Brian Layman’s Weekly Twitter Update for 2009-09-27
September 27, 2009
- RT @pburghstever @sportsguy33: Clip of Lynn Swann jumping a car during a 1979 #Steelers – #Browns game. No, really. http://bit.ly/4a9cR8 #
- For you SEO Gurus out there: Google does NOT use the #KEYWORDS meta tag in web ranking. http://bit.ly/35rpP3 HT @joetek #
- RT @joetek: comScore is partnering with Omniture to combine their beacons. Interesting. http://bit.ly/1hDIBP (methinks Adobe knew this – b) #
- In case you didn't understand my Adobe reference: Adobe to acquire web analytics firm Omniture http://bit.ly/11zqm4 AKA #
- So for those playing along at home Whereas Adobe=flash & Omniture=Comscore & Adobe=Omniture, therefore 98.99% of web traffic goes thru Adobe #
- Adobe pwns The Internet. Game over. #
- Has anyone used wp-smushit? http://bit.ly/liYDI Any thoughts? #
- RT @blogworld: Dr. Horrible takes over the emmys http://bit.ly/utArN #
- Oh.. look at that, Butts on the Creek B-B-Q has a website. http://bit.ly/TaNCW Apparently you love or hate it. It has some good reviews too #
- RT @joetek: RT @mashable: Yahoo Planning to Sell Corporate Email Service Zimbra? http://bit.ly/zA6Ku (whoa Cool! – b) #
- RT @marsroverdriver: http://twitpic.com/io6b5 – Me, showing Ray Bradbury our rover model. Not pictured: me.
I'm kneeling, to the left. # - RT @joetek: RT: @markjaquith: If you're a WP developer & ever typed action=<echo $_SERVER['PHP_SELF']?>please read: http://bit.ly/qaCN5 #
- Hey folks.. Be sure to block all the people who are tweeting the "I heard on the news Google was hiring" scam so that those accts are closed #
- I love how twitter now reports who is updating via API only… *coff* bot *coffcoff* #
- Are you a SuperNatural fan? I've never watched, but this post is skyrocketting: "The End"-Promo Pics http://bit.ly/141Nx2 #
- RT @technosailor: Gonna be on Webmaster Radio in 5min w/ @yoast. Come chat at me & listen in on WordPress, #wpbible, etc http://bit.ly/om1wN #
- “Give a person a fish and you feed them for a day; teach that person to use the Internet and they won't bother you for weeks.” – random sig #
- RT @dlayphoto: Museum Day is this Saturday! Get FREE admission to 100s of museums: http://bit.ly/ERV1y OH:Rock&Roll Hall of Fame & 40 others #
- RT @blogworld: WARNING: Twitter Worm Spreading via Direct Messages – http://bit.ly/Z2ROc (twitter.secure-logins01.com is NOT twitter.com -b) #
- RT @StephanieSmanto: http://twitpic.com/iunhh – Fire undergound downtown Akron #
- RT @josue: YO MICROSOFT IM REALLY HAPPY FOR YOU AND IM GONNA LET YOU FINISH YOUR LAUNCH PARTY BUT APPLE HAS THE BEST OPERATING SYSTEM VIDS.. #
- RT @marsroverdriver: Mark Davis's Emmy-winning documentary "Five Years on Mars" is on Hulu: http://is.gd/3BXqm *AWESOME* #
- "That depends upon what the meaning of the word "is" is…" http://www.rockwoodcomic.com/ #
- RT @pburghstever: Another $4B of your tax dollars thrown away at the Post Office like pocket change http://bit.ly/9ZEYS Yes that's $4billion #
- RT @joetek: Wayne Gretzky steps down as coach of the Phoenix Coyotes. (via tsn.ca) http://bit.ly/jnRZq #
- 7 yo in the hall playing… "Dude, let's go! This party is sick!" #
- My bad, the 7 yo in the hall playing was rly saying "Dude! Bro! This party is sick!" That's cause we hang at so many sick parties together #
- Hanging with @blakeurmos at the NEO Wordpress Meetup. Most of the regulars are on vacation, but we're talking plugins, security & joomla #
- Sneak Rhett and Link video preview now on http://bit.ly/3waDRw with @chrispirillo & @snoopdog & @leolaporte & others.. playing now. v cool. #
- V cool @rhettmc and @linklamont are gonna play their first video, from middle school. I've never seen this.. http://rhettandlink.com/live #
- sigh.. everything I've touched today.. breaks, fries or bricks Not good… #
- RT @kindle_blog: ProBlogger – B5 Media – Kindle Edition. http://tinyurl.com/mrlhsc #
- RT @joetek: Nielsen: Ad spending on Social Networks and Blogs up 119% annually. Entertainment industry spend up 812%! http://bit.ly/3K4NXS #
- Helping my sister move furniture to storage. Getting dark chocolate covered coffee beans as payment.. yummmmm – http://bkite.com/0ch2G #
Brian Layman’s Weekly Twitter Update for 2009-09-20
September 20, 2009
- Brian is life castng from his phone again? What's that all about??? http://qik.ly/gIBM #qik #
- Brian is life castng from his phone again? What's that all about??? http://qik.ly/gICN #qik #
- bah.. There's nothin' like nailing a 10 minute deep tech screencast on the first take, only to realize the wrong soundcard's mic-in was used #
- I've been meaning to ask, are we supposed to recognize anyone other than Whoopi in the TMobile MyTouch 3G commercials? #
- "It isn't fair. Most people have a little money left at the end of the month; I always have a lot of month left at the end of the money" #
- RT @campingblogger: 2 neat pics of late 1800's camping at the Little Hokum Rag http://tinyurl.com/p2yyce #
- RT @joetek: Wow! Adobe to acquire Omniture for $1.8 Billion http://bit.ly/11D5SQ (WHOA – b) #
- RT @adamisacson: Check it out! I'm texting while bicycli #
- RT @MicroBilt: New Rhett&Link Local Commercial Series Launched Sponsored by #MicroBilt http://bit.ly/tRLXI #
- RT @rhettandlink iLoveLocalCommercials Launches! « Rhett&Link: Internetainment http://bit.ly/14Eh7g #
- RT @rhettmc & @linklamont Live Kast Tonight at 9pm ET « Rhett&Link: Internetainment http://retwt.me/1EQi #
- Time keeps on slippin slippin slippin… I think "MafiaWars" has just official been pushed out of my schedule… Ah well it was fun… #
- RT @wptavern: Congrats to @sivel and @viper007bond for being added as Ops to the WordPress IRC channel by Matt. Long time coming. #
- Yo Yo The http://RhettandLink.com/live Kast going on now is great, but #Beyonce had the best live Kast this year! #
- RT @Bwana – Show #200 Celebration: We're celebrating show #200 of Bwana.org Radio! In this episode, I talk… http://ping.fm/6dm7g #
- Everyone should please wish my wife @Sorka a Happy Anniversary! Thanks! (please RT) #
- For those who asked, @Sorka and I have been married for 16 years now and were together for almost 4 years before that.. #
- Buying DOT approved #helmets instead of Snell could save 20% of lives lost in #motorcycle crashes http://bit.ly/ew1z8 #
- Contest: Please wish my wife @Sorka a Happy 16th #Wedding #Anniversary! (She thinks her knitter friends will RT more than my #geek friends) #
- Maybe @StaciJShelton will help get out the word… #
- RT @trishussey: Friday thought: RT @megfowler: social media is to marketing what eye contact is to a handshake. (Possibly -b) #
- RT @technosailor: There is something morally wrong with buying my son a Lego DthVader TIE Fighter for his bday. I should be buying it for me #
- RT @dudeman718: RT @GeekTyrant: Patrick Swayze Almost Had A Cameo In Zombieland! http://bit.ly/JeMIB (No, it's not some morbid joke – b) #
- RT @dudeman718: RT @GeekTyrant: Penn & Teller Get a New Show on ABC! http://bit.ly/gwcTQ (Rebo&Zooty ride again!-Can u name that SF show?-b) #
Brian Layman’s Weekly Twitter Update for 2009-09-13
September 13, 2009
- Reading about using Google's Safe Browsing API via PHP. I've got some ideas… http://bit.ly/EiydM #
- Brain Storming on Blocking Bad-ads from our websites.. http://bit.ly/mStkn Any other thoughts out there? #
- Sudan woman fined $200 for wearing pants in public. She got off easy as the Judge didn't impose lashes http://is.gd/2ZL3X #
- A history of the Internet, very impressive in its detail. (Did you know of the router "Fuzzball"?) http://bit.ly/OODo #
- Is that spider actually as big as your fist?!?!?!? "RT @bnpositive Now THAT's a spider! http://imgur.com/Y7bap.jpg" #
- The "Death of a Marine", told respectfully, through pictures and the photographer's own voice… http://bit.ly/LFWP8 #
- After much thought & deliberation, I've come to the conclusion that web browsers (like IE FF SF & OP) are really stupid, annoying & idiotic. #
- /me walks away for a bit… #
- Brian is life castng from his phone again? What's that all about??? http://qik.ly/fg2f #qik #
- Brian is life castng from his phone again? What's that all about??? http://qik.ly/fg3H #qik #
- Some videos of us eHermits clinging to the cliff faces of Seneca Rocks are now up at http://youtube.com/TheEHermit Enjoy! #
- Climbers on Seneca Rocks when we were there… It puts the place to scale… http://www.flickr.com/photos/brianlayman/3904426361/ #
- RT @campingblogger: RT @TwilightEarth @NaturalPapa New : High Res Photos From the Refurbished Hubble Telescope http://digg.com/d313p6w #
- Sigh. I may as well have a sideways hinge on my little toe (either). Anymore and the littlest catch & snap… at least that's how it feels. #
- Banff+CrasherSquirrel=Winning the SocialMedia game: "We've been preparing for an opportunity, & were able to move on it" http://bit.ly/FJu7T #
- Hat tip on the last tweet to @joetek. @StaciJShelton You need to read my last tweet. The article has you writtin written all over it. #
- I really like watching the KITV midday report (http://bit.ly/1WcEXJ) but the economic woes are hitting Hawaii hard.. #
- ugggghhhh my olfactory system informs me that it is time to walk the dog… #
- Web Comic XKCD pays homage to Orson Scott Card's novel Ender's Game & to WordPress in the same strip http://xkcd.com/635/ #
- Remember my comment about possibly snapping my little toe yesterday? It's a little less sore today but the end is all brown.. that's new… #
- RT @dudeman718: #followfriday @realandrews @Nurul54 @no_fixed_office @andykarelas @aheartforgod @elagrew @Paulbuchanan7 @ImSpecialKay #
- RT @technosailor: Umm why is Marine One circling Bethesda Naval Medical Center? (Interesting… -b) #
- In case you missed the State of the Union speech, AlphaCat presents his Hip-Hop Interpretation http://bit.ly/G42Ni #
- Ok that's from Feb, but it was still pretty darn close… #
- Twitter TOS updated & includes the Twitter Rules http://bit.ly/twrules addressing mass following, follow+unfollow & porn #
- Just cleaned my Welcome Back-World Trade Center coffee cups from the WTC cafeteria after 1st bombing – Photo: http://bkite.com/0bKqc #
- RT @autismfamily: I talk to my kids. Do you? http://www.timetotalk.org #
- RT @weirdnews: Sadly The Frog Patrol Never Caught On http://funtimeshad.com/?p=867 #
- Some menus are just scary.. http://funtimeshad.com/2009/06/decisions/ #
- Good food as always but sitting on the "wrong" side of rest for the 1st time in 11 yrs feels weird – Photo: http://bkite.com/0bMTV #
- The view from the "wrong" side of the restaurant :p – Photo: http://bkite.com/0bMUw #
![http://imgur.com/Y7bap.jpg"](http://imgur.com/Y7bap.jpg"){kind=link}
Brain Storming on Blocking Bad-ads
September 6, 2009
I’m just jotting down some notes about using the Google Safe Browsing API to prevent a site from serving malicious/bad ads.
Problem Defined
- Ads are put on a site via javascript by calls as simple as “getad(‘adposition1’)”. JavaScript is executed via the client’s browser after the page is served.
- Those calls don’t touch any of our servers, they go from the client to the Google/Glam/Whatever Ad Server. So we don’t see the ads before they appear on the customer screens.
- The ads being served may be malicious
- Any ad that is served can link to a site that has been infected. We will want to block this.
- Any ad that is served can “take over” the page and redirect the page to a site that may or may not have malware. We want to block ALL take over attempts.
- There may be other types of ads that we wish to block. Potentially we might wish to block specific ads on specific sites (i.e. a sexual connotations in ads on pre-teen audience sites). This may be beyond the initial scope and/or incur unwanted execution expenses.
- Serving a malicious ad can get a site listed as “infected” even though your server has had nothing to do with ANY of the ad content.
Obstacles
- Any extra calls WILL slow the page load process.
- Each page load MUST call the ad serving script again
- If an ad can be identified as bad, some other type of content must be served in that position to ensure page integrity.
- The request for ad content HAS to come from the customer side because many ads are geo-specific and the customer’s IP determines what ad shows at what time.
- You don’t want to set up a system where the site itself can submit a site as “bad” as anyone could sniff that info and seed our black list with bad data.
- The results of the first getad() call could result in more javascript which must, in turn, be processed by the browser to produce the final ad. Potentially, several layers of JS could exist before the real ad is served. (e.g. 2 layers of indirection before ad: Google Ad Manager JS —serves—> Glam Ad embeded JS call —serves—> JS call to 3rd Party Ad Server —serves—> Ad). This pattern is real and happens often.
Possible solutions
- Status Quo: As problem sites are reported to us, determine which ad is bad, report it to the ad server & hope they fix it before google sees it and lists the site as a dangerous site in it’s tool bar and in chrome.
- Unless you are “lucky” you don’t get the badad.
- Once you get the badad, it is hard to determine the initial JS that caused the problem
- Embed everything JS with its own iframe
- Will block take overs
- May or may not prevent Google from listing the site, probably not.
- Will break ads that are contextual based
- Check the ad entirely on the client side via a black list: GSB API (http://code.google.com/apis/safebrowsing/) or PhishTank (http://data.phishtank.com/data/online-valid.xml)
- This Good/Bad check could be done with a single call with the API call
- Calls to external servers are dependent upon the health/bandwidth of that server
- This could also be done via downloading the black list and checking off of that: http://code.google.com/p/jgooglesafebrowsing/wiki/Quick_Start_Guide
- Blacklist downloading would cost time and would have to be updated periodically.
- Implement a hybrid solution where a call is done to our servers to see if the an ad is good or bad. (Server side base code: http://lampsecurity.org/php-google-safe-browsing-api )
- Ad call is processed in JS eval (Will have to be checked for nested JS calls)
- MD5 of ad is sent to the server. The results are Good/Bad/Unknown. (Pass the url?)
- If the result is Good, ad is served and process exits
- If the result is Bad, either go to step 1, or serve place holder/known good ad & exit.
- If the result is Unknown, send the JS to the server for verification. The server processes the code and returns a Good/Bad result.
- If the result is Good, ad is served and process exits
- If the result is Bad, either go to step 1, or serve place holder/known good ad & exit
- Other solutions?
Reading
- All your IFrames Point to us: http://googleonlinesecurity.blogspot.com/2008/02/all-your-iframe-are-point-to-us.html http://research.google.com/archive/provos-2008a.pdf
- The Ghost In The Browser http://www.provos.org/index.php?/archives/17-The-Ghost-In-The-Browser.html http://www.usenix.org/events/hotbots07/tech/full_papers/provos/provos.pdf
- Ask the Google Malware Team: http://moderator.appspot.com/#15/e=a77ea&t=a9521
- Cybercrime 2.0: When the Cloud Turns Dark http://queue.acm.org/detail.cfm?id=1517412
- Google Online security http://googleonlinesecurity.blogspot.com/
Anyway, I had this going through my head and wanted to get this all written out. So I can have a place to check back on this tomorrow…
Brian Layman’s Weekly Twitter Update for 2009-09-06
September 6, 2009
- Brian is life castng from his phone again? What's that all about??? http://qik.ly/ehGS #
- The 'backyard' for our camping spot – Photo: http://bkite.com/0bn5C #
- Some random mtns for Lee – Photo: http://bkite.com/0bnG6 #
- Smokier mtns just b4 I head out of cell range – Photo: http://bkite.com/0bnGj #
- Mor smokyMtns – Photo: http://bkite.com/0br3y #
- This is where we've been camping for the last three nights.. (zoom out a step at a time for full effect) http://bit.ly/QQIVF #
- Home again. Home again. Jiggity jig. #
- I hid in my room for a couple hours this morning. Eventually I realized that I could hide all I wanted but I was still home &should do stuff #
- Like pick up the dog from the kennel, repair the ceiling that collapsed, do some overdue computer stuff, install a counter, #
- The Rhett&LinKast Live has restarted for the fall season at come join me & 350+ other viewers at http://RhettandLink.com/live (Please RT) #
- For those who found that http://Rhettandlink.com/live was down due to overload, it is back up. Please come back again #
- Sweet we are up to 500 viewers at http://Rhettandlink.com/live as the contest winners are announeced! #
- RT @rhettandlink First Kast Back, and CBE Winners! « Rhett&Link: Internetainment http://bit.ly/4bZ2nM #
- RT @StaciJShelton: @JimHunt @LydiaJayne475 @chiniehdiaz @Kim @SaharaDamore @SereneMomma @wahujen @nanetteschimpf Muaah! G'Night! #
- RT @StaciJShelton: Today is the LAST DAY to Vote for for me to be a panelist at #SXSW!! You can vote here: http://is.gd/2SGu4 #
- Innnnteresting. Firefox just updated when it ran & brought me to the update splash screen w/ "You’re running an unknown version of Firefox." #
- RT @Sorka: Done editing for the latest issue of http://www.loomknitterscircle.com if you want an ad let me know! Changing hats to ad manager #
- RT @DebNg: The cat is using the hole in the family room floor as a shortcut to the basement. Glad it's not kid-sized. (LOL – b) #
-
Subscribe
-
Recent Posts
- Brian Layman’s Weekly Twitter Update for 2010-03-07
- Brian Layman’s Weekly Twitter Update for 2010-02-28
- Brian Layman’s Weekly Twitter Update for 2010-02-21
- How to: Find files edited in the last day
- Brian Layman’s Weekly Twitter Update for 2010-02-14
- Brian Layman’s Weekly Twitter Update for 2010-02-07
- Brian Layman’s Weekly Twitter Update for 2010-01-31
- Brian Layman’s Weekly Twitter Update for 2010-01-24
- Brian Layman’s Weekly Twitter Update for 2010-01-17
- Brian Layman’s Weekly Twitter Update for 2010-01-10
-
Categories
-
Archives
- March 2010
- February 2010
- January 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- August 2008
- July 2008
- June 2008
- May 2008
- March 2008
- February 2008
- January 2008
- November 2007
- October 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
- July 2006
- June 2006
- May 2006
- April 2006
- March 2006
- February 2006
-
Links
- (Mad)Crab Volleyball - A game I hacked for a friend of mine
- 404 by Count Null - A German site with decent information about WordPress and Themes
- Aaron Brazell – Technosailor - Technology, blogging, Web 2.0 and Entrepreneurship
- Alex King - A prominent WordPress Developer
- Andy Skelton (skeltoac) - Automattic Code wrangler
- Balloon Headed Boy - A fun kids game
- Christian Music Fan - A site for conversations on Christan music.
- Cindy’s Digital Ramble - Winner of the First-Blog-I-Wandered-Into-That-Has-Me-In-Their-Blogroll unannounced contest.
- Computer Guru - An AVID WP-Hacker
- ConTEXT is a very powerful editor with syntax highlighting for most kinds of source code. It’s written in Delphi, of course! Finally, a worthy Notepad replacement,- Craig Hartel - The Nuclear Moose is no longer a Hacker but still has proment sites…
- David Chait - WP-Hacker and enthusiast
- Donncha O’Caoimh - Lead Developer of WordPress.com
- Doug Stewart - A very bright WP-Hacker with a FUN site to read
- Dougal’s Geek Ramblings - Dougal’s, a WP-Hacker, Geek Ramblings
- Handy Solo - Support Forum Guru
- Hapland 1 - Can you click and solve this page? I did..
- Hapland 2 - Ah, but can you open this portal? It’s harder!
- Hapland 3 - The final chapter
- Iggy the Biker - Because you’re never too old to ride…
- Installing WordPress on Windows - A description of how to install WordPress locally
- io_error - IRC Chat, Liberty, WordPress and the American way…
- Justin - Justin is a WP-Hacker
- Knitting Loom Central - A website for free knitting patterns
- My Wife’s Knitting Site- libertus - Paul Mitchel has been liberating WordPress at his site since 2004…
- Lloyd D Budd - An active Automattic man bringing a Fools Wisdom to WP
- MakeZine’s blog - Go there! Words can’t explain the engineering bliss!
- Mark Jaquith - Freelance WP-Hacker who helps make WP what it is
- Matt Mullenweg - Matt is one of the creators of WP and put the Matt WordPress’s AutoMattic
- This IE shell utility turns IE into a browser that tops all competition in many ways including allowing Delphi built extensions.- Michael / miklb - A VERY active WP Support forum guy
- Michael Adams-mdawaffe - CalTech based Automattic Dude
- Michel Valdrighi - Developer of WP’s predicessor: B2
- Mike Little - Co-Founded WordPress with Matt Mullenweg.
- My Infocom Games - This is how I play my infocom games while on the road
- Owen Winkler - A down to earth WP-Hacker and all around good guy.
- Peter Westwood (Westi) - WP Hacker that helps keep WordPress on Trac
- Planet Sean - Technology Goodness at its best!!!!
- Podz - A VERY active WP Support forum guy
- Purls Of Hope - A charity site for Hurricane Katrina victims
- Rhett And LinKast Live - I help out with the Rhett and LinKast Live every week. Good Clean fun! Thursdays at 9pm
- Rob Miller - Rob Miller’s blog of helpful hints and plug ins…
- Robert Deaton - A WP-Hacker with strong coding skills and even stronger opinions ;)
- Roy Schevstowitz - WPHacker – Smart guy, Runs a Heavily hacked WP 1.2!!! site safely.
- Ryan Boren - Ryan is one of the Automattics. Matt’s #1 I should think.
- spencerp - Good guy with a lot of WP-Hacker suggestions
- Submitting Bug Reports & Feature Requests - Describes how to tell the WP developers about a bug or improvement
- Submitting Patches with Your Code Changes - The best way to ensure your request is approved, is to submit the code changes.
- The 298 Sand Bandits - A page for the wives of my bro-inlaw’s unit
- The Bored Again Christian - Bored with Christian music? Here’s a podcast with some unique sounds…
- The WildWest Forums - A VBulletin Forum for the WildWest mod
- The WildWest RtCW Mod - Support for The WildWest mod
- Viper007Bond - A WP-Hacker – I admire his ingenuity and little utilities
- William Lehman’s Decloned - Cloneliness is NOT next go Godliness!
- Kim Henkel’s ZTree program allows you to do so many file management tasks simply not possible in Explorer that Bill Gates decided it was way to helpful to include in WindowsXP.
-
Meta