"Today we are launching version 2 of the FriendFeed API for beta testing. We focused on making the API simpler to use, and we added number of compelling new features." Documentation: http://friendfeed.com/api...
- Bret Taylor
from Bookmarklet
nice, good to see OAuth support, this will enable a larger 3rd party ecosphere around FriendFeed, I hope
- Jeroen De Miranda
After going through the documentation and playing around with some feeds, I love the fact that you can now see the subscriber lists of people who have their feeds set to private as long as you are subscribed to them and authenticate (mimicking the main site functionality). One thing that's absent is a discussion of Direct Messages. Do they show up in feeds if you authenticate? How do we find just direct messages?
- Mark Trapp
Mark: direct messages are accessed using the feed ID "filter/direct". Read more about feed IDs at http://friendfeed.com/api.... Also direct messages appear in the "home" feed.
- Benjamin Golub
Benjamin: ahhh, I see it now. I missed it when skimming that list over. Thanks!
- Mark Trapp
Can you post the wget version of the command line?
- Gabe
Gabe: wget --user=bgolub --password=passwd --post-file=MyPhoto.jpg http://friendfeed-api.com/v2... should work. In theory. Edit: nope. I'm not sure it's possible to do with wget.
- Mark Trapp
Gabe: wget doesn't support multipart forms as a design decision. If you post a file, FriendFeed returns a 404, and if you post data, the query is too long for wget to handle.
- Mark Trapp
Good work, look forward to seeing what developers can create
- Joe Dawson
Woowoo, bgolub's password is “passwd” ;-)
- Amit Patel
Amit: I wonder how many people tested that :)
- Benjamin Golub
Thanks to bgolub posting his password, I now have all of FriendFeed's secret documents about notorious users, useless metrics, Justin Timberlake's promoting FF on Oprah's show, hiring Colbert as a spokesperson, Ev Williams being just a “distraction”. TechCrunch is going to love this! ;)
- Amit Patel
Yes big big thanks to the whole team for all their hard work!!
- ɐ ɯıʞ sıɹɥɔ
from iPhone
Jeroen: nah, it's just that a lot of us have been traveling the past couple of weeks. Next week is gonna be tough for me to make it, because I'll be inside Facebook's datacenter.
- Robert Scoble
thanks.... checked in yesterday, so that is why I am asking ;-)
- Jeroen De Miranda
you'd think facebook's datacentre would have decent connectivity
- Kevin Marks
Kevin: yeah, except I'm afraid to jack in! :-)
- Robert Scoble
Only if you connect "Open Compute" compatible devices! ;)
- Daniel Chow
Last United flight I did had no WiFi. Few weeks ago.
- Keith Teare
depends how you define streaming... Apple does stream to AppleTV
- Kevin Marks
Apple streaming (whatever it is) vs Netflix vs Youtube? how many Apple TV sold vs maybe Xbox that also streams Netflix?
- Tim Jones
im getting my android apps from the amazon marketplace already, and they took my credit card to give me my "free" angry birds rio, very clever
- Julio Fernandez
to disrupt, an established company typically needs a skunkworks operation that can handle different business drivers as good opportunities
- Jerome Hughes
google doesn't tend to worry about disrupting the cash cow
- Kevin Marks
<== routed trucks by shuffling 96 column cards on a table like the one on which your iMac sits, Robert
- Jerome Hughes
"we can't do that because it would disrupt the cash cow, and our current customers say they don't want it", and still we continue to make most money in tech -Microsoft
- Tim Jones
Tim: I've seen lots of companies that used to be market leaders and used to make a lot of money who are gone now.
- Robert Scoble
Microsoft will just take longer to fall because people hate change but the change is afoot!
- Robert Scoble
whatever Microsoft is doing continues to work
- Tim Jones
Kevin-- first saw actual cricket in background on HD screen in Indian restaurant w/ new clients in BF, Chain o' Lakes, IL, some Cubs fans ignoring, was distracted when shouldn't have been
- Jerome Hughes
ok, time to watch The Masters, txs for the reminder Robert!
- Julio Fernandez
Kevin: watching sport is a great way to waste time!
- Robert Scoble
i am working on a low speed connection Ustream doesn't work for me, you guys should give out topics too around which talks would revove that would help us users to give realtime updates
- testbeta
great analysis of the unique skills of Jobs by Steve Gillmor
- Jeroen De Miranda
allow me to say something that i want to write a blog post - the issue with google is the same issue with blackberry
- Allen Stern
Allen: except blackberry is totally screwed. :-)
- Robert Scoble
Robert - if they follow my plan they can turn it around :) but if google keeps going on this social bit, they will be drifting right behind bberry
- Allen Stern
Christopher: looks neat, no apps, I won't buy one.
- Robert Scoble
why am i listening to a commercial for a mop ... named mint?
- Laura Norvig
Christopher: I'd rather have an Android tablet.
- Robert Scoble
Christopher: I don't see it that way, but Android is definitely the way to go if you don't like the iPad for some reason.
- Robert Scoble
whoever asked if Apple was built to last? Every device I've bought from them still works and is still in use. 8 yrs later. No other brand I own is like that in the tech space.
- Karoli
In other words, there's very little oxygen for HP/Palm or RIM's PlayBook.
- Robert Scoble
Hulu does not have mad men (oh, maybe hulu plus but i don't think so)
- Laura Norvig
Christopher: Rome wasn't built in a day
- Ankush Narula
I hope Jony Ive takes over from Jobs.. he designed the first Emac, the ipod, iphone, ipad.. everything thats made Apple successful.
- kevin stephenson
Christopher: I agree that they should figure out how to get rid of that link now. Android definitely is nicer on that point. But that point isn't that big a deal in my experience.
- Robert Scoble
Hulu is the only service I've seen where you can pay for the privilege of being barraged with ads. no thanks.
- Karoli
Kevin: Jony is definitely one guy I love, but I don't think he's that good on stage and that's one of the major things they need to replace if Jobs goes.
- Robert Scoble
Free Hulu is better than Hulu Plus anyways.
- Laura Norvig
Robert/Kevin: Scott Forestall seems like the best pitchman at Apple
- Ankush Narula
Scobleizer's dead right - PC era app suite license revenues are nose diving (watch upcoming financial results)
- clive boulton
Christopher: if she doesn't ahve a computer they will set it up for her at the Apple store. But yeah, that hurts upgrades.
- Robert Scoble
The thing is with Android we aren't getting upgrades on the devices anyway due to carriers.
- Robert Scoble
Christopher: your 73-year-old-lady has no clue what a bootloader is.
- Robert Scoble
Bingo on the Windows / Facebook analogy. Facebook has traction. For now.
- Laura Norvig
Christopher and you could hook her iPad to your laptop too. Geesh.
- Robert Scoble
facebook's revenue is far lower than google no?
- Markus Kobler
Allen: I agree with that mostly. But the newer ads are more like Facebook pages. The brands are spending money to get people to spread their advertising for them (ala the Old Spice guy).
- Robert Scoble
People don't click on ads on Facebook. But they *will* click through from a brand's fan page to some kind of exclusive offer on the brand's site.
- Laura Norvig
Everyone's getting too excited. No matter how big Apple and Facebook get they are still just "nodes." Galaxies within a Universe. Relax.
- Stephen Pickering
But it's also about who's leading the debate in the marketplace, and how that changes consumer expectations [of what's possible, or should be possible].
- Chris Messina
It's not about technology, it's about people.
- Cliff Gerrish
good comparison with enterprise software SalesForce by Robert
- Jeroen De Miranda
I've got your private twitter right here
- Ross Mayfield
People inherently trust Google much more than Facebook
- Stephen Pickering
I don't think people inherently trust any company. Trust is earned every day.
- Cliff Gerrish
Scoble seems to be arguing that Facebook needs someone who is better at scamming us on camera. Maybe Zuckerberg can't explain what they have done well simply because what they've done isn't good.
- jay morris
Maybe Facebook should hire BP's CEO?
- Chris Messina
@jay Well Google sort of has that model.
- Cliff Gerrish
Maybe I worded that wrong. Google's actions, and non actions have made it the most trusted Brand, and most Valuable Brand in the World
- Stephen Pickering
Jay: you're onto something there. He hasn't explained the good very well.
- Robert Scoble
Chris: Hire BPs' CEO so Mark can get a life?
- Alex de Soto
Like Buffett said about Freddie Mac, "If you see one cockroach, there's more than likely a whole bunch more in there" As why he de invested
- Stephen Pickering
All restaurants have cockroaches. All restaurants aren't Freddie Mac.
- Cliff Gerrish
Not too long ago net apps were all beta-beta-beta. users had base expectations that things would be funky and would change. Now the ugly Fcbook app makes a few changes on the fly and people freak out. Why?
- Frank Paynter
Kevin: show me a single system where I can drag a photo to and see all that stuff work.
- Robert Scoble
When "beta" loses its meaning — or a new class of user comes along and doesn't understand what it means — "beta" is no longer an effective disclaimer.
- Chris Messina
If you design for privacy it will crumble under its complexity. If you design for sharing it can respect privacy while being simply usable.
- Ross Mayfield
for it to work you need more than one system to do it, which is why it takes time to agree
- Kevin Marks
Microsoft continued to grow even though they were not trustworthy, doesn't mean they were right
- Stephen Pickering
we also need to design an experience that can be adopted incrementally (by users).
- Chris Messina
And just why did consumers trust Farmville with their information?
- Alex de Soto
They didn't — they simply wanted to play a game.
- Chris Messina
People aren't interested in hearing what Facebook is "doing." They only care if there's a problem.
- Cliff Gerrish
@chris this is like asking Phillipe Kahn to keep end users apprised of changes in the sensor apps on Apple prods.
- Frank Paynter
Isn't all this talk about trusting information just picking and choosing what "information" is defined as? Isn't every single interaction with any site information? Isn't, well, everything, information that can be captured? If you interact at all with the Internet, haven't you already trusted your information to something/someone?
- Kevin Costain
I expect that sites like Facebook are redefining what information is, and working to find new ways to capture (and possibly share) that information..
- Kevin Costain
Facebook is just a website... my credit union has tighter security but I've chosen to use each and do my best to make sure my use of one doesn't bleed into the other.
- Frank Paynter
opt in at every step is a function that we'd mostly turn off if we could. annoying
- Frank Paynter
too much of this everyone has to be transparent talk seems to pertain to the 'masses' - those at the top have the right to keep things private - like corporations - it all has to be brought out - not just our stuff
- Xenophrenia
(no, really... J.Calacanis is helping FM get leverage by offering a lien on his car)
- Frank Paynter
most people have no real understanding of just how 'public' the internet is
- Xenophrenia
I don't get why Scoble's anecdotes are dismissed because he's not an average user, but Steve's teenage daughter is an acceptable proxy for all teens
- Richard
we'd need "social EULAs" since the data would have social residue from multiple parties.
- Chris Messina
privacy from your parents is easier than privacy from the world
- Vezquex
people don't understand it - not that they don't care
- Xenophrenia
Nobody cares about identity theft until it happens. Nobody cares about health care until they are sick. Nobody cares about privacy until its broken.
- Ross Mayfield
Chris: but email STARTED federated and there's no network effect by not being on Gmail.
- Robert Scoble
robert - i know a lot of people that don't understand what is going on - and don't care because it's too difficult ...
- Xenophrenia
Humans would end up curled up in a ball in the corner if they had to worry about everything BEFORE these things affected them.
- Chris Messina
Richard, Scoble said 'teens don't care', hence mentioning specific teens. look at danah boyd's work for more
- Kevin Marks
Kevin: I didn't say they don't care I said they don't care about what we're talking about. They care about different kinds of things.
- Robert Scoble
RE email... Compuserve / AOL / etc = Facebook / Twitter / etc
- Ken Sheppardson
robert - what part don't you agree with (i've said a lot) ...
- Xenophrenia
Xeno: that people don't understand this.
- Robert Scoble
robert - i know a lot of people who don't understand it - my sister, a couple of brothers - i know a lot of people who think they do but they're actions show me they have no clue ....
- Xenophrenia
Steve obviously hasn't read history if he thinks Governments are a good bet
- Stephen Pickering
Xeno: well, cool. I know a lot of people who DO know and still don't care.
- Robert Scoble
It's not important if any individual understands it. It just needs to work as an ecosystem.
- Cliff Gerrish
"these services are not free" <- the crux of the issue! I like it when I can simply pay for content and services on the Net. I want to the creators to make a good living - what they do is really valuable. What about a pay model for Facebook?
- jay morris
Kevin: yah danah's work would have been a good citation to give. I also studied under Sonia Livingstone who has done extensive research in the UK on young people's use of ICT's. My point was more that it looked like a double-standard in dismissing one person's anecdotes while leaning on anothers.
- Richard
i understand and get sideswiped now and then - facebook created an account for me on scribd without asking me - i have an account and suddenly found myself in an account my_name_#### and it had my facebook profile picture in the profile. this disturbed me a lot .
- Xenophrenia
Scoble wants to give up more of his privacy, it's his business model.
- Cliff Gerrish
Privacy does still exist. We don't know what's being talked about inside the Bilderburg Meeting that's taking place right now, do we?
- Stephen Pickering
aren't they all hooked together in Frederick, <aryland already? Just saying...
- Frank Paynter
robert - but you can't say that people across the board understand this - i understand that people in you're circles do - i agree with the transparency - people don't think more often then don't understand or care from my experience ; )
- Xenophrenia
It just takes too much work to get those benefits today.
- Chris Messina
Privacy is what other people agree not to pass on.
- Cliff Gerrish
privacy is relative .... it means different things to different people
- Xenophrenia
Why doesn't Facebook use Pages for Public stuff and keep the main account private?
- Stephen Pickering
people have NO idea how much of their info is in databases everywhere
- Xenophrenia
Everything means different things to different people, that's how language works.
- Cliff Gerrish
I don't care much about brain surgery - but since my neice has a serious heart defect - i care a whole lot more about advancements in that regard..
- Kevin Costain
robert - there have been people who have lost their insurance coverage for having health information public ... or not been able to get insurance
- Xenophrenia
Xeno: and there are 40,000 people who die in cars every year. We still drive.
- Robert Scoble
Chatroulette is probably a good way of understanding what most people's expectations of privay are.
- Cliff Gerrish
Privacy isn't important as long as you're not important, but the second you come into some power, then it becomes important, for stuff can be used against you
- Stephen Pickering
darn, wonder what Steve was amazed about
- R Macdonald
robert - ? i was just making a comment in regards to your saying that you put your health info online - not sure what that has to do with cars ; )
- Xenophrenia
Xeno: you said doing that is dangerous. Life is dangerous.
- Robert Scoble
robert - yes i know - which is why the transparency has to be everywhere - with everything or those with power will use it against us
- Xenophrenia
Yes, Robert, but the guy who hits you if he was drunk or something does get charged, even if he's famous and has power
- Stephen Pickering
i do agree with you for the most part robert - but there are contexts for us here with little or no voice that seem to get forgotten ...
- Xenophrenia
we are working on getting the stream back up
- Robert Scoble
My point being we are letting FB off the hook because they are popular and still growing. They're guilty, plain and simple. But we're giving them a pass because they're "Hot"
- Stephen Pickering
well, it's been real... bummed that the feed collapsed here though.
- Frank Paynter
Those questions that Walt and Kara posed to Marc, that he couldn't answer. They fooled users to join based on privacy and then flipped the switch
- Stephen Pickering
I wonder if we will ever see Microsoft make some really bold moves?
- Jim Posner
Chris was just explaining that he thinks kids won't know the joy of hardware hacking.
- Cliff Gerrish
Robert: I think things become more popular as the risk, or opportunity cost, is either downplayed or reduced to nothing. Everyone is seeking something of pleasure or value and wants to face no risk in the process. Downplaying all the risk (of, say, driving) is the job the salesperson
- Kevin Costain
robert - is there a way to contact facebook with issues - they're info@facebook.com address is no longer active
- Xenophrenia
there's no reason a tablet can't be a real computer. Android is proving this.
- Vezquex
i'm not saying they are idiotic robert
- Xenophrenia
Chris: Safari required. Chrome doesn't work.
- Robert Scoble
robert - you do realize that i'm not saying everyone is an idiot but that there are those who don't understand? ... and that we can't just ignore them because they are beneath us?
- Xenophrenia
Xeno: My info is in millions of cars. I drive a Ford Ranger and millions of other Ford Ranger drivers know exactly what my dashboard looks like.. :)
- Kevin Costain
There is an incredible efficiency is products that 'just work.'
- Cliff Gerrish
Xeno: computers used to only be for the highly trained. Now they are for everyone. We'll get there.
- Robert Scoble
There is incredible value in products that 'just work.'
- Chris Messina
Seem kicking around Facebook and Apple is the favorite pastime of many of the digerati. Very simplistic approach to tech. There will always be tradeoffs and the people that bitch about them.
- Jim Posner
Cliff is right on: The Merit of Working is incredibly efficient
- David Sherr
http://www.sitetalk.com/oportun... is a Social Network Platform (SNP) that allows members to create unique personal profiles online in order to find and communicate with old and new friends. Sitetalk.com is operated by Sitetalk Communities Limited. -------------------------------------------------------------------------------------------------- Join us for SiteTalk - UNAICO Signup free http://www.sitetalk.com/oportun... I want to share with You a brand new and unique opportunity.
- Bela Bokor
Last week in New York at the Microsoft offices, I interviewed Dan'l Lewin, Corporate Vice President for Strategy and Emerging Business Development at Microsoft.
- Jeroen De Miranda
from Bookmarklet
Evapt.com Subscription Management, Metering & Recurring Billing Platform for cloud Computing, Web 2.0 and On-demand| eVapt, Inc
- evapt
When is Verizon going to give up CDMA for LTE?
- Cliff Gerrish
Danny is missing the point that because it is open and can compete it will force the US carriers to start offering features to compete across the carrier vendors
- bear (aka Mike Taylor)
just caught a great screenshot of Steve at his command center. :)
- Karoli
Microsoft smartphone maker is HTC - Ballmer had it at CES- not sure of the model either
- Susan Beebe
Steve's bank of monitors is cool although he needs liker picture in picture or something. LOL
- Jim Turner
Funny. We're using Nexus One on AT&T and it's anything but a brick. In fact, I'm not sure I've even noticed that 3G isn't available. I previously had another Android phone from Rogers that supported 3G on AT&T, and they are virtually identical in performance.
- Ward Mundy
There is lots of analysis saying the google phone web site is the true game changer and not the phone. Anyone agree?
- Jim Posner
Jim, I agree to an extent. Unbundling the phone/carrier is the game changer. no question.
- Karoli
Jim, I think that is the sleeper hit for the first quarter. Instead of the arm-twisting that Apple had to do with AT&T to get the network behavour they needed, Google is now going to make it so that the US carriers *have* to change or be left behind as niche phone vendors
- bear (aka Mike Taylor)
Cliff, I spent 5 minutes training my Mac for MacSpeech, it's about 98% accurate. Amazing technology
- Karoli
Karoli, did you train your Mac - or did it train you?
- Cliff Gerrish
Anyone catch the Ballmer keynote last night...as a xbox 360 owner I found the natel announce interesting but not much else.
- Jim Posner
On Nexus One, try: Navigate to Consumer Electronics Show in Las Vegas. In 15 seconds, you're on your way.
- Ward Mundy
Cliff, i don't feel like it trained me...
- Karoli
Karoli, then it was very successful.
- Cliff Gerrish
Ballmers focus seemed retrospective rather than forward looking. Has MS become irrelevant in terms of tech leadership?
- Jim Posner
watching president's presser on CNN on my iphone while watching GG on my laptop. If I mistake Arrington for Obama, just shoot me.
- Karoli
Cloud based phones suck when there's no access to the Net. Try connecting in Cambria, CA.
- Alex de Soto
If you don't have a Google phone, check out Vlingo. I've got it on my Blackberry and I can do voice input wherever there is text input. It's also server-based
- Ted Gilchrist
"Strategic fear" is accurate label for Apple - Arrington nailed it
- Susan Beebe
Apple's too proprietary / closed, could cause them to paint themselves into a corner fast
- Susan Beebe
Aren't web apps on the iPhone completely open?
- Cliff Gerrish
Google knows how to leverage and guide open source projects well... smart code & resource management
- Susan Beebe
Cliff the apps may be open, but the holy Apple App Store is NOT open; highly biased
- Susan Beebe
Apple is a consumer hardware company that invested heavily in the OS to help drive the consumer experience - that's a lot different than the Microsoft and Google focus. They all approach consumers from different starting perspectives.
- bear (aka Mike Taylor)
As a first generation phone the Nexus One is as equally impressive as the first gen iPhone.
- Jim Posner
every time i've had to contact tmobile for plan changes or questions the folks have been friendly and able to answer/fix the problem. the phone folks are a lot better then the folks in the stores
- bear (aka Mike Taylor)
Robert is there 'cause everybody else is there. It's like being a Deadhead.
- Ken Sheppardson
Robert's at CES because, "There's a lot of parties!" LOL :D
- Susan Beebe
HP placing Bing as default search engine is a BAD move for HP... bye bye
- Susan Beebe
Bing has an iPhone app *yawn*. It is surprising to see Bing doesn't render on mobiles
- Susan Beebe
Paul was ranting a bunch this week on M$ - funny stuff
- Susan Beebe
the mono folks have been trying to evangelize the .net/CLR tech and have been berated constantly by Microsoft
- bear (aka Mike Taylor)
Apple's mobile me is a total failure on Droid too
- Kevin Marks
Microsoft is throwing a lot of money at getting Silverlight to stick, but nothing has stuck yet. They have to pay off everyone to get Silverlight in. Once the money stops, Silverlight disappears.
- Matt M (inactive)
mobile me uses soo many safari-specific html items it reminds me of how some MS products are tied to IE
- bear (aka Mike Taylor)
"But after the conclusion of the [olympic] games, NBC went back to using Flash. Another setback for Microsoft came when Major League Baseball Advanced Media, the group that streams baseball games over the Web, decided to drop Silverlight."
- Matt M (inactive)
bear: I think Palm's taken on too much ex-Apple persona to be a Microsoft target. :-)
- Ken Sheppardson
Apps are the KEY game changer in the mobile market. Of course decent signal & data are a must too!
- Susan Beebe
Which do/did you chose first, Karoli: carrier or handset?
- Ken Sheppardson
it's always been handset choice for me - but then again I change phones in 2-3 year cycles so i'm never locked into a contract when I decide to move.
- bear (aka Mike Taylor)
I think the typical smartphone decision process these days goes (1) Do I object to iPhone for some philosophical reason or do I so hate AT&T so as to not buy one? (2) if so, which carrier am I on now, (3) what's the best phone on that carrier.
- Ken Sheppardson
that was a 2009 era decision tree - I think the availability of android phones on all of the carriers will now change that for 2010. (or at least I hope it will)
- bear (aka Mike Taylor)
with android, there are choices. alot of people like a keyboard
- Tim Jones
There'll be a point where mechancial keyboards are completely replaced with virtual keyboards. (the physical keyboard becomes an object of nostalgia)
- Cliff Gerrish
Left to right, as if you didn't know already: Dan Hsiao, Casey Muller, Ana Yang, Jim Norris, Tudor Bosman, Bret Taylor, Paul Buchheit (with Camilla), Sanjeev Singh, Kevin Fox.
- Tudor Bosman
That's why I love today's web : you can talk with the people that build the next web, and see those who build your current web. Congrats guys!
- Zackatoustra
FriendFeed Team, I love you !!!! Thanks to you all, I'm very happy everyday!!!
- @Renchin@
So that was the TGIFF ("Thank Goodness It's FriendFeed") party? Perhaps slightly off-topic, but if Camiila hasn't been betrothed yet, have I got a grandson for her ;-))
- ianf ⌘
TGIFF was excellent. Great event and great people.Thanks for the invite and hospitality.
- AJ Kohn
Louis, thank you and thank you to the FriendFeed team for making a killer product and hosting a great open house!
- Brian Solis
(bump) Ana and Casey are now married. Here's a pic of them on the left, between Ross and Jim. Congratulations to Ana and Casey! (per http://friendfeed.com/jessica...)
- Louis Gray
:))))))))) مال بعد از عیده. اواخر فروردین فک کنم
- Aly
I think there is a full roll-out happening today, stay tuned. Lists have finally made Twitter useful again, a real game changer indeed.
- Mike Fruchter
Wasn't it Rob Diana who wondered if "discovery" was the holy grail in social media? Listorious looks very nice.
- Meryn Stol
Meryn, You are correct, those are Rob's words. I thought Indiana Jones discovered the Holy Grail ?
- Mike Fruchter
Awww Mike, thanks for including me on this Twitter list!
- Shevonne
Jorge, it looks like its pulling directly from the Twitter API. I'm not sure how real time it is though.
- Mike Fruchter
Jorge, I think you have to be "chosen" to be part of their developer beta - I asked and got turned down.
- Jesse Stay
As always, I appreciate being included. Many thanks.
- AJ Kohn
"WPtouch automatically transforms your WordPress blog into a web-application experience when viewed from an iPhone, iPod touch or Android touch mobile device. It comes complete with all the standard WordPress blog features: search, login, categories, tags, archives, photos & more. WPtouch also offers many customization features through a beautifully designed WordPress admin panel."
- Susan Beebe
from Bookmarklet
I use it. I like it. Just wish there was an easier way to change the calendar icons and allow for thumbnails. Of course, that would immediately reduce the loading speed…
- Jason Theodor
I finally got my nightowl powers back...the sickness took them away for a bit! :(
- Carlton Hackett
After 48 hours coffee and tea has stopped working now...Any tips ?
- Sunny (The Geek Lord)
Just when I think I lost my sleepness nights, they find me again. But anyhoo...still up and at 'em. :P
- Jonathan Hardesty
Of course I'm up it's 10 am here. The favs list is great because one can look just when and if one wants and it reduces the number of RTs.
- Michael Slattery
Well most of the Uk is up right now thats alot to follow ;-)
- Yant
Marsupilamima: Bonjour...Thats the only bit of French I know.....
- Sunny (The Geek Lord)
Been up for a while : in a different timezone Robert : does that count ?
- Nicholas Paul Gordon
from iPhone
I am a Proud GEEK and wanna be friends with all the other geeks...
- Sunny (The Geek Lord)
Interesting favorites twits, but yes the background has to be changed! :-)
- Stefano Pietroiusti
from twhirl
Guys/Gals on this thread, As we all are geeks lets subscribe to each other...I don't mind :) what say ?
- Sunny (The Geek Lord)
I really like it, and plan on stealing the idea for a couple specialty Twitter accounts. I wish everyone used favorites. Social search is the future, for me anyway.
- Justin Luey
from FreshFeed
Justin: True, Social search is the future. Human data is precious
- Sunny (The Geek Lord)
Yeah I don't mind it, would just prefer it if done on FF rather than the bird site, but I understand the reasons though.
- travispuk
it's 5:18 AM, so quiet everyone, too much noise can't sleep. Do like the favorite thing though
- Kim Landwehr
what if I don't have an opinion because I don't follow? does that make me a non geek? edit: also. yes. tiled background bad!
- Nathalie
Robert, I scan your favorites to look for interesting new blog and sites... I like this approach; much better than only using the retweet
- Jeroen De Miranda
It's a good way to choose people to follow
- Sherrie Belken
You favored one of my blog posts, cool!
- Marko Saric
thx for the follow. I don't tweet all that much - mostly hang out here. I do tweet more consistently for my work persona, @serviceresource
- Laura Norvig
Welcome Baby Ryan!!! My baby Ryan (17 years!) and I are honored to welcome another superstar to our planet! Love, hugs, and lots of kisses to Baby Ryan, Mommy Maryam, Dad Robert and big brothers Milan & Patrick and of course Grandma!!! My guess on Ryan's arrival (predication) was only 23 hours off. I thought he would arrive on Friday, Sept. 18th at 11:45 pm. Love to all, Kelly & Ryan Kim
- Kelly S. Kim
What a moment, eh? I remember when my daughter came into this world, it was so exciting there were no words for it. Congrats on your wonderful baby boy!
- Michael J. Carrasquillo
Congratulations! Welcome to the world, Ryan. :-)
- Yvette Ferry
Congratulations Robert and Maryam! And welcome Ryan. If I was having a baby today, I'd begin a blog for him/her straight away as an online diary they could look back on when grown up.
- Technogran
الهــــــــــــــــــــــــــــــــــــــی چقده ناز نازیه.اینو فارسی نوشتم مریم جان بخونن ....راستی به باباش که نرفته:)) خوشگلتره:)) پس به شما رفته
- joupy
I was a c-section six week preemie in an era when that was seriously life-threatening, they didn't know if I would make for the first week. It always gets me a see a c-section / preemie come howling into the world. Welcome, little guy!
- Bob Morris (polizeros)
from iPhone
Beautiful baby! Congratulations daddy man :)
- Gary
:) Congrats Robert... best wishes to your family! Get her name in twitter and ff!
- Business Blogger 【ツ】™
Right ON! I am so happy for you. I have 4 kids of my own and they are my greatest joys. Take care and I hope all goes so smooth for him and mom.
- Robert Anderson
Daddy Scobleizer!!!!!!!!!! First things first....when will he be signed up for Twitter and FF?
- krystyl
Congrats! I wish a long and healthy life.
- Muammer Okumuş
Robert, you newest addition is too freaking adorable. I hope you and Maryam are doing well. Congratulations! Here's to a long, prosperous future!
- Mike Nayyar
congrats to you and Maryam! And welcome, RSS!
- Joshua Allen
from fftogo
Enables you to give a link to anonymous users for public preview of a post before it is published. Have you ever been writing a post with the help of someone who does not have access to your blog and needed to give them the ability to preview it before publishing? This plugin takes care of that by generating a URL with an expiring nonce that can be given out for public preview
- Jeroen De Miranda
Uh, we zijn tegen anonieme deelnemers, toch ...
- Davied
from email
nee, hiermee kun je een in een mail een url naar de preview sturen naar iemand die geen login op WP heeft. Die kan dan al zien hoe de post er uit gaat zien. Er wordt een eenmalige en expirerende url gebruikt, dus de toegang tot de nog niet gepubliceerde post is beperkt. Zo kunnen redacteuren blogs plaatsen van mensen die de info per mail sturen; en toch aan de auteur laten zien hoe het er uit gaat zien...
- Jeroen De Miranda
Ach so! Op dit moment heeft iedereen wel een inlog natuurlijk. Goed om te weten dat dit bestaat, voor als we de redactiemethode aanpassen.
- Davied
from email
Great show and happy to see it up on YouTube so quickly for all of us who missed the live stream.
- Mike Hellers
Yes. Then Leo and Arringotn had a fall out live on air. Thats where Leo's famous "Screw You" line comes from. They made up, but that was the end of GG on TWIT.
- Roberto Bonini
Yes I remember it well. You mean Mr.Laporte really did kick you guys off?
- Kevin J Hatton
I still can't get used to seeing 'Bret Taylor - Facebook' lol great show. Where do I subscribe.?
- Kevin J Hatton
Kevin, you could favorite the channel or get word in any number of other ways. I got the channel gadget so it shows up on my iGoogle start page. http://friendfeed-media.com/eaa3f44...
- Amyloo
Louis, that looks awful. That is also the main reason why I have choosen JS-Kit for my blogs; no spam seen up till now (they use Akismet; that might explain their great performence regarding spam). See http://www.ambtenaar20.nl for this JS-Kit integration. Have tried Disqus before, I hope they will improve the anti-spam functionality!
- Jeroen De Miranda
Ugh. And to think I've ditched JS-Kit for Disqus. lols
- jan geronimo
Well, if you have fixed the hole by upgrading; you should feel a lot safer now. I guess strong user adoption does bring the wrong kind of attention.
- Anindya Chatterjee
Anindya: we're watching. Looks like they haven't gotten back in since the upgrade and some of the other changes we made. Knock on wood.
- Robert Scoble
I'm very tempted to switch to a SixApart install. As a Perl programmer I'd be much more familiar with the backend.
- Jesse Stay
Robert, btw, I'm sure between all your users you can find a backup. I have a bunch via Google Reader I could get to Rackspace to import for you. I'm sure others have even older entries than I have. Let us know if you want help restoring the old scobleizer.com!
- Jesse Stay
robert - i can tell you this - you need to watch it like a hawk - when i thought i was safe - i wasn't - InsideTransit continues to get hit - and I still believe there is some patches and stuff that RS can do as well - the bigger issue is what's on the server - because that's where they put the shells and then they can do whatever they want.
- Allen Stern
Not cool, hopefully things will work out.
- Kim Landwehr
Jesse: luckily it was July and August, when I wasn't doing much blogging. No biggie. Thanks. Allen: yes, Rackspace Cloud has a security team now and they are actively looking at ways to make Wordpress safer for our customers. It really sucks getting hacked. Let me know if you find any other ways to protect the systems.
- Robert Scoble
Robert: Yea getting hacked sucks. My early days with my blog aboutonlinematters.com I got hacked and luckily my ISP had a backup. Since then I have treated my Wordpress blog like any dev site - with a subversion repository and complete backup. But there are days... like today... when I think strongly about a platform like typepad.
- Arthur Coleman
what i have found is locking down the files helps - but you need to ftp into your site and make sure that nothing has been edited or added - in my case, on all my sites, the hackers put files all over that were base64 files - and what they do is include them into WP or they just run them direct - nearly a full shell. i've asked RS to create a way so that i can be notified of any changes to files - they say it's too heavy to run.
- Allen Stern
Robert, I just miss the traffic from your "You are SO Unfollowed!" article. (one of the casualties) ;-)
- Jesse Stay
There's a lot of great info they deleted - I'm a little ticked they would be completely insensitive like that to prove a security flaw. It affected much more than just you.
- Jesse Stay
Jesse: yeah, that's probably the one blog that I miss. It's also the one that got me to notice they deleted a couple of months.
- Robert Scoble
No way "You are SO unfollowed" is out? I loved that one! :-( thanks for the cache Robert
- Sofia @ SoMaFusion
If you have no time to take care of yuors blog, maybe it's better if you choose the pro offer from wordpress.com ( I think scobleizer.com can have the minimum requirement to stay there).
- wolly
wolly: it's not just about time, attacks come from all directions so you've gotta have a holistic approach to security. How many of you regularly change passwords and make sure they are really good ones? (Twitter got broken into not because of hacks, but because they didn't practice good password security).
- Robert Scoble
It saddens me: it is morally reprehensible your hosting company convinced you to switch with the seduction of plugins and customization without emphasizing or handling the increased responsibility of upgrades. Your blog was not unique and not a special target, the worms sweep across millions of blogs indiscriminately and hit whatever is vulnerable. If your host is lax in upgrading, the...
more...
- Matt Mullenweg
that's true :-) I use password very strange and very verylong that I cannot remember and I use a service like clipperz.com to login.
- wolly
wolly, Robert was hosted on WordPress.com for about 4 years -- he was actually the very first VIP. Although there were dozens of security updates to WordPress in that time, his blog never had a problem because it was always up-to-date. He only switched away a few months ago.
- Matt Mullenweg
Ciao Matt :-) I didn't know that, so scoble come back to the light side :)
- wolly
Matt: yup, that's true. I've learned my lesson. Running your own servers are a lot harder than just having them hosted on Wordpress.com.
- Robert Scoble
To be frank, it completely breaks whatever trust I had in Rackspace.
- Matt Mullenweg
But Matt, I've been talking with many blog owners, including at TechCrunch, and they say that Wordpress' updates break their custom plugins. That's why they don't upgrade immediately. So, sounds like Wordpress has a mess on its hands that the hosted version of Wordpress didn't have (I couldn't run a lot of plugins and video embeds and other fun things on the hosted version of Wordpress). So, to blame it on my hoster/employer (Rackspace) exclusively isn't really a good attitude either.
- Robert Scoble
Robert, It happens. We were hacked too. My observations lead me to believe that this summer was the worst in a long time. Its a war and its going to be a war until the attitude towards hackers changes. Let's stop being fascinated in the least bit by how they do it (this goes towards Kevin Mitnick and his supporters- I don't ever want to pay good money to read about your scams on the...
more...
- Melanie Reed
Matt's got a point that with greater power (self-hosting) comes greater responsibility (more need to keep an eye on security), but I think to say that Scoble's blog was not a special target is a bit disingenuous. High-profile sites are always a higher-value target.
- Rachel Luxemburg
Matt: I think you need to really look at all the damage that's being done to a wide range of sites, many of which are NOT hosted at Rackspace, before throwing more barbs. That's bull. Sorry. But I added a link to this conversation to my blog so people could see your point of view.
- Robert Scoble
If a plugin is preventing you from upgrading (did it?) then let's figure out how to fix that plugin. All I can do in WordPress is build in the notices (your blog was asking you to upgrade for months) and the one-click updates for both core and plugins. I agree it's not your (Robert Scoble's) fault because I don't think you made the conscious decision to take on the increased responsibility.
- Matt Mullenweg
Matt: the reputation around the Net is that upgrades on Wordpress break things. This wasn't a Rackspace recommendation. It's also a problem with all upgrades. I've gotten hosed by upgrades elsewhere. Look at all the people upgrading to Snow Leopard who are having things break.
- Robert Scoble
Matt: TechCrunch hasn't upgraded its blog either and it wasn't hosted on Rackspace (at least not until a couple of days ago).
- Robert Scoble
I'm not saying there isn't lots of misinformation around the net, I'm saying "how can I help your blog, please." If it's a plugin preventing you from upgrading, let me know the plugin and we'll fix it even if we didn't write it. That's the beauty of open source.
- Matt Mullenweg
Robert -- Avoiding upgrades because they're annoying to deal with isn't a viable longterm strategy.
- Rachel Luxemburg
they need to take care of Scoble's blog, well for he is a VIP and the smashing they would have would do a lot of damage to your customer base and otherwise, would they reply to an ordinary guy say like me? i think not,well wordpress/automattic is having their tough moments, hope things get well and they get their repute back
- testbeta
Matt - you blaming Rackspace for security vulnerabilities in YOUR software platform is kinda like blaming Dell when a Windows box gets hacked. I think you are being irrational.
- Rob La Gesse
Matt: in my case it was the REPUTATION of Wordpress's upgrades that was keeping me from upgrading. I was waiting to see what other people reported broke. I didn't realize the severity of the security problems. But, I am now upgrading automatically. So I'm fixed. But you still have a reputation problem. Lots of people are reporting things break when they upgrade.
- Robert Scoble
Rob, I'm not blaming them. I'm saying it's the responsibility of any host, of any software, to stay up to date. If there was a SSH vulnerability on Robert's box I would say the same thing. Software updates are inevitable, there is no such thing as bug-free code, so staying up to date is a must.
- Matt Mullenweg
Isn't all this open source code? If it's broken, why not fix it? Doesn't everyone have the responsibility to do that? It's not any one source's fault in that case.
- Jesse Stay
Matt - I agree with you. So make Wordpress upgrades SAFE, automatic AND do some internal validation of plugin code to let users know they may be running something that is potentially insecure.
- Rob La Gesse
Matt, agreed. Not when its turned out as fast as people are yelling for it. People can't have it both ways.
- Melanie Reed
Matt: all Rackspace was providing to me was a Linux host. I was responsible for getting my upgades done on anything I ran on that system. But now we have a team making sure we're following best practices. That is NOT Rackspace's problem, though. That's like blaming Microsoft for a bug in Adobe software.
- Robert Scoble
I never listen to the reputation, I always upgrade as a security upgrade is out, and if a plugin doesn't work or I deactivate it or I fix it. Security is much more important than a plugin and Matt knows how many plugins has my blog (when he looked my backend he was very sad ad he said that it was the first time for him to see so many plugin in a blog :-) ) To have a self host blog it's difficult and time expensive.
- wolly
There are several very useful plugins specifically addressing security issues; and monitoring WP for suspicious activities (both on file and database level). Here are some articles with tips to harden your blog http://bit.ly/sZgh6 (delicious bookmarks). I only install plugins from authors from whom I know that they implement top level php; no breaking of upgrades on my 3 WP blogs has taken place (2.7-2.8-2.8.4)
- Jeroen De Miranda
Yeah, plugin issues are the responsibility of the plugin developer, not Wordpress's. I don't see how this is Wordpress's or Rackspace's fault.
- Jesse Stay
By the way, Matt, Sheamus, over on my comments on my blog, says he has the latest upgrades in place and he's still being broken into. You might help him figure out how the hackers are breaking in still.
- Robert Scoble
Sorry, I was under the impression Rackspace had recommended you move away from WordPress.com and taken responsibility for the system. I was worried about your blog -- I emailed you about this in August but never heard back. It breaks my heart when someone's WordPress gets compromised.
- Matt Mullenweg
I understand the feeling though - if people are still being broken into after being told a fix was made, especially if you're not a developer, that can be a little scary. I'd look to other solutions in that case if it were me, and it's no one's fault. It's just perception and fear, very valid fear.
- Jesse Stay
I do believe there is a false sense of securty that WORDPRESS fosters by hosting plugins. I think many assume that because they download the pluging VIA Wordpress, and FROM Wordpress, it is somehow vetted.
- Rob La Gesse
Matt: no. I wanted to move to my own install of Wordpress so that I could run many more plugins and start doing stuff other professional bloggers were doing. I am learning very quickly just how much work goes on behind the scenes to make sure my words were protected.
- Robert Scoble
Once you've been hacked once if you don't clean up every trace (preferably a systems person does this) it's very likely something is left that allows the spammers to easily break back in, regardless of what version you're on. That's why the trouble with upgrading is worth it, it's much, much less than the trouble of fixing a hacked blog.
- Matt Mullenweg
Jesse: yeah, at Microsoft when a box got broken into they wouldn't let you use it anymore. They forced you to reinstall it with all patches loaded. They assumed that it was compromised and that someone stuck a back door in somewhere. That's a lot of work too.
- Robert Scoble
install either wp-backup or wp-dbmanager and configure database backup: every day; download to your local pc (or to a system other than your hosting provider); run a check once a month to see whether you can reconstruct the blog in case of calamity, That is my procedure; works fine.
- Jeroen De Miranda
if a commoner gets hacked, then he should move to wordpress.com services or what?
- testbeta
they should just make it not have any security holes!
- Mark
Robert, if you like I'd be happy to host your blog for you (and I'm on Rackspace servers). I can keep it secure as well. I'd only ask some mention of SocialToo somewhere (or payment of some form in order to cover the cost of bandwidth).
- Jesse Stay
I would also be able to keep it backed up for you.
- Jesse Stay
I'll also install any plugins you're interested in trying
- Jesse Stay
Jesse: in my case, I now have a team of the top security guys at Rackspace working on it and making sure my system is up to date and backed up. They also are learning a lot about this and other people who have had problems and are building a list of best practices.
- Robert Scoble
This is eventually why I didn't go with Mosso. The service looks good, but you still have to manage your app yourself which opens you up to problems like you've experienced. It would be cool if they offered another layer of management on top so apps could be completely hands free.
- Todd Hoff
the alternative (i.e. strong vetting of all plugins) would turn the whole WordPress ecosphere into something such as Ning.... only some 300 addons (as far as I know); little flexibility very intransparent how to get your addin accepted .... Not an attractive model for me....
- Jeroen De Miranda
Robert, excellent - just wanted to make sure the offer was out there. Maybe that could be a tiered service for Rackspace, although I'm not sure it's something Rackspace wants to get into. Bluehost barely makes any money off of that type of service.
- Jesse Stay
Steve: I think that's a reasonable set of assumptions. The grass is always greener on the other side of the fence. When I was on Wordpress.com I was always jealous of blogs that were able to run the latest plugins and use the latest embed codes from various sites.
- Robert Scoble
Robert, it's even more fun when you can customize the plugins and themes as a developer. :-)
- Jesse Stay
@testbeta wrdpress.com is a very good choice if you don't have time or you don't know how to manage security on yors self hosted blog
- wolly
wolly: that takes out the open source fun part ;) well i have nothing much to do on my blogs so i keep mine updated ;)
- testbeta
I agree with you :-) but many people love blogging non update theirs blogs :-)
- wolly
when my sites were hacked - a wordpress employee reached out to me- i dont remember her name but we sent a few emails - i could write for days about what happened to my 5 sites - my take is simple - i think the issues are a combo of rackspace (my host) and wordpress (my software) - i can tell you this - in 3+ yrs on drupal, i was NEVER hacked. and Matt is right - the real issue is that...
more...
- Allen Stern
Allen - what version of WP are you running today?
- Rob La Gesse
If there's a shell script on the same server as you, even if it's not your account, everything on that server is at risk regardless of the software or its version.
- Matt Mullenweg
I would switch to a new server if I were infected at this point.
- Jesse Stay
Properly configured, user space can be isolated and these scripts cannot cross-pollinate.
- Rob La Gesse
It can be -- but publish a shell login on your server and we'll see. ;) The right answer is to scrub that sort of access.
- Matt Mullenweg
Matt - that comment on the "shell script" is silly. What are you actually trying to say?
- Robert J Taylor
Some sort of backdoor that allows a remote user to execute code -- it's super common.
- Matt Mullenweg
rob/matt - that wsa one of the biggest issues with my RS account - i had all the sites together in one "client" so when they hacked one - they were able to move around with their shell script into all my other sites - now each site is in a sep. "client" so the damage can only hurt me on one site - and believe me it does hurt :( i believe insidetransit and centernetworks are hit in google
- Allen Stern
@Scobleizer I'm sticking with @wordpress it doesn't worry me that much, plus I always update and have backups of db and site emailed to me
- Justin Yost
Allen - that was within one user space though. So what I stated above still stands true.
- Rob La Gesse
Allen and Robert are big enough that if they had a problem they could contact us and we'd help them, though as far as I know neither did, but I worry a lot more about smaller folks who get hit in the same way. The knowledge for how to properly clean up after a hack is more systems than software and not widespread.
- Matt Mullenweg
As Allen mentioned above, he did have a conversation with Wordpress.
- Rob La Gesse
matt - thanks for putting me in the same category as robert! *blush* - i did reach out to you - and your security guy was helping me big time - it seemed to turn out that the WP Contact Form 7 was the thing that caused it to start - i didn't document it all online because the security guy wanted time to get the plugin developer to fix the upload hole. - btw his name was mark jaquith and he was great
- Allen Stern
So why not some scheme where Wordpress vets a plugin and "blesses it" - perhaps a small charge for this service? As long as Wordpress is advertising plugins on the dashboard I think there ample reason to hold Wordpress to some level of accountability for those plugins
- Rob La Gesse
rob - that's what i told mark - they should offer that service for a tiny fee - stamp a "certified" stamp on it.
- Allen Stern
Just updated all my sites, doesnt look I was hit.
- sean percival
sean - no one would hit you - they know you would lala all over them
- Allen Stern
I've read almost all of the comments here, not hearing these mentioned once: Robert did not backup, kept the default 'admin' username and failed to update. These are three of the most basic security measures out there. Not blaming it on Robert, because we all fail on this sometimes, but these basics really are important!
- Abounding Media
Abounding: yup. And the lesson here is don't host your own version of Wordpress unless you have a security team making sure you're doing it right and backing up (something I never did on Wordpress.com, by the way). Oh, and Twitter taught us that even if you do all of that you've gotta make sure you pick great passwords and think through ways that social hacks could be done to get into your accounts.
- Robert Scoble
http://markjaquith.wordpress.com/2008... some great tips of Mark Jaquith on writing secure plugins - I use these and other tips when scanning the PHP code of new plugins that I intend to use (before deploying them)
- Jeroen De Miranda
Jeroen, thanks for posting that. I've had phishers getting into one of my WP installs recently, but couldn't tell which plugin it was. I deactivated two plugins, including CF7, the other day, and haven't had any more problems. And a shoutout to Ryan Boren on the WP dev team for helping me to de-infect.
- John Craft
Robert: Welcome to the world of web development for impatient users and disgruntled hackers
- Melanie Reed
john - the CF7 is what killed me a few months ago - it's because the form allows uploads even if you don't actually have them on - i believe they patched it but i have not gone back there.
- Allen Stern
anybody know if a little smily face appearing in the lower right hand corner of ones footer is a sign of a compromise on a self hosted wp blog?
- Richard Reeve
John, your are welcome! SQL injects attacks specifically exploit data entry fields used by the plugin; one should at least scan the PHP code of these plugins, and look at what kind of escape functions are used around handling of the data entry.
- Jeroen De Miranda
"it's because the form allows uploads even if you don't actually have them on" - wow. That's bad.
- John Craft
"anybody know if a little smily face appearing in the lower right hand corner of ones footer is a sign of a compromise on a self hosted wp blog?" - if you didn't put it there, it probably is. In your admin go to appearance, theme editor, and read the footer.php file.
- John Craft
Richard - are you using the WordPress.com Stats plugin?
- Andre Natta
some plugins worth considering to install are: wp-exploit-scanner, wordpress file monitor, WP security scan, anti virus
- Jeroen De Miranda
I don't understand why people are worried about a plugin breaking when it comes to upgrading WordPress. If a plugin does break, disable it for the time being. I rather have a secure installation of WordPress running and would worry about fixing the plugin afterwards.
- Jason Hansen
Hmmmm . . . I run WP Stats, but see no smiley face.
- John Craft
ah...thanks folks...stats it is. phew...so I'm not paranoid...
- Richard Reeve
The problem with WordPress is that it forces you to upgrade. Imagine if Microsoft forced everybody to upgrade to Vista/Windows 7 in order to get their security holes plugged. WordPress should release security patches for the current and at least for the previous version.
- Nikolay Kolev
They dont force you to upgrade. If you dont want to patch, you can leave it at the current version ( but with a risk )
- Kashif Khan
Where's the patch for the 2.7 version then?
- Nikolay Kolev
Their versioning strategy bumps up numbers even for patches . And how many versions behind should they support ?
- Kashif Khan
Many of the WordPress security issues are not coming from the WordPress itself, but from the poorly written WordPress plugins. I think it would be nice if Automattic starts an "Automattic Certified" program giving blog owners the peace of mind they need. Every hacker can upload a plugin at WordPress.org, advertise it as something great, bloggers install it, see that it's nothing as advertised, uninstall it, but the WordPress instances are already hacked.
- Nikolay Kolev
Plugins are open source and free and nobody (well, with some exceptions) would pay to get their free plugin certified. The only way to do this is by having a community review process, based on some credibility score and voter authority system where 1,000 fake hacker accounts won't, for example, outweigh Matt's or Mark's votes.
- Nikolay Kolev
part of the problem is the cry wolf syndrome - if i updated every day wordpress had a security problem i'd want to be salaried on the payroll :D Wordpress needs some sort of alert notification - twitter or something that indicates if there's an update AND the severity and if its severe enough sends it to my phone.
- mal
let me play the other side of the coin - i've been using vbulletin for my forums for probably more than 5 years - and it's never once been hacked - why is this - is it because it's paid? is it just more secure? would love to get some input on why wordpress seems to be the attacker's gold.
- Allen Stern
@allenstern because it pays back better to have wp hacked
- A. T.
Another devil - I have clients using Expression Engine for years (with plugins) and haven't had a problem either. Checking security sites, EE has had very few vs the many with WP and some with Drupal. Matts suggestion that one hosts with him to avoid problems and keep updated just isn't in the cards for business sites. Just too many vulnerabilities with WP over the years for me to recommend it.
- PXLated
i can tell you that within 2 days of moving from drupal to wp, my sites were hacked - all of them - and it made me seriously question the move - the reasons i moved were because wp is a bit easier to edit/code than drupal and because the admin panel in wordpress is awesome compared to the crap panel in drupal - i wrote up a whole post about why i moved - i'd like to see matt write a post about their qa and security procedures for their releases
- Allen Stern
Alen, once Drupal 7 get released, you may actually go back. :)
- Nikolay Kolev
Robert - If I were you I'd move away from Wordpress and fast. Its security record is dire and has been for ages. Other solutions are a lot more stable, whereas Wordpress seems to have security bugs every second week. Why anyone puts up with it is really beyond me. I moved to MovableType and haven't had to worry about caching issues or security problems
- Michele Neylon
#somethingpersonal WP calls you "technical evengelist", Robert. When you say «Yes, I didn’t have a backup. I should learn to do backups» I call you a mediawhore. Nothing TECH-NI-CAL, just bulled ego. Learn Security, Performance, Reliability, you ignorant piece.
- м.д.ж. 20%
Robert - "the reputation around the Net is that upgrades on Wordpress break things" I'm sorry but that's just not true, I use many many plugins across about 20 sites and I've only ever ONCE had a plugin break during a WP upgrade.
- John O'Nolan
Definitely check if Google Reader has your lost posts - as of a few months ago, it didn't handle deletes very well :)
- Michael Herf
This recent wave of WordPress incidents shows the negative side of using open source software. Matt says that there are many people looking into WordPress' source code, but the problem is that probably half of those people have malicious reasons for doing so.
- Nikolay Kolev
@Matt - why not have a module that adds *automatic* upgrades? The one-click update feature is very nice, but zero clicks is better. With a decent snapshot/rollback system you could update most people securely right away--email them and let them rollback if something breaks.
- Michael Herf
@robert: we might be able to help you recover the lost blog posts if you want. Google Reader has an archive of them and we helped another blogger in the past recover her losses. Let me know if we can help.
- Edwin Khodabakchian
@matt when do you start to care about poor people unlike robert... who can't afford *VIP* i am willing to pay $25+ per month of course with my adsense ads :}
- Imran Jafri
@robert by the way you made one of the worst choice to move away from wordpress.com i think it wasn't price issue rather you wanted to be brand *ambassador* for rackspace which was only possible if you host your blog on their damn servers... if i get enough visitors i would switch to wordpress.com vip without taking 2nd breathe........
- Imran Jafri
I run just a few plugins, and research and vet them first. And upgrade to new WP versions within a week. Look, attacks happen, running self-hosted can get complicated. But this is true with any software or OS
- Bob Morris (polizeros)
from iPhone
Nikolay, it's always better to have more people looking at the code, because a bug that's been found is better than a bug that hasn't. WordPress used to get almost no security problems and people thought it was because it was coded differently, when in fact it was coded far worse than it is today it just didn't have enough users to make it worthwhile to target. Also where many...
more...
- Matt Mullenweg
Nikolay: I would also push back against your assumption that using Open Source software equals less security. Microsoft Windows and OS X are both closed source and both have security holes - there is a competition each year to help MS and Apple find them and fix them. Both Apple and Microsoft came away with security holes to fix this year. So just because it's open source doesn't...
more...
- Tim
that's what you get for the fun of installing and hosting your own installation, instead of using "the cloud".
- Ihar Mahaniok
Robert - I recommend WP S3 Backups for backing up your database to off-site storage. Amazon S3 is a great place to host backups of your Wordpress database and is relatively inexpensive. You *always* want backups *off* the server so in case the server is compromised, the backups are still clean. This plugin works like a charm, is automatic and could have saved you. Cheers!
- Scott Jarkoff
anybody know of a test that can be done to see if a wp blog has been compromised? Has a few strange user subscriptions about a week ago...but not noticing any thing else...I did upgrade weeks ago, but soon enough?
- Richard Reeve
bug exploits keep security IT folks in their day job, sad but true.
- Jim Posner
In IT it keeps me busy but the reality is if you update your software on a regular basis you can minimize these from affecting you.
- Rob Cairns
Robert, any chance archive.org has some of your old blog posts? Google Cache?
- drew olanoff
Matt, another thing to note is that Wordpress.com is often blocked in China (even if you have your own custom URL like scobleizer.com). There are advantages to NOT being hosted by Wordpress.com although your point about increased responsibilty for keeping up with security patches is still valid.
- Elliott Ng
Drew: yeah, but what do I do? Just republish them?
- Robert Scoble
from iPhone
Sure why not. Scoble's best of. Reason why I hate stuff on the net sometimes is good stuff gets lost.
- drew olanoff
Give a try to the "WordPress Database Backup" plugin for WordPress and you'll receive regular backups on your email
- Francois Lamotte
Robert, You can get all of your lost blog post html out of Google Reader. I'm not exactly sure how to link Disqus back, maybe it's as simple as re-adding the old posts with the same title/date i.e. Url (I don't use it). Yet another reason to use FULL RSS feeds (instead of summary). See RSS isn't dead.. it's now a backup tool too! (http://ff.im/7JrlC)
- Chris Myles
Wordpress is a great blogging tool. It is however the largest target now - much like how Windows gets a crap-top more virii because it's the most used system. Someone used Drupal as am example of security... well I'm sure if Drupal was anywhere near the scale of usage Wordpress is you'd see hacks for that too.
- Gregory Wild-Smith
Robert: Just repost them with the dates set to the original dates they were posted. Simple, and no-one will ever know ;)
- Gregory Wild-Smith
I have always had a bad feeling about Wordpress. YMMV.
- Gordon Joly
from twhirl
Robert It could be a Rackspace problem and Not a Wordpress Problem. They might to increase there security on the Rackspace!!! You should checck into that!!
- Paul
One of the reasons I waited 2 years to switch from MovableType to WordPress was due to the security issues. I felt that the track record improved over the past year and moved 11 sites over. I can say this I employ a very extensive back up scheme but still worry about it. The ability to upgrade with a single click of a button has made it much easier to upgrade, but I always worry which plugins are going to break as I use a lot of plugins.
- Todd Cochrane
hmm... I think that a lot of this conversation is missing something. Most software security updates are usually tested in hosts and thus delayed in their own releases by at the minimum of a week's time usually. This is due to hosting internal testing of patches before rolling it out to all servers. Now, whether or not RS actually performs these types of procedures, I don't know... but I...
more...
- Ben Hwang
First: I keep my blog up to date. Always. Fuck plugins, I decided that when I made the decision to use WP for my blog that updates would be a priority, only because of all the security issues that I remember from the early early days. Having said that, I have to agree with Robert that the perception with WordPress, despite all the work with auto-updates and in-blog notification is STILL...
more...
- Christina Warren
from iPod
I am spending the day finally making a back-up of my web space, then the upgrade.
- Sebastian Keil
you are right to not feel safe: when you are on the dominant platform, holes get taken advantage of really fast. At least it being open source you know it will also get plugged fast
- Iphigenie
"what do I do? Just republish them?" - Robert, you can set the published date to the original July or August date in the "new post" form. Where it says "publish immediately," click "edit".
- John Craft
I couldn't disagree more that the reputation is that an upgrade will break a plugin. How many plugins reach into the Wordpress core and screw around with it? Less than 5%? Any examples of plugins that broke w/ 2.8.4?
- beersage
Somebody hacked into my WordPress blog earlier this year as well. It was a bummer because I was working on a draft copy of a blog post that was very rough and had not been edited and they published it. I was on vacation shooting in Chicago and didn't figure it out until several hours after they'd already published it. Fortunately they didn't seem to do anything malicious other than...
more...
- Thomas Hawk
@Robert: "[Rackspace] are learning a lot about this and other people who have had problems and are building a list of best practices." Is it possible this list is something RS might share?
- John House
@Matt Mullenweg: I do like WordPress (even though we had a public argument with you and another Automattic employee on TechCrunch a while ago) and I am a passionate supporter of open source software - don't get me wrong. But sometimes open source code makes it a bit easier for hackers! For example, one hacker hears about an exploit and without communicating with others, finds the hole independently by just looking into the source code and starts exploiting it on his own.
- Nikolay Kolev
Social Media Club blogs got hit as well as several of our personal blogs (still sorting it all out). We try to keep up on most upgrades, but every time we do, simple plugins (like the Event calendar) break. Seems silly, but we have hours of work after each upgrade to try and keep everything intact, and sometimes, we end up downgrading until the 'essential' plugins catch up, which...
more...
- Kristie Wells
I have 2 wordpress blogs. One on my own domain and one at wordpress central. Still can't get my head around their upgrade gymnastics - may just stick with eBlogger after all.
- Houseofmax
i don't know what will happen in times to come but from the existing platforms, i love wordpress and i am not going anywhere, but that doesn't matter for wordpress right? ;)
- testbeta
Robert, at the end of it is just only your bloody laziness in upgrading that led you here :) Jokes aside, please at least be honest and say you didn't upgradede twice... :p.
- Matteo Flora
Nope. I upgraded to 2.8.4 as soon as it was out but the hackers had already broken in.
- Robert Scoble
from iPhone
The fact that WordPress is currently being exploited doesn't mean that other platforms are immune. For example, the recently discovered XSS issue with Ruby on Rails makes not only blogs, but every unpatched site a target. So, the only issue I'm having is forcing us to upgrade to a new major version without much time to do proper testing (I'm not talking about personal blogs here). I...
more...
- Nikolay Kolev
So Techdirt was hacked a bit ago. See their reaction: http://www.techdirt.com/article... it is the reality of owning a web site guys - ANY software is hackable if someone really wants in.
- Adam Singer
@Robert: as I see it Wordpress is as vulnerable as any other web app. Upgrading does good, but preemptive security does more and better. I know Matt and he knows I'm in awe with him and Automattic but simply spoken I DON'T TRUST WORDPRESS as I don't trust any other software. A little WebApp Security Firewall (or at least a little .htaccess rules for admin and preemptive locking of...
more...
- Matteo Flora
i find it interesting, and depressing that people are blaming Rackspace, they're blaming Wordpress, they're blaming Robert, but no one, *no one* seems to be willing to blame the only, ONLY people who deserve blame: the evolutionary failures that attacked Robert's blog.
- John C. Welch
Thanks to your post, I found backdoor Admin in my own blog (created yesterday apparently). Promptly deleted it, upgraded blog and took other measures, which I blogged about
- Adi Rabinovich
@Matt Mullenweg: "so staying up to date is a must. - Matt Mullenweg" You gave the birth to one of the coolest piece of free software on the net, also your community is strong an love-full, you can do some PRs listening to Scoble that is crying, but you couldn't do anything better than you did. Take it easy man, all your competitors still suck. (PS. also a cleaning utility to understand better if everything is ok on our hosts would be cool ;-)
- simone righini
Matt: What does a user need to provide, in order to be considered for a VIP wordpress.com account?
- Jim Connolly
I would simply like to reiterate the point that if you're going to put free open source software on a rented web server, you need to either know how to administer it or hire someone to do it for you. Neither Rackspace or Wordpress are to blame here. We discuss this with our clients all the time who view web development as a one off expense, then get upset when their site is hacked because it wasn't maintained.
- JP Maxwell
One more point, I think there are way too many false lines drawn over aras of responsibility - "I'm systems, not a PHP programmer. I'm a PHP programmer, not a Javascript person. I'm a designer, not a programmer or a systems person." If you are a WEB developer or responsible for maintaining hosted WEB applications, you need to know a bit about it all. It simply isn't sufficient to demarcate your knowledge sphere and point your finger at the other guy.
- JP Maxwell
There's a smart friendfeeder I want to introduce to him (Chris, me and that guy share the same love for personal relevancy)
- directeur
does this mean you will drop Disqus?
- Nick Halstead
I don't always "get" technology when it first arrives. Twitter being a prime example. Seeing a page of live twitter like responses though as a reader is not interesting for me. I would rather read through longer intelligent discussion. You're FriendFeed discussions are great, but the js-kit echo demo left me feeling blurry. Granted there are advantages, but am I just missing something, again?
- ASKJDOG
@askjdog you may wish to check out the matrix at the bottom of http://js-kit.com/echo it contains some of our thinking, which i am sure can be expanded upon ... for a deeper dive, click on "Synaptic Web" at the end of the matrix ... it is *one* view of the evolution of the web.
- khrisloux
Bruce: I was off filming an interview with them, I'm not going to write a damn blog post on my iPhone. Geesh. And anyway, I've already written about Echo before. This was just a tease for tomorrow's video.
- Robert Scoble
Nick: I'm very seriously considering dropping Disqus, yes. We're definitely going with JS-Kit over on Building43.com and I'll consider it after using it a while there for my blog.
- Robert Scoble
Robert, how does it compare to the Disqus Reactions?
- Jesse Stay
Jesse: from what I've seen so far JS-Kit is real time, while Disqus isn't. But not sure I'm comparing the newest Disqus stuff. Is Reactions new or is it what I'm already using on my blog at http://scobleizer.com ?
- Robert Scoble
Robert, the Reactions feature is what's below the comments, under "Reactions:" on your blog
- Jesse Stay
I'm betting that Disqus will have an equivalent out very soon - if so, is it really worth switching just for real-time, considering you'll have real-time shortly?
- Jesse Stay
Jesse: I think real time is worth switching for, but then you see how I use real time here on FriendFeed.
- Robert Scoble
I'm betting Disqus, because they've had a chance to see the competition, will release something better. I'm just not one to switch back and forth constantly though.
- Jesse Stay
Jesse: I still haven't switched my blog, but we did go with JS-Kit on Building43 because the JS-Kit folks seem to be ahead of the Disqus ones. We'll see if we switch my blog.
- Robert Scoble
Thanks @khrisloux I'll read that article, and take another look at the feature matrix.
- ASKJDOG
Either way both Disqus and JS-Kit are BOTH excellent systems from what I've seen, and I'm sure they will both continue to evolve.
- ASKJDOG
@Robert thanks for the lunch - was too much fun catching up again
- Chris Saad
Can't wait to try this but I'm going to extract my existing blog and test on an alternative platform
- Joe Dawson
good to read the discussion between Jesse and Robert: I very much want to choose the best commenting platform, and not switching bak and forth.. both disqus and current js-kit(future: Echo) have their plusses and minuses. Guess some sort of final decision on my side will take another couple of months, in the mean time staying with disqus and eagerly waiting for Echo...
- Jeroen De Miranda
Are either Echo or Disqus able to pull comments (not just posts) out from behind Facebook's garden wall onto one's own blog?
- David Sanger
Breaking: Wordpress MySQL injection – how to fix latest attack %&({${eval(base64_decode($_SERVER[HTTP_REFERER]))}}|.+)&%/ | AndySowards.com :: Professional Web Design, Development, Programming Freelancer, Hacks, Downloads, Math and being a Web 2.0 Hipster? - http://www.andysowards.com/blog...
http://www.techcrunch.com/2009... over hetzelfde onderwerp, nu in TechCrunch - hier de oproep om vooral 'Sterke' wachtwoorden te gebruiken (lange wachtwoorden met voldoende 'special characters' (&%%^$#@ etc); zorg er ook voor dat je totaal verschillende wachtwoorden gebruikt op de belangrijkste sites (WP, Ning, Google, twitter, ...)
- Jeroen De Miranda
ik heb voor alle zekerheid de lijst van Users in WP gechecked - er staan geen vreemde 'beheerder'-gebruikers tussen (had ik ook niet verwacht; we zitten al een tijdje op WP2.8.4; dat is de laatste versie)
- Jeroen De Miranda
"The new live.twazzup.com service, in contrast, focuses less on the numerics of one's profile, but what actually happens when they hit the send button."
- Anthony Farrior
from Bookmarklet
have just tried Twazzup; pretty impressive! Especially finding out who is influencing others is a useful feature.
- Jeroen De Miranda
This is bizarre. I auto-upgraded several WP installs to 2.8. Drag-n-drop works on all but one. So I tried unzipping a full install and uploading it - didn't fix it. Using another theme doesn't help. Could there be an entry in the DB that affects drag-n-drop?
- John Craft
Yep, I'm having the same issue. Drag-and-drop doesn't work for me at all, which cripples the new widget section. :( I've only performed one upgrade so far and am not reluctant to do any others...
- Michelle McGinnis
there is an issue with the thesis template; they have an upgrade version 1.5.1 that solves this problem
- Jeroen De Miranda
yup, I have heard that about Thesis, but I don't have it and I'm getting the same issue. It maybe is a coincidence, but seems to have started after instaling a plug-in LocalAnalytics. anybody got a solution for non-Thesis user?
- lucato
Other weird behaviours were that all plug-ins became deactivated. Other was that some plug-ins are missing info/images in the back-end.
- lucato
My WP MU has been behaving weird also. Lost the functionality to upload/add self-hosted images
- TrafficBug
what to do when your company is being 'attacked' on twitter, facebook....some interesting thoughts (Guy Kawasaki, Louis Gray, others)
- Jeroen De Miranda
this is a real issue and very good gentlemen
- Thomas Power
Totally agree Louis..Let the agitator speaks with themselves!
- Marieme
nee, zag het vanavond via een tweet van @scobleizer. Vroeg me direct af hoe ik dit weer moet plaatsen in de "brei" van tools ... wat is jouw mening ?
- dehaaspeter
erg goed tool; heb het onlangs ingezet op http://www.ambtenaar20.nl - kan er voor zorgen dat er meer integratie komt tussen blogs en allerlei livestreaming tools zoals twitter etc. Ook erg goed voor authenticatie van commentatoren. Een van de meer belangrijke nieuwe web 2.0 tools denk ik.
- Jeroen De Miranda
Jeroen, bedankt. Ik ga zeker kijken of het iets is om op mijn blog te integreren
- dehaaspeter
"By the way, you can chat with me now."
- Robert Scoble
just curious: will disqus and js-kit end up serving different types of users; or will this remain a head-on collision competition?
- Jeroen De Miranda
Jeroen: they have different philosophies on which course comments should take, so I think they will serve different users.
- Robert Scoble
The solution is simple: auto-refreshed ads integrated in real time comments. Every 25 (or so) comments, the auto-refresh adds an ad int he comment stream. Problem solved - pro bloggers are rewarded for active conversations.
- Trent Hamm
Robert, thanks; it acks my idea about the two products. Went for js-kit; am happy with it
- Jeroen De Miranda
Trent: you're assuming that someone would be willing to pay for that (unlikely to be clicked) ad...
- Joel Bennett
BTW, Robert - when you were at StartPad last week - I forgot to show you my OTHER recent project - a Real Time Link Discussion Service - http://Go2.me. Any link you send from Go2.me gets a real-time chat room in a side-bar.
- Mike Koss
Are the comments real time for everyone? I am not having that luck -- we ran a few tests. I even have the blank file on the server that they call for.
- Ben Hanten
People are willing to pay for (even less likely to be clicked) banner ads, and they're not streamed into the middle of content.
- Trent Hamm
Echo is the next generation commenting system. It’s the way to share your content, and watch the live reaction. You can quickly embed Echo on WordPress, Blogger, or any website and turn your static pages into a real-time stream of diggs, tweets, comments, ratings and more.
- Hans Mestrum
dit artikel gaat over Craiglist (CL) laat zien hoe je met relatief weinig inspanning een succesvolle web 2.0 onderneming kunt bouwen - vergelijking tussen CL en Yahoo is erg interessant (aantal medewerkers en omzet)
- Jeroen De Miranda
Just bought and installed the HeadWay WP theme. I'm now looking for a designer to overhaul my blog and give it more of a professional look. Looking for a custom header (with image) to be made, as well as complete blog overhaul. If you are looking to make some extra cash shoot me an email mikefruchter@gmail.com. Please include examples of your work!
Jeroen, I looked at Thesis originally.I was impressed at what HeadWay can do, same functionality as Thesis and much less of learning curve.
- Mike Fruchter