Robert: it has yet to be proven that Biz said that, I highly doubt it, quoted that link but it could be totally wrong
- Loic Le Meur
Seems awfully ambitious. They have money to survive and adapt though - hopefully they keep adapting.
- Jesse Stay
Jesse: to grow that large they need to find a dramatic monetization scheme. It'll be interesting to see what that is.
- Robert Scoble
Robert, yeah - I'm not discounting it. It will be interesting to see though. There are a lot of people that want their space right now.
- Jesse Stay
Jesse: I think Twitter is pretty defensible actually. Most businesses aren't going to start hyping up someplace else. Twitter is just part of the lexicon now. I walk into a lot of restaurants and they have "follow us on Twitter" right on the menu or on the tables. One even had it in their bathrooms. A new company is NOT going to get that. But agree lots of companies would love to be in their shoes.
- Robert Scoble
Robert, I agree, but keep in mind it's not just new companies that want to be in their shoes. Much bigger companies want their space as well. They'll need to adapt - many big names have gone down in flames due to large attitudes and non-willingness to adapt. Think AOL, Compuserve, etc.
- Jesse Stay
Sure, Twitter might have entered the lexicon... but... who cares if they can't come up with a way to make lots of money? Lets not kid ourselves: if they had a genuine idea of making lots of money, they would have implemented it by now. Instead they're just going to keep using VC money to keep afloat, hiring like mad and hope like hell that some silly company like eBay comes along and gobbles them up before the tide goes out and the VC's lose faith.
- Rowan Hanna
Twitter has no shortage of VC because everyone knows Twitter is going to be massive. Twitter is more concerned about growth than revenue at this point, which is a smart move, because it won't scare people away. I came up with a rhyme that applies to any Online monetization plan: Popularize, then Monetize. Monetize first and users might be put off and not sign up. Monetize after users sign up and they probably won't leave.
- Garin Kilpatrick
so we-re saying most of those employees planned will be sales, eh? They better hurry though, who can be sure that by 2013 they won't be myspaced by the next thing?
- Joelle Nebbe (iphigenie)
What 1bn people will tweet about? Oh I forgot only 10% post tweets...
- Giorgio Burlini
from iPhone
I did a $Billion Dollar #micropitch today + U gotta mention Facebook + Twitter but I also gave FriendFeed a Plug!
- Billy Warhol
Yep; Twitter isn't going anywhere - it is here to stay...
- Mark Harai
I liked what Ev, or Biz?, tweeted yesterday. Blogger was a side project that forced them to change course, Twitter was the same.
- Gary Walter (gwalter)
5200??? Wow. I don't think Twitter is going anywhere, but that's a lot. I wonder what the allocation of roles is for all those folks???
- Kristi Colvin
Well, if you have fixed the hole by upgrading; you should feel a lot safer now. I guess strong user adoption does bring the wrong kind of attention.
- Anindya Chatterjee
Anindya: we're watching. Looks like they haven't gotten back in since the upgrade and some of the other changes we made. Knock on wood.
- Robert Scoble
I'm very tempted to switch to a SixApart install. As a Perl programmer I'd be much more familiar with the backend.
- Jesse Stay
Robert, btw, I'm sure between all your users you can find a backup. I have a bunch via Google Reader I could get to Rackspace to import for you. I'm sure others have even older entries than I have. Let us know if you want help restoring the old scobleizer.com!
- Jesse Stay
robert - i can tell you this - you need to watch it like a hawk - when i thought i was safe - i wasn't - InsideTransit continues to get hit - and I still believe there is some patches and stuff that RS can do as well - the bigger issue is what's on the server - because that's where they put the shells and then they can do whatever they want.
- Allen Stern
Not cool, hopefully things will work out.
- Kim Landwehr
Jesse: luckily it was July and August, when I wasn't doing much blogging. No biggie. Thanks. Allen: yes, Rackspace Cloud has a security team now and they are actively looking at ways to make Wordpress safer for our customers. It really sucks getting hacked. Let me know if you find any other ways to protect the systems.
- Robert Scoble
Robert: Yea getting hacked sucks. My early days with my blog aboutonlinematters.com I got hacked and luckily my ISP had a backup. Since then I have treated my Wordpress blog like any dev site - with a subversion repository and complete backup. But there are days... like today... when I think strongly about a platform like typepad.
- Arthur Coleman
what i have found is locking down the files helps - but you need to ftp into your site and make sure that nothing has been edited or added - in my case, on all my sites, the hackers put files all over that were base64 files - and what they do is include them into WP or they just run them direct - nearly a full shell. i've asked RS to create a way so that i can be notified of any changes to files - they say it's too heavy to run.
- Allen Stern
Robert, I just miss the traffic from your "You are SO Unfollowed!" article. (one of the casualties) ;-)
- Jesse Stay
There's a lot of great info they deleted - I'm a little ticked they would be completely insensitive like that to prove a security flaw. It affected much more than just you.
- Jesse Stay
Jesse: yeah, that's probably the one blog that I miss. It's also the one that got me to notice they deleted a couple of months.
- Robert Scoble
No way "You are SO unfollowed" is out? I loved that one! :-( thanks for the cache Robert
- Sofia @ SoMaFusion
If you have no time to take care of yuors blog, maybe it's better if you choose the pro offer from wordpress.com ( I think scobleizer.com can have the minimum requirement to stay there).
- wolly
wolly: it's not just about time, attacks come from all directions so you've gotta have a holistic approach to security. How many of you regularly change passwords and make sure they are really good ones? (Twitter got broken into not because of hacks, but because they didn't practice good password security).
- Robert Scoble
It saddens me: it is morally reprehensible your hosting company convinced you to switch with the seduction of plugins and customization without emphasizing or handling the increased responsibility of upgrades. Your blog was not unique and not a special target, the worms sweep across millions of blogs indiscriminately and hit whatever is vulnerable. If your host is lax in upgrading, the...
more...
- Matt Mullenweg
that's true :-) I use password very strange and very verylong that I cannot remember and I use a service like clipperz.com to login.
- wolly
wolly, Robert was hosted on WordPress.com for about 4 years -- he was actually the very first VIP. Although there were dozens of security updates to WordPress in that time, his blog never had a problem because it was always up-to-date. He only switched away a few months ago.
- Matt Mullenweg
Ciao Matt :-) I didn't know that, so scoble come back to the light side :)
- wolly
Matt: yup, that's true. I've learned my lesson. Running your own servers are a lot harder than just having them hosted on Wordpress.com.
- Robert Scoble
To be frank, it completely breaks whatever trust I had in Rackspace.
- Matt Mullenweg
But Matt, I've been talking with many blog owners, including at TechCrunch, and they say that Wordpress' updates break their custom plugins. That's why they don't upgrade immediately. So, sounds like Wordpress has a mess on its hands that the hosted version of Wordpress didn't have (I couldn't run a lot of plugins and video embeds and other fun things on the hosted version of Wordpress). So, to blame it on my hoster/employer (Rackspace) exclusively isn't really a good attitude either.
- Robert Scoble
Robert, It happens. We were hacked too. My observations lead me to believe that this summer was the worst in a long time. Its a war and its going to be a war until the attitude towards hackers changes. Let's stop being fascinated in the least bit by how they do it (this goes towards Kevin Mitnick and his supporters- I don't ever want to pay good money to read about your scams on the...
more...
- Melanie Reed
Matt's got a point that with greater power (self-hosting) comes greater responsibility (more need to keep an eye on security), but I think to say that Scoble's blog was not a special target is a bit disingenuous. High-profile sites are always a higher-value target.
- Rachel Luxemburg
Matt: I think you need to really look at all the damage that's being done to a wide range of sites, many of which are NOT hosted at Rackspace, before throwing more barbs. That's bull. Sorry. But I added a link to this conversation to my blog so people could see your point of view.
- Robert Scoble
If a plugin is preventing you from upgrading (did it?) then let's figure out how to fix that plugin. All I can do in WordPress is build in the notices (your blog was asking you to upgrade for months) and the one-click updates for both core and plugins. I agree it's not your (Robert Scoble's) fault because I don't think you made the conscious decision to take on the increased responsibility.
- Matt Mullenweg
Matt: the reputation around the Net is that upgrades on Wordpress break things. This wasn't a Rackspace recommendation. It's also a problem with all upgrades. I've gotten hosed by upgrades elsewhere. Look at all the people upgrading to Snow Leopard who are having things break.
- Robert Scoble
Matt: TechCrunch hasn't upgraded its blog either and it wasn't hosted on Rackspace (at least not until a couple of days ago).
- Robert Scoble
I'm not saying there isn't lots of misinformation around the net, I'm saying "how can I help your blog, please." If it's a plugin preventing you from upgrading, let me know the plugin and we'll fix it even if we didn't write it. That's the beauty of open source.
- Matt Mullenweg
Robert -- Avoiding upgrades because they're annoying to deal with isn't a viable longterm strategy.
- Rachel Luxemburg
they need to take care of Scoble's blog, well for he is a VIP and the smashing they would have would do a lot of damage to your customer base and otherwise, would they reply to an ordinary guy say like me? i think not,well wordpress/automattic is having their tough moments, hope things get well and they get their repute back
- testbeta
Matt - you blaming Rackspace for security vulnerabilities in YOUR software platform is kinda like blaming Dell when a Windows box gets hacked. I think you are being irrational.
- Rob La Gesse
Matt: in my case it was the REPUTATION of Wordpress's upgrades that was keeping me from upgrading. I was waiting to see what other people reported broke. I didn't realize the severity of the security problems. But, I am now upgrading automatically. So I'm fixed. But you still have a reputation problem. Lots of people are reporting things break when they upgrade.
- Robert Scoble
Rob, I'm not blaming them. I'm saying it's the responsibility of any host, of any software, to stay up to date. If there was a SSH vulnerability on Robert's box I would say the same thing. Software updates are inevitable, there is no such thing as bug-free code, so staying up to date is a must.
- Matt Mullenweg
Isn't all this open source code? If it's broken, why not fix it? Doesn't everyone have the responsibility to do that? It's not any one source's fault in that case.
- Jesse Stay
Matt - I agree with you. So make Wordpress upgrades SAFE, automatic AND do some internal validation of plugin code to let users know they may be running something that is potentially insecure.
- Rob La Gesse
Matt, agreed. Not when its turned out as fast as people are yelling for it. People can't have it both ways.
- Melanie Reed
Matt: all Rackspace was providing to me was a Linux host. I was responsible for getting my upgades done on anything I ran on that system. But now we have a team making sure we're following best practices. That is NOT Rackspace's problem, though. That's like blaming Microsoft for a bug in Adobe software.
- Robert Scoble
I never listen to the reputation, I always upgrade as a security upgrade is out, and if a plugin doesn't work or I deactivate it or I fix it. Security is much more important than a plugin and Matt knows how many plugins has my blog (when he looked my backend he was very sad ad he said that it was the first time for him to see so many plugin in a blog :-) ) To have a self host blog it's difficult and time expensive.
- wolly
There are several very useful plugins specifically addressing security issues; and monitoring WP for suspicious activities (both on file and database level). Here are some articles with tips to harden your blog http://bit.ly/sZgh6 (delicious bookmarks). I only install plugins from authors from whom I know that they implement top level php; no breaking of upgrades on my 3 WP blogs has taken place (2.7-2.8-2.8.4)
- Jeroen De Miranda
Yeah, plugin issues are the responsibility of the plugin developer, not Wordpress's. I don't see how this is Wordpress's or Rackspace's fault.
- Jesse Stay
By the way, Matt, Sheamus, over on my comments on my blog, says he has the latest upgrades in place and he's still being broken into. You might help him figure out how the hackers are breaking in still.
- Robert Scoble
Sorry, I was under the impression Rackspace had recommended you move away from WordPress.com and taken responsibility for the system. I was worried about your blog -- I emailed you about this in August but never heard back. It breaks my heart when someone's WordPress gets compromised.
- Matt Mullenweg
I understand the feeling though - if people are still being broken into after being told a fix was made, especially if you're not a developer, that can be a little scary. I'd look to other solutions in that case if it were me, and it's no one's fault. It's just perception and fear, very valid fear.
- Jesse Stay
I do believe there is a false sense of securty that WORDPRESS fosters by hosting plugins. I think many assume that because they download the pluging VIA Wordpress, and FROM Wordpress, it is somehow vetted.
- Rob La Gesse
Matt: no. I wanted to move to my own install of Wordpress so that I could run many more plugins and start doing stuff other professional bloggers were doing. I am learning very quickly just how much work goes on behind the scenes to make sure my words were protected.
- Robert Scoble
Once you've been hacked once if you don't clean up every trace (preferably a systems person does this) it's very likely something is left that allows the spammers to easily break back in, regardless of what version you're on. That's why the trouble with upgrading is worth it, it's much, much less than the trouble of fixing a hacked blog.
- Matt Mullenweg
Jesse: yeah, at Microsoft when a box got broken into they wouldn't let you use it anymore. They forced you to reinstall it with all patches loaded. They assumed that it was compromised and that someone stuck a back door in somewhere. That's a lot of work too.
- Robert Scoble
install either wp-backup or wp-dbmanager and configure database backup: every day; download to your local pc (or to a system other than your hosting provider); run a check once a month to see whether you can reconstruct the blog in case of calamity, That is my procedure; works fine.
- Jeroen De Miranda
if a commoner gets hacked, then he should move to wordpress.com services or what?
- testbeta
they should just make it not have any security holes!
- Mark
Robert, if you like I'd be happy to host your blog for you (and I'm on Rackspace servers). I can keep it secure as well. I'd only ask some mention of SocialToo somewhere (or payment of some form in order to cover the cost of bandwidth).
- Jesse Stay
I would also be able to keep it backed up for you.
- Jesse Stay
So the take away messages are: 1) hosting services like Rackspace support the hardware and OS layer and you're are on your own for everything else, 2) maintaining your own website is difficult work, even for experienced IT professionals, 3) social media experts may not really know how to use the social media tools they are recommending, and 4) while hosted applications like Wordpress.com provide less flexibility, they take less effort and can be more reliable for the average small business.
- Steve Wilhelm
I'll also install any plugins you're interested in trying
- Jesse Stay
Jesse: in my case, I now have a team of the top security guys at Rackspace working on it and making sure my system is up to date and backed up. They also are learning a lot about this and other people who have had problems and are building a list of best practices.
- Robert Scoble
This is eventually why I didn't go with Mosso. The service looks good, but you still have to manage your app yourself which opens you up to problems like you've experienced. It would be cool if they offered another layer of management on top so apps could be completely hands free.
- Todd Hoff
the alternative (i.e. strong vetting of all plugins) would turn the whole WordPress ecosphere into something such as Ning.... only some 300 addons (as far as I know); little flexibility very intransparent how to get your addin accepted .... Not an attractive model for me....
- Jeroen De Miranda
Robert, excellent - just wanted to make sure the offer was out there. Maybe that could be a tiered service for Rackspace, although I'm not sure it's something Rackspace wants to get into. Bluehost barely makes any money off of that type of service.
- Jesse Stay
Steve: I think that's a reasonable set of assumptions. The grass is always greener on the other side of the fence. When I was on Wordpress.com I was always jealous of blogs that were able to run the latest plugins and use the latest embed codes from various sites.
- Robert Scoble
Robert, it's even more fun when you can customize the plugins and themes as a developer. :-)
- Jesse Stay
@testbeta wrdpress.com is a very good choice if you don't have time or you don't know how to manage security on yors self hosted blog
- wolly
wolly: that takes out the open source fun part ;) well i have nothing much to do on my blogs so i keep mine updated ;)
- testbeta
I agree with you :-) but many people love blogging non update theirs blogs :-)
- wolly
when my sites were hacked - a wordpress employee reached out to me- i dont remember her name but we sent a few emails - i could write for days about what happened to my 5 sites - my take is simple - i think the issues are a combo of rackspace (my host) and wordpress (my software) - i can tell you this - in 3+ yrs on drupal, i was NEVER hacked. and Matt is right - the real issue is that...
more...
- Allen Stern
Allen - what version of WP are you running today?
- Rob La Gesse
If there's a shell script on the same server as you, even if it's not your account, everything on that server is at risk regardless of the software or its version.
- Matt Mullenweg
I would switch to a new server if I were infected at this point.
- Jesse Stay
Properly configured, user space can be isolated and these scripts cannot cross-pollinate.
- Rob La Gesse
It can be -- but publish a shell login on your server and we'll see. ;) The right answer is to scrub that sort of access.
- Matt Mullenweg
Matt - that comment on the "shell script" is silly. What are you actually trying to say?
- Robert J Taylor
Some sort of backdoor that allows a remote user to execute code -- it's super common.
- Matt Mullenweg
rob/matt - that wsa one of the biggest issues with my RS account - i had all the sites together in one "client" so when they hacked one - they were able to move around with their shell script into all my other sites - now each site is in a sep. "client" so the damage can only hurt me on one site - and believe me it does hurt :( i believe insidetransit and centernetworks are hit in google
- Allen Stern
@Scobleizer I'm sticking with @wordpress it doesn't worry me that much, plus I always update and have backups of db and site emailed to me
- Justin Yost
Allen - that was within one user space though. So what I stated above still stands true.
- Rob La Gesse
Allen and Robert are big enough that if they had a problem they could contact us and we'd help them, though as far as I know neither did, but I worry a lot more about smaller folks who get hit in the same way. The knowledge for how to properly clean up after a hack is more systems than software and not widespread.
- Matt Mullenweg
As Allen mentioned above, he did have a conversation with Wordpress.
- Rob La Gesse
matt - thanks for putting me in the same category as robert! *blush* - i did reach out to you - and your security guy was helping me big time - it seemed to turn out that the WP Contact Form 7 was the thing that caused it to start - i didn't document it all online because the security guy wanted time to get the plugin developer to fix the upload hole. - btw his name was mark jaquith and he was great
- Allen Stern
So why not some scheme where Wordpress vets a plugin and "blesses it" - perhaps a small charge for this service? As long as Wordpress is advertising plugins on the dashboard I think there ample reason to hold Wordpress to some level of accountability for those plugins
- Rob La Gesse
rob - that's what i told mark - they should offer that service for a tiny fee - stamp a "certified" stamp on it.
- Allen Stern
Just updated all my sites, doesnt look I was hit.
- sean percival
sean - no one would hit you - they know you would lala all over them
- Allen Stern
I've read almost all of the comments here, not hearing these mentioned once: Robert did not backup, kept the default 'admin' username and failed to update. These are three of the most basic security measures out there. Not blaming it on Robert, because we all fail on this sometimes, but these basics really are important!
- Abounding Media
Abounding: yup. And the lesson here is don't host your own version of Wordpress unless you have a security team making sure you're doing it right and backing up (something I never did on Wordpress.com, by the way). Oh, and Twitter taught us that even if you do all of that you've gotta make sure you pick great passwords and think through ways that social hacks could be done to get into your accounts.
- Robert Scoble
http://markjaquith.wordpress.com/2008... some great tips of Mark Jaquith on writing secure plugins - I use these and other tips when scanning the PHP code of new plugins that I intend to use (before deploying them)
- Jeroen De Miranda
Jeroen, thanks for posting that. I've had phishers getting into one of my WP installs recently, but couldn't tell which plugin it was. I deactivated two plugins, including CF7, the other day, and haven't had any more problems. And a shoutout to Ryan Boren on the WP dev team for helping me to de-infect.
- John Craft
Robert: Welcome to the world of web development for impatient users and disgruntled hackers
- Melanie Reed
john - the CF7 is what killed me a few months ago - it's because the form allows uploads even if you don't actually have them on - i believe they patched it but i have not gone back there.
- Allen Stern
anybody know if a little smily face appearing in the lower right hand corner of ones footer is a sign of a compromise on a self hosted wp blog?
- Richard Reeve
John, your are welcome! SQL injects attacks specifically exploit data entry fields used by the plugin; one should at least scan the PHP code of these plugins, and look at what kind of escape functions are used around handling of the data entry.
- Jeroen De Miranda
"it's because the form allows uploads even if you don't actually have them on" - wow. That's bad.
- John Craft
"anybody know if a little smily face appearing in the lower right hand corner of ones footer is a sign of a compromise on a self hosted wp blog?" - if you didn't put it there, it probably is. In your admin go to appearance, theme editor, and read the footer.php file.
- John Craft
Richard - are you using the WordPress.com Stats plugin?
- Andre Natta
some plugins worth considering to install are: wp-exploit-scanner, wordpress file monitor, WP security scan, anti virus
- Jeroen De Miranda
I don't understand why people are worried about a plugin breaking when it comes to upgrading WordPress. If a plugin does break, disable it for the time being. I rather have a secure installation of WordPress running and would worry about fixing the plugin afterwards.
- Jason Hansen
Hmmmm . . . I run WP Stats, but see no smiley face.
- John Craft
ah...thanks folks...stats it is. phew...so I'm not paranoid...
- Richard Reeve
There appears to be some a-holes who can break into wordpress blogs very easily. I'm not sure at this point that the new Wordpress Thesis blog that I'm interested in getting is safe either. There is some security issues with Wordpress and their incompetence to fix the problem is growing every year. They keep coming out with new versions to replace the old versions yet they still have a problem. This is serious guys.
- Jeunelle Foster
The problem with WordPress is that it forces you to upgrade. Imagine if Microsoft forced everybody to upgrade to Vista/Windows 7 in order to get their security holes plugged. WordPress should release security patches for the current and at least for the previous version.
- Nikolay Kolev
They dont force you to upgrade. If you dont want to patch, you can leave it at the current version ( but with a risk )
- Kashif Khan
Where's the patch for the 2.7 version then?
- Nikolay Kolev
Their versioning strategy bumps up numbers even for patches . And how many versions behind should they support ?
- Kashif Khan
Many of the WordPress security issues are not coming from the WordPress itself, but from the poorly written WordPress plugins. I think it would be nice if Automattic starts an "Automattic Certified" program giving blog owners the peace of mind they need. Every hacker can upload a plugin at WordPress.org, advertise it as something great, bloggers install it, see that it's nothing as advertised, uninstall it, but the WordPress instances are already hacked.
- Nikolay Kolev
Plugins are open source and free and nobody (well, with some exceptions) would pay to get their free plugin certified. The only way to do this is by having a community review process, based on some credibility score and voter authority system where 1,000 fake hacker accounts won't, for example, outweigh Matt's or Mark's votes.
- Nikolay Kolev
part of the problem is the cry wolf syndrome - if i updated every day wordpress had a security problem i'd want to be salaried on the payroll :D Wordpress needs some sort of alert notification - twitter or something that indicates if there's an update AND the severity and if its severe enough sends it to my phone.
- mal
let me play the other side of the coin - i've been using vbulletin for my forums for probably more than 5 years - and it's never once been hacked - why is this - is it because it's paid? is it just more secure? would love to get some input on why wordpress seems to be the attacker's gold.
- Allen Stern
@allenstern because it pays back better to have wp hacked
- A.T.
Another devil - I have clients using Expression Engine for years (with plugins) and haven't had a problem either. Checking security sites, EE has had very few vs the many with WP and some with Drupal. Matts suggestion that one hosts with him to avoid problems and keep updated just isn't in the cards for business sites. Just too many vulnerabilities with WP over the years for me to recommend it.
- PXLated
i can tell you that within 2 days of moving from drupal to wp, my sites were hacked - all of them - and it made me seriously question the move - the reasons i moved were because wp is a bit easier to edit/code than drupal and because the admin panel in wordpress is awesome compared to the crap panel in drupal - i wrote up a whole post about why i moved - i'd like to see matt write a post about their qa and security procedures for their releases
- Allen Stern
Alen, once Drupal 7 get released, you may actually go back. :)
- Nikolay Kolev
Robert - If I were you I'd move away from Wordpress and fast. Its security record is dire and has been for ages. Other solutions are a lot more stable, whereas Wordpress seems to have security bugs every second week. Why anyone puts up with it is really beyond me. I moved to MovableType and haven't had to worry about caching issues or security problems
- Michele Neylon
#somethingpersonal WP calls you "technical evengelist", Robert. When you say «Yes, I didn’t have a backup. I should learn to do backups» I call you a mediawhore. Nothing TECH-NI-CAL, just bulled ego. Learn Security, Performance, Reliability, you ignorant piece.
- Капитан Сильвер Буллет
Robert - "the reputation around the Net is that upgrades on Wordpress break things" I'm sorry but that's just not true, I use many many plugins across about 20 sites and I've only ever ONCE had a plugin break during a WP upgrade.
- John O'Nolan
Definitely check if Google Reader has your lost posts - as of a few months ago, it didn't handle deletes very well :)
- Michael Herf
This recent wave of WordPress incidents shows the negative side of using open source software. Matt says that there are many people looking into WordPress' source code, but the problem is that probably half of those people have malicious reasons for doing so.
- Nikolay Kolev
@Matt - why not have a module that adds *automatic* upgrades? The one-click update feature is very nice, but zero clicks is better. With a decent snapshot/rollback system you could update most people securely right away--email them and let them rollback if something breaks.
- Michael Herf
@robert: we might be able to help you recover the lost blog posts if you want. Google Reader has an archive of them and we helped another blogger in the past recover her losses. Let me know if we can help.
- Edwin Khodabakchian
@matt when do you start to care about poor people unlike robert... who can't afford *VIP* i am willing to pay $25+ per month of course with my adsense ads :}
- Imran Jafri
@robert by the way you made one of the worst choice to move away from wordpress.com i think it wasn't price issue rather you wanted to be brand *ambassador* for rackspace which was only possible if you host your blog on their damn servers... if i get enough visitors i would switch to wordpress.com vip without taking 2nd breathe........
- Imran Jafri
I run just a few plugins, and research and vet them first. And upgrade to new WP versions within a week. Look, attacks happen, running self-hosted can get complicated. But this is true with any software or OS
- Bob Morris (polizeros)
from iPhone
Nikolay, it's always better to have more people looking at the code, because a bug that's been found is better than a bug that hasn't. WordPress used to get almost no security problems and people thought it was because it was coded differently, when in fact it was coded far worse than it is today it just didn't have enough users to make it worthwhile to target. Also where many...
more...
- Matt Mullenweg
Nikolay: I would also push back against your assumption that using Open Source software equals less security. Microsoft Windows and OS X are both closed source and both have security holes - there is a competition each year to help MS and Apple find them and fix them. Both Apple and Microsoft came away with security holes to fix this year. So just because it's open source doesn't...
more...
- Tim
that's what you get for the fun of installing and hosting your own installation, instead of using "the cloud".
- Ihar Mahaniok
Robert - I recommend WP S3 Backups for backing up your database to off-site storage. Amazon S3 is a great place to host backups of your Wordpress database and is relatively inexpensive. You *always* want backups *off* the server so in case the server is compromised, the backups are still clean. This plugin works like a charm, is automatic and could have saved you. Cheers!
- Scott Jarkoff
anybody know of a test that can be done to see if a wp blog has been compromised? Has a few strange user subscriptions about a week ago...but not noticing any thing else...I did upgrade weeks ago, but soon enough?
- Richard Reeve
bug exploits keep security IT folks in their day job, sad but true.
- Jim Posner
In IT it keeps me busy but the reality is if you update your software on a regular basis you can minimize these from affecting you.
- Rob Cairns
Robert, any chance archive.org has some of your old blog posts? Google Cache?
- drew olanoff
Matt, another thing to note is that Wordpress.com is often blocked in China (even if you have your own custom URL like scobleizer.com). There are advantages to NOT being hosted by Wordpress.com although your point about increased responsibilty for keeping up with security patches is still valid.
- Elliott Ng
Drew: yeah, but what do I do? Just republish them?
- Robert Scoble
from iPhone
Sure why not. Scoble's best of. Reason why I hate stuff on the net sometimes is good stuff gets lost.
- drew olanoff
Give a try to the "WordPress Database Backup" plugin for WordPress and you'll receive regular backups on your email
- Francois Lamotte
Robert, You can get all of your lost blog post html out of Google Reader. I'm not exactly sure how to link Disqus back, maybe it's as simple as re-adding the old posts with the same title/date i.e. Url (I don't use it). Yet another reason to use FULL RSS feeds (instead of summary). See RSS isn't dead.. it's now a backup tool too! (http://ff.im/7JrlC)
- Chris Myles
Wordpress is a great blogging tool. It is however the largest target now - much like how Windows gets a crap-top more virii because it's the most used system. Someone used Drupal as am example of security... well I'm sure if Drupal was anywhere near the scale of usage Wordpress is you'd see hacks for that too.
- Gregory Wild-Smith
Robert: Just repost them with the dates set to the original dates they were posted. Simple, and no-one will ever know ;)
- Gregory Wild-Smith
I have always had a bad feeling about Wordpress. YMMV.
- Gordon Joly
from twhirl
Robert It could be a Rackspace problem and Not a Wordpress Problem. They might to increase there security on the Rackspace!!! You should checck into that!!
- Paul
One of the reasons I waited 2 years to switch from MovableType to WordPress was due to the security issues. I felt that the track record improved over the past year and moved 11 sites over. I can say this I employ a very extensive back up scheme but still worry about it. The ability to upgrade with a single click of a button has made it much easier to upgrade, but I always worry which plugins are going to break as I use a lot of plugins.
- Todd Cochrane
It's interesting to me to see the number of people who are "afraid" to implement a security update because it might break a plugin. I wonder if these are the same people who don't run system updates on Mac or Windows because it might break SIMBL or some other haxie. Your core = your core... without it you're smoked. Case in point: Scoble. If your plugins aren't working after an update, let the author know and request an update, but BY ALL MEANS don't ignore security upgrades.
- Kevin Donahue
hmm... I think that a lot of this conversation is missing something. Most software security updates are usually tested in hosts and thus delayed in their own releases by at the minimum of a week's time usually. This is due to hosting internal testing of patches before rolling it out to all servers. Now, whether or not RS actually performs these types of procedures, I don't know... but I...
more...
- Ben Hwang
First: I keep my blog up to date. Always. Fuck plugins, I decided that when I made the decision to use WP for my blog that updates would be a priority, only because of all the security issues that I remember from the early early days. Having said that, I have to agree with Robert that the perception with WordPress, despite all the work with auto-updates and in-blog notification is STILL...
more...
- Christina Warren
from iPod
I am spending the day finally making a back-up of my web space, then the upgrade.
- Sebastian Keil
you are right to not feel safe: when you are on the dominant platform, holes get taken advantage of really fast. At least it being open source you know it will also get plugged fast
- Joelle Nebbe (iphigenie)
"what do I do? Just republish them?" - Robert, you can set the published date to the original July or August date in the "new post" form. Where it says "publish immediately," click "edit".
- John Craft
I couldn't disagree more that the reputation is that an upgrade will break a plugin. How many plugins reach into the Wordpress core and screw around with it? Less than 5%? Any examples of plugins that broke w/ 2.8.4?
- beersage
Somebody hacked into my WordPress blog earlier this year as well. It was a bummer because I was working on a draft copy of a blog post that was very rough and had not been edited and they published it. I was on vacation shooting in Chicago and didn't figure it out until several hours after they'd already published it. Fortunately they didn't seem to do anything malicious other than...
more...
- Thomas Hawk
@Robert: "[Rackspace] are learning a lot about this and other people who have had problems and are building a list of best practices." Is it possible this list is something RS might share?
- John House
@Matt Mullenweg: I do like WordPress (even though we had a public argument with you and another Automattic employee on TechCrunch a while ago) and I am a passionate supporter of open source software - don't get me wrong. But sometimes open source code makes it a bit easier for hackers! For example, one hacker hears about an exploit and without communicating with others, finds the hole independently by just looking into the source code and starts exploiting it on his own.
- Nikolay Kolev
Social Media Club blogs got hit as well as several of our personal blogs (still sorting it all out). We try to keep up on most upgrades, but every time we do, simple plugins (like the Event calendar) break. Seems silly, but we have hours of work after each upgrade to try and keep everything intact, and sometimes, we end up downgrading until the 'essential' plugins catch up, which...
more...
- Kristie Wells
I have 2 wordpress blogs. One on my own domain and one at wordpress central. Still can't get my head around their upgrade gymnastics - may just stick with eBlogger after all.
- Houseofmax
i don't know what will happen in times to come but from the existing platforms, i love wordpress and i am not going anywhere, but that doesn't matter for wordpress right? ;)
- testbeta
Robert, at the end of it is just only your bloody laziness in upgrading that led you here :) Jokes aside, please at least be honest and say you didn't upgradede twice... :p.
- Matteo Flora
Nope. I upgraded to 2.8.4 as soon as it was out but the hackers had already broken in.
- Robert Scoble
from iPhone
The fact that WordPress is currently being exploited doesn't mean that other platforms are immune. For example, the recently discovered XSS issue with Ruby on Rails makes not only blogs, but every unpatched site a target. So, the only issue I'm having is forcing us to upgrade to a new major version without much time to do proper testing (I'm not talking about personal blogs here). I...
more...
- Nikolay Kolev
So Techdirt was hacked a bit ago. See their reaction: http://www.techdirt.com/article... it is the reality of owning a web site guys - ANY software is hackable if someone really wants in.
- Adam Singer
@Robert: as I see it Wordpress is as vulnerable as any other web app. Upgrading does good, but preemptive security does more and better. I know Matt and he knows I'm in awe with him and Automattic but simply spoken I DON'T TRUST WORDPRESS as I don't trust any other software. A little WebApp Security Firewall (or at least a little .htaccess rules for admin and preemptive locking of...
more...
- Matteo Flora
i find it interesting, and depressing that people are blaming Rackspace, they're blaming Wordpress, they're blaming Robert, but no one, *no one* seems to be willing to blame the only, ONLY people who deserve blame: the evolutionary failures that attacked Robert's blog.
- John C. Welch
Thanks to your post, I found backdoor Admin in my own blog (created yesterday apparently). Promptly deleted it, upgraded blog and took other measures, which I blogged about
- Adi Rabinovich
@Matt Mullenweg: "so staying up to date is a must. - Matt Mullenweg" You gave the birth to one of the coolest piece of free software on the net, also your community is strong an love-full, you can do some PRs listening to Scoble that is crying, but you couldn't do anything better than you did. Take it easy man, all your competitors still suck. (PS. also a cleaning utility to understand better if everything is ok on our hosts would be cool ;-)
- righini riprova
Matt: What does a user need to provide, in order to be considered for a VIP wordpress.com account?
- Jim Connolly
Take technology out of the picture. Something bad happened by some bad person. Happens every day... it's called crime. If a bad person got into my house because I had a weak lock or left my door unlocked, what do people usually say? "That bad person shouldn't have done that!"? Well, sure, but bad people do bad things... nothing we can do to stop them other than make it harder or...
more...
- Chris Hearn
I would simply like to reiterate the point that if you're going to put free open source software on a rented web server, you need to either know how to administer it or hire someone to do it for you. Neither Rackspace or Wordpress are to blame here. We discuss this with our clients all the time who view web development as a one off expense, then get upset when their site is hacked because it wasn't maintained.
- JP Maxwell
One more point, I think there are way too many false lines drawn over aras of responsibility - "I'm systems, not a PHP programmer. I'm a PHP programmer, not a Javascript person. I'm a designer, not a programmer or a systems person." If you are a WEB developer or responsible for maintaining hosted WEB applications, you need to know a bit about it all. It simply isn't sufficient to demarcate your knowledge sphere and point your finger at the other guy.
- JP Maxwell
CrunchPad looks pretty similar to Google's OS, very simple, very web centric. I wonder how Google shipping netbook OS will affect Arrington's plans?
- Robert Scoble
Mike is gonna bring out the first Google OS powered hardware ?
- Swaroop
Geoff: yes, but maybe CrunchPad 2.0 would shift because of it?
- Robert Scoble
I don't think the compelling feature of CrunchPad is its OS - it's the form factor. He won't lose anything by putting it on the CrunchPad as soon as it's released.
- Matt Mastracci
hmm, thought that u have 2 plug into the USB and doesn't have much memory on its own? I may be wrong cuz I didn't get much info.
- polou/indigo_bow
I am looking forward to both launching. CrunchPad has a great form factor as well. We haven't seen anything from Google OS yet.
- Louis Gray
Swaroop: I doubt it, because CrunchPad needs touch features.
- Robert Scoble
well it will be open source, so I wouldn't be surprised if the innovations flow both ways - my understanding of the crunchpad is it is also based on Linux - so you might see features merge between both platforms...
- Shannon Clark
Shannon: yeah, I wonder if the CrunchPad OS could be ported to the Google OS? If so, that could be a big win for Mike.
- Robert Scoble
I bet it could, because CrunchPad OS is built on Linux and I bet it won't take much porting work to move it to Google OS.
- Robert Scoble
@All - May be Crunchpad emulator on Google OS :)
- Swaroop
crunchpad is silly and only gets press because its Mike Arrington's baby.
- Zac Bowling
Robert - my point is that potentially as well Google may be porting features from the Crunchpad - the beauty of OS platforms...
- Shannon Clark
Ah, I do like crunchpad much better perfect 4 my Canadian-ness eyes.
- polou/indigo_bow
Zac: I disagree. I want a CrunchPad. It looks interesting to me as a coffee table computer. A poor man's Microsoft Surface.
- Robert Scoble
In any case, I bet Michael's time spent on Crunchpad just went from 75% to 100%. Or at least it should. Getting caught slacking while an opportunity awaits is no good.
- Sam Dodge
Zak from the photos & features descriptions, I'm pretty darn interested in buying a Crunchpad - seems like a very useful formfactor and device
- Shannon Clark
my initial reaction is: "do we need another OS?" even more to the point, Chrome browser is still quite a ways from done (mostly plugin problems) and i've not seen a lot of progress in this area. my suspicion is that the OS will go the same route. big splash on the easy 80%, but slow going on the remainin (difficult) 20% i remain optimistically skeptical.
- MikeAmundsen
I'm pretty sure I'm going to pick up a freelance gig just to purchase a Crunchpad. If only to support Mike and his team as they take a huge leap from reporting on tech to making tech.
- Sam Dodge
Robert: Curious to what's on the coming monday.
- Swaroop
Swaroop: I can't tell you until Monday.
- Robert Scoble
OS define by Google isn't really an OS at all its like going 2 7-11. Anybody agree or disagree?
- polou/indigo_bow
Oh, you are a tease Robert! Do tell, we won't pass it on, promise! ;)
- Sandra Large
I think that Google Chrome OS lowers the barrier so that a lot of other companies can deliver their own pads. As such it is not a great news for Mike but it also validates the vision so may be a competitor might be interested in acquiring CrunchPad
- Edwin Khodabakchian
Robert: We won't let Google index what you say. nofollow
- Swaroop
Edwin: will CrunchPad ship with a "Google inside" sticker on it? :-)
- Robert Scoble
Robert: we had something like CrunchPad inside TI when I worked there a few years ago. not a resistive touchscreen but it was pretty cool. concept device to pitch the OMAP processors to the hardware vendors we designed in house. Nokia bought into it and created the 770, N800, and N810 devices from that tech.
- Zac Bowling
I think I would want the multi-touch capabilities of Win7 on something like a CrunchPad...
- Christopher A Carr
man i hope he uses it on the crunchpad instead!
- sean percival
With that form factor, it needs a wacom tablet and windows 7.
- Rodfather
I think that the bigger opportunity for the crunchpad is to enable other media companies (not Techcrunch) to buy the technology and create their own pads (everyone wants to replicate the Kindle model for their own content). The problem of Google OS is that it slice the Crunchpad in the middle.
- Edwin Khodabakchian
Rodfather: I disagree. There's a new opportunity to get rid of installable software and go completely with Internet platforms. That's why CrunchPad, Jolicloud, and Google's OS are so interesting.
- Robert Scoble
Google won't kill Microsoft. They don't need to. They need to open up new opportunities.
- Robert Scoble
Robert: I am still scared to put personal data out on the cloud. Is it time already ?
- Swaroop
Robert they need to use cloud, therefore still would not solve the problem of storage.
- polou/indigo_bow
I still want the option :) GoogleOS will run on anything. So it'll naturally make it there.
- Rodfather
They do not need to kill Microsoft but they need to change the terrain of the fight from search to productivity apps and OS and they are doing a good job at it.
- Edwin Khodabakchian
Edwin, I disagree, what is interesting about the Crunchpad is delivering a form factor that is better for many people than the Kindle (or at least a much better price point) I'm going to get one to use for lots of digital reading. Swaroop - pretty much all of my personal data is already in the cloud - and more secure there than on my computers in an earthquake zone
- Shannon Clark
is there the reason why there r SSL ways 2 purchase or other ways to keep data safe @Swaroop
- polou/indigo_bow
@Shannon. Form factor is cool but that is a pure hardware business, mostly outsourced to asian manufacturers and very thin margin. The software is where the barrier to entry and business models will be.
- Edwin Khodabakchian
Shannon: My confidence is shaken when a lot of personal data/docs get exposed due to flaws in software. We just need a "skynet" kind of bot to auto check for vulnerabilities.
- Swaroop
@edwin the software is open source - which means that anyone can use it. the margins, though thin are real if you do hardware right. Sure outsourced, but high design & a competitive price can equal very large sales so small margin still equals decent profits (and sustainable business)
- Shannon Clark
@shannon: so do you mean that Google Chrome OS will not reduce the barrier to entry for companies wanting to create their own XXX pad?
- Edwin Khodabakchian
no I mean the Crunchpad & the GoogleOS are both based on Open Source, so the competitive advantage of the crunchpad is hardware design, not software (as far as I know from what I've read)
- Shannon Clark
polou/indigo_bow: Yes data transfer and storage could be encrypted. We need better identity management too
- Swaroop
yup current identity identification issues r not my favorite, OpenID not all perfect even though I am a big fan of it. Its so hard to work with, grrr @swaroop i could say more but thats all 4 now.
- polou/indigo_bow
unless they have already licensed some of the patents covering the more popular touch idioms using GoogleOS would give them a broad-base multi-touch API to work with that has deeper pockets to fight the patent battles
- bear (aka Mike Taylor)
well this may sound strange - but I suspect more than a few patents could (potentially at least - I'm not a lawyer) be invalidated by prior art in the form of movies like Minority Report (and likely other earlier but less popular SF series & movies) which showed multitouch type of interfaces
- Shannon Clark
more copyrights problems cuz of the mighy $$$. that left the big boys again, isn't it?
- polou/indigo_bow
No mention on price...I wonder if google will go for the free + ads model. Imagine ads running on the desktop, along with annon. usage statistics, how much more will google know?
- Thomas Hunsaker
from Android
@thomas why assume they will run ads in/on the OS - I'd guess that like Android they offer it for free (or for a very marginal cost) to OEM's, bundled with a bunch of default links to Google properties (esp Google search as default) and profit from expanding the number of people & devices connected online. Add in revenues from selling cloud based packages such as Google Apps for Domains and they make money w/o ads on the desktop or privacy issues
- Shannon Clark
Thomas: why wouldn't Google Chrome OS be free?
- Robert Scoble
Thomas: You would have it Google Chrome OS Beta under Google Apps. And yes there will be a lite version where you can only run a single process :)
- Swaroop
Great discussion. I think Mike should not adopt Chrome OS for crunchpad to begin with. I don't even think Chrome OS would be polished by the time he plans to launch crunchpad. I think Crunchpad launch could set the bar and direction for what Google Chrome OS should/could be. In terms of usability, we still don't know how Google Chrome OS could play out. I think different initiatives such as Chrome, Crunchpad and Jolicloud will help this ecosystem,.
- Akshay Dodeja
I'll get a CrunchPad only if Chrome OS is in it
- Hendra
CrunchPad and ChromeOS are fundamentally distinct, seeing as they run completely different browsers (Firefox and Chrome, respectively). They will be able to share apps, though, as Google has stated that apps will work in any HTML 5 browser.
- Vezquex: God of FF
Vezquex: why is the CrunchPad limited to Firefox? When I saw the CrunchPad I saw nothing that would limit it like that and that dependency, if it exists, is probably easily worked around.
- Robert Scoble
LOL... What a leading observation Scoble. Imagine if the Crunchpad will actually RUN the new Google Chrome OS.
- Greg
Robert - my guess is that as Firefox is one of the only browsers currently available for Linux that is what Vezquex is thinking - however with this announcement I suspect we can guess that Google will be announcing Chrome for Linux rather soon (which likely means for Mac OS as well)
- Shannon Clark
Is there a link to the crunchpad? been busy. Or to the google os (more high end centric than android). Nevermind got it here: http://www.techcrunch.com/2009...
- Mark Essel
Is there a spin off company now for the crunchpad?
- Mark Essel
maybe he was in on the big secret and crunchpad is the first device running chrome os?
- Servaas Schrama
Thought I read the crunchpad has a webkit browser ... Not firefox - at least not by default.
- Jonathan Greene
from iPhone
I agree with the browser as the OS but why would I want a pad that I have to lift my knees up to see when I can have a lap top that I can tilt the screen to fit any position I fell like stretching out in? The price point is going to have to be low, low, low for this form factor to take off.
- Stephen Pickering
Scoble, Why you want to discuss this, when we have other worries. Running adobe in chrome, UI etc
- Michael_techie
Hello…? reality check. Is there a CrunchPad on the market? Is there a $249.95 CrunchPad on sale? Quit talking of it as it it were a done deal. It it anything but, and the promiseware may yet end up in TC Deadpool before it has shipped a single unit. Takes a bunch of geeks on FF to discuss implications of porting "CrunchPad OS," hell, emulating it even, on Chrome OS, before either has passed into the domain of the real.
- ianf ⌘
@Shannon Clark [suspects that] "more than a few patents could (potentially at least - I'm not a lawyer) be invalidated by prior art in the form of movies like Minority Report (and likely other earlier but less popular SF series & movies) which showed multitouch type of interfaces." - you are confusing Hollywood with Real Life, which I suggest you get a dose of, the latter.
- ianf ⌘
It's all Linux, and I suspect that crunchpad if it even has an OS uses it too. Swapping out one Linux for another is relatively easy if you've got the source and the hardware information. <3 the Linux Virus, an OS that runs on almost all known hardware, and even as a x86 BIOS for instant ON.
- rob friedman
@dodeja "I think Crunchpad launch could set the bar and direction for what Google Chrome OS should/could be." Puuhlease...get real, what have u been drinking?
- Hendra
I wish Mike luck with the pad but it's just not the right form factor for me, just a little too big from what i can tell. My ultimate would be like a 6" screen. With a device this size you have to decide if you are going to finger or thumb type. Anything in between is going to be awkward.
- Keith Beucler
actually no. If a work of fiction depicts an innovation (especially stuff like UI) that could certainly be prior art. The point of a patent is to be INNOVATION - prior art, even in fiction, is just that - earlier examples of someone else having the same idea. And in the case of Minority Report - a LOT of people contributed to build those interfaces & design ideas - see http://www.lukew.com/ff...
- Shannon Clark
Shannon, you win. Please be sure to report back here (minority- or majoritywise, either will do) on any patent application contesting case, where fantasy GUIs cooked up for film-clarity reasons –it's never an easy thing to show off on a cinema screen– are entered as exhibits of "prior art," therefore either invalidating, or denying a patent. I'll wait by the computer until next Tuesday, do we have a deal?
- ianf ⌘
meh... like I'm going to Roger Ebert dictate whether or not I go see giant shape-shifting robots battle it out while Megan Fox runs around in little booty shorts.
- Bryan Zirkel
Im not going to let Megan Fox dictate me paying 9 dollars for a bad movie.
- Mickey Jones
then you're a stronger man that I am. :) These movies are popcorn movies: buy ticket, turn brain off, watch things blow up briefly punctuated by Megan Fox scenes, enjoy. Ebert's opinion of a movie like this has no bearing on whether or not I'll see it b/c it's not period piece with pouty-faced actors fronting an English accent.
- Bryan Zirkel
paul: spammers don't bother me. They add about as much value as people who tell me they had a jelly sandwich for lunch.
- Robert Scoble
Jeff Pulver Followers every p0rn site and spammer who Follows him, check his Following list
- paul mooney
paul: here's a little trick: I do most of my following in friendfeed. Why? Better friend management.
- Robert Scoble
I also have issues bc what I have to follow for work is very different from what I want to follow, but that is another issue.
- Michelle
Twitter has gone the way of email, that's why Twitter Search doesn't work - the system is overwellemed!
- paul mooney
Bill: actually you only need to follow a few people to get a pretty good look at the good stuff. Why? If something is good everyone talks about it.
- Robert Scoble
Michelle - same issue here! work vs. professional following and juggling multiple accts
- Kirsten Hamstra
paul: it still works for me. I just skip over the spam. My mind likes seeing spam and noise. It helps me see the news.
- Robert Scoble
For the rest of us - just friend Scoble -- you might hear about stuff delayed 5 minutes or so.
- Brian Sullivan
Where do I get one of these neat sockets in the back of my head, I get dizzy just trying to follow 2K people.
- dabitch
All the Twitter marketers are auto-Following the spammers, it's a perfect storm
- paul mooney
paul: in email I don't care about the spam either. I can always scan a page of spam and find my boss' emails for some reason.
- Robert Scoble
reminds me of roy - I've seen things you people wouldn't believe. Attack ships on fire off the shoulder of Orion. I watched C-beams glitter in the darkness at Tan Hauser Gate.
- mike "glemak" dunn
That's why people who don't follow others on Twitter are kinda of missing the point, aren't they? I love seeing when people are being followed by 30,000 people but following 2.
- Curt Mercadante
BTW Robert, props on following the Iran elections. Hopefully this will open our eyes to what has been happening in Egypt, Russia, Pakistan and a host of other countries for decades. If Benezir Bhutto were alive and had been elected like she would have been, we'd live in a different world.
- Michelle
Robert: so in a way, if you follows all that people, we actually needs to follow only one person, which is you. here's why: it is most likely that you'll post about the major stuff that you read about in your friends stream - which make you a better filter than any other service around :) (I'm following lots of people too because I simply like to find and read about new and exciting things)
- Orli Yakuel
I totally agree with you Robert. It's like holding your hand into a jet of water and drinking from time to time.
- nik
you need to have the spirit of sharing good stuffs to others, or the good only reaches you but does not spread out.
- K.D.
I cannot get people to join FriendFeed. I even did a video showing them how great it is. I cannot seem to follow that many more on Twitter than 200 and keep up with them. I tried Tweetdeck, but it just used too much RAM for me.
- Hummie
The REAL trick here is that you have a natural gift for scanning with your eyes. I would follow many more people if I could scan (and absorb) information as quickly as you do. Since I don't, I follow you. You are among my first line of defense.
- Bettina Tizzy
All these fortune cookie Tweets are the work of spammers, sooner or later comes the link to the get-rich-quick site
- paul mooney
Sounds a little like Joey Osmond - Robert I see patterns Scoble? Definitely agree though - there is useful information that can be pulled from the right people's twitter/friendfeed that gives trends developing real time, as long as sea changes over longer periods
- Tom Tubbs
holy shit robert... i just had my mind blown watching your live friendfeed. this whole time i've been trying to control the chaos... keep people organized into neat piles. wow... wowow
- Eric Nakagawa
@Hummie: I had the same problem with TweetDeck. Try SeesmicDesktop, it has similar functionality but less RAM-greedy
- Ashalynd
Robert do you have a link to the video you did showing 'how' you manage all this information flow? I would enjoy watching it again.
- Matt Perry
here's another interesting search which will show all scoble's friends' items that have at least 1 like: http://friendfeed.com/search... only wish this were realtime
- Mike Chelen
Robert - cool post, excellent comments - same exact reason I embraced FF in early days and stayed here!! Love it
- Susan Beebe
Robert since I have been following you I have done a complete 180 on how I felt about social networking before. I mean the media is fast but social networking works at the speed of thought. Now if I could only figure out how to interact behind the Army & Airforce firewall... I felt lost today at work... LOL
- Nathan McClain
Orli the problem with only following me is that I need to sleep once in a while and I also might not follow people you care about. For instance, if you are into celebrities and not technology I totally wouldn't be good for you to follow.
- Robert Scoble
we know what I care about and I'm glad that I'm following you! but I got the point, and I agree of course. I was just kidding I guess..
- Orli Yakuel
Great video. Watching it again now...
- Matt Perry
Yeah some wild connections are made by watching a lot more than a few friends. Wonder why most people don't "get" that? Researchers should follow a ton of people and sources.
- Jack Humphrey
Jack: actually, people should do BOTH follow a ton of people and sources as well as follow just a very select group of people. I wish I could share my groups (er, lists of friends) with you all. THEY are going to be the secret to filtering in the future.
- Robert Scoble
I'm lazy. I use your feed as my pre-filtered source of good/interesting general information. Thanks for doing a lot of the hard work for us (or at least me).
- John Meagher
Robert I think you are 100% correct, but it touches on what people should have already been doing, and that's getting as much information as they can from as many sources as they can and putting the facts together for themselves. I think traditional media's days of fact-less reporting are thankfully numbered. This is truly Fair and Balanced!!!
- Nathan McClain
Robert: People still won't get it. Seeing patterns is a talent or a skill. You can aid it, however, by showing or demonstrating how you filter for patterns. How do you scan messages and discern a pattern? How do you focus on a few without missing the patterns of the many? Might make a good presentation/blog. You probably already did it, right?
- Alan Eggleston
I don't think it requires following 125,000 people to be aware of the same trends.
- stretta
stretta: it does not, but I get to see small things that many people don't.
- Robert Scoble
Robert - and I appreciate those "small things" :) --- they look like startups! and new bright shiny tech toys!
- Susan Beebe
imagine an AI system that can analyze all that data for you and generate illuminating reports...
- Matt Jaunich
Matt: I can and lots of geeks are working on building just that.
- Robert Scoble
Thanks for the post. I immediately added the "like" search to my saved searches.
- Sean Powell
I follow 60,000 and I see a white light at the end of a tunnel. It's getting closer...
- Rick
You must do this by o s m o s i s....no other way? Intuition and speeed reading.
- Ziona Etzion
Yeah. Robert, I don't read your stuff and I don't know if you're going to read this. But regardless, I know you're well famed and this is the first thing I skimmed across of yours that would indicate that it's deserved. I follow options in the same way., eg almost literally. I have TD StrategyDesk open right now, ThinkOrSwim, Power E*Trade Pro, OptionsXPress, and the regular TD Ameritrade website open as well. Doing this allows me to view and be ware of data and turning points in many views and levels
- Matt Kaufman
Robert: If you could follow all 100,000+ people from Twitter in real time within friendfeed would you?
- Garin Kilpatrick
Twitter is a helpful automatized hammer for the main engine, which is friendfeed ;
- ewing2001akaNicomedy2010
I don't see why you couldn't just save a search on everybody's posts with likes on FF though and still follow only those you actually read daily + any protected accts? Even build smarter searches than that. You increase the number of people following you by lots more your way of course.
- Thomas Bøhm
from BuddyFeed
Sorry. The trend watching and analytical part would be the same, wouldn´t it, except that I now see that the saved searches don´t update in realtime. Yet.
- Thomas Bøhm
from BuddyFeed
That's why realtime filters would be awesome. All the relevant stuff, without refreshing.
- bnoise
from IM
1. What sets apart the 100,000 people you "follow" to glance at once in a while from the everyone feed?
- Patrick Mackaaij
2. (a Friendfeed question): Do you still read this since I posted this comment a few hours after the initial conversation.
- Patrick Mackaaij
How did you find so many people to follow? How does an average user find so many to follow?
- Bas
Patrick: I was on stage and couldn't be on friendfeed.
- Robert Scoble
Patrick: the people I follow are usually much more tech interested and demonstrate early adopted behavior than the larger public audience.
- Robert Scoble
Never mind all this. How's Opera? Got a link this morning and thought I might try it (what a surprise, me trying something).
- Francine Hardaway
Robert: Is this a Mandelbrot pattern? The chaos has a look, a feel and a taste, as in the jet of water analogy. You're the freakin' hydrologist with the dousing rod.
- Phil Boiarski
Robert: I was not expecting a real time response but was wondering how you keep track of all conversations you engaged with on FF. How can you see where comments are added?
- Patrick Mackaaij
I'm with Robert, just not with such a big of a scale. My point: I am noise and you are noise. Let's not forget there's a baby in that bathwater before one takes a blanket anti social network view of social networking!
- Mike Lewis
OMG Robert I agree 100% BEFORE Twitter screwed with the @replies censoring us from seeing all that people tweeted... I could scroll through my home page and get the pulse of the world on Twitter! A beautiful site! Comparatively now: Twitter is silent.
- Arleen Anderson
All major television networks/news outlets should hire Scoble and heed this advice based on this weekends events in Iran. They need to learn how to listen, filter and understand how social media can deliver real-time information around the world.
- E-Advocate Network
What tools are you using to keep track of the all that flows past?
- Inbox2 Team
Yeah, Robert is an Androïd! Each time I'm gotta 'like' 1 of his entries, comment, or visit links, I ask myself if I'm doing this because he is Scoble! Of course not: it's just because he's always pointing on valuable infos. And this is good for IT stuffs, for early adopters, for business.
- Thierry R. Andriamirado
So, Scoble proves that the best search & filter engine is Human. (Nah.. I'm not a 'groupie', never will ;-))
- Thierry R. Andriamirado
Curt, pple who don't follow others and hope to be followed & heard are obviously wrong. Social Media is not "Ego Media" ;)
- Thierry R. Andriamirado
Patrick, IMO Robert uses FriendFeed's search to find infos, & FF's email features to keep track of conversations & updates
- Thierry R. Andriamirado
or maybe you also miss some important ones because of the noise: like the patterns known by 99% of the users that have less than 1000 followers? does that make sense?
- Ouriel Ohayon
isn't that a little too much? do you even have time for anything else? Is it worth knowing about an earthquake some 30-40 minutes earlier than most people than spending some time with your real life friends?
- stefan
Stefan, the point is: if you want to spend as much time as possible with your real life friends, you have to be as efficient as possible during the time you spend in front of the computer. The more information you drink in a short time, the faster you can identify patterns.
- Brome
Best answer I've heard for why I'm also ok with following and listening to a ton of people on various platforms: "noise is like the lawn. It lets you see the flowers. - Robert Scoble"
- Leslie Poston
Wow, that's a clever use of the platforms!
- gareth【ツ】
We need information so we can decide while staying in touch with reality. -> Filtering skills, Good Human filter, Good filter tool (FriendFeed).
- Thierry R. Andriamirado
from email
Thierry: thanks I was looking for that indeed! Have changed my settings to see how e-mail works out there but I thought maybe there would be an easier way...
- Patrick Mackaaij
hey it was great to finally personally meeting you and hung out at the diner ; my weblog about the evening now at http://ff.im/45HR3 plus infos about WE LIVE IN PUBLIC premiering now in L.A. and my new video "PERU" @ http://www.youtube.com/watch... ; all the best for the conference today and building43 ;
- ewing2001akaNicomedy2010
Another FF question: I was under the assumption FF would merge duplicate imports so that conversations like these would remain in one place. If I do a search on a tending topic of today this does not seem to be the case: http://friendfeed.com/search...
- Patrick Mackaaij
Patrick, the imports may be duplicate URLs or pictures or whatever, but the conversation around them could be different. I see this as a good thing, and it show me two things. (1) it is an intersection of the different groups and types of people that I subscribe to. (2) it can be different nationalities in different timezones. Ie, of a more global interest. Bothe are good pieces of data for me.
- Andy Bold
from email
@Brom, yes. but there is only so much information one can absorb at a time. 100.000 twitters and 25 FFs? Even half of it is too much for a normal person to take in that fast. Robert MUST be a robot O_O
- stefan
@Andy: I'd rather not see any duplicate URL's and have the conversation take place in one thread. Google Translate can solve the language problem. But my question at the moment was what the current status is. I see it's already discussed here: http://friendfeed.com/susanbe...
- Patrick Mackaaij
Patrick, I see what you mean now. Nice link - thanks!
- Andy Bold
from email
how do I follow thousands of people without clicking follow over and over
- Kyle Weller
Kyle: its still required to click subscribe for each user, but those clicks are well spent, and FF also will show posts from friends-of-friends. another good option is to join some groups for subjects that interest you
- Mike Chelen
I like my partners to get this sort of thing. They should also avoid boldfaced lies. It's okay if they italicize dinner. I would appreciate it if they were into practicing certain ligatures with me.
- James (!?)
Well, the serif woman is far, far too young for me. Women are best sans, in any case.
- Chris Baskind
Arial has issues because people always confuse her with her sister Helvetica. Helvetica thinks she is grotesque. Georgia is beautiful, like her sister Perpetua, but neither of them are as popular as Arial for some reason.
- Karim
Congrats! I'm one year out on stent placement. My vice was cheesburgers/fast food. Haven't been to a burger chain in 15 months. Hope we both have many more anniversaries of trouble-free heart years! :-)
- Adam Turetzky
Star Wars > Star Trek. Waaaaay more fun to act out as a child.
- Amy
It's a toss-up these days. Pre-prequels, I'd give the edge to Star Wars - but man, Jar-Jar makes it *really* hard to say that these days... :)
- Thomas
@Thomas The prequels just don't count. At all! :)
- Amy
If we're going to selectively remove the bad from Star Wars, I think it's only fair we lose Star Trek V and Voyager... :)
- Thomas
Star Wars for sure. No contest. It's all about the magic of TPM release day, the memories (for you older folks) of childhood lightsaber fights as Luke and Vader, and the wonder in a child's eye at seeing a new episode of The Clone Wars. What have YOU got, Star Trek?
- Eric Geller
Simple: action figures, model starships, pretending to be Captain Kirk traversing rocky terrains and PEW PEW ing at make believe Klingons, and trying my damndest to give a proper Vulcan salute.
- Mike Nayyar
also Technology that isn't designed with flaws ;)
- Fee501st
Hmm...I did spend hours prefecting the vulcan salute as a child. :) As far as I'm concerned, they both have their merits but it's mostly sentimental. I have friends who refuse to watch EITHER - amazing what 'damage' not having seen any scifi when young does.
- Amy
Live long and prosper, young padawan. Always two there are, a vulcan and a human. :)
- Marcel de Jong
The 7 GREAT LIES Of Network MarketingLie #1: Everyone is your prospect!
Lie #2: This really isn’t sales. We just share products with people...
Lie #3: Anyone can do this!
Lie #4: We’ll build your business for you.
Lie #5: We have the best product
Lie #6: You just don’t have enough belief!
Lie #7: The proven system.
While I agree in general with the points you list, there will always be content, of various kinds, that I want to own in a format that I can do with as I please, when I please, and where I please... commercial-free, proper aspect ratio and presentation (books and movies especially), and highest available definition. Restricted downloads and streaming is fine for disposable content, as long as the price is right. But subscriptions and DRM'd content also have significant liabilities.
- LogEx
Without a doubt, as we speak I am staring at a dresser stacked full of dvds. Most of which I'll only watch one time. Streaming is much more efficient and even environmentally friendly than collecting physical media copies. I would say that the same discussion extends over into magazines and newspapers too. Would love to hear your thoughts on that. Thanks
- Benin Brown
I'm doing my best to severely limit my purchase of meatspace media. I'm actually kind of creeped out a little now by paper books and, especially, DVDs. I'm not completely against' books and other media primarily because they aren't all COMPLETELY obsolete yet, but we are on the verge of complete obsolescence of physical media fetishes.
- Internet's Tad
I think this also holds true for maintaining one's own library of music files, so I actually consider iTunes dated in that sense. The future belongs to streaming audio, perhaps with elaborate caching so that it works without an internet connection. That's the only future use I see for local storage for personal computers, as "cache", as "working memory". The cloud is the new hard disk.
- Meryn Stol
Physical media is archaic, but the issue of conserving things for the long term isnt, and physical media really helps there.
- Joelle Nebbe (iphigenie)
All my music is on iTunes. I'm not a big movie person and the only DVDs I have are from friends that insist I have them. Still having a tough time giving up books & magazines and haven't gone over to Kindle. Oddly, I really don't want to own books, I just haven't taken to other forms of media for these things. Meryn, I like your comment about the cloud being the new hard disk.
- Jill Howard Allen
there is a cultural divide. people still like to own their music and rent their video. the younger generation will be more hip to borrowing from the cloud.
- Richard Zeidel
from twhirl
For me anyway the age factor doesn't matter I'm 32 and I'd rather just "borrow from the cloud" as it were. Physical media is just something else my kids can break.
- John Blanton
from twhirl
The younger generation is <20. At 32 you grew up shopping in CD/DVD stores for media. You are accustomed to physical distribution. <20 will likely never have engaged with the physical; nor would they know what to do with it -
- Richard Zeidel
Strangely enough the rare times I go in a music/film/games shop (once or twice a year when i miss a train), most of the people in it are <20 They have time to hang out, we don't
- Joelle Nebbe (iphigenie)
As the early tech gadget adopter my friends always ask me why i havent got blu-ray and that they want it. I tell them i get HD streamed to me via the web and blu-ray will be dead in 3 years
- andy brudtkuhl
especially when Boxee comes preloaded on TV's
- andy brudtkuhl
I generally prefer having my media in digital format. But every so often an artist puts together an "album" that deserves my keeping it on disk. Now, I know this sort of accomplishment is unusual these days, and maybe I pine too much for someone to match or surpass Moody Blues', Pink Floyd's or The Beatles' mastery of that element of the art form, but I feel obliged to hope. Some albums...
more...
- Bob Finch