This Week in Privacy

This week was an interesting one in terms of privacy, and there are some great writeups for 2 of them:

  • Sex Baiting Prank on Craigslist Affects Hundreds – Gordon and I came up with most of the headline for this (ours was a slightly more gripping “Sex Baiting on Craigslist Destroys Lives” – now, if I can get a nickel for each time someone uses sex baiting). The mechanics of this is pretty simple and doesn’t differ much from phishing or 419 scamming (using fraud to engage victims) except that instead of financial gain, the main goal seems to be hurting other people. I believe of all the commentary the best description is that of sociopath (one interested only in their personal needs and desires, without concern for the effects of their behavior on others). Like Andy, I think that some of the immediate effects will be a profound change in how communities treat the way they interact with strangers over email (a good thing), but I fear that in the long-term this will only contribute to continued degradation of the norms of our expectations of confidence when interacting with individuals (ie JigSaw, which a few years ago would have been a parody-dotcom not a real site)
  • Facebook’s “Privacy Trainwreck”: Exposure, Invasion, and Drama – danah writes up her thoughts on the Facebook changes and subsequent backlash with her regular keen insight and spot-on metaphors. Cam’s write-up earlier this week mentions that Upcoming.org (that’s us!) introduced a similar feature at the beginning of the year to much less fuss. That point wasn’t lost on me when I first saw Facebook’s announcement, the differences in implementation help illuminate what’s at the crux of the backlash. The primary differences with our Activity Log is that 1) this information isn’t displayed globally on profiles, but serves as a personal tool only on the dashboard, which I believe has an effect on comfort levels and more importantly (and to Cameron’s point) 2) the information we display is either point-to-point (notifications of a message, etc.) or information that is not only expected to be public, but central to the point of the site (comments/attendance of an event you’re watching, etc.). It’s not a technical issue to show changes to profiles, group membership changes, etc., but it’d be “icky”, largely irrelevant, and a disservice to the community.

One other privacy story that hasn’t gotten as much play is the HP boardroom scandal (“pretexting aka social engineering aka lying; more ongoing) which actually ties very closely to the sex baiting in terms of MO, but because of its more traditional context perhaps isn’t as controversial. We’re not talking about any changes in actual/perceived social architecture, just business as usual.

Firefox: Life-changing Extensions

I’d consider myself a Firefox “power user” – at one point I was pushing 50 extensions (I tried to keep it lean with my Macbook re-install, but still have managed to accrue almost 20). While I have a few extensions that have completely changed my browsing experience (SessionSaver, Adblock Plus + Filterset.G, Greasemonkey), these are extremely rare. I believe I’ve found three more today:

  • SurfKeys – this defines a number of keyboard shortcuts for easier navigation
  • Hit-a-Hint – this takes things one step further and creates a mode where every link element is numbered for instant keyboard navigation
  • keyConfig – this is the same plugin that I discovered for Thunderbird and lets you re-assign all the keys for this and everything else in Mozilla to your heart’s content – every application should have this. I’ve changed my SurfKeys to a vim-like setup

(I’ve changed my HaH magickey to ‘H’ and disabled the rest)

The only thing I’m really missing from my browsing experience right now is slightly better live-editing of GM scripts/pages (Platypus is almost there) and radically better history/bookmarking (infinite caching of my page-content and browser/tab-paths/history please).

Thunderbird vs. Mail.app

I’ve been a Mail.app user for a long time. Every time that I’ve tried switching to Mozilla Mail or Thunderbird over the past few (4?) years, I’ve ended up back on Mail.app. Mail has never been the fastest or most featureful application, but its IMAP, while sometime slow, has been rock steady, and certain things like the auto-saving/window reopening and the Address Book integration are really quite nice. I recently figured out how to view Exchange invites of course, MailActOn has made organizing my mail entirely in the realm of possibility.

What’s the point of all this? Basically to describe that Mail.app was working for me… until my corporate mail was switched around that is. My new setup requires me to tunnel an IMAPS connection. It turns out that Mail.app has a bug where it’ll try to connect to the server with the default port 993 regardless of what you specify the server port is (and it’ll fail silently without telling you that’s what the problem is – thanks Apple!). Since opening tunnels as root wasn’t high on my yes-I’d-like-to-do-this-every-day list, I decided to once again check out the latest build of Thunderbird.

And, with a mess of extensions and some tweaks, I’m settling in. Thunderbird is much faster than Mail.app (1.5.0.4+ is Universal) and has support for IMAP subscriptions and IDLE which is nice. (I also figured out the weird Inbox nesting issues I’ve had in the past: you need to set the IMAP server directory as “INBOX/” in the IMAP server advanced settings). Here are the major changes I’ve made so far to make things work better:

  • Advanced Remove Duplicates saved me hours helping to remove the 20K dups generated while my getmail was freaking out
  • In the account settings, turning on the “Offline” settings for folders to emulate Mail.app’s sweet offline IMAP message caching behavior
  • Headers Toggle gives me back full header toggling w/ the ‘H’ key
  • GMailUI – this extension is AWESOME, enabling a whole bunch of useful key bindings, better search, and best of all, one key archiving
  • Nostalgy – another priceless extension, this allows easy keyboard navigation and mail moving. Hooray!
  • keyconfig – now this is the motherload – if I had found this last time, I probably wouldn’t have switched back. keyconfig lets you write arbitrary JavaScript and bind them to keys – right now, I’ve only gotten around to writing some quick binds to switch between text/html message views, but with enough rooting around through chrome/extension JARs and XPIs, I think I can solve most of my remaining niggles
  • Remember Mismatched Domains – this is useful if you’re tunneling since the cert won’t match

I’m also running a couple of plugins that aren’t publicly available for parsing dates out of Outlook VCALENDARs, but once there’s a Universal Binary Lightning build, that shouldn’t be a problem. Also, I’m fervently waiting for Address Book integration.

It’s been a long road for Thunderbird, but I think that like Firefox, the extension architecture will be what will give it the edge in the long run (as it’s been bearing out).

While I have some tweaks I want to make, I’m confident that I’ll be able to easily make them with keyconfig (almost a GreaseMonkey equivalent – now if there were something that could bind arbitrary onloads…). On my list: better pane/folder navigation, a message rewrapping/dynamic replacement script, and custom JS expression-based filtering.

We’ll have to see what happens over the next few weeks (and I’m sure I’ll be looking at Mail.app again in Leopard), but I have a feeling that Thunderbird may end up sticking around this time.

Huge Upcoming.org Release

Interrupting this silence for pimpage. We released a huge update today on Upcoming.org. This is without a doubt the biggest frontend update we’ve made since our acquisition, and starts to take advantage of a lot of the big behind-the-scene changes we’ve been toiling away on.

Be sure to check out the landing page and it’s geotargetting. It’s way cool.

IE Float Hacks

Currently the bane of my existence until we switch layout grids…

iRex Hacking Begins…

I got my iRex iLiad ebook reader yesterday. Its screen is pretty fantastic. Tonight I’ve enabled the networking and am poking around (the firmware I’m running conveniently has dropbear running).

root@ereader:/# df   
Filesystem           1k-blocks      Used Available Use% Mounted on
/dev/tffsa2               3038      2365       519  82% /old-root
/dev/tffsa2              73045     62332      7001  90% /
/dev/tffsa5              28973       225     27252   1% /mnt/protected
/dev/tffsa6             131180      7372    123808   6% /mnt/free
/dev/tffsa7                888       145       698  17% /mnt/settings
root@ereader:/# cat /proc/cpuinfo 
Processor       : XScale-PXA255 rev 6 (v5l)
BogoMIPS        : 397.31
Features        : swp half thumb fastmult edsp 
CPU implementor : 0x69
CPU architecture: 5TE
CPU variant     : 0x0
CPU part        : 0x2d0
CPU revision    : 6
Cache type      : undefined 5
Cache clean     : undefined 5
Cache lockdown  : undefined 5
Cache unified   : harvard
I size          : 32768
I assoc         : 32
I line length   : 32
I sets          : 32
D size          : 32768
D assoc         : 32
D line length   : 32
D sets          : 32

Hardware        : iRex Technologies ER0100 eReader
Revision        : 0000
Serial          : 0000000000000000

Google Mobile Maps: Nope, still doesn’t disappoint

The most useful non-communication app on my phone is most certainly Google Mobile Maps. I suppose there’s some chagrin in saying this considering that Upcoming.org is part of Yahoo! Local now, but honestly, there’s no shame in recognizing quality, and GMM is the best third-party mobile app I’ve ever used, bar none.

Yes, the features are great (the polyline animated step-by-step direction routing is both gee-whiz *and* useful), but what really makes GMM stand out is the amazingly well thought out UI – you know the designers have not just thought things out, but have tweaked it after using it in their daily life. It’s the little things that just work like they should.

For example, tonight I was in San Jose for an event, and was looking for a drug store by the venue. Easy enough to do a business search and get some results back – but where is it in relation to the venue? (which had disappeared with the new search) There was a second of trepadation, as I clicked into “directions there,” but again, GMM didn’t disappoint – there was the location listed at the top “recent searches” listing the venue in the directions tab.

That’s just awesome. And inspirational.

Stem Cell Hubbub: Disingenuous and Ridiculous

One of the things that’s surprised me is how successful the “objective” media has once again been led to cover the controversey and rhetoric rather than expose how ridiculous the argument against government funding for embryonic stem-cell research in HR 810, which specifically funds only research from in-vitro fertilization embryos that would OTHERWISE BE DISCARDED.

So we get these absurdly fake histrionics about the “destruction of human life” that are completely deceitful. And the sad thing is that it works. Time and time again, almost without fail, even when the contradiction presents itself directly.