All posts by onlyconnect

security

More AVG nonsense

3 Comments

AVG found a virus on my Vista system this morning:

I was puzzled at first: what is Scratch? Then I remembered: it’s an innovative visual programming language aimed at education. Virus, or false positive? I checked the file, which seemed unchanged since 2007, but of course these things can be deceptive. Still, why this file, and how had this virus arrived? I looked here; other Scratch users have had the same problem, and other anti-virus software does not detect any virus, so it seems that this is indeed a false positive.

Most anti-virus software is based on a broken concept, the idea that you can detect malware by comparing files against a “known-bad” list of signatures, and occasional false positives are inevitable. I’d like to see that possibility properly recognised in the UI that the a-v software presents.

Not good for AVG, following its ill-judged LinkScanner problems.

Technorati tags: , , ,
ebay, google, internet, search, security

Why you can’t trust a Google ad

1 Comment

An interesting facet of the recent problems with UK non-supplier Zavvi Direct is that all the purchasers I spoke to found the fake web site via a Google ad. Put another way, without the ease of advertising through Google and eBay, it is likely that far fewer people would have found the site and potentially lost their money.

That raises the question: does Google do anything to verify that its advertisers are genuine? Here’s the answer, from a Google spokesperson:

Google, along with other online and offline advertising platforms are not able to proactively check the legitimacy of each and every advertiser. Consumers should always check the validity of what is being sold to them and how they are asked to pay for items. If Google is alerted to a potential fraud then we will work with the relevant legal authorities to help them resolve such matters.

This was clarified to me as follows. Google will assume ads are OK unless it receives complaints. If it receives a few complaints it might pass them on to the merchant. If it receives numerous complaints it might warn the advertiser and eventually disable the account.

I guess it is unreasonable to expect Google to conduct checks on every advertiser. Still, there is a related point: does Google do enough to highlight the difference between advertisements, and links identified by its famous search ranking algorithms? Here is a snapshot of a search I just made:

I’ve sized the browser small to get everything in; there are more search results than I’ve shown. However, it shows three panels of results. The top left is tinted and marked in unobtrusive gray type “Sponsored links”. The top right is narrow, not tinted, and also marked in gray type “Sponsored links”. The bottom left is what most tech-savvy folk think of as the main results area.

Judging by my interviews, some people are not really aware of the distinction between a “sponsored link” and a search result. In some cases, the buyer could not tell me what kind of link they clicked. To them it was just “Google”.

It would be easy to make the ads more distinct. Google could use the plain English “Advertisements” rather than the “sponsored links” circumlocution. It could use something bolder than gray text to identify them. It could use a different font and colour for the links in the right-hand column. It is good that the top left links are in a tinted panel; yet some may perceive this simply as best-match links, rather than links in an entirely different category than those that follow.

Overall, it seems to me that Google deliberately makes its ads look the same as search results. Which is good for advertisers, but can be bad news for buyers.

Technorati tags: , ,
amazon, ebay, internet

eBay insisting on PayPal only in the UK

1 Comment

I’ve just listed an MP3 player for sale on eBay in the UK. I was surprised to see that I was required to accept PayPal and only PayPal for the transaction, making the “Decide how you’d like to be paid” section of the form redundant:

It is not even possible to state that someone who collects personally may pay cash.

As I understand it, eBay is not applying this rule to all transactions. I suspect this one is regarded as higher risk because it is electronics. The company justifies it on the grounds of security; but since eBay owns PayPal, and gets a double-dip on the fees for transactions processed by PayPal, it has other incentives.

I don’t like this. It is a step backwards; I prefer to have control over what payments are acceptable. I still listed it though, since Amazon (the obvious alternative) is even more expensive, and also acts as payment provider.

eBay has run into some trouble over this policy in Australia; I wonder if the UK will make a similar fuss?

Update: I’ve discovered that eBay UK is now forbidding payments other than PayPal on the following types of sale:

1) Sellers using a 1-day listing format

2) Sellers listing in these categories:

– Video Games > Consoles

– Consumer Electronics > MP3 Players

– Computing > Software

– Wholesale & Job Lots > Mobile & Home Phones

– Business, Office & Industrial > Industrial Supply/ MRO

There are some broad categories there. Further, I presume that once eBay starts restricting some sales to PayPal only, it will be tempted to extend the list further.

Technorati tags: , ,

adobe, ebay, software, software development

Have you found an AIR app you actually use yet?

6 Comments

Today I downloaded the BBC’s new Adobe AIR application, BBC Live.

This installs as a system tray app on Windows. It’s a beta. Nice little app; but it’s competing against my existing RSS reader which is subscribed to the BBC news feed. The AIR app is much prettier, has images, and lets you customise the feed easily. However, the RSS reader deals with lots of feeds; and I can’t imagine running a separate application for every one. The advantages of the BBC app are rather small compared to the convenience of using a single application for multiple news sources.

Lifehacker recently published a list of the top ten apps worth installing Adobe AIR for. The list had a contrary affect on me, since there is nothing there that I find really compelling. I tried the eBay Desktop app, for example, but much prefer visiting the web site.

So … personally, I’m still waiting for an AIR app to love. But I’d be interested to know what others are running and finding useful.

Technorati tags: , , ,
bbc

BBC iPlayer beta firewall issues

15 Comments

I was disappointed when my first efforts to use the BBC’s streaming iPlayer beta failed. Whatever content I chose, I got the message: This content isn’t available at the moment.

Right-clicking the player lets you copy a further error message, which says:

Title: akamai:AkamaiServiceError.AKAMAI_API
Description: Connection attempt failed
Code: 18

At first I blamed beta unreliability; then when it continued I wondered if it could be a firewall issue. I use Microsoft’s ISA Server. I looked at the log, and noticed that traffic on port 1935 was being blocked. I added a new protocol which I called iPlayer, for outbound TCP traffic on port 1935. I added this to the web access rule in ISA Server. Now it works.

It’s a great service. The quality is fine. For some reason I care deeply about audio quality when listening to music, but when it comes to most video content, I mind much less.

Note: I don’t know if this is the only firewall issue with iPlayer, or if the port may change in future. Others have fixed similar issues just by clearing cookies or their browser cache. All I can say is that this fixed the problem for me.

I also think that the BBC’s player could display a more helpful error message; and I’d like to see technical information on what the requirements are. I couldn’t find anything useful here.

Technorati tags: , , , ,
bbc, internet, web authoring

The BBC’s Global Visual Language

Not a pictorial version of Esperanto; rather, a set of design guidelines for bbc.co.uk:

The global visual language is a set of guidelines which aim to bring more consistency to the site by introducing an underlying design grid and consistent design patterns, icons, buttons, image sizes and a pan-BBC audio/video player.

according to BBC interaction designer and blogger Ben Hanbury. His main focus is the revised iPlayer site, which has the last seven days of the BBC’s TV and radio output available on-demand via a media player based on Flash – Adobe must be delighted.

That said, the new iPlayer site is one of the few examples I’ve known where Flash content does not play reliably. On my normal PC I get the useless and inaccurate message, “This content isn’t available at the moment.” Seems to be a firewall issue. I’ll post again if I can work out exactly what the problem is.

Technorati tags: , , ,
blogging

WordPress permalinks broke my RSS feed

6 Comments

I am beginning to regret my pretty permalinks. Apparently it broke the RSS feed for some subscribers. The problem was caused by a combination of factors. When I started this blog, I used a different blog engine; and when I migrated to WordPress I fixed it so that the old feed URL still worked. Moving to pretty permalinks broke that feed, although the normal WordPress feeds still worked. There was no error; the feed was just empty. The reason it broke is … something to do with redirects. Fixed now.

Apologies if this affected you – I have not been as quiet as you may have thought.

Technorati tags: ,
apple, internet, linux, microsoft, open source, software, software development, ubuntu, windows

What’s new in Subversion 1.5

1 Comment

The team behind the open source SCM (Software Configuration Management) tool Subversion released version 1.50 last month. Karl Fogel, president of the Subversion Corporation, says:

Measuring by new features alone, Subversion 1.5 is our biggest release since version 1.0 became available in February 2004.

I am a contented Subversion user, so took a look at the changes. Top of the list is “merge tracking”, though it is described as “foundational” which means that although the basic support is there, there is performance and feature work which remains to be done. From the user’s perspective, the difference is that branching and merging is just easier than before, as explained by Ben Sussman:

Notice how I never had to type a single revision number in my example: Subversion 1.5 knows when the branch was created, which changes need to be synced from branch to trunk, and which changes need to be merged back into the trunk when I’m done. It’s all magic now. This is how it should have been in the first place.

Other changes include sparse checkouts (when you only want to grab a small part of a repository), and changelists, a client feature which lets you tag a set of files under a changelist name and work on them as a group. There are also improvements aimed at making Subversion better suited to large-scale deployments using multiple servers. Subversion is still a centralized rather than a distributed SCM system, but 1.5 is better suited for use in a distributed manner. No doubt the Subversion team is aware of the increasing interest in Git, a distributed system. There are also numerous bug-fixes and performance tweaks. The changes are described here.

I want to move to Subversion 1.5 but it is not that easy. Compatibility is good, in that older clients work with 1.5 servers and vice versa, the main proviso being that you cannot mix several versions of the Subversion client with the same working copy. That is not likely to be a problem for most users.

The difficulty I encountered is that mainstream Linux distributions still have older versions of Subversion in their stable repositories. Ubuntu, for example, has version 1.4.4. My most-used Subversion repositories are on a Debian server, which also has an old version. I don’t want to switch the server to sid, Debian’s development distribution, and mixing packages is often problematic. I could do a manual installation I guess; but instead I will be patient.

I did install 1.50 on Windows, for an intranet repository. I used the Collabnet download. All I needed to do was to inform the installer of the location of my existing repository, and then copy a few lines from the old Apache 2.0 configuration file to the new Apache 2.2 configuration file. Everything works fine. I also updated TortoiseSVN on the Windows clients.

One of the advantages of Subversion (or any SCM) repositories over synched folders like those in Microsoft’s Live Mesh or Apple’s MobileMe (as I understand it) is that you get version history. I regard this as a key feature. The problem with synchronization is that you might overwrite a good copy with a bad one. It is easy to do; it might be caused by user error, or a bug in your word processor, or a failing hard drive. Automatic synch (un)helpfully replicates the bad copy all over. Versioning means you can just rollback to the good one.

adobe, blogging, microsoft

Pretty permalinks improve stats reporting

Last month I reconfigured this blog to use WordPress pretty permalinks. I didn’t rush to do this because I don’t mind the default, where the post is identified by a numeric url argument. The new permalinks do look nicer though, and some claim they help search engines, though I haven’t noticed any impact on traffic. The old links still work as well, so nothing got broken.

One advantage of the new arrangement is that awstats does a better job of reporting page views. I can now easily see which posts are the most read. I thought that might be the newer posts, but it is not. The two posts most read last month, by some margin, are both on why Outlook 2007 is slow. The next is one on trouble installing Adobe CS3. Clearly, these are very common frustrations; users hit Google and these posts have a high ranking for these particular subjects.

I value these stats. They tell me (as if I did not already know) that Microsoft has a significant problem with Outlook 2007 performance; and that Adobe needs to work on its installer for Creative Suite. Web 2.0 is great for product feedback.

Uncategorized

She Loves You: the beginning of my music life

I am going to write about my life as a music fan, for no other reason than that I want to. The story starts in late 1963. I was 4, nearly 5. We lived in a big old farmhouse in Cheshire in north-west England; there was not a record player in the house. There was, however, a radio or two; and I recall this song being played.

She loves you yeah yeah yeah she loves you yeah yeah yeah she loves you …

I don’t know why I remember it, except that it is catchy as hell, and my dad complained about the lyrics. Unfortunately I don’t recall exactly what he said about them, but I can imagine … simplistic, repetitive, brainless, something like that. He was a lover of words and a published poet; his opinion was worth listening to.

In dad’s defence, I am sure it was not at all obvious that this is a great song. Somehow it captures universal human emotions in a way that almost anyone can relate to. Being a bit annoying to a man of my dad’s generation (he was 52) was part of the appeal as well.

As for me, at the time I didn’t have any opinion about the song. I recognized it though, and it is my first musical memory. It’s good to have one that has withstood the passing years so well.

She Loves You by The Beatles

She Love You by The Beatles (1963)