Saturday, 23 October 2010
Thursday, 14 October 2010
Facebook New Security Feature Launched Yesterday
Two new security features on Facebook are welcome signs that the company takes privacy and security seriously, but for me they raise as many questions as they answer.
The main change is the addition of optional one-time passwords (OTP). If you're on a computer you don't trust, such as a kiosk or in a cafe, and you don't want to enter your password, you can request a one-time password (by texting "otp" to 32665 from a US mobile phone). The OTP is returned as a reply text message. Then user can then log in from any computer and the OTP is good for 20 minutes.
On the one hand I am impressed and tempted to ask why Facebook is able to do this when none of the major US banks can. On the other hand, there's a good reason why US banks don't implement one-time passwords exactly this way: If you were to lose your phone, even for a brief period, your account could be compromised.
Here's how it works: You go away, maybe to the bathroom, and leave your phone behind. Someone who knows your e-mail address picks up your phone and requests a one-time password. They can then log into your Facebook account from any computer for 20 minutes.
The theory behind one-time passwords in most cases is to add a second factor to authentication, not to replace the one factor with a different single factor. In security terminology the OTP adds something you have (your phone) to something you know (your password). Facebook is doing this to save you from having to enter your password on a strange computer, not to strengthen authentication.
They could mitigate the problem of lost phones by always issuing a challenge question, what they call your Security Question on the Account Settings page. Facebook hasn't yet responded to my questions about it. I'd test it myself, but one-time passwords are being rolled out gradually and haven't reached my account yet. (I'll update this entry if they reply.)
The other thing about the OTP setup in Facebook is that after you do it, you're set up by default to receive numerous other notifications via text message. Here's a notification for Facebook management: When users adds their mobile numbers on an account-recovery page, it's sleazy and self-serving to assume they want to be texted about non-security issues." Hear, hear, Rob.
The other major new feature is that you can disconnect other open Facebook sessions by going into your Account Settings-Account Security page. There you will find a list of sessions, potentially opened weeks ago on computers far, far away. It's possible for someone else on the computer to take control of that session and, thereby, your Facebook account.
Now you have the option of disconnecting those sessions, but I'm disturbed to find that they don't disconnect automatically after some fairly brief period. Being able to disconnect sessions is great, but mostly this change exposes the other poo security decisions by Facebook.
The last change Facebook announced is that they will regularly remind users, when they log in, to update their security information, such as their security question, mobile phone number (for identification in case the password is lost) and e-mail addresses (for the same reason).
But respecting the first two, more interesting changes, I have to agree with Rob Pegoraro again when he says that "...they suffer the generic defect of all optional security features: The people most likely to take these extra steps are often the ones less likely to get hoodwinked by a hack."
Webmaster Tools - Links to your site updated
Tuesday, 12 October 2010
Facebook Marketing
First and foremost, Facebook, like other social media, is a phenomenal way to become more visible and successful by making a face for yourself online.
Facebook is now the largest social network on the planet with over 500 million active users, long ago surpassing former social networking giant MySpace—and it continues to grow at 1 million new users a week.
Considering those numbers, you have to ask yourself—do you think your target market might be there? And if you’re not there, what might you be missing?
Facebook pages are great for a number of reasons:
Pages allow you to keep your personal info separate from your business info.
Pages are public, which means that they are visible to the search engines and are not behind a login like personal profiles are (so be sure to use keywords pertaining to your business in the title of your page if you can—Facebook is ranked very highly in the search engines and you can benefit from this!).
Pages are great for communicating with your supporters (formerly “fans”) and listening to, answering and updating them.
Pages help spread viral awareness of your brand and business—a key aspect is that when people who “like” your page interact with it, this activity shows up in the news feeds of all of their friends.
I Have a Page. Now What?
Ok, now that you know why they’re important, how do you use a page successfully?
Here are just a few ways:
Keep your page updated with content, such as pulling in your blog posts and sharing links.
Ask open-ended questions and engage your supporters whenever possible.
Treat your supporters to “exclusive” offers and content that not everyone else gets. Make them understand that they’re getting something special by supporting your business or brand on your page.
Add the Static FBML application to create a simple form on your page for people to sign up for your newsletter, free report or seminar.
Let your friends know about your page by clicking the link that says “Suggest to Friends” under your picture.
Thursday, 7 October 2010
Tuesday, 5 October 2010
Best Practices for Search-Optimized Flash Development
For several years, there has been tension in the web design and development community regarding search engine optimization (SEO) and the use of Adobe Flash for site content and applications. Flash naysayers have and still do argue that you should almost never use the platform if you care at all about search engine performance and site traffic. Meanwhile, Flash aficionados argue that the user experience is more important than Google experience.
So which is it? Who’s right? In this post, I am going to:
1. Explain why both naysayers and aficionados make valid points
2. Describe the state of Flash indexability, and
3. Share several Flash development best practices that you can begin using in your projects right away.
All told, I hope this post eases tension and encourages more developers to consider using the powerful Adobe Flash platform in a way that is good for both users and spiders.
Given search engine capabilities plus a desire to both make site content indexable and to create good user experiences, there are some best practices that will help ensure search engines and people alike are getting the most out of your Flash applications.
- Use external XML or text files. XML offers search engines a structured and semantic format for indexing site content. And it makes it easier to implement multi-language versions of an application. By keeping your content layer separate from your presentation layer you’ll have a better overall application.
- Create Unique URLs for Important Sections. “Creating unique URLs for important sections of your SWF file, based on the keywords for which you want to optimize, will help search engines navigate into your SWF application and provide targeted results for the most relevant content,” wrote SEO expert Damien Bianchi, in a March 2009 article. To create these unique links, you may want to employ SWFAddress or UrlKit.
- Use the HTML noscript Tag. It can be a good idea to put important site or application content in side of HTML noscript tags, which effectively puts your content into a search engine spider’s favorite language. If you are using external XML, files, you can even load the content dynamically on the server-side.
- Use XSL When Feasible. XSL can define XML formatting and presentation, so you can use it to single XML source to control both Flash content and HTML content, like navigation. You’ll make the entire site’s content searchable and you will be using an effective site development strategy.