they say it's too heavy to run.
- Allen Stern
Robert, I just miss the traffic from your "You are SO Unfollowed!" article. (one of the casualties) ;-)
- Jesse Stay
There's a lot of great info they deleted - I'm a little ticked they would be completely insensitive like that to prove a security flaw. It affected much more than just you.
- Jesse Stay
Jesse: yeah, that's probably the one blog that I miss. It's also the one that got me to notice they deleted a couple of months.
- Robert Scoble
No way "You are SO unfollowed" is out? I loved that one! :-( thanks for the cache Robert
- Sofia @ SoMaFusion
If you have no time to take care of yuors blog, maybe it's better if you choose the pro offer from wordpress.com ( I think scobleizer.com can have the minimum requirement to stay there).
- wolly
wolly: it's not just about time, attacks come from all directions so you've gotta have a holistic approach to security. How many of you regularly change passwords and make sure they are really good ones? (Twitter got broken into not because of hacks, but because they didn't practice good password security).
- Robert Scoble
It saddens me: it is morally reprehensible your hosting company convinced you to switch with the seduction of plugins and customization without emphasizing or handling the increased responsibility of upgrades. Your blog was not unique and not a special target, the worms sweep across millions of blogs indiscriminately and hit whatever is vulnerable. If your host is lax in upgrading, the...
more...
- Matt Mullenweg
that's true :-) I use password very strange and very verylong that I cannot remember and I use a service like clipperz.com to login.
- wolly
wolly, Robert was hosted on WordPress.com for about 4 years -- he was actually the very first VIP. Although there were dozens of security updates to WordPress in that time, his blog never had a problem because it was always up-to-date. He only switched away a few months ago.
- Matt Mullenweg
Ciao Matt :-) I didn't know that, so scoble come back to the light side :)
- wolly
Matt: yup, that's true. I've learned my lesson. Running your own servers are a lot harder than just having them hosted on Wordpress.com.
- Robert Scoble
To be frank, it completely breaks whatever trust I had in Rackspace.
- Matt Mullenweg
But Matt, I've been talking with many blog owners, including at TechCrunch, and they say that Wordpress' updates break their custom plugins. That's why they don't upgrade immediately. So, sounds like Wordpress has a mess on its hands that the hosted version of Wordpress didn't have (I couldn't run a lot of plugins and video embeds and other fun things on the hosted version of Wordpress). So, to blame it on my hoster/employer (Rackspace) exclusively isn't really a good attitude either.
- Robert Scoble
Robert, It happens. We were hacked too. My observations lead me to believe that this summer was the worst in a long time. Its a war and its going to be a war until the attitude towards hackers changes. Let's stop being fascinated in the least bit by how they do it (this goes towards Kevin Mitnick and his supporters- I don't ever want to pay good money to read about your scams on the...
more...
- Melanie Reed
Matt's got a point that with greater power (self-hosting) comes greater responsibility (more need to keep an eye on security), but I think to say that Scoble's blog was not a special target is a bit disingenuous. High-profile sites are always a higher-value target.
- Rachel Luxemburg
Matt: I think you need to really look at all the damage that's being done to a wide range of sites, many of which are NOT hosted at Rackspace, before throwing more barbs. That's bull. Sorry. But I added a link to this conversation to my blog so people could see your point of view.
- Robert Scoble
If a plugin is preventing you from upgrading (did it?) then let's figure out how to fix that plugin. All I can do in WordPress is build in the notices (your blog was asking you to upgrade for months) and the one-click updates for both core and plugins. I agree it's not your (Robert Scoble's) fault because I don't think you made the conscious decision to take on the increased responsibility.
- Matt Mullenweg
Matt: the reputation around the Net is that upgrades on Wordpress break things. This wasn't a Rackspace recommendation. It's also a problem with all upgrades. I've gotten hosed by upgrades elsewhere. Look at all the people upgrading to Snow Leopard who are having things break.
- Robert Scoble
Matt: TechCrunch hasn't upgraded its blog either and it wasn't hosted on Rackspace (at least not until a couple of days ago).
- Robert Scoble
I'm not saying there isn't lots of misinformation around the net, I'm saying "how can I help your blog, please." If it's a plugin preventing you from upgrading, let me know the plugin and we'll fix it even if we didn't write it. That's the beauty of open source.
- Matt Mullenweg
Robert -- Avoiding upgrades because they're annoying to deal with isn't a viable longterm strategy.
- Rachel Luxemburg
they need to take care of Scoble's blog, well for he is a VIP and the smashing they would have would do a lot of damage to your customer base and otherwise, would they reply to an ordinary guy say like me? i think not,well wordpress/automattic is having their tough moments, hope things get well and they get their repute back
- testbeta
Matt - you blaming Rackspace for security vulnerabilities in YOUR software platform is kinda like blaming Dell when a Windows box gets hacked. I think you are being irrational.
- Rob La Gesse
Matt: in my case it was the REPUTATION of Wordpress's upgrades that was keeping me from upgrading. I was waiting to see what other people reported broke. I didn't realize the severity of the security problems. But, I am now upgrading automatically. So I'm fixed. But you still have a reputation problem. Lots of people are reporting things break when they upgrade.
- Robert Scoble
Rob, I'm not blaming them. I'm saying it's the responsibility of any host, of any software, to stay up to date. If there was a SSH vulnerability on Robert's box I would say the same thing. Software updates are inevitable, there is no such thing as bug-free code, so staying up to date is a must.
- Matt Mullenweg
Isn't all this open source code? If it's broken, why not fix it? Doesn't everyone have the responsibility to do that? It's not any one source's fault in that case.
- Jesse Stay
Matt - I agree with you. So make Wordpress upgrades SAFE, automatic AND do some internal validation of plugin code to let users know they may be running something that is potentially insecure.
- Rob La Gesse
Matt, agreed. Not when its turned out as fast as people are yelling for it. People can't have it both ways.
- Melanie Reed
Matt: all Rackspace was providing to me was a Linux host. I was responsible for getting my upgades done on anything I ran on that system. But now we have a team making sure we're following best practices. That is NOT Rackspace's problem, though. That's like blaming Microsoft for a bug in Adobe software.
- Robert Scoble
I never listen to the reputation, I always upgrade as a security upgrade is out, and if a plugin doesn't work or I deactivate it or I fix it. Security is much more important than a plugin and Matt knows how many plugins has my blog (when he looked my backend he was very sad ad he said that it was the first time for him to see so many plugin in a blog :-) ) To have a self host blog it's difficult and time expensive.
- wolly
There are several very useful plugins specifically addressing security issues; and monitoring WP for suspicious activities (both on file and database level). Here are some articles with tips to harden your blog http://bit.ly/sZgh6 (delicious bookmarks). I only install plugins from authors from whom I know that they implement top level php; no breaking of upgrades on my 3 WP blogs has taken place (2.7-2.8-2.8.4)
- Jeroen De Miranda
Yeah, plugin issues are the responsibility of the plugin developer, not Wordpress's. I don't see how this is Wordpress's or Rackspace's fault.
- Jesse Stay
By the way, Matt, Sheamus, over on my comments on my blog, says he has the latest upgrades in place and he's still being broken into. You might help him figure out how the hackers are breaking in still.
- Robert Scoble
Sorry, I was under the impression Rackspace had recommended you move away from WordPress.com and taken responsibility for the system. I was worried about your blog -- I emailed you about this in August but never heard back. It breaks my heart when someone's WordPress gets compromised.
- Matt Mullenweg
I understand the feeling though - if people are still being broken into after being told a fix was made, especially if you're not a developer, that can be a little scary. I'd look to other solutions in that case if it were me, and it's no one's fault. It's just perception and fear, very valid fear.
- Jesse Stay
I do believe there is a false sense of securty that WORDPRESS fosters by hosting plugins. I think many assume that because they download the pluging VIA Wordpress, and FROM Wordpress, it is somehow vetted.
- Rob La Gesse
Matt: no. I wanted to move to my own install of Wordpress so that I could run many more plugins and start doing stuff other professional bloggers were doing. I am learning very quickly just how much work goes on behind the scenes to make sure my words were protected.
- Robert Scoble
Once you've been hacked once if you don't clean up every trace (preferably a systems person does this) it's very likely something is left that allows the spammers to easily break back in, regardless of what version you're on. That's why the trouble with upgrading is worth it, it's much, much less than the trouble of fixing a hacked blog.
- Matt Mullenweg
Jesse: yeah, at Microsoft when a box got broken into they wouldn't let you use it anymore. They forced you to reinstall it with all patches loaded. They assumed that it was compromised and that someone stuck a back door in somewhere. That's a lot of work too.
- Robert Scoble
install either wp-backup or wp-dbmanager and configure database backup: every day; download to your local pc (or to a system other than your hosting provider); run a check once a month to see whether you can reconstruct the blog in case of calamity, That is my procedure; works fine.
- Jeroen De Miranda
if a commoner gets hacked, then he should move to wordpress.com services or what?
- testbeta
they should just make it not have any security holes!
- Mark
Robert, if you like I'd be happy to host your blog for you (and I'm on Rackspace servers). I can keep it secure as well. I'd only ask some mention of SocialToo somewhere (or payment of some form in order to cover the cost of bandwidth).
- Jesse Stay
I would also be able to keep it backed up for you.
- Jesse Stay
So the take away messages are: 1) hosting services like Rackspace support the hardware and OS layer and you're are on your own for everything else, 2) maintaining your own website is difficult work, even for experienced IT professionals, 3) social media experts may not really know how to use the social media tools they are recommending, and 4) while hosted applications like Wordpress.com provide less flexibility, they take less effort and can be more reliable for the average small business.
- Steve Wilhelm
I'll also install any plugins you're interested in trying
- Jesse Stay
Jesse: in my case, I now have a team of the top security guys at Rackspace working on it and making sure my system is up to date and backed up. They also are learning a lot about this and other people who have had problems and are building a list of best practices.
- Robert Scoble
This is eventually why I didn't go with Mosso. The service looks good, but you still have to manage your app yourself which opens you up to problems like you've experienced. It would be cool if they offered another layer of management on top so apps could be completely hands free.
- Todd Hoff
the alternative (i.e. strong vetting of all plugins) would turn the whole WordPress ecosphere into something such as Ning.... only some 300 addons (as far as I know); little flexibility very intransparent how to get your addin accepted .... Not an attractive model for me....
- Jeroen De Miranda
Robert, excellent - just wanted to make sure the offer was out there. Maybe that could be a tiered service for Rackspace, although I'm not sure it's something Rackspace wants to get into. Bluehost barely makes any money off of that type of service.
- Jesse Stay
Steve: I think that's a reasonable set of assumptions. The grass is always greener on the other side of the fence. When I was on Wordpress.com I was always jealous of blogs that were able to run the latest plugins and use the latest embed codes from various sites.
- Robert Scoble
Robert, it's even more fun when you can customize the plugins and themes as a developer. :-)
- Jesse Stay
@testbeta wrdpress.com is a very good choice if you don't have time or you don't know how to manage security on yors self hosted blog
- wolly
wolly: that takes out the open source fun part ;) well i have nothing much to do on my blogs so i keep mine updated ;)
- testbeta
I agree with you :-) but many people love blogging non update theirs blogs :-)
- wolly
when my sites were hacked - a wordpress employee reached out to me- i dont remember her name but we sent a few emails - i could write for days about what happened to my 5 sites - my take is simple - i think the issues are a combo of rackspace (my host) and wordpress (my software) - i can tell you this - in 3+ yrs on drupal, i was NEVER hacked. and Matt is right - the real issue is that...
more...
- Allen Stern
Allen - what version of WP are you running today?
- Rob La Gesse
If there's a shell script on the same server as you, even if it's not your account, everything on that server is at risk regardless of the software or its version.
- Matt Mullenweg
I would switch to a new server if I were infected at this point.
- Jesse Stay
Properly configured, user space can be isolated and these scripts cannot cross-pollinate.
- Rob La Gesse
It can be -- but publish a shell login on your server and we'll see. ;) The right answer is to scrub that sort of access.
- Matt Mullenweg
Matt - that comment on the "shell script" is silly. What are you actually trying to say?
- Robert J Taylor
Some sort of backdoor that allows a remote user to execute code -- it's super common.
- Matt Mullenweg
rob/matt - that wsa one of the biggest issues with my RS account - i had all the sites together in one "client" so when they hacked one - they were able to move around with their shell script into all my other sites - now each site is in a sep. "client" so the damage can only hurt me on one site - and believe me it does hurt :( i believe insidetransit and centernetworks are hit in google
- Allen Stern
@Scobleizer I'm sticking with @wordpress it doesn't worry me that much, plus I always update and have backups of db and site emailed to me
- Justin Yost
Allen - that was within one user space though. So what I stated above still stands true.
- Rob La Gesse
Allen and Robert are big enough that if they had a problem they could contact us and we'd help them, though as far as I know neither did, but I worry a lot more about smaller folks who get hit in the same way. The knowledge for how to properly clean up after a hack is more systems than software and not widespread.
- Matt Mullenweg
As Allen mentioned above, he did have a conversation with Wordpress.
- Rob La Gesse
matt - thanks for putting me in the same category as robert! *blush* - i did reach out to you - and your security guy was helping me big time - it seemed to turn out that the WP Contact Form 7 was the thing that caused it to start - i didn't document it all online because the security guy wanted time to get the plugin developer to fix the upload hole. - btw his name was mark jaquith and he was great
- Allen Stern
So why not some scheme where Wordpress vets a plugin and "blesses it" - perhaps a small charge for this service? As long as Wordpress is advertising plugins on the dashboard I think there ample reason to hold Wordpress to some level of accountability for those plugins
- Rob La Gesse
rob - that's what i told mark - they should offer that service for a tiny fee - stamp a "certified" stamp on it.
- Allen Stern
Just updated all my sites, doesnt look I was hit.
- sean percival
sean - no one would hit you - they know you would lala all over them
- Allen Stern
I've read almost all of the comments here, not hearing these mentioned once: Robert did not backup, kept the default 'admin' username and failed to update. These are three of the most basic security measures out there. Not blaming it on Robert, because we all fail on this sometimes, but these basics really are important!
- Abounding Media
Abounding: yup. And the lesson here is don't host your own version of Wordpress unless you have a security team making sure you're doing it right and backing up (something I never did on Wordpress.com, by the way). Oh, and Twitter taught us that even if you do all of that you've gotta make sure you pick great passwords and think through ways that social hacks could be done to get into your accounts.
- Robert Scoble
http://markjaquith.wordpress.com/2008... some great tips of Mark Jaquith on writing secure plugins - I use these and other tips when scanning the PHP code of new plugins that I intend to use (before deploying them)
- Jeroen De Miranda
Jeroen, thanks for posting that. I've had phishers getting into one of my WP installs recently, but couldn't tell which plugin it was. I deactivated two plugins, including CF7, the other day, and haven't had any more problems. And a shoutout to Ryan Boren on the WP dev team for helping me to de-infect.
- John Craft
Robert: Welcome to the world of web development for impatient users and disgruntled hackers
- Melanie Reed
john - the CF7 is what killed me a few months ago - it's because the form allows uploads even if you don't actually have them on - i believe they patched it but i have not gone back there.
- Allen Stern
anybody know if a little smily face appearing in the lower right hand corner of ones footer is a sign of a compromise on a self hosted wp blog?
- Richard Reeve
John, your are welcome! SQL injects attacks specifically exploit data entry fields used by the plugin; one should at least scan the PHP code of these plugins, and look at what kind of escape functions are used around handling of the data entry.
- Jeroen De Miranda
"it's because the form allows uploads even if you don't actually have them on" - wow. That's bad.
- John Craft
"anybody know if a little smily face appearing in the lower right hand corner of ones footer is a sign of a compromise on a self hosted wp blog?" - if you didn't put it there, it probably is. In your admin go to appearance, theme editor, and read the footer.php file.
- John Craft
Richard - are you using the WordPress.com Stats plugin?
- Andre Natta
some plugins worth considering to install are: wp-exploit-scanner, wordpress file monitor, WP security scan, anti virus
- Jeroen De Miranda
I don't understand why people are worried about a plugin breaking when it comes to upgrading WordPress. If a plugin does break, disable it for the time being. I rather have a secure installation of WordPress running and would worry about fixing the plugin afterwards.
- Jason Hansen
Hmmmm . . . I run WP Stats, but see no smiley face.
- John Craft
ah...thanks folks...stats it is. phew...so I'm not paranoid...
- Richard Reeve
There appears to be some a-holes who can break into wordpress blogs very easily. I'm not sure at this point that the new Wordpress Thesis blog that I'm interested in getting is safe either. There is some security issues with Wordpress and their incompetence to fix the problem is growing every year. They keep coming out with new versions to replace the old versions yet they still have a problem. This is serious guys.
- Jeunelle Foster
The problem with WordPress is that it forces you to upgrade. Imagine if Microsoft forced everybody to upgrade to Vista/Windows 7 in order to get their security holes plugged. WordPress should release security patches for the current and at least for the previous version.
- Nikolay Kolev
They dont force you to upgrade. If you dont want to patch, you can leave it at the current version ( but with a risk )
- Kashif Khan
Where's the patch for the 2.7 version then?
- Nikolay Kolev
Their versioning strategy bumps up numbers even for patches . And how many versions behind should they support ?
- Kashif Khan
Many of the WordPress security issues are not coming from the WordPress itself, but from the poorly written WordPress plugins. I think it would be nice if Automattic starts an "Automattic Certified" program giving blog owners the peace of mind they need. Every hacker can upload a plugin at WordPress.org, advertise it as something great, bloggers install it, see that it's nothing as advertised, uninstall it, but the WordPress instances are already hacked.
- Nikolay Kolev
Plugins are open source and free and nobody (well, with some exceptions) would pay to get their free plugin certified. The only way to do this is by having a community review process, based on some credibility score and voter authority system where 1,000 fake hacker accounts won't, for example, outweigh Matt's or Mark's votes.
- Nikolay Kolev
part of the problem is the cry wolf syndrome - if i updated every day wordpress had a security problem i'd want to be salaried on the payroll :D Wordpress needs some sort of alert notification - twitter or something that indicates if there's an update AND the severity and if its severe enough sends it to my phone.
- mal
let me play the other side of the coin - i've been using vbulletin for my forums for probably more than 5 years - and it's never once been hacked - why is this - is it because it's paid? is it just more secure? would love to get some input on why wordpress seems to be the attacker's gold.
- Allen Stern
@allenstern because it pays back better to have wp hacked
- A.T.
Another devil - I have clients using Expression Engine for years (with plugins) and haven't had a problem either. Checking security sites, EE has had very few vs the many with WP and some with Drupal. Matts suggestion that one hosts with him to avoid problems and keep updated just isn't in the cards for business sites. Just too many vulnerabilities with WP over the years for me to recommend it.
- PXLated
i can tell you that within 2 days of moving from drupal to wp, my sites were hacked - all of them - and it made me seriously question the move - the reasons i moved were because wp is a bit easier to edit/code than drupal and because the admin panel in wordpress is awesome compared to the crap panel in drupal - i wrote up a whole post about why i moved - i'd like to see matt write a post about their qa and security procedures for their releases
- Allen Stern
Alen, once Drupal 7 get released, you may actually go back. :)
- Nikolay Kolev
Robert - If I were you I'd move away from Wordpress and fast. Its security record is dire and has been for ages. Other solutions are a lot more stable, whereas Wordpress seems to have security bugs every second week. Why anyone puts up with it is really beyond me. I moved to MovableType and haven't had to worry about caching issues or security problems
- Michele Neylon
#somethingpersonal WP calls you "technical evengelist", Robert. When you say «Yes, I didn’t have a backup. I should learn to do backups» I call you a mediawhore. Nothing TECH-NI-CAL, just bulled ego. Learn Security, Performance, Reliability, you ignorant piece.
- Капитан Сильвер Буллет
Robert - "the reputation around the Net is that upgrades on Wordpress break things" I'm sorry but that's just not true, I use many many plugins across about 20 sites and I've only ever ONCE had a plugin break during a WP upgrade.
- John O'Nolan
Definitely check if Google Reader has your lost posts - as of a few months ago, it didn't handle deletes very well :)
- Michael Herf
This recent wave of WordPress incidents shows the negative side of using open source software. Matt says that there are many people looking into WordPress' source code, but the problem is that probably half of those people have malicious reasons for doing so.
- Nikolay Kolev
@Matt - why not have a module that adds *automatic* upgrades? The one-click update feature is very nice, but zero clicks is better. With a decent snapshot/rollback system you could update most people securely right away--email them and let them rollback if something breaks.
- Michael Herf
@robert: we might be able to help you recover the lost blog posts if you want. Google Reader has an archive of them and we helped another blogger in the past recover her losses. Let me know if we can help.
- Edwin Khodabakchian
@matt when do you start to care about poor people unlike robert... who can't afford *VIP* i am willing to pay $25+ per month of course with my adsense ads :}
- Imran Jafri
@robert by the way you made one of the worst choice to move away from wordpress.com i think it wasn't price issue rather you wanted to be brand *ambassador* for rackspace which was only possible if you host your blog on their damn servers... if i get enough visitors i would switch to wordpress.com vip without taking 2nd breathe........
- Imran Jafri
I run just a few plugins, and research and vet them first. And upgrade to new WP versions within a week. Look, attacks happen, running self-hosted can get complicated. But this is true with any software or OS
- Bob Morris (polizeros)
from iPhone
Nikolay, it's always better to have more people looking at the code, because a bug that's been found is better than a bug that hasn't. WordPress used to get almost no security problems and people thought it was because it was coded differently, when in fact it was coded far worse than it is today it just didn't have enough users to make it worthwhile to target. Also where many...
more...
- Matt Mullenweg
Nikolay: I would also push back against your assumption that using Open Source software equals less security. Microsoft Windows and OS X are both closed source and both have security holes - there is a competition each year to help MS and Apple find them and fix them. Both Apple and Microsoft came away with security holes to fix this year. So just because it's open source doesn't...
more...
- Tim
that's what you get for the fun of installing and hosting your own installation, instead of using "the cloud".
- Ihar Mahaniok
Robert - I recommend WP S3 Backups for backing up your database to off-site storage. Amazon S3 is a great place to host backups of your Wordpress database and is relatively inexpensive. You *always* want backups *off* the server so in case the server is compromised, the backups are still clean. This plugin works like a charm, is automatic and could have saved you. Cheers!
- Scott Jarkoff
anybody know of a test that can be done to see if a wp blog has been compromised? Has a few strange user subscriptions about a week ago...but not noticing any thing else...I did upgrade weeks ago, but soon enough?
- Richard Reeve
bug exploits keep security IT folks in their day job, sad but true.
- Jim Posner
In IT it keeps me busy but the reality is if you update your software on a regular basis you can minimize these from affecting you.
- Rob Cairns
Robert, any chance archive.org has some of your old blog posts? Google Cache?
- drew olanoff
Matt, another thing to note is that Wordpress.com is often blocked in China (even if you have your own custom URL like scobleizer.com). There are advantages to NOT being hosted by Wordpress.com although your point about increased responsibilty for keeping up with security patches is still valid.
- Elliott Ng
Drew: yeah, but what do I do? Just republish them?
- Robert Scoble
from iPhone
Sure why not. Scoble's best of. Reason why I hate stuff on the net sometimes is good stuff gets lost.
- drew olanoff
Give a try to the "WordPress Database Backup" plugin for WordPress and you'll receive regular backups on your email
- Francois Lamotte
Robert, You can get all of your lost blog post html out of Google Reader. I'm not exactly sure how to link Disqus back, maybe it's as simple as re-adding the old posts with the same title/date i.e. Url (I don't use it). Yet another reason to use FULL RSS feeds (instead of summary). See RSS isn't dead.. it's now a backup tool too! (http://ff.im/7JrlC)
- Chris Myles
Wordpress is a great blogging tool. It is however the largest target now - much like how Windows gets a crap-top more virii because it's the most used system. Someone used Drupal as am example of security... well I'm sure if Drupal was anywhere near the scale of usage Wordpress is you'd see hacks for that too.
- Gregory Wild-Smith
Robert: Just repost them with the dates set to the original dates they were posted. Simple, and no-one will ever know ;)
- Gregory Wild-Smith
I have always had a bad feeling about Wordpress. YMMV.
- Gordon Joly
from twhirl
Robert It could be a Rackspace problem and Not a Wordpress Problem. They might to increase there security on the Rackspace!!! You should checck into that!!
- Paul
One of the reasons I waited 2 years to switch from MovableType to WordPress was due to the security issues. I felt that the track record improved over the past year and moved 11 sites over. I can say this I employ a very extensive back up scheme but still worry about it. The ability to upgrade with a single click of a button has made it much easier to upgrade, but I always worry which plugins are going to break as I use a lot of plugins.
- Todd Cochrane
It's interesting to me to see the number of people who are "afraid" to implement a security update because it might break a plugin. I wonder if these are the same people who don't run system updates on Mac or Windows because it might break SIMBL or some other haxie. Your core = your core... without it you're smoked. Case in point: Scoble. If your plugins aren't working after an update, let the author know and request an update, but BY ALL MEANS don't ignore security upgrades.
- Kevin Donahue
hmm... I think that a lot of this conversation is missing something. Most software security updates are usually tested in hosts and thus delayed in their own releases by at the minimum of a week's time usually. This is due to hosting internal testing of patches before rolling it out to all servers. Now, whether or not RS actually performs these types of procedures, I don't know... but I...
more...
- Ben Hwang
First: I keep my blog up to date. Always. Fuck plugins, I decided that when I made the decision to use WP for my blog that updates would be a priority, only because of all the security issues that I remember from the early early days. Having said that, I have to agree with Robert that the perception with WordPress, despite all the work with auto-updates and in-blog notification is STILL...
more...
- Christina Warren
from iPod
I am spending the day finally making a back-up of my web space, then the upgrade.
- Sebastian Keil
you are right to not feel safe: when you are on the dominant platform, holes get taken advantage of really fast. At least it being open source you know it will also get plugged fast
- Joelle Nebbe (iphigenie)
"what do I do? Just republish them?" - Robert, you can set the published date to the original July or August date in the "new post" form. Where it says "publish immediately," click "edit".
- John Craft
I couldn't disagree more that the reputation is that an upgrade will break a plugin. How many plugins reach into the Wordpress core and screw around with it? Less than 5%? Any examples of plugins that broke w/ 2.8.4?
- beersage
Somebody hacked into my WordPress blog earlier this year as well. It was a bummer because I was working on a draft copy of a blog post that was very rough and had not been edited and they published it. I was on vacation shooting in Chicago and didn't figure it out until several hours after they'd already published it. Fortunately they didn't seem to do anything malicious other than...
more...
- Thomas Hawk
@Robert: "[Rackspace] are learning a lot about this and other people who have had problems and are building a list of best practices." Is it possible this list is something RS might share?
- John House
@Matt Mullenweg: I do like WordPress (even though we had a public argument with you and another Automattic employee on TechCrunch a while ago) and I am a passionate supporter of open source software - don't get me wrong. But sometimes open source code makes it a bit easier for hackers! For example, one hacker hears about an exploit and without communicating with others, finds the hole independently by just looking into the source code and starts exploiting it on his own.
- Nikolay Kolev
Social Media Club blogs got hit as well as several of our personal blogs (still sorting it all out). We try to keep up on most upgrades, but every time we do, simple plugins (like the Event calendar) break. Seems silly, but we have hours of work after each upgrade to try and keep everything intact, and sometimes, we end up downgrading until the 'essential' plugins catch up, which...
more...
- Kristie Wells
I have 2 wordpress blogs. One on my own domain and one at wordpress central. Still can't get my head around their upgrade gymnastics - may just stick with eBlogger after all.
- Houseofmax
i don't know what will happen in times to come but from the existing platforms, i love wordpress and i am not going anywhere, but that doesn't matter for wordpress right? ;)
- testbeta
Robert, at the end of it is just only your bloody laziness in upgrading that led you here :) Jokes aside, please at least be honest and say you didn't upgradede twice... :p.
- Matteo Flora
Nope. I upgraded to 2.8.4 as soon as it was out but the hackers had already broken in.
- Robert Scoble
from iPhone
The fact that WordPress is currently being exploited doesn't mean that other platforms are immune. For example, the recently discovered XSS issue with Ruby on Rails makes not only blogs, but every unpatched site a target. So, the only issue I'm having is forcing us to upgrade to a new major version without much time to do proper testing (I'm not talking about personal blogs here). I...
more...
- Nikolay Kolev
So Techdirt was hacked a bit ago. See their reaction: http://www.techdirt.com/article... it is the reality of owning a web site guys - ANY software is hackable if someone really wants in.
- Adam Singer
@Robert: as I see it Wordpress is as vulnerable as any other web app. Upgrading does good, but preemptive security does more and better. I know Matt and he knows I'm in awe with him and Automattic but simply spoken I DON'T TRUST WORDPRESS as I don't trust any other software. A little WebApp Security Firewall (or at least a little .htaccess rules for admin and preemptive locking of...
more...
- Matteo Flora
i find it interesting, and depressing that people are blaming Rackspace, they're blaming Wordpress, they're blaming Robert, but no one, *no one* seems to be willing to blame the only, ONLY people who deserve blame: the evolutionary failures that attacked Robert's blog.
- John C. Welch
Thanks to your post, I found backdoor Admin in my own blog (created yesterday apparently). Promptly deleted it, upgraded blog and took other measures, which I blogged about
- Adi Rabinovich
@Matt Mullenweg: "so staying up to date is a must. - Matt Mullenweg" You gave the birth to one of the coolest piece of free software on the net, also your community is strong an love-full, you can do some PRs listening to Scoble that is crying, but you couldn't do anything better than you did. Take it easy man, all your competitors still suck. (PS. also a cleaning utility to understand better if everything is ok on our hosts would be cool ;-)
- righini riprova
Matt: What does a user need to provide, in order to be considered for a VIP wordpress.com account?
- Jim Connolly
Take technology out of the picture. Something bad happened by some bad person. Happens every day... it's called crime. If a bad person got into my house because I had a weak lock or left my door unlocked, what do people usually say? "That bad person shouldn't have done that!"? Well, sure, but bad people do bad things... nothing we can do to stop them other than make it harder or...
more...
- Chris Hearn
I would simply like to reiterate the point that if you're going to put free open source software on a rented web server, you need to either know how to administer it or hire someone to do it for you. Neither Rackspace or Wordpress are to blame here. We discuss this with our clients all the time who view web development as a one off expense, then get upset when their site is hacked because it wasn't maintained.
- JP Maxwell
One more point, I think there are way too many false lines drawn over aras of responsibility - "I'm systems, not a PHP programmer. I'm a PHP programmer, not a Javascript person. I'm a designer, not a programmer or a systems person." If you are a WEB developer or responsible for maintaining hosted WEB applications, you need to know a bit about it all. It simply isn't sufficient to demarcate your knowledge sphere and point your finger at the other guy.
- JP Maxwell
If you like, Y Combinator - Startup Library you can download all the articles in a single pdf file. Good for sharing, printing and offline reading. (12 MB)
"The research shows men who spend even a few minutes in the company of an attractive woman perform less well in tests designed to measure brain function than those who chat to someone they do not find attractive. Researchers who carried out the study, published in the Journal of Experimental and Social Psychology, think the reason may be that men use up so much of their brain function or 'cognitive resources' trying to impress beautiful women, they have little left for other tasks. The findings have implications for the performance of men who flirt with women in the workplace, or even exam results in mixed-sex schools. Women, however, were not affected by chatting to a handsome man."
- RAPatton
from Bookmarklet
no need to be researched, that it is a known fact isn't it! but to lead another question in the name of all men: are we abused by women that know this fact?!!
- maliforever
come eat street food withe me in India. Then we'll talk.
- Phil Calvin
egg salad from gas stations does make me shutter, but real mac and cheese is way better than Kraft. When I was a kid, my mom would make me make and cheese with actual cheese involved, but at some point someone gave me Kraft and I thought I no longer liked mac and cheese.
- Clare Dibble
Watch out for @posterous they are making up a lot of ground and getting stronger everyday. They are really working on solving everyone's biggest challenge ... workflow. Compare trying to teach a client to blog with trying to teach a client to email. Everyone emails everyday so, teach your clients to email post@posterous.com game over. This solution is so so simple, thanks for sharing Steve.
- Deano @ Byron New Media
If poss I would like to see FB and Google and not FB against Google ,if they will work one with the other we will all have a better world
- Johni Fisher
Jeunelle, I knew I shouldn't have started this. Autofollowing was stupid on Twitter and it'll be stupid here. But I will check you out.
- Robert Scoble
Johni: that's not how this will play out. Facebook wants to be the next Google.
- Robert Scoble
It's definitely a crazy space right now. The post helps explain or elaborate (for me) on our very brief conversation from this morning at Shel's. How do you think Google Reader and all the enhancements they've been doing plays into all this. It would seem that they are trying to be more like FriendFeed?
- frank barry
Btw...did you know, you can add tags by typing ((tag: abc, def, ghi)) ? i only found that out today...
- Zee.
consider that one "pans" the steam for signal/gold, using ones social graph, etc... we should look to turn the stream into a gushing river of data that we ride ... the stream is your friend(feed) :)
- khrisloux
frank: Google Reader falls apart for me. They still haven't fixed their speed issues. I hate it. And, anyway, Facebook or Twitter is where I get the news now and it comes in a lot better than Google Reader.
- Robert Scoble
khrisloux: I love the stream as much as anyone, but it does not solve all problems. If I want to find a pizza place in Half Moon Bay the stream is worthless. Now, if you give me a list of four pizza places, each with its own stream, now THAT is huge value!
- Robert Scoble
Robert : FB are soooo far from Google ,Google knows to make money and FB are far years from that ,if we are talking on the real time - Google is going to win it big ,,, FF is with FB as they understood it 2 months before FB
- Johni Fisher
Johni: did you know that Facebook has $500 million in revenues ALREADY per year? Do NOT underestimate this company. It is going all the way.
- Robert Scoble
Now, if you give me a list of four pizza places, each with its own stream.. that is where the money is..
- Tyson
Reader has sped up some with the addition of "PubSubHubbub", but i agree it's not Twitter. Twitter works best for me from a news standpoint. Reader is doing something though. Reader needs some sort of crazy seach or Google needs to push reader "comments", "likes" and "shares" into their search results.
- frank barry
[first i think you should go get dinner!] both views are relevant 1) the aggregated stream of "pizza" and 2) the content level stream for each restaurant ... why should i have to filter/sort/read each restaurants stream when i can manipulate a giant river of pizza (data) with the click of a mouse?
- khrisloux
Tyson: actually that just creates the necessary ingredients for money. The real money is in Yelp's offers. But those will appear right over the stream. :-)
- Robert Scoble
khrisloux: if you give me both we're both happy! :-)
- Robert Scoble
ha! only requires global deployment of Echo ;)
- khrisloux
*walks over to Yelp, opens door and peers in..*
- Tyson
So Twitter and Yelp need to meet eachother ... match made in heaven :)
- frank barry
frank: yelp and Twitter would be a VERY interesting combination. The problem is @ev wants to be a billionaire and Yelp doesn't have enough money and Twitter doesn't have enough money to buy Yelp. So, I don't think that will happen.
- Robert Scoble
The last line of your post astounded me since I wasn't aware that Facebook had hired a former key employee of Google. When you talk about Gmail or the monetization system at Google there's nothing small or insignificant about it. :)
- James Stratford
Robert :OHH no I dont underestimate them at all but they are THE social community and far from Google ,yes they are the best and the biggST but in the real time I cant see them doing the war against Wave and the integration with Google reader ,Gmail and Google apps ,and reg the FB revenues its great for them if it will help them as well to get profit from that and not to eat it :-))
- Johni Fisher
Yea, Facebook could gobble up Yelp, but that seems far fetched (though they did buy FriendFeed). I see you're point on how it would need to go down. Maybe Twitter will figure out how to make some $ or get more funding. Possible I guess.
- frank barry
Off topic I know, but by the way it's good to see you've adopted Posterous! :)
- James Stratford
If Facebook was thinking (which they obviously have been lately) going after Yelp might just make sense. It would be powerful especially with the iPhone (or mobile world) and people on the go. That sort of falls down because of the type of sharing that goes on within FB though. Twitter is much more "open" and the "culture" of the users is more about sharing/giving than I see in FB. Twitter/Yelp wins on use ... let's see if we can make them figure it out =)
- frank barry
Johni: Google Wave is too geeky and the interface is too complicated. It won't get mainstream acceptance.
- Robert Scoble
Was just looking for your posterous last week. Glad to see you there now.
- Katy Barrilleaux
I can't believe I was on posterous.com before Scoble!
- Prokofy Neva
I am relieved to hear you say Google Wave will remain too geeky and not get mainstream acceptance because it is the great destoyer of chronology. You know how time is so that everything doesn't happen at once, and space is so it doesn't happen all at once *to you*? Well, that's what Google Wave removes.
- Prokofy Neva
The commenting system on posterous blows. I can't fix my terrible typos :(. Robert what advantage do you gain from posting on poseterous over your blog?
- Mark Essel
from iPhone
1. I use Google to search for everything. I never think to search Facebook, unless I know someone is on there for sure - i.e a friend. 2. Posterous is good for 'quick and dirty' posts, and great for grabbing and snatching stuff from emails etc.
- Ian May
I don't like how it posts everywhere. I gotta think about how I'll use that.
- Robert Scoble
yay! it's about the time,, i should check my posterous too,, been away for a while ;p
- zʍıɔ
Robert: Welcome! If you don't like duplicity, just cancel the auto-post.
- Nir Ben Yona
nobody took scobleizer at posterous before? I thought you always register your name on new web services as they show up, because of cybersquatter.
- fakedave
fakedave: I try to get it on most services, but sometimes I miss one.
- Robert Scoble
After every visit with Steve Rubel you need to have a visit with Jeremiah Owyang to put you back on track ;-) IMO Posterous decentralizes the conversation.
- Jesse Stay
And I'm writing my next Posterous entry as I read this. (Oh yeah: I subscribed and left a comment. ;)
- Dennis Jernberg
@fakedave : chris messina beats him on this.haha!
- zʍıɔ
Malvina: Chris beats me on everything.
- Robert Scoble
enough already, another way to post stuff to all the destinations that are out there, sheeeeezzz :-)
- Alexander van Elsas
Posterous also provides a way to control and delegate the posting activity to other email addresses - its just a pity it uses the delegated's services config by default with no option to use the delegator's instead - so the distribution is not maintained according to the blog but according to who makes the post instead - both options would be perfect
- Nicholas Paul Gordon
Nicholas -- we've been talking about adding this capability as a 'group profile' that you can set up for a particular blog. It'll be coming in a future release.
- Garry Tan
how are you liking it so far? i signed up, but have yet to really use it.
- frank barry
Robert, you can easily control the flow. Here's how i do it: all mails go to posterous+facebook@posterous.com. The Feed linked into FF via RSS import. Once FF picks it up. it sends these to Twitter. This avoids dupes.
- Steve Rubel
The problem with Posterous to FriendFeed is that you'll need to reshare it again if you want to import to any FF groups. After a lengthy trial of Posterous I found FF to be more powerful in the end :-\
- CannonGod
I just realized yesterday that friendfeed@posterous.com only forwards to FF. cool stuff.
- Gus
Hmmm...in this day and age you'd think you'd be able to work remotely :P
- 1x29
Must be weird. But I think you'll soon feel right at home. In any case, if I was a regular Facebook employee (other than - say - MZ himself) I'd be in awe. :) (with which I mean that any regular facebook employees who are NOT in awe to see you are plain dumb - just tell them that I said that :P)
- Meryn Stol
I noted Paul's Google shirt as well. I have that one. (And some FriendFeed shirts) So... gang? Facebook shirts are a must!
- Louis Gray
Best technology acquisition Facebook has EVER gotten! We're expecting more greatness - good luck!
- Mike Koss
Good luck at Facebook. I hope you can do great things there.
- Alex Hellstrom
You will never have the fun you had in here. But that's the nature and beauty of progress. Keep up the good work. Glad you made it up to here.
- M. Serdar Kuzuloglu
from Android
Step in the building by using your right foot. Its believed to bring luck! (Turkish tradition)
- Jacque
from fftogo
all the best, good luck, enjoy the success and the money :)
- onderkiremitci
Hope you guys can continue the open houses over at Facebook. Those were great fun.
- Hutch Carpenter
Bret: With so many people fearing the worst about FriendFeeds long term future, I'm guessing there's NO WAY you will tell us here, now, if we are wasting our time carrying on as FriendFeed users? ....I'm not gonna get an answer am I
- Jim Connolly
"Rather than trying to replace Microsoft Office, as Google obviously hopes to do, they’ve picked a niche on which to focus: Team meetings for workgroups much like the Team Apart team, separated by geographical distance but connected by broadband. A Team Apart meeting room can be filled with notepads, whiteboards for freehand drawing, images, web pages, and live video chat windows for participants. The meeting rooms, reachable at teamapart.com but stored in the cloud somewhere, preserve the materials from their last meeting. ss1Without thinking, I instantly liked holding meetings at Team Apart. The lightly-colored default design is simply appealing — it’s got Web 2.0 style without being overbearingly so. The rooms aren’t overbuilt, so they’re easy to operate via the few buttons at the top. My meetings never go beyond four people, so the four-person restriction in the current free version isn’t a problem. And I have the option to use a still photo instead of a video feed as my avatar, for those times I don’t feel like being watched while I eat during a meeting."
- Paul Buchheit
from Bookmarklet
It's only a matter of time for someone does something like this for Wave as an extension.
- Ray Cromwell
Ray, the broadest, most general product isn't always the best or most successful.
- Paul Buchheit
This, to me, would be a logical extension for FriendFeed as it moves into business, with real-time chat on the side.
- Louis Gray
Paul, I agree, but that applies to Friendfeed too :) I love the FF UI, how stripped down and uncluttered it is, it does exactly what I want. But if FF+FB forces me to log into Facebook now and view FF functionality as part of the larger FB UI, I'm not so sure it will be as appealing anymore. I still want to go to FF directly, I'm not really interested in FB features.
- Ray Cromwell
"An underground youth culture in Japan with distinctive music, fashion and make-up, where the skin is darkened using tanning products is spreading worldwide. Young people in the UK have been learning about the intricacies of 'manba' by making friends on the other side of the world using social networking sites and learning how to re-create the style through videos on YouTube."
- Jess Lee
from Bookmarklet
I was wondering when they were going to get around to porting some of these great old adventure games to mobiles. There's a huge number of them out there, gathering dust, and they're great to play on the train (I've been playing SOMI and others on the Android port of ScummVM for a while now).
- Joel Webber
Unfortunately, I've heard the controls on the new Monkey Island are terrible on the iPhone. Save your money for the PC version.
- Andy Baio
from email
Got an interview with Paul and Guy Kawasaki coming up! It's a good one with Mike Morritz(msp?) from sequoia capital
- Rocky Barbanica
man you missed one of the best internet investors in the world! look fwd to the interview
- Ouriel Ohayon
Plus he's the author of On Lisp. This could be your best interview yet!
- Bruce Lewis
from fftogo
I miss his lack of essays, must be tied up with stuf other than broadcast communication. Does he have a regular blog I've been missing?
- Mark Essel
from iPhone
"Secret documents, declassified since 1997, reveal development of a USAF"forty foot 'flying saucer' designed to rain nuclear destruction on the Soviet Union from 300 miles in space." The American saucer was called the Lenticular Reentry Vehicle (LRV). As to the information, the bomber was designed by engineers at North American Aviation in Los Angeles under contract with the United States Air Force."
- Merry Xmas FFeeders - AJ
from Bookmarklet
So the people who saw UFOs flying around weren't nuts after all.
- Rick Cogley
how the hell is this thing flying!!!
- Loic Le Meur
Loic: I'm pretty sure it's not, and those are computer generated images. Anybody know where they came from? They look nothing like what Popular Mechanics showed in their 2000 article http://www.popularmechanics.com/science...
- Ken Sheppardson
Somebody needs to wake up Robert Scoble to defend Friendfeed ;-)
- arjo
there is a mob/pile on mentality here at times, but it's nowhere near as bad as what i've seen on other "social networking" sites and definitely not in the way of "i'll kill you/go die" type stuff. nowhere near it. i find that people are more supportive of others on ff. a lot of people just instigate and attempt to be controversial in order to pull in comments. a few months later they're the same ones holding press conferences about how they're quitting friendfeed because it brings them no value.
- Cee Bee
These comments may have come directly from FriendFeed but it's ludicrous to entirely place the blame here because the same stuff would have happened on Twitter (or another network) had FriendFeed not been around.
- Aaron Hood
The question is not if "we" the Friendfeed users have a mob mentality but if Friendfeed makes it easier to create a Mob mentality.
- arjo
FriendFeed is nowhere nearly as susceptible to mob mentality compared to Digg and Slashdot, thanks to the fact that most people on here use their real IDs. I've seen vigorous arguments here, but they're tame compared to the firestorms I've seen elsewhere. The blog post sounds like MA's upset that people didn't find his "ribbing" (to put it mildly) of Leo Laporte entertaining and took Leo's side instead of his. He's just upset about that. There's no mob mentality here at all.
- LANjackal
@arjo: LOL it could be, but the fact that most people here use their own names acts as a barrier to that effect
- LANjackal
Wow. Arrington REALLY has it in for FF comparing it to Syphilis. Has he lost it? :D
- Kevin Whalen
So are we to take Arrington serious with such an outlandish comparison? I swear I'm not trying to all "mobbish" on him but what exactly is he thinking other than "Lookit me! I'm an attention whore! Come to my site so I can make money!" <shrug>
- CAJ, somewhere else
It pops up from time to time.. But that seems to be common any where there's anonymous user driven content.
- J. Abdul-Qahhar
I don't think of FF as having a mob mentality so much as a monoculture
- RAPatton
@RAPatton: monoculture? Like how? I've noticed many contrasting viewpoints here ... could you explain what you mean by that?
- LANjackal
I'm sorry, Arrington is the biggest drama queen I've seen on the internet in a long time. He canceled speaking engagements because he felt he was in danger after the backlash from the spat with Leo? Talk about overestimating his own importance in the world. He needs a new place to hang out. Or a bottle. Or something. Whatever stops the QQing.
- tinypants - Hagitha of FF
@tinypants: Well I do recall him blogging about taking a break after some random person walked up to him and spat in his face or something ... but I think a lot of what he gets is self-inflicted. Poor behavior has its consequences
- LANjackal
from IM
@LANJackal Did you even read the link? MA spends an entire paragraph and links to MG Sieglers post on what I think of as the "Deanonymousation of the mob" I think hes thought long and hard on this subject, and maybe he should have thought on it a bit more. In any community you will find people with pitchfork and torch potential. He just happened to be at the receiving end of a run that...
more...
- Rasmus Lauridsen
PS people why the name calling? Try and govern yourselves a little bit, name calling is the first step towards you guys actually proving him right. Lean back grab a glass of wine relax and think of something else..
- Rasmus Lauridsen
Hold my pitch-fork, willya, while i light the torch!...
- Thom Kennon
@Rasmus: Have you ever thought of telling MA to do the same? Advising him to research his facts before he mouths off? Telling him to stop his garbage accusations? He's always starting crap and then complaining when he gets hit in the face for it. You can't behave like he does without consequence. The definition of a balanced, proper online community is not one that tolerates deliberate troublemakers like himself, which is what he wants
- LANjackal
What he's requesting is the permission/ability to firestart with impunity. Sorry, no community anywhere is going to grant him that. Period.
- LANjackal
Well LANjackal, I was on my way over there to post, maybe you should do the same, but maybe wait 5-10 minutes before you, let the wine calm you down a little bit. He is not going to hear you here.. Why don't you go over where he can actually argue back and calmly tell him how you feel?
- Rasmus Lauridsen
@Rasmus: He's on FriendFeed himself, actually. I'm sure he can see all of this if he wants to. In fact he's probably got a saved search of his name running (if he's smart). Should pick up this thread.
- LANjackal
@Rasmus: I'm sorry, I didn't think that calling him a drama queen was name-calling. No, I'm being serious. I apologize, I don't want to become one of those angry online posters saying rude things. I should clarify and say that while I recognize that sometimes people make good on their online threats, Arrington seems to be blanketing all the blame on FF without properly acknowledging...
more...
- tinypants - Hagitha of FF
LAN, their are outliers, but for the most part in terms of politics, technology etc there is a single culture on FF in my opinion
- RAPatton
@RAPatton: The only monoculture I see here is that everyone's obsessed with sharing, real-time and the cloud *shrugs*
- LANjackal
Where people are involved there is a mob mentality....not a useful blog post.
- Geoff Schultz
Arrington complaining about trolls and attacks is like online security companies complaining about viruses. They feed off of them, and some of us suspect they create them.
- Cristo
Zee: it's another Arrington poop fight. He throws enough of it on the wall to see what sticks, gets Robert Scoble riled up, and a mess of blog posts and forum fights ensue. SOP for Arrington. Meanwhile, he reaps the benefits of notoriety and links back to his site, all without ever setting foot in here, because we're all going over there to see what he wrote.
- Steven Perez
*sigh* Of all the online communities that I have been / are a member of, this one is the *least* susceptible to mobs. Now, mobs will happen here, because it's a community. Have you seen the news lately. Mobs happen in real life too, and social networks are just an online version of a community. Each person on here is a *real* person (spam bots notwithstanding) who has real emotions and...
more...
- Glenn Slaven
Of course, but the mob is everywhere. It's just _more visible_ on Friendfeed
- Ahsan Ali aka. Slick
But Arrington is not arguing against FF in particular, he's arguing against Social Media as a whole: "/sites like FriendFeed/ allow the centralization of a conversation to occur".
- Ahsan Ali aka. Slick
With all due respect, it might be wise to calm down and see this for what it is. A serious attempt at getting us to look at ourselves and ask, is it wise or needed to make every single comment we make in the online arena? Maybe its better to pick our battles for the ones that actually matter, like real life people who are being oppressed by their governments or such....
- Daniel Berman
If it were an ad, would the tendency be to provide negative feedback? Should it be one giant conversation FriendFeed wide? Should you only see comments from your friends?
- Louis Gray
Louis, for how long? If an ad stayed there forever, I'd have a problem with that. I'd want a premium/paid membership to get rid of it.
- Rochelle
@Nathan, can you do 'hide all like this' Or is that something we may end up paying for? Hmm
- Mo Kargas
I don't know, Rochelle. I'm not in charge. :)
- Louis Gray
@Rochelle - some ads people want to see. Super Bowl commericals for example.
- Nathan Chase
It's a great idea and you can hide them.
- Michael Fidler
Nathan, if people want to see the ads on FriendFeed, then they can opt to not pay for a premium membership and can see all of the ads. :)
- Rochelle
I have no problem with this, it's the slickest implementation of ads I think I've ever seen (besides Google AdWords), as long as they stay away from ad companies that don't screen their ads and through popups and malware on everyone's computer.
- Ⓐ ☠ slayerboy ☠ Ⓐ
Borrowed from Facebook "sponsored stories." Turnabout is fair play
- Christian Anderson
I understand this is the direction Facebook is taking also
- Michael Fidler
The potential of this just prepares me to yearn for a paid option.
- Akiva Moskovitz
Yeah. I could see FriendFeed power users paying to keep the ads off as a premium service. Although some people might just leave FriendFeed entirely - or some enterprisiing Greasemonkey/Stylish hacker would discover a way to hide them all via scripting
- Nathan Chase
I wonder what sort of targeting will they use for ads within feeds, when someone is bashing twitter it may seem a good time to show ad for a competitive service (say ff)
- Asankhaya Sharma
The new logon has been very successful so far. This just ensures that more people will see it. They should feature this on every individual item/post page when someone views it who's not logged in
- Michael Fidler
It is really strange not to be able to like or comment on it, but now that it shows up on the subscription management page, I guess it's really just more along the lines of an alert. I *do* like it, and the timing is sure 'nuff good.
- Kathy Fitch
They probably don't want people to comment on it because most of the comments would be complaints (not now, maybe, but later).
- Fa La La La Lindsay
True, Lindsay--but all the more reason to let 'er rip, I always think. Never know what ideas will be gleaned. Anyway, I'm sure they knew we'd discuss and examine elsewhere.
- Kathy Fitch
They should add 'like' to ads if this is the monetisation strategy. Similar to the way you can up vote ads in reddit. Hide counts as a down vote
- Glenn Slaven
Nice--very nice--it updates. Keeps tabs on new twitter friends not yet added here. Handy. (But yes, of course, an ad could be pushed in just the same way. One of the perks/temptations of being the one with the keys to the system. Can't deny it's efficient for bulletins, though.)
- Kathy Fitch
Jay, what are you saying is "confirmed"?
- Rochelle
Also had the permalink so the feature could easily be located for future reference.
- Kathy Fitch
I don't mind the unit per se, but not being able to comment on it seems antithetical to what FriendFeed has been working towards. And ... wouldn't you want a Like or Share option too?
- AJ Kohn
Thanks to your post (and all the similar ones) it's becoming part of a viral self-promotion campaign :-)
- gib
The disturbing thing to me would be if future ads were very sticky, and also from unscrupulous advertisers. (like the ones on Facebook) - Sitcky: I just don't have the screen realestate to spare for ad space like that ad had. Evil advertisers on Facebook: the damn IQ quizzes and Make Money Fast Online crap. I see enough on Facebook and twitter of all that. Liking ads is key. Commenting would be even better.
- guruvan (Rob Nelson)
ON another Note: I WOULD like to see Important FriendFeed announcements take this format: Planned outages, Known feed issues (i.e. AOL mail not going, Faceook status not importing, Twitter link down etc). And These should be sticky until acknowledged.
- guruvan (Rob Nelson)
I wouldn't consider this a "shameless ad". It is informative and helps one to use the product better. I benefited from it.
- Roebot
I saw it when it happened. At least they labeled it appropriately.
- Martha
I just added 128 more Twitter friends to my Twitter Clone list. They just keep coming!
- Louis Gray
With like, commenting and clickthroughs, you can compute relevancy of the ad and use that to improve targeting. Furthermore, provide "feeds" for discussing products and services that are in the ads. This has so much potential. In fact, let me search for ads and create a new category of ads called "coupons"!
- Peng-Toh
Just saw this,is this FF's ad business model?
- Steve Chou
At least these guys have a potential business model! I won't mind *a few* such "shameless self promotions" or ads per day.
- Vijay
it's much too early still for FriendFeed to advertise, but probably in the end offering an ad free paid account and a free ad supported account make sense.
- Thomas Hawk
Saw this yesterday. I don't mind it but I think Thomas' idea is the best option.
- Al Stevens
Dear FriendFeed team, can you buy the domain friedfeed.com and forward it to friendfeed.com? I am not interested in livestock, and I seem to have problems finding the n key.
Larry, I don't use bookmarks for sites I hit all the time. I just know them and type them in. There are only a handful that fit this category, GMail, GReader, FriendFeed and my blog. There are probably others, but it just bugs me that I keep doing it.
- Rob Diana
Which browser do you use? Both Firefox and Safari have an autocomplete feature, so you could just type in "fr" and FriendFeed would come up.
- Larry Hudson
I used FireFox and worse is that friedfeed shows up first because I go there enough :P I know I can delete it, and I have done that. I am just a little bit stupid sometimes.
- Rob Diana
Make it your start page and just hit home. :)
- Louis Gray
Add fiendfeed.com and friendfed.com too.
- Admiral Anika
Johnny, my favorite FF feedback ever is still the person who pointed out that "best of day" is only the most popular stuff and requested they present the actual best. I'm looking for that request to be implemented around the same time they secure the site against people pasting javascript links into their navigation toolbar. (Jim is awesome!)
- Bruce Lewis
from fftogo
Ha, Bruce, I remember that one. I honestly couldn't tell if they were serious or not.
- Laura Norvig
And Rob, I just type the letter "f" and Firefox knows what I want. It's got my number.
- Laura Norvig
Laura, I know I'm strange because of this, but my favorite humorous things to read are the ones where I'm not completely sure if they're serious.
- Bruce Lewis
Bruce, this was actually somewhat serious. I tend to type the URLs of a few sites that I visit constantly, and I do type friedfeed.com a lot.
- Rob Diana
Rob, I feel like I had a good handle on how serious you were. Otherwise it would have been funnier. :-)
- Bruce Lewis
evet neden posterous yok? yoksa bilmediğimiz başka durummlar mı var? (TR)
- Volkan Yılmaz ٩(●̮̮̃•̃)۶
What would posterous integration give you that you can't get by just adding your posterous RSS feed?
- Daniel Sims
Faster/easier addition of posterous blogs. Tumblr's in here, right? =)
- Garry Tan
Well Tumblr has clearly defined "types" of content, so FF could better understand the context and present posts in different ways. A posterous post is a posterous post, right? No different than any other blog service out there. But now I see that FF supports LiveJournal of all things, so... nevermind. :P
- Daniel Sims