JJHalans ‹› afterhours

Archive for the ‘Web’ Category

A saphe Xmas

Saturday, November 22nd, 2008

PayPal Chrismas BonusThe Xmas season is upon us, as evident by the Xmas trees appearing in shopping malls, and the Xmas promotions filling up our (e-)mailboxes. One such Xmas promo is PayPal’s (Australia). If you’ve got a PayPal account, you probably received it too. It sends you (after going through their email tracking system on http://email1.paypal.com/) to a motion sickness inducing Flash app, which allows you to scroll horizontally through their promos. Check it out (keep a bag or a bucket at hand)! I do like that scrolling effect on CoolIris, but not so much here. But that’s actually another discussion.

Check out the URL: http://122.201.77.222/paypal-offers.com.au/
You get redirected if you’d go to http://www.paypal-offers.com.au/. Is this really PayPal?
Now, go to http://www.paypal.com.au/, just to make sure you’re at a PayPal site. What, no mention of any PayPal offers or promotions?

There’s a couple of things wrong here:

First of, is it really that hard to configure a server/DNS to get paypal-offers.com.au to show the PayPal offers? Why the redirect (in addition to their email redirect through http://email1.paypal.com/)?

Second, there is no integrated marketing plan, having the PayPal offers linked from the main PP site to this offers site (as of the mailing’s date). Why have a separate and totally different address for the offers to begin with? It dilutes the brand. Why not use offers.paypal.com.au, or paypal.com.au/offers? I know, often the marketing department lives on their own little island within a company, and things outside of their island doesn’t move as fast as they would like it. Still they should have access to this sub-domain, their little corner of the PP site.

But thirdly, an unforgivable, stupendous error, the URL: an IP address,… with the domain appended (for good measure, the same page appears without the append domainname). Djezus people, this is a financial services site. PayPal must be one of the most targeted phishing sites out there. PayPal should not be spreading around these types of URLs. And I can’t verify from the main PP site that it is a PayPal controlled domain either as it isn’t an integrated campaign.

From their own Phishing Guide:

Fake Links. Many phishing emails have a link that looks valid, but sends you to a fraudulent site that may or may not have an URL different from the link. Always check where a link is going before you click. Move your mouse over the URL in the email and look at the URL in the browser. As always, if it looks suspicious, don’t click it.”

“Deceptive URLs. Be cautious. Some fraudsters will insert a fake browser address bar over the real one, making it appear that you’re on a legitimate website. Follow these precautions: Even if an URL contains the word “PayPal,” it may not be a PayPal site. Examples of fake PayPal addresses: http://83.16.123.18/pp/update.htm?=https://www.paypal.com/=cmd_login_access, www.secure-paypal.com”

Yes, I do think paypal-offers.com.au is a legitimate PayPal offers site, it does not ask for login details, though it does link to the PayPal signup page. Looking through the email’s source code does not reveal fake domains or IP addresses, all links pass through the email1.paypal.com domain. The domain is registered by PayPal Australia Pty Limited, hosted at Net Logistics in Sydney. But it is child’s play to register paypal-specials.com or whatever, show fake offers like they do here, and ask the user to login to take advantage of these offers. It is incomprehensible that an online-only, financial company like PayPal, and their marketing division, would do such a thing.

Be saphe online this Xmas!

PS: I submitted the URL to PayPal as a suspicious URL. The process is confusing, and as of now I still don’t know if my submission got through. I did not receive an (automated) email back (maybe thanking me for taking the time to submit a suspicious URL?).

Mapanui at Barcamp Sydney 4

Sunday, November 16th, 2008

Did a repeat of my Ignite presentation from last Wednesday at Barcamp, minus the 15sec rule. Went a lot smoother, I thought.

Lots of positive feedback, from fellow web devs, and others alike. Thanks for that!

Presentation available on Slideshare.

And while you’re at it, have another look at my MarkUpAsAnAPI presentation from last year’s Barcamp Sydney (v2).

Pictures from Barcamp Sydney 4 on Flickr.

Change

Saturday, November 8th, 2008

This week we saw Barack “Barry” Obama become the 44th American president, writing history becoming the first African-American president. And the whole world rejoiced (except Russia it seems).

This victory alone is not the change we seek. It is only the chance for us to make that change.

One contributing factor to his victory was certainly his Internet campaign (and a fab iPhone app), far exceeding anything done previously: www.barackobama.com and my.barackobama.com.

Upon election, he already set up a new website: Change.gov. Will we see a change in the way a country is governed, through social e-government? Will Google’s CEO Eric Schmidt be part of his new government? Probably not.

While you’re at it, check out Change.org, a social action network.

Australian Internet Censorship

Thursday, October 30th, 2008

My take on the “Clean Feed” filter, aka the “Rudd Filter”.

But first this.

A 2006 UQ study found that road accidents, more than 25,000 serious injury accidents each year, cost Australia $17 billion each year. That’s about 68 serious injuries everyday.

Drunk driving is illegal. It can kill yourself, and it can kill others. The Rudd Filter would be like breath testing every driver every time they get into a car, tested not by the police, but by the RTA. Technology-wise, there are devices which can be installed in a car, where you need to blow into first, before the car starts. The cost to a new car would be minimal. Problem solved. No more drunk drivers. Or the drunk driver asks a ‘friend’ (friends don’t let friends drive drunk) to blow for him, and of he goes, circumventing the filter. Then the filter could be adjusted to breathe into the device every 30, 10 or 5 minutes, so you need someone sober with you to keep driving. But that would be very annoying 98% of the time you are driving around alone, doing the shopping or whatever. It would really slow you down. Because of course, you need to stop by the side of the road the blow into the device, you can’t do it while driving. Maybe we could blow up some balloons early in the evening, and keep them on the back seat of the car…

Speeding is illegal. It can kill yourself, and it can kill others. The Rudd Filter would be like installing a black box (think airplane black box) into your car to monitor your speed. It needs to have GPS functionality too, so it knows where you are in order to adjust the speed limit. It also knows about time, so when you’re near a school at school times, it slows you down accordingly. It needs communication capabilities so it can update itself when situations change. And to make sure your road tax is being payed, as well as checking for having valid insurance. And it can communicate with traffic lights, so when it turns orange, the car slows down to stop, in stead of accelerating to make sure you get through. It also keeps an eye on total weight of the car, and number of passengers, to prevent over-crowding of the car. The black box also keeps tabs on your breaks, your tires, your lights and the oil level, keeping your car in perfect order. Perfect. The technologies exist, they only need to be poured into one small device. No more speeding, no more running red lights, no more illegal parking, no dodgy breaks or failing break lights. That is until someone finds a way to update its firmware or installs a mod chip on his black box which effectively tunnels all real-time information through the device, letting the device think it is parked. They would have free reign on the roads, and we still need police to catch them, and they would still kill children crossing the road.

Silly comparison?
How do the numbers stack up, car drivers vs internet connections?
Deadly or serious car accidents vs illegal internet activity?

Back to the issue at hand, the actual Rudd Filter proposal.
Protect the children, block illegal content. Lofty goals for sure. Check out these statistics in regard to children using the Internet.
A blacklist of illegal content is already being used by ACMA (containing 3,200+ web pages) to take down illegal content hosted on Australian servers. Senator Conroy wants to take it one step further, no actually two steps further. Not only does he want to filter internet traffic at the ISP level based on a blacklist (of known illegal internet addresses), which is already in use in the UK, New Zealand, Norway and Sweden, and at a couple of thousand addresses doesn’t really pose a problem; but he wants to dynamically filter all internet traffic based on content analysis, on words and image within the responding page.
A blacklist of illegal internet addresses is pretty straight forward. A user requests an address, that’s checked against the list, all OK, continue. Personally I use OpenDNS to block “questionable” content on my free open network. People who are looking for that, might as well pay for their own internet connection. Problem is that it blocks whole domains. You can’t block just a single page of, let’s say Facebook, you need to block Facebook all together, resulting in massive collateral damage. Still, blocking domains doesn’t help when the user knows the IP (numerical) address. Blocking the IP address doesn’t help because one IP address can block a whole lot of domains.
So that’s why they want to do it dynamically, based on what a particular page contains in words and pictures, and compare that to signatures, telltale signs of bad content. That’s some nifty shizz. A picture deemed illegal based on % of “flesh” tone and body shape, the technology in use on for example Google Image search, might be filtered out of an online article on a domain, in stead of blocking the whole domain. This needs to happen in real-time. Again, that won’t work on a secure HTTPS connection (like when connecting to your bank), as content over the wire is encrypted and can’t be inspected. Doing content inspection for all traffic coming into Australia will require some beefy hardware to keep up, incurring extra costs for ISPs, passing it on to their customers, while still slowing things down.
And then the Internet is more than web pages. It’s email, Usenet, peer-2-peer downloads, instant messenger protocols, voice-over-IP,… These filters won’t handle that traffic. And it won’t protect children from adult predators either.
Haven’t we learned anything from Spam filters? Let’s block all “viagra” mails. We still got “v1agra” in our inbox.
Haven’t we learned from phishing scammers (trying to get our banking details), using fast-flux domains and domain tasting?
Don’t they know what VPN’s are (like when connecting securely from home to your office), or anonymous proxy servers? Or steganography?
Or even Google Translate as a proxy?

As it turns out, the original Clean Feed proposal is based on 20,000 petitions gathered through churches, hardly representative for the whole of Australia. You could easily get 20,000 petitions gathered through pubs to get rid of the smoking ban too.
To get the policy into legislation, Senator Conroy will need the support of some independent senators, who have their own agenda, and this is where the sh*t really hits the fan. Minority pressure groups influencing policy to a degree that it affects everyone. Today it is porn and international gambling sites. Tomorrow it is a religiously offending cartoons, bad product reviews, citizen journalism (blogs illegal in Italy),… It is just a matter of time, what is legal today, may not be tomorrow. Games deemed illegal in Australia, as in without classification: “throughout Australia it is illegal to sell, to adults, any computer game unless it is classified suitable for a 15 year old“, are still being traded through grey imports. Will we soon need age verification for every page we visit, deemed unsuitable for 14 year olds or younger?

The Clean Feed filter will result in a false sense of security, as it accomplishes little, and is very costly and very ineffective. It creates more problems than it solves. It stifles innovation and progress. People, children and their parents alike, need to be educated. Yes, ISP’s can help with that. They could be “parent friendly” ISP’s, providing guides, and DNS based filters like the ones used in the UK or the Scandinavian countries. Parents should be parenting their children, take responsibility, in stead of brushing it of. Create non-admin accounts on their family pc’s (you don’t want your kids to install malware either, do you?), use decent internet browsers, keep your pc up-to-date, provide MAC filtering and timed access control on (wireless) routers,… Too hard? Read and learn. Or ask friends, colleagues, family. (Or maybe they should get their family friendly Internet at the local McDonald’s?)

The only ones who stand to profit from this filter are the filter vendors, selling millions of dollars of annual licensing, for something which might prevent some accidental encounters, considerably slowing down everyone’s Internet experience, but certainly not blocking any knowledgeable sicko to get his hit.

Maybe we could spend the money better to prevent car accidents, obesity, lung cancer, education. Really.

Need more convincing that a Clean Feed is a bad idea (or at least its execution)? Be informed, read on:
The State of Censorship: Australia
EFA: Labor’s Mandatory ISP Internet Blocking Plan
Great, clear presentation on Internet Filtering (ppt)
Petitions to parliament drove ALP’s Internet filtering policy

Then do something:
No Clean Feed
The Rudd Filter
Somebody Think Of The Children
Then sign an online petition (though I hope there will be one offline soon too):

Of course testing any ISP-based Internet filter is difficult, as you would try to retrieve illegal content…
The only way is to try the Great Firewall of China. It blocks content that’s legal in Western countries, so you’re not breaking any laws (when you lookup lawful content), and check response time and DNS time:
try a news site like http://www.smh.com.au, look at the Chinese and US times (never mind what they mean, just that the higher they are, the slower the Internet), they would be about the same. Now try http://www.amnesty.org. For me at least, times where x2-x3 slower for China.
If you use Firefox you can try the China Channel extension.

And let’s not forget the Beijing Olympics:
“Slow internet major problem at Olympics”

Tackling Social Poverty - Blog Action Day

Wednesday, October 15th, 2008

Poverty manifests itself through different guises. When we think of poverty, we’d immediately recall a homeless person or a malnourished African child, a reflection of economical poverty. Social poverty is the result of lack of social capital. As per J.D. Lewandowski, “the concept of social capital refers to the networks of social trust and social connections that serve to enable individual and collective actions in a given social structure or society.” Social exclusion is often a cause of poverty, conflict and insecurity. Improving social inclusion increases one’s well-being, mentally as well as economically.

The Internet has enabled a way of social interaction and connections which facilitate the kinds of action that “make democracy work” (Robert Putnam). It enables freedom of movement up and down the socio-economic and cultural ladder through social participation and human development. It offers economic opportunities and access to public and social services.

On the Internet, everyone can be anyone, and social division becomes a non-issue (though actually new social divisions are constantly being created, on a different level - are you on MySpace or Facebook?). In fact, “on the Internet, nobody knows you’re a dog” (Peter Steiner’s cartoon). Another joke goes “Give a man a fish and you feed him for a day; teach him to use the Internet and he won’t bother you for weeks.” But that man might rise up to be the next Internet millionaire. Access to the Internet is an instrumental right for the improvement of people’s capability. Missing out restrains personal growth. That’s also why gouvernments provide libraries, and Internet access at libraries. It gives people access to knowledge, but libraries are a less than ideal environment for social interaction. Bringing the Internet closer to the community, closer to home, empowers people to take control of their own social network (online and offline). That’s where Free Sydney Wireless (Free Australia Wireless) fits in. By providing free Internet access, through a shared connection, we try to bridge the social divide in our own community, closest to us. This hardly costs us anything extra, as we already pay for Internet access. This is our small contribution to tackle social poverty.

The growth of social networking and user generated content reflects the deep rooted need of people for self expression, social interaction and peer validation. People sharing without personal financial gain. As they do, others do. Or so we hope anyway.
What are you waiting for, why not get involved?

It’s a wrap

Sunday, September 28th, 2008

The madness that is Web Directions South has come and gone. Four days of social networking, workshops, presos, drinks, and after-party. On top of that, I was quite busy getting the conference wifi of the ground and keep it running, together with Nat. And can’t help myself, taking pictures too. Presentations and podcasts of WDS08 are available at the site.

John Allsopp introduced Scroll Magazine, a MagCloud print-on-demand magazine, designed by fellow Belgian Veerle Pieters.

Met another Belgian, Andreas, standards evangelist for Opera (Belgians are thinly spread around the globe…).

Thursday evening was Webjam8. Quickly set up two iBurst modems, one for the presenters and one for the public. And then had my big debut presenting for the Sydney crowd (of about 350), showing of Mapanui in three minutes (which was more than enough :) Got some positive feedback. Also check out TechNation Australia, ZDNet AU, Sitepoint, and this Viddler video

Friday an early start to make sure the wireless network was back up and running. Turns out I was too early, first one there. Jeffrey Veen’s keynote was great. Played around with Microsoft Surface. Loved David Peterson’s talk on semantic web. And Mark Pesce’s closing keynote rickrolling the audience and then opened with a NIN track (”Just Like You Imagined” from The Frail (left) album from 1999), setting the tone for This, That and the Other. Finishing with the after-party (and recovering for two days), on which I was happy to hear plenty of Soulwax remixes (Belgium represent)!

And if the wifi internet was slow at Web Directions, remember, it was a volunteer-based effort on our own, cheap hardware, backed by 4 iBurst sponsored wireless modems.

Good times are coming

Sunday, September 14th, 2008

Looking forward to next weekend already. In just over a week Web Directions South, the major Australian Web development conference, kicks of with 2-day workshops and a 2-day conference at the Sydney Expo in Darling Harbour.

The traditional Port80 pre-Web Directions South (night before the conference) drinks are on again on September 24th, 6.30pm at the Harlequin Inn, with a sponsored bar-tab (thanks Clever Starfish, Radharc and Free Australia Wireless):

Harlequin Inn
Cnr Harris & Union Streets
Pyrmont NSW 2009

After a 12 month hiatus, Webjam v8 is back for a splendid night of quick-fire presentations of new, innovative web projects,  September 25th, the first evening of the WDS conference. If you haven’t registered yet, do it now, ’cause places are limited and sure to fill up quickly! And while you’re at it, why not register to pimp your project! Upstairs at Bar Broadway at 7:30pm.

Bar Broadway
Cnr Broadway & Regent Streets
Ultimo NSW 2007

And Web Directions’ closing night party September 26th, over two big floors, from 5.30 till late, at the Shelbourne Hotel

But first, next weekend, right before Web Directions South, Oz-IA, Australia’s Information Architecture conference, takes place at the Stamford Plaza in Double Bay.

In October SANS is in town again, with some great security training opportunities.

And end of November, the weekend of 29/30, the RuxCon conference is back on in Sydney (UTS), while at the same time in Lilyfield’s The Red Box we have WordCamp on, a Wordpress conference. Choices, choices, choices.

Good times!

Sydney StartupCamp

Sunday, September 7th, 2008

StartupCamp is on this weekend, an event that brings together 20-something multidiciplinary individuals to set up an online business over the weekend. It started Friday evening with pitching ideas, went on through the night with development, all through Saturday, with a 10PM launch. That leaves today Sunday for promotion.

This is what they came up with (remember, all in about 24 hours):

TrafficHawk.com.au - gets you there on time
TrafficHawk.com.au is a new traffic information service for NSW drivers. This free website delivers up to the minute RTA traffic alerts (accidents, road works and alerts) and photos from live traffic cameras. Receive warnings about your commute before you leave home and see what’s happening on the roads right now.

LinkViz.com
What’s got Twitter’s attention right now? Which sites are your friends talking about? LinkViz.com – see the sites.

uT.ag
uTag rewards the value that people pass on to their online social networks. Instead of being punished for pointing readers at interesting external sites, uTaggers can now share in the rewards.

Check it out!

“2001, a browser’s Odyssey”: IE6 turns seven

Wednesday, August 27th, 2008

2001, the year of 911 - Twin Towers, and IE 6.

IE 6 is seven years old today. Amazing how time flies. “2001, a browser’s Odyssey”. Where were you on August 27, 2001?

IE 6 is still the base-line browser I need to develop against, unfortunatly. When will we get rid of it? People (developers) have been trying though:

But you can’t deny the facts, it’s still a popular browser.

But the biggest concern shouldn’t be that it’s a bad browser development wise, but its lack of security for the every day user.

Update:

Reality Mining

Monday, August 18th, 2008

Technology Review has a special report on 10 emerging technologies for 2008. One is Offline Web Applications, which I’m not going to talk about, it’s kind of obvious (Air, Gears, etc). Others are very “out there” (”Connectomics”, “NanoRadio”, “Probabilistic Chips” anyone…?). Another one though is pretty real: “Reality Mining“.

So what are they talking about? MIT Media Lab:

Reality Mining defines the collection of machine-sensed environmental data pertaining to human social behaviour. Reality Mining measures information access and use in different contexts, recognizes social patterns in daily user activity, infers relationships, identifies socially significant locations, and models organizational rhythms.

It is emerging in a sense that it is only now that recent advances in mobile technology put the tools in people’s hands to actually aggregate large, realistic datasets of measurable information. In the last 6 to 12 months new mobile phone handsets are being combined with Wifi and GPS. The boundary between mobile phone (a phone to make, you know, phone calls and send text messages) and smart phone (a mobile phone with additional business related applications like email, office documents, multimedia) is blurring fast, and mobile data is getting faster and more affordable. But Reality Mining as an academic experiment at MIT has been happening for more than 5 years already (using Bluetooth) and they have collected over 350,000 hours (~40 years) of continuous data on human behaviour (100 subjects at MIT - Sensing complex social systems - pdf).

Only recently several other Reality Mining experiments came to light, like Cityware’s Digital Footprint in the UK and bluetoothtracking.org in the Netherlands. The goal of Cityware is “to develop theory, principles, tools and techniques for the design, implementation and evaluation of city-scale pervasive systems as integral facets of the urban landscape.” But in both projects participants are actually unaware that they are participating, in fact they are covertly being tracked without their consent in a technology experiment using Bluetooth scanners installed at secret locations in offices, campuses, streets and pubs to pinpoint people’s whereabouts. And they have been doing so for 3 years.

More than 1,000 scanners across the world at any time detect passing Bluetooth signals and send the data to Cityware’s central database. Those with access to the database admit they do not know precisely how many scanners have been created, but there are known to be scanners in San Diego, Hong Kong, Australia, Singapore, Toronto and Berlin.

Although anonymous, most Bluetooth devices are given a personal name (Tom’s Blackberry), and the Bluetooth scanners can even pick up full names, email addresses, and address books from poorly configured devices.

Closer to our hearts (as it were), Yahoo! is experimenting with its MyBlogLog service:

MyBlogLog allows users to bind their Bluetooth address to their MyBlogLog account and discover others nearby and find out if they have any shared interests. Meetspace [meat-space?] keeps track of time spent with others so they have a running log of people to meet and things to talk about.”

MyBlogLog uses a mobile Java applet to tie your Bluetooth device to your MyBlogLog account, then polls for new activity every two minutes. There are plenty of other services out there doing the same (Google Dodgeball).

But back to today’s future… and the iPhone. The iPhone for example offers assisted GPS which means you don’t even need a GPS signal for location aware services, cell-tower triangulation can be used, as well as Wifi AP triangulation (which by the way also works nicely on the iPod touch), as long as there are known access points around (known to Skyhook that is). And we happily use those services together with our social network apps. There are already countless social, location-aware apps available on the Apple App store like Exposure and Twinkle, and if our favourite social app doesn’t have a iPhone native app, we’ll happily connect to Brightkite or other Yahoo! Fire Eagle enable service and tell everyone (or only friends and family) where we are and what we do, and who we do it with…

Where previously thousands of Bluetooth enabled device where being scanned and tracked (unknowingly and unwillingly) by ten scanners spread around Bath, UK, now, at the same locations around Bath, or for that matter around the country, hundreds of thousands of users would be broadcasting their doings and location, and do so voluntarily. Though we might not know what is happening with that information. While we try to retain control of (and monetize) our Attention data on the web, will we be able to retain control (and monetize) our Lifestream data?

The mobile phone as a social artefact becomes more and more a personal black box, recording our every move (into the cloud), for later playback. Where we currently see governments worldwide implement retention policies for email, we might see, in a not so distant future, a retention policy on our lifestream. I do hope I’m wrong.

Have a look at this short video interview (4 min) on Reality Mining, with Alex (Sandy) Pentland, director of the Human Dynamics Group at MIT.

BTW, I love my iPhone, and I love location aware applications, but I always have Bluetooth disabled on my phone.

Site search

You are currently browsing the archives for the Web category.

© 1997-2009 JJ Halans - Less is more Vox XHTML | CSS | CC |  

JJHalans is proudly powered by WordPress
Entries (RSS) and Comments (RSS). 17 queries. 2.370 seconds.