Google Wave - Game Changer?

Google Wave is their new product aimed squarely at the recent surge in social sites and also at communications. At its best, it could be a new paradigm of communication tools allowing real time communication, collaboration, and sharing. On the other hand, it might be an attack on social media sites and their concentration of power and reach.

While e-mail and even instant messaging are similar in basic operation to plain paper mail, Google Wave could start to branch out into capabilities and functionalities beyond that. The popularity of tools like IM, SMS, and Twitter show that people crave a quick, real-time platform to communicate. But aside from social communications, many practical uses would require documents for collaboration and group effort which are awkward with these traditional methods of communication.

Wave provides an integrated metaphor to handle these traditional methods while adding additional functionality and automation. In addition to having lightweight apps and widgets, Wave allows "robots" that can interact with the wave in predetermined ways. Robots can provide additional content by referencing existing content or pulling from other services for integration.

The other aspect of Wave is that it is going to be open sourced and distributed. This could be a way to build interoperating systems that would vie with the existing social media giants such as FaceBook and Twitter. Being based on Jabber's open XMPP protocol and with Google's promise to open source the project, Wave servers could spring up across the Internet working together and tearing down the walled gardens that tend to concentrate users in a few closed systems.

If Google Wave works as advertised, it could allow users to communicate and collaborate with their own self-determined identities without locking that content and communication on a proprietary system. A successful Wave could end the domination of closed systems that tend to hold the content and relationships hostage. This would be bad for FaceBook and Twitter, not to mention MySpace (who mentions them anymore anyway).

Official Google Blog: Went Walkabout. Brought back Google Wave.

About Google Wave

Google Wave: A Complete Guide

Twave: Google Wave + Twitter

Google Wave: What It Is And How It Works - PC World

Apple hires former OLPC security head to harden Mac OS X

Apple hires former OLPC security head to harden Mac OS X - Ars Technica

Most articles I've seen are focussed mostly or entirely on what this could mean for Mac OS X on the Mac platform, but I'm intrigued by the parallels with the iPhone/iPod version.

Currently, each app on the iPhone platform runs only with access to its own limited filesystem area with no access to other apps' data. This makes it difficult for apps to work together, but it dramatically reduces the potential impact of some kind of malware. The malware would be restricted to its own area, which does not allow too much mischief.

This is similar though nowhere near as sophisticated as Ivan Krstic's Bitfrost for OLPC. Under this system, each app is virtualized into a sandbox that only allows interactions that are explicitly allowed by the OS. This prevents an app from accessing hardware, software, or data that has not been explicitly allowed thus preventing any malware misbehavior.

While Mac OS X has always been in a much better position than Windows XP (based on smaller market share and underlying design), this hire signals an effort on Apple's part to really take security seriously. This addition could mean great things with the foundation they already have in place. Just as the geek-set have started to point out some of the glaring chinks in OS X's armor, Apple is moving to fix the problems.

Combining Bitfost-type functionality with the existing application signing infrastructure and Mach kernel features could allow Apple to extend and secure their security lead. And as Apple grows their market share in both computers and handhelds, this will continue to become more important. I'm looking forward to see how they implement a slick UI and make this easy yet still safe for users.

Links:

• Slashdot | Apple Hires Former OLPC Security Director
• Apple hires former OLPC security architect | Apple - CNET News
• Apple snags ex-OLPC security chief | Zero Day | ZDNet.com
• AppleInsider | Apple hires One Laptop Per Child security expert and noted critic

Hadoop Sorts a Petabyte in 16.25 Hours and a Terabyte in 62 Seconds

Hadoop Sorts a Petabyte in 16.25 Hours and a Terabyte in 62 Seconds (Hadoop and Distributed Computing at Yahoo!)

That is some fast sorting. Damn impressive.

However, I think Google can compete and maybe beat those numbers.

Conficker/Downadup Info for Scanning and Removal

With all the attention the Conficker worm (aka Downadup) has garnered with it's deep penetration of the Windows ecosystem, we're including links and information to help folks scan their Windows-based computers, virtual machines, or entire networks for infected devices along with some help on removing any infections found.

In-depth Conficker/DownadupReference

Here is a resource by Symantec explaining Conficker. They include a nice piece by 60 Minutes explaining Conficker in non-technical terms. We've included additional reference links below.

Quick Machine Test for Conficker Infection

The Conficker Working Group has created a simple web page to help you determine if your machine is infected. Since Conficker blocks access to various security sites, this simple attempt to load logos can quickly tell you if you are infected. If some of the logos do not load, you might be infected. Click here to visit their quick and easy test.

Quick Scan for Your Network for Conficker Infections or Vulnerabilities

If you want to quickly scan your entire network for Conficker infections or Conficker vulnerabilities, use nmap. I found a great example of how to do this at OS X Daily. As noted in the original article, be sure to change the IP address range to match your network, and the relevant code is here:

nmap -PN -T4 -p139,445 -n -v --script=smb-check-vulns --script-args safe=1 192.168.0.1-254

The scan will tell you if any Windows machines are actually infected or lack the patch to prevent infection and are vulnerable.

Other Conficker/Downadup References

• Cisco Conficker Analysis
• Trend Micro's Conficker Page
• McAfee's Conficker Page
• Conficker Infection Distribution Maps from the Conficker Working Group

Mini Payments Are the Future

I believe the future of digital media purchases lies in numerous small cash payments as opposed to a few large scale purchases or token purchases. As examples of future and past, I offer iTunes and Microsoft Office.

iTunes Music, Movies, TV Shows, and Applications

Where iTunes excels is in making things easy to find and easy to purchase. By keeping the unit price low, Apple prevents each purchase from becoming a serious decision. $1 or $2 or even $3 are readily made impulse decisions. The downside is so low, there is almost never a reason to argue against any individual purchase once you have considered it.

If you want something bad enough to actually complete a search for it, you will most likely buy it. There is no commitment associated with such a small purchase. If you find a better app, or another song, there is no regret at that $1-2.

Microsoft Office and Other Expensive Suites

As a contrast, the major investment in Microsoft Office or other large suites forces careful consideration due to the commitment involved. After spending hundreds of dollars on a software package, almost anyone would regret being forced to replace it with another expensive suite performing the same function.

In the past, Office, in particular, has relied on bundling, large enterprise purchases, and proprietary file formats. Bundling becomes more difficult with the average PC price coming down precipitously, and included software and OS licensing becomes a larger fraction of the total cost. Large enterprise purchases have become more difficult due to the lack of new, interesting, and competitive features. And proprietary file formats will eventually go out of style in favor of open standards and previous de-facto standards.

Other expensive suites may be slower to feel these pressures as many, such Adobe's Creative Suite, are used by professionals directly charging for their time. Those suites tend to add additional useful features and functionality, but I believe even they will be vulnerable to numerous smaller packages as integration improves.

Apple Introduces New Mac Pro with Nehalem Xeon Processors

Apple Introduces New Mac Pro with Nehalem Xeon Processors - Mac Rumors

The New Mac Pro's look great including the new quad-core Xeon "Nehalem"-based processors and the improved component layout allowing for even easier maintenance. Prices aren't too bad at $2499 and $3299 for these high-end models.

Apple releases NVIDIA-based iMacs

Apple releases NVIDIA-based iMacs

This iMac upgrade has been long awaited. I'm happy to see the move to nVidia graphics with 9400M only on the low-end models and GT120 and GT130 on the higher-end versions with optional ATI Radeon HD 4850. And the prices are fairly good starting at $1199 for the only 20" model, $1499 for the "flagship" 24" model, $1799 for the intermediate 24" model, and up to $2199 for the highest-end model.

Apple debuts new Mac minis with five times better graphics

Apple debuts new Mac minis with five times better graphics

The new Mac mini looks to be a very nice upgrade to the low-end machine, especially considering the nVidia 9400M graphics. And with the low power consumption and more eco-friendly construction, I really like the green spin on the marketing, and think this will become more important and more prevalent.

Apple's new AirPort, Time Capsule add dual-band networking

AppleInsider | Apple's new AirPort, Time Capsule add dual-band networking

This appears to be a very nice upgrade for the wifi routers with the guest networking allowing you to give Internet-only access, and the dual band operation should improve performance.

Ars Technica also had a good write-up.

Introducing Safari 4 - See the web in a whole new way

Introducing Safari 4 - See the web in a whole new way

Apple has release a beta of Safari 4 on Mac and Windows. It looks to be extremely fast. It looks like this new version might break many (all?) Input Manager "plug-ins"/hacks, so be careful.

And here's a link to the nightly WebKit downloads for anyone wanting to use the absolute latest greatest, without having Safari 4 overwrite Safari 3. With a recent Webkit installed, you can run both versions.

Update 1: After briefly testing, I was surprised to find the nightly builds of WebKit are still based on the Safari 3.2.1 . The Safari 4 installation overwrites Safari 3.x, so I'll try it and check if the WebKit builds still use the older version (which is compatible with most modern Input Manager hacks). Or I may be reduced to using Multi-Safari, which should allow you to run a self-contained, older version of Safari/WebKit, without disturbing the primary Safari installation.

In a pinch, if you have problems with Safari 4, you can download Safari 3 again.

Update 2: And it looks like it may be possible to make some Input Managers function. At least I found some instructions which might work for 1Password ( a nice password management and archiving utility with an optional iPhone app with wifi sync'ing).

Update 3: You can enable 1Password to function with Safari 4 as mentioned above. Here are specific instructions for the Safari 4 Beta release. And you can re-enable the 1Password toolbar icon by editing your toolbar with View --> Customize Toolbar.