On Message with Ben Gross

Link roundup 8/5/08

August 5th, 2008

Bookmarks Are Dead. Long Live Bookmarks: Jeremy Wagstaff writes about the current state of bookmarks and bookmark synchronization tools in his Loose Wire blog. He discusses the latest release of the Delicious service, PersonalBrain, and what these might mean when combined with new services such as Twitter.

iPhone Calendar Syncing: Daring Fireball’s John Gruber writes describes the differences in the iPhone synchronization models between iTunes and MobileMe. He clearly shows tradeoff’s in each choice. Apple will hopefully bring parity to both options in the near future.

Mozilla SSL policy bad for the Web: I agree with Nat Tuck’s sentiment that the way the Mozilla 3 browser handles self-signed SSL certificates is poorly handled. Nat makes the case that there are plenty of valid reasons to use self signed certificates and that these certificates still offer useful eavesdropping protection. The user interface in the latest Mozilla client virtually ensures that non-technical users will assume that a self-signed certificate is completely invalid.

Related posts


Link roundup for 2/29/08 E-mail typosquatting poses leakage threat: an interesting additional problem presented by Oliver Friedrichs at the Black Hat conference. Individuals have regist ...

Link roundup for 8/10/07 Smartphone Browser Shootout: Palm, BlackBerry, HTC Vs. iPhone: An article by David DeJean at InformationWeek. The author describes a series of tests of various ...

Link roundup for 5/1/08 Struggling to Evade the E-Mail Tsunami: Randall Stross at the New York Times writes a refreshingly entertaining piece on the often overdone topic of email overl ...

Link roundup for 7/31/08

July 31st, 2008

Purging Public E-Mails: When to Say No: ABC News discusses a number of the recent cases where government officials ordered the deletion of official emails and their backups. The article also describes the great inconsistencies between various states and agencies in archiving and retention policies.

Xobni Can Make Good Old Email Even More Useful: In his Personal Technology column at the Wall Street Journal, Walt Mossberg gives the Xobni Outlook plugin high marks for improving search, navigation and weaving in addition useful information. There have been a number Outlook plugins over the years that extend search and construct network information. Xobni clearly does a good job with integration so it will be interesting to see if the product is broadly adopted.

MultiFirefox 2.0 : This is a useful utility from from Code Contortionist for web developers on the Mac. It allows users to easily switch between multiple versions of Firefox, which is makes life easier when testing compatibility across browsers or when beta testing new browsers.

Related posts


Link roundup for 1/7/08 Shelf - Context for MacOS - jerakeen.org: the software is still in proof-of-concept stage, but the idea is promising. Shelf runs in the background and polls the ...

Link roundup for 1/14/08 Official Gmail Blog: Create personal mailing lists through contact manager: Google has added a simple group alias feature (not really a mailing list) to the new ...

Link roundup for 11/26/07 12 spam research projects that might make a difference: Network World gives a short description of a dozen research anti-spam research projects from university ...

Email Hacking Going Commercial: Dancho Danchev writes on his blog about a commercial service that uses a software package with a collection of security vulnerabilities (many are Cross Site Scripting/XSS attacks) combined with a network of contractors, a validation service, and several payment options all wrapped up in a single commercial service. This is yet another example of why XSS attacks and CAPTCHA failures are such a big problem.

How to break CAPTCHAs: Blackhat SEO covers a compendium of articles, talks, and writeups on CAPTCHA vulnerabilities and attacks. It is clear that much of the web’s CAPTCHA infrastructure is rapidly fraying. It’s increasingly difficult to build CAPTCHAs that are secure enough from automated attacks, but that do not result in large number of failures for normal people.

Cell Phone Spying: Is Your Life Being Monitored?: Geeks are Sexy has a post on commercial remote call monitoring and tracking options (many of which are legal only under specific circumstances) for mobile phones. The article covers both World Tracker and Flexispy.

Related posts


Link roundup for 10/15/07 How 2 Guys' Iowa Connection Took Big Telecoms for a Ride - WSJ.com: The Wall Street Journal describes the history and explains how freeconferencecall.com exploi ...

Link Roundup on Identity Management 4/13/08 Understanding CardSpace | : As part of his Perspectives series, Jon Udell interviews Vittorio Bertocci, the author of Understanding Windows CardSpace. The inter ...

New and noteworthy for 10/06/08 Technorati: State of the Blogosphere 2008: Technorati released its annual report on blogs and bloggers. Given Technorati's position and history of tracking blog ...

Link roundup for 7/27/08

July 27th, 2008

Why I Made Emailchemy: Matt Hovey is the developer behind Emailchemy, a highly capable email conversion tool that is able to convert between a wide range of email applications and services. In this post, he writes about how his desire to move mail between the variety of systems of his school and work institutions that employed different mail applications resulted in his development of Emailchemy.

Fighting Comment Spams - There Gotta Be A Better Way: HostingFu writes about current anti-comment spam options for weblogs and discusses his use of the up and coming service called Mollom which has replaced Akismet on HostingFu.

Preoccupations - I Freed Myself From E-Mail’s Grip: New York Times story about an IBM employee living in the Canary Islands, but reporting to mangers in the US and the Netherlands, successfully transitioned to largely communicating and collaborating via social software. He said this has resulted in an 80 percent reduction of the number of email messages he receives in a week.

Related posts


Link roundup for 6/16/08 Lost in E-Mail, Tech Firms Face Self-Made Beast: Matt Richtel at the New York Times writes about corporate recognition of the costs of interruption and distract ...

New and noteworthy for 9/12/08 State of the Art - On Internet, You’ve Got (Paper) Mail: David Pogue at the New York Times reviews the Earth Class Mail service that receives your postal ...

Link roundup for 5/1/08 Struggling to Evade the E-Mail Tsunami: Randall Stross at the New York Times writes a refreshingly entertaining piece on the often overdone topic of email overl ...

Basic HTML-based forms are ubiquitous on the web. They are used for everything from service sign ups to collecting demographic information to opinion surveys. The forms are created a variety of methods including applications such as Dreamweaver, hosted services such as Zoho Creator, and hand coding in PHP or another template language. Recently, I wanted to create a number of forms. Some of the forms were simple with a small number of fields and others were longer with a variety of more complicated field types.

Many of the form generation methods were not an ideal fit for my requirements including hosting the form on our server, CAPTCHAs for anti-spam, and sending simultaneous submission information to a database, a local email address, and the person who filled out the form. After a brief search I began working with MachForm from Appnitro software. MachForm was straightforward to installed on install on our server. I copied the files over, created a database, set some basic configuration variables, and ran a simple setup program.

MachForm was pleasantly simple to use and allowed me to create forms rapidly. The user interface largely consists of a number of field types. You simply click on a field type, say address and it adds an address block to the form. Fields can be reordered via drag and drop which speeds up the process substantially.

There are many nice touches. For example, the address block automatically supports internationalization (in a limited sense) and allows you to set a default for the country (although not for the state as it is not a drop down). Most structured field types (email, web, phone, address, numbers, dates, etc.) automatically include form validation and will provide notification to the user if they enter invalid information. Entries may be marked as required and additional text for instructions may be added in a mouseover.

Forms are created with the MachForm application, managed from a central dashboard, and styled from a single CSS file. The benefit of this approach is that it is centralized. The downside is that there is effectively only a single style for all forms although you can make some modifications by adding HTML tags from within the form elements. The interface to manage the CSS is simply editing a large text block that is essentially the same as using a text editor on the CSS file. Entries may be viewed or edited online and may also be export to CSV or Excel. MachForm integrates with several other well-known open source packages such as PHPMailer for SMTP support and reCAPTCHA for CAPTCHA support.

While the application has much to recommend, there are a number of places that MachForm could be improved. There is minimal ability to control the layout in the application and there is no ability to have different style sheets for different forms. I wish there was an easier way to add more arbitrary text to more of the fields. Essentially, I was looking for a header and a footer to add in some free form text in many of the items. Some basic text can be added as a separator, but again this is less flexible than I desired.

If some of the more common CSS variables could be exposed through the UI it would make experimentation with different form styles much easier. The theme gallery on the Appnitro site is a good start although these typically just modify a few basic colors. The installation process was not particularly difficult, although more of the process should be managed through the web UI rather than editing a configuration file.

I ended up upgrading the packaged version of PHPMailer so I could use the newer version that supports SMTP over TLS (SMTP SUBMISSION) that is needed Gmail and many other services, as well as a SMTP debug mode.

A free version of MachForm is available on the developers website as a hosted application with limited features. The paid version adds additional features and allows customers to host their own forms in addition to a free installation service.

The license for MachForm is $40 per domain (including sub-domains). MachForm requires PHP 4.3 or higher and MySQL 4.1 or higher, both of which are commonly pre-installed on most web hosts. Overall, I recommend MachForm as it provides solid functionality for building HTML-based form with a surprisingly usable creation and management user interface.

Related posts


1Password — the Login Manager and Form Filler for the Mac and iPhone Briefly, 1Password is an application to manage passwords and auto-fill web forms for the Mac, the iPhone, and the iPod Touch. At first pass, the functionality m ...

Link roundup for 10/7/07 "Trends in Badware 2007" released: The StopBadware organization has released a report describe current types and trends in "badware" including hacked websites, ...

Link roundup for 8/7/07 Annals of Technology: Damn Spam: "The losing war on junk e-mail" by Michael Specter in The New Yorker is a lengthy overview of the current state of spam and fil ...

Link roundup for 7/9/08

July 9th, 2008

Adobe’s PDF format now an ISO standard: AppleInsider reports on the official acceptance of Adobe’s Portable Document Format as ISO Standard number 32000. This means that ISO is officially in control of the PDF standard.

RealSnailMail: is a research/performance art project to have snails outfitted so that they can store and deliver electronic messages (snail mail). The project will be demonstrated at the 35th International Conference and Exhibition on Computer Graphics (SIGGRAPH 2008).

How to beat AVG’s fake traffic spew: The Register reports on the widely reported problems caused by AVG’s LinkScanner, which generates large volumes of traffic while it opportunistically validates links. AVG is expected to make changes to its anti-virus software in response to complaints.

Related posts


Link roundup for 6/13/08 Man accused of using LinkedIn to steal clients: The Register covers a lawsuit regarding a former employee of a recruitment firm who allegedly used his LinkedIn ...

Link roundup for 2/8/08 Email Standards Project Acid Test | Email Standards Project: this is a test inspired by the Web Standards Project (WaSP) Acid tests that are widely used to gaug ...

Link roundup for 2/4/08 Microsoft plus Yahoo! Strategic Assets in Email: Tim O'Reilly writes about the implications of a combined Microsoft/Yahoo email market and reiterates that he th ...

Link roundup for 6/24/08

June 24th, 2008

E-Discovery Leads to Arrest of Bear Stearns Hedge Funds Managers: The Wall Street & Technology Blog covers the depressingly evergreen story of senior management who send messages from their personal accounts about company actions that are illegal. This email about Bear Sterns acknowledged that a senior manager knew the fund was collapsing even though they announced that the fund was in good shape. As is the case in this story, these messages are usually recovered in the case electronic discovery.

Confessions of a former e-mail packrat: Macworld editor, Kelly Turner, writes about the process of changing her email management strategy to limit the number of messages in her inbox that are not filed. She reports that while the results are not perfect, so far it seems to be working well.

Trending Low-Volume Google Search Terms - Introducing Gootrude: Michael Rash released a small open source project that allows you to make rough estimates on the popularity of terms in the Google index over time and compare them to other terms. Rash’s idea was that it allowed him to follow terms that fell below the minimum number of queries in Google Trends. While the data is clearly not as rich as the data in Google Trends it could be useful for some projects.

Related posts


Link roundup for 3/30/08 The theme of today's link roundup is about obtaining access to data you may have stored on one web-based service from another web-based service or an applicatio ...

Link roundup for 8/7/07 Annals of Technology: Damn Spam: "The losing war on junk e-mail" by Michael Specter in The New Yorker is a lengthy overview of the current state of spam and fil ...

Link roundup for 9/10/07 Archive Sues to Recover 5 Million : The National Security Archive has sued the White House to obtain and require the preservation of over five million emails th ...

Link roundup for 6/16/08

June 16th, 2008

Lost in E-Mail, Tech Firms Face Self-Made Beast: Matt Richtel at the New York Times writes about corporate recognition of the costs of interruption and distraction caused by email and other messaging technologies. Richtel now says that many of the companies that are also the largest messaging providers are working together to develop new tools and strategies to help workers focus and suffer less interruptions.

Email Deliverability is crucial to achieve consumer Internet virality: In his weblog Summation, Auren Hoffman provides a terse but very useful list of resources to improve email deliverability. It is worth a quick look for anyone interested in email deliverability.

Digital Domain - In the E-Mail Relay, Not Every Handoff Is Smooth: Also in the New York Times, Randall Stross writes an funny yet accurate piece about the modern dilemmas of failed email delivery compared to message delivery in days gone by.

Related posts


New and noteworthy for 10/27/08 The Root of All Email: J.D. Falk writes about the most recent updates to the IETF RFCs covering email in CircleID. Despite all the acronyms this is an important ...

Link roundup for 1/28/08 Interview with Nitesh Dhanjani and Billy Rios, Spies in the Phishing Underground: the interview is well worth reading if you are interested in the current state ...

New and noteworthy for 9/12/08 State of the Art - On Internet, You’ve Got (Paper) Mail: David Pogue at the New York Times reviews the Earth Class Mail service that receives your postal ...

Link roundup for 6/13/08

June 13th, 2008

Man accused of using LinkedIn to steal clients: The Register covers a lawsuit regarding a former employee of a recruitment firm who allegedly used his LinkedIn account to essentially export his contacts from the firm so he could use them to start a new competing firm. This is interesting for several reasons particularly with regard to who “owned” the contacts in the first place and since LinkedIn is an external service not managed by the company was he entitled to keep his account with its contacts after he left.

Inventing contact schemas for fun and profit! (Ugh): Chris Messina writes about the potential benefits that the recently released contact APIs from Microsoft, Google, and now Yahoo! as well as the problems caused by the proliferation of new contact schemas. Messina argues that the schemas should be standardized where possible using an existing standard such as vCard.

Gpcode.ak Cryptographic Challenge: Discusses the call for cryptanalysis of the Gpcode.ak virus which encrypts a users data and attempts to extort money in exchange for a tool that will decrypt all the files. They encryption key used is a 1024-bit RSA key. The hope is that through cryptanalysis of the virus a flaw in the implementation will be found that will lead to substantially faster key recovery as the current key could easily take up to a year to find even with specialized hardware and the author could potentially use multiple keys.

Related posts


Link roundup for 3/30/08 The theme of today's link roundup is about obtaining access to data you may have stored on one web-based service from another web-based service or an applicatio ...

Link roundup for 1/14/08 Official Gmail Blog: Create personal mailing lists through contact manager: Google has added a simple group alias feature (not really a mailing list) to the new ...

Link roundup for 7/9/08 Adobe's PDF format now an ISO standard: AppleInsider reports on the official acceptance of Adobe's Portable Document Format as ISO Standard number 32000. This ...

Link roundup for 6/7/08

June 7th, 2008

Coding Horror: Please Give Us Your Email Password: Jeff Atwood has a nice point outlining the unfortunately still too common practice of web services that request a user’s login and password from the major web services (Google, Microsoft, Yahoo, etc.) in order to extract address book information. Not only is this an obviously bad idea, but there are API solutions in place from the major providers that provide authenticated access to contact information without requesting that the user give up their password to their whole account.

An interview with 280 North on Objective-J and Cappuccino: Ajaxian covers the recent release of a very well done browser-based online presentation creation tool called 280 Slides. The tool is very straightforward to use and has raised the bar for web-applications. Creation, export (to PowerPoint 2007), sharing are all implemented in an easy to use manner. Superficially it looks like a browser-based Apple Keynote, although with significantly fewer options. 280 North the creators of 280 Slides have created an objective version of JavaScript and JavaScript framework called Cappuccino which they used to create 280 slides.

Gmail Gets 13 Experimental New Features: LifeHacker covers Google’s release of Gmail Labs, which is a showcase of Google Employee’s twenty percent time projects and other Gmail experiments. Heavy Gmail users may find some of the features more useful than light users, in particular the ability to have more than one type of star (flag) called Superstars, custom keyboard shortcuts, as well as the ability to conserve space through hiding status messages and hiding unread counts for the Inbox and other labels. All of the features are opt-in.

Related posts


Link roundup for 3/30/08 The theme of today's link roundup is about obtaining access to data you may have stored on one web-based service from another web-based service or an applicatio ...

1Password — the Login Manager and Form Filler for the Mac and iPhone Briefly, 1Password is an application to manage passwords and auto-fill web forms for the Mac, the iPhone, and the iPod Touch. At first pass, the functionality m ...

Link roundup for 5/6/08 mail-trends: Mihai Parparita's tool to let you analyze and visualize your own Google-based email collection. The software is still in its early stages and requi ...


Home | White Papers | Privacy Practices | Contact Us

Copyright © 2008, Messaging News, Inc. All Rights Reserved.