Six XML Security Documents Published

Friday, July 31, 2009 - World Wide Web Consortium - Web Standards

2009-07-31: The XML Security Working Group published six documents related to XML signature and encryption. XML Signatures provide integrity, message authentication, and/or signer authentication services for data of any type, whether located within the XML that includes the signature or elsewhere.

Launch Years

Thursday, July 30, 2009 - Matt

The launch years of today’s most popular websites.

Daniel Weitzner Named to Run US Government Internet Policy Unit

Thursday, July 30, 2009 - World Wide Web Consortium - Web Standards

2009-07-30: Daniel Weitzner has been named Associate Administrator for the Office of Policy Analysis and Development at the US National Telecommunications and Information Administration (NTIA). Danny will have a leading role in fulfilling the NTIA's mandate to provide the President advice on telecommunications and information policy issues.

Bezos Reviews

Tuesday, July 28, 2009 - Matt

Amazon.com reviews from Jeffrey P. Bezos. Includes milk, cookies, cheese snacks, binoculars, and a Cory Doctorow novel. Unfortunately, the cookie items reviewed are no longer available so we’re not able to share in “snickerdoodles [that] were the best I’ve ever had.”

GPL FUD

Tuesday, July 28, 2009 - Matt

GPL FUD round N+1.

Favorite iPhone Apps

Monday, July 27, 2009 - Matt

The Favorite iPhone Apps of Five Geek Rock Stars.

W3C Invites Implementations of Widgets 1.0: Packaging and Configuration

Friday, July 24, 2009 - World Wide Web Consortium - Web Standards

2009-07-24: The Web Applications Working Group invites implementation of the Candidate Recommendation of Widgets 1.0: Packaging and Configuration. This specification standardizes a packaging format for software known as widgets. Widgets are client-side applications that are authored using Web standards, but whose content can also be embedded into Web documents. The specification relies on PKWare's Zip specification as the archive format, XML as a configuration document format, and a series of steps that runtimes follow when processing and verifying various aspects of a package. The packaging format acts as a container for files used by a widget. The Working Group plans to develop a test suite during the Candidate Recommendation phase. Learn more about the Rich Web Client Activity. (Permalink)

Flexible Box Layout Module First Draft Published

Thursday, July 23, 2009 - World Wide Web Consortium - Web Standards

2009-07-23: The Cascading Style Sheets (CSS) Working Group has published the First Public Working Draft of Flexible Box Layout Module. The draft describes a CSS box model optimized for interface design. It provides an additional layout system alongside the ones already in CSS. This model is based on the box model in the XUL user-interface language. Learn more about the Style Activity. (Permalink)

CSS Image Values Module Level 3 First Draft Published

Thursday, July 23, 2009 - World Wide Web Consortium - Web Standards

2009-07-23: The Cascading Style Sheets (CSS) Working Group has published the First Public Working Draft of CSS Image Values Module Level 3. This CSS Image Values module defines the syntax for image values in CSS. Image values can be a single URI to an image, a list of URIs denoting a series of fallbacks, sprites (image slices), or gradients. Learn more about the Style Activity. (Permalink)

User Agent Accessibility Guidelines (UAAG) 2.0: Updated Working Draft

Thursday, July 23, 2009 - World Wide Web Consortium - Web Standards

2009-07-23: The User Agent Accessibility Guidelines Working Group has published an updated Working Draft of the User Agent Accessibility Guidelines (UAAG) 2.0. UAAG defines how browsers, media players, and other "user agents" should support accessibility for people with disabilities and work with assistive technologies. Read the invitation to review the UAAG 2.0 Working Draft and about the Web Accessibility Initiative (WAI). (Permalink)

Africa, Ulusaba

Monday, July 20, 2009 - Matt

Arrived at the Ulusaba Game Reserve in South Africa with Richard Branson, saw some hippos, elephants, and a cheetah, followed by a delicious dinner — the last one from their current chef.

W3C Organizes Workshop on Improving Access to Financial Data on the Web

Thursday, July 16, 2009 - World Wide Web Consortium - Web Standards

2009-07-16: W3C invites people to participate in a Workshop on Improving Access to Financial Data on the Web on 5-6 October 2009 in Arlington, Virginia (USA). Workshop participants will discuss how to achieve greater transparency and more efficient reporting and analysis of business and financial data for companies and governments. The Workshop is jointly organized by W3C and XBRL International, with hosting support from the Federal Deposit Insurance Corporation (FDIC). The extensible business reporting language (XBRL), is being widely adopted all around the world, and is set to become the standard way of recording, storing and transmitting business financial information. While effort on XBRL so far has gone into developing the standards and taxonomies of reporting concepts, comparatively little effort has been spent on how to exploit the expected flood of data. The goal of the Workshop is to identify opportunities, use cases, and challenges for interactive access to financial data expressed in XBRL and related languages, and the broader opportunities for using Semantic Web technologies. The Workshop is free of charge and open to anyone, subject to review of their statement of interest and space availability. Statements of interest (position papers) are due 21 August. See the call for participation for more information. Learn more about the Semantic Web. (Permalink)

Google Global Warming

Thursday, July 16, 2009 - Matt

This is why Google is trying to solve global warming. So they can run their datacenters without A/C more days. ;)

Best Practices for Authoring HTML: Handling Right-to-left Scripts Draft Published

Wednesday, July 15, 2009 - World Wide Web Consortium - Web Standards

2009-07-15: The Internationalization Core Working Group has published the Working Draft of Best Practices for Authoring HTML: Handling Right-to-left Scripts. This document provides advice for the use of HTML markup and CSS style sheets to create pages for languages that use right-to-left scripts, such as Arabic, Hebrew, Persian, Thaana, Urdu, etc. It explains how to create content in right-to-left scripts that builds on but goes beyond the Unicode bidirectional algorithm, as well as how to prepare content for localization into right-to-left scripts. Learn more about the Internationalization Activity. (Permalink)

Dopplr Stats

Wednesday, July 15, 2009 - Matt

I just got my Dopplr stats for the first half of the year. “You took 28 trips, which added up to 221,054 km or 60% of the distance to the moon. You spent 72 days at home, 109 days traveling. Your personal velocity so far this year was 48.12 km/hr, which is about the same as an elephant.” These stats are the #1 reason I use Dopplr, it’s just fun to play with it.

XML Signature Correction Addresses Security Issue

Tuesday, July 14, 2009 - World Wide Web Consortium - Web Standards

2009-07-14: The XML Security Working Group has published a proposed correction to the XML Signature specification. The correction addresses a specification-level security issue that can lead to an authentication bypass (CVE-2009-0217). It will be incorporated into an upcoming Working Draft for the XML Signature 1.1 specification. For information about affected implementations, see CERT Vulnerability Note 466161. For more information about the issue, see the W3C Q&A blog. Learn more about W3C's Security Activity. (Permalink)

Best Headphone Recommendations

Tuesday, July 14, 2009 - Matt

My friend Jon Callaghan asked me what I recommended in terms of audiophile headphones, so I thought I’d share my answer with the world here under the Ask Matt category. I use three headphones on a regular basis, and they fall pretty nicely into low, mid, a high-end. There’s a super-high end I’m not going to cover here, because once you get into the world of headphones requiring amps you might as well just build a good open air system. I’ve tried probably two dozen headphones ranging from $50 to $1,200.

Apple HeadphonesWhen I’m walking around on the street with my iPhone, my everyday buds are the step-up Apple In-Ear headphones, which come in around $80. They have a sweet triangle carrying case which makes them compact in my bag, and as a bonus the mic/volume remote thing works great with the 3GS, so I seldom take my phone out of my pocket. It’s also handy if you get a call, people have told me the voice quality is significantly better than calls I do on the cheapie included iPhone headphones, which always fell out of my ears too. They’re also easy to share with someone. So that’s my everyday pick.

HD-595sIf I’m listening to headphones at home or for a long period, I’m not a fan of in-ears because they aren’t as comfortable and my ears get “waxy” after more than about an hour. The most comfortable, best sounding, and least hassle headphones I’ve found for everyday use are the Sennheiser HD-595s, which I believe I discovered through Jeremy Zawodny. They’re big and bulky, and the cord is really long, but they’re just so darn comfortable. You can wear these all day and not mind at all. The price point is around $185–$220 on Amazon, which I linked above and I feel is an excellent value.

My final category of usage is travel, particularly on airplanes, where I want the highest fidelity, comfort, and sound isolation. Honestly in price point there’s a dead zone between around $250–$900, including all the Shures which I’ve tried and would not recommend anymore. (I used to be a Shure fan and have used their entire range.) This was the hardest category for me to crack, I tried various sound-cancellation models, but ultimately felt like they distorted the sound.

I finally ended up going with Ultimate Ear Custom line, first the UE-10 and later the UE-11. Now these are a bit of an experience, so let me walk you through what happens when you buy them. First you choose your options on the website, I’d recommend going all-clear for cord and buds, otherwise they look a bit weird. I’ve had both the 64 inch and 48 inch cord — the 48 is about exactly enough to go under a jacket and from your waist to your ears, but doesn’t give you a lot of room otherwise. I have the 64 inch now and the extra inches give me more flexibility and don’t get in the way.

UE-11sSo you go to the website, take out a second mortgage, and plop down $900 for the UE-10 or $1,150 for the UE-11. They then point you to a local ear specialist, which basically means someplace that does hearing aids, where they will make a mold of your ear. (Though the second time I did this it was at a cool rock and roll place in San Francisco. UE keep your molds on file, but apparently the shape changes and if it’s been more than a year you should get new ones made.) This is usually pretty cheap, and they’ll mail the molds directly to Ultimate Ears with your information. A few weeks later, your headphones show up in a fancy metal box, which now I think they put your name on.

I first got the UE-10s probably 5 years ago and the cost was really prohibitive, but then I realized that I had spent almost that much on a series of crappy headphones that kept breaking. They are also like a first-class upgrade on every flight — I’ve literally been sitting next to a crying baby in the back seat of economy and these headphones blocked the entire thing out. Close your eyes and let the music take you someplace else. They work so well because they fit your ear perfectly, so create a seal that blocks external noise, rather than having to juggle the sound to compensate like noise-canceling headphones do.

The Ultimate Ears have a feature where the cord pulls out of the buds if they get yanked really hard, presumably to prevent damage to your ear. Because I had gotten the shorter cord I kept doing this, and eventually (4 years in) I had done this so many times they didn’t really stay together properly and I kept dropping them. They also got a lot of abuse in my bag. Their ultimate demise was after I had dropped them the hundredth time and actually stepped on them, shattering the hard plastic mold. I probably could have gotten them repaired, but they were pretty far gone and decided to go for an upgrade instead for just a bit more, the UE-11s.

In the 4 years or so between my two purchases, UE definitely made some improvements to the line. The cord was thinner, didn’t have a wrap, and didn’t seem to tangle as much. The new ones came with a nice carrying case that if I had before I might not have broken the old ones so much. I’ve also never had a problem with the cord coming out like I did before. I talked Toni into the UE-10s and his new ones had all the same fit and finish. Unfortunately, don’t think the audio quality difference between the two warranted the $250 price difference.  I’ve been using them about 8 months, and they’ve travelled with me hundreds of thousands of miles around the globe. Overall the UE-11s just feel a bit heavier on the bass, but not really noticeably better than the UE-10s. If in 5 years I’m buying another pair I’ll go back to the UE-10s. A downside, or upside, of the Ultimate Ear Customs is no one else can use them.

My last bit of advice is to avoid everything Bose.

I’m curious what other people have tried, and what has been the best.

Haiku-powered Design

Tuesday, July 14, 2009 - Matt

Check out the new haiku-powered Automattic design.

qTranslate

Monday, July 13, 2009 - Matt

I recommended a translation plugin the other day at WordCamp Montreal but couldn’t remember the name. It was qTranslate.

Writing Useful Software

Monday, July 13, 2009 - Matt

Nick Bradbury: If You Want to Write Useful Software, You Have to Do Tech Support. Hat tip: 37signals.

Time Tracking

Saturday, July 11, 2009 - Matt

Why I do Time Tracking, by Swaroop C H.

Relationship Between Mobile Web (MWBP) and Web Content Accessibility (WCAG) Note Published

Thursday, July 9, 2009 - World Wide Web Consortium - Web Standards

2009-07-09: The Mobile Web Best Practices Working Group and the WAI Education and Outreach Working Group have published Relationship between Mobile Web Best Practices (MWBP) and Web Content Accessibility Guidelines (WCAG) as a W3C Working Group Note. The groups encourage people to start by reading Web Content Accessibility and Mobile Web: Making a Web Site Accessible Both for People with Disabilities and for Mobile Devices, which shows how design goals for accessibility and mobile access overlap. A third document, Shared Web Experiences: Barriers Common to Mobile Device Users and People with Disabilities, provides examples of barriers that people (without disabilities) face when interacting with Web content via mobile devices, and similar barriers for people with disabilities using desktop computers. Learn more about the Mobile Web Initiative (MWI) and the Web Accessibility Initiative (WAI). (Permalink)

XPath 2.0 and XQuery 1.0 Full Text Facility Test Suite Published

Thursday, July 9, 2009 - World Wide Web Consortium - Web Standards

2009-07-09: The XSL and XML Query Working Groups have published version 1.0 of the XPath 2.0 and XQuery 1.0 Full Text Facility Test Suite, and are requesting that people with implementations report results. The Full Text Facility provides a standard way of searching by word or phrase across multilingual documents or data represented using the XPath and XQuery Data Model. As a result of preliminary implementation experience, and to reflect comments received, the Candidate Recommendation for the Full Text Facility has also been republished: the new version incorporates editorial changes but also clarifies some ambiguities that had been reported. The Working Groups hope to move the document to Proposed Recommendation once more test results have been submitted. The XML Query and XSL Working Groups also published today an update of XQuery and XPath Full Text 1.0 Use Cases. Learn more about the XML Activity. (Permalink)

Last Call: Geolocation API Specification

Tuesday, July 7, 2009 - World Wide Web Consortium - Web Standards

2009-07-07: The Geolocation Working Group has published a Last Call Working Draft of Geolocation API Specification. The Geolocation API defines a high-level interface to location information associated only with the device hosting the implementation, such as latitude and longitude. Common sources of location information include Global Positioning System (GPS) and location inferred from network signals such as IP address, RFID, WiFi and Bluetooth MAC addresses, and GSM/CDMA cell IDs, as well as user input. Comments are welcome through 10 August. Learn more about the Ubiquitous Web Applications Activity. (Permalink)

Cheese Sandwich

Tuesday, July 7, 2009 - Matt

To address the constant questions of “Matt, what did you eat for lunch?” and “What music or funny sign did you see today?” I’ve re-ignited matt.wordpress.com, where I’m primarily mo-blogging using the WordPress for iPhone app and the Post by Email feature. I used to do this on Flickr, here’s my manifesto for switching. Please subscribe to the feed here for a more personal side of me.

PollDaddy Ratings

Monday, July 6, 2009 - Matt

Techcrunch covers PollDaddy: PollDaddy Traffic Soars, Releases Ratings Widget With Possible Digg Competitor On The Horizon. You can read more about the new ratings widget on the PollDaddy blog.

Not Lonely at All

Sunday, July 5, 2009 - Matt

Daniel Jalkut of Red Sweater Software wrote a blog post called Getting Pretty Lonely and and says, among other things, “Whenever I am reminded that WordPress is GPL, my passion for it takes a bit of a dive. I’m more comfortable with the true freedom of liberally-licensed products.” More importantly, he says that “GPL stifles participation,” and implies the same for adoption. The article was linked by John Gruber at Daring Fireball saying, “Smart essay from Daniel Jalkut on how the GPL discourages participation from many (if not most) developers.”

For what it’s worth, from my practical experience in the WordPress world:

  1. I’ve never encountered a serious client who chose not to use WordPress because it was GPL-licensed, and I think it’s hard to argue that WordPress’s license has had a dampening effect on its adoption, given its success over competitors with widely varying licenses.
  2. I think we have an incredibly strong third-party extension, plugin, and theme community that has flourished, not in spite of the GPL license, but because of it.
  3. I’ve seen the absence of GPL in practice; there have been times in the WordPress world when parts of the community have “gone dark” and claimed their code was under more restrictive licenses, like used to be common with themes. Every time this cycle starts it basically kills innovation in that part of the WordPress world until people start opening up their code again or until a GPL equivalent is available. I’ve seen this firsthand several times now.

WordPress first used the GPL because it was built on an existing GPL project (b2). Later I began to really understand the philosophical underpinnings of the GPL and understood it to be the most moral of the open source licenses. Now, in addition to that, my experience over the past 6 years has made me believe it to be the best license for practical purposes as well.

GPL was a license written for a different time and on the web it’s possible to find a thousand loopholes and ways around it (see: software as a service) but if you keep in mind the core freedoms and principals — share and share alike — they provide excellent guidelines for building a rich community and ecosystem: the two things that ultimately have far more to do with product success than the license. (Competitors to WP have switched to the GPL from proprietary licenses with basically no effect. License does not equal community, it’s a lot harder than that.)

Ultimately Daniel’s article falls apart on two levels, the first illustrated in a comment I left on the post:

Your biggest fallacy is “the liberal-license communities are attractive to developers from all 3 camps.”

I’m a GPL-friendly developer that is hesitant to be involved with a non-GPL project the same way your “passion for it takes a bit of a dive” when coming into contact with the GPL.

You could also make a fairly good argument that the majority of Open Source developers are GPL-friendly simply because the vast majority of Open Source projects are licensed under the GPL.

The common-knowledge number seems to be about 70% of open source projects are under the GPL and (more importantly) many of the most crucial and successful ones are. If Gruber’s “many (if not most) developers” avoid the GPL, maybe those folks aren’t that important. (In reality I think the majority of developers aren’t strongly influenced by licenses as long as they’re open source, something Daniel seems to agree with, saying “the vast majority of developers will participate in any project that is advantageous to them.”)

But more importantly, Mr Jalkut conflates what he perceives as his freedom as a developer with freedom from a user’s point of view. The things the GPL “takes away” from him, like being able to license his derivatives under a more restrictive license, are in fact protecting the freedoms of the users of his code. That’s who the GPL was written for. From the Free Software Definition:

Free software is a matter of the users’ freedom to run, copy, distribute, study, change and improve the software. More precisely, it refers to four kinds of freedom, for the users of the software [...]

It’s user freedom that the GPL was created to protect, just like the Bill of Rights was created to protect the people, not the President. The GPL introduces checks and balances into an incredibly imbalanced power dynamic, that between a developer and his/her product’s users. The only thing the GPL says you can’t do is take away the rights of your users in your work or something derived from a GPL project, that the user rights are unalienable. You are free to do pretty much whatever you want as long as it does not infringe on the freedoms of others. (Sound familiar?)

That’s what software freedom means to me, and it’s something I believe in strongly enough to fight for and defend even when it’s not the easy or popular thing to do. (Especially this weekend as we celebrate the original “fork” of the US from from England.)

See also: Alex King — Breaking News WordPress is GPL.

Acquia Searc

Saturday, July 4, 2009 - Matt

Acquia Search looks cool, Automattic should do something similar for WordPress.

W3C Launches Device APIs and Policy Working Group

Friday, July 3, 2009 - World Wide Web Consortium - Web Standards

2009-07-03: W3C launched a new Device APIs and Policy Working Group, co-Chaired by Robin Berjon (Vodafone) and Frederick Hirsch (Nokia). The group's mission is to create client-side APIs that enable the development of Web Applications and Web Widgets that interact with devices services such as Calendar, Contacts, and Camera. Additionally, the group will produce a framework for the expression of security policies that govern access to security-critical APIs (such as the APIs listed previously). Per its charter, this group will conduct its work in public. Learn more about the Device APIs and Policy Working Group. (Permalink)

Last Call for Six Rule Interchange Format (RIF) Drafts

Friday, July 3, 2009 - World Wide Web Consortium - Web Standards

2009-07-03: The Rule Interchange Format (RIF) Working Group has published six Last Call Working Drafts. Together, they allow systems using a variety of rule languages and rule-based technologies to interoperate with each other and with other Semantic Web technologies. Three of the drafts define XML formats with formal semantics for storing and transmitting rules:

Live Training Sessions On Mobile Web Design Rescheduled

Friday, July 3, 2009 - World Wide Web Consortium - Web Standards

2009-07-03: Originally scheduled for July, W3C has rescheduled a Live Training Sessions On Mobile Web Design for 13 October 2009. Students will attend a full day of lectures and hands on sessions about the W3C Mobile Web Best Practices standard, and more generally on mobile Web design. Read the full announcement, register, and learn more about the W3C Mobile Web Initiative. (Permalink)

Summary of Workshop on Speaker Biometrics and VoiceXML 3.0 Available

Thursday, July 2, 2009 - World Wide Web Consortium - Web Standards

2009-07-02: W3C has published a summary and full minutes of the Workshop on Speaker biometrics and VoiceXML 3.0, that took place in Menlo Park, California on 5-6 March. Participants from 15 organizations focused discussion on Speaker Identification and Verification (SIV) functionality within VoiceXML 3.0, and identifying and prioritizing directions for the functionality. The major "takeaway" from the Workshop was confirmation that SIV fits into the VoiceXML space and generating the "Menlo Park Model", a SIV available VoiceXML architecture. The Working Group will continue to discuss how to include the requirements expressed at the Workshop into VoiceXML 3.0 and improve the specification. Learn more about the Voice Browser Activity. (Permalink)

Live Web

Thursday, July 2, 2009 - Matt

Live Web, Real Time . . . Call It What You Will, It’s Gonna Take A While To Get It. Excellent article by Mary Hodder.

XHTML 2 Working Group Expected to Stop Work End of 2009, W3C to Increase Resources on HTML 5

Thursday, July 2, 2009 - World Wide Web Consortium - Web Standards

2009-07-02: Today the Director announces that when the XHTML 2 Working Group charter expires as scheduled at the end of 2009, the charter will not be renewed. By doing so, and by increasing resources in the Working Group, W3C hopes to accelerate the progress of HTML 5 and clarify W3C's position regarding the future of HTML. A FAQ answers questions about the future of deliverables of the XHTML 2 Working Group, and the status of various discussions related to HTML. Learn more about the HTML Activity. (Permalink)

First Draft of SPARQL New Features and Rationale

Thursday, July 2, 2009 - World Wide Web Consortium - Web Standards

2009-07-02: The SPARQL Working Group has published the First Public Working Draft of SPARQL New Features and Rationale. This document provides an overview of the main new features of SPARQL and their rationale. This is an update to SPARQL adding several new features that have been agreed by the SPARQL WG. These language features were determined based on real applications and user and tool-developer experience. Learn more about the Semantic Web Activity. (Permalink)

Velocity and the Bottom Line

Thursday, July 2, 2009 - Matt

Velocity and the Bottom Line. How performance touches everything on the web, and includes a quote from me about the importance if of speed to the user experience. You can check out my whole presentation, the Moral Philosophy of Performance, on Blip.

W3C Talks in July

Wednesday, July 1, 2009 - World Wide Web Consortium - Web Standards

2009-07-01: Browse W3C presentations and events also available as an RSS channel. (Permalink)