Video: Secure Programming with Static Analysis
Posted by: Alexander Howard
In this video, Brian Chess and Jacob West from Fortify Software talk about the importance of security at the software development level.
In this video, Brian Chess and Jacob West from Fortify Software talk about the importance of security at the software development level.
What can I say about Facebook that hasn’t been said? Newsweek has placed Mort Zuckerberg, the founder of the social networking giant on its cover. And the press has been hyperventilating about Facebook for months.
So what is Facebook? It’s a simple idea, done well: move the “facebooks” of incoming college undergraduates online, with headshots and interests constituting a basic profile, and then create the tools for nodes on the network to interact and browse each other’s profiles.
It’s also my “latest discovery,” as I joined earlier this spring, egged on by a neighbor. Back when I went to college, we had such a thing, printed on “paper,” bound and distributed to the freshman class (and just as quickly appropriated by upperclassmen frequently interested in more than discovering who else was into rock climbing or Pearl Jam). Facebook was, at its inception, a social network for college students, with access limited to only students in the same institution. Now, Facebook has laid claim to being a “social utility,” bidding to become the platform or framework we use to organize our online lives.
Audacious, perhaps, but not unprecedented. Friendster had the early start in filling that role but never recovered from an inability of its original technical architecture to scale to massive traffic demands or challenges from MySpace and other networks.
To be fair, over the past spring and summer, the social networking phenomenon has continued to explode in popularity and innovation, but Facebook has grown much faster and pulled in the digerati like no other.
Why? There’s no single reason. While the decision to open the formerly closed network to the Internet at large is an obvious place to begin, instead of limiting membership to isolated pools of collegians, other factors are in play. Making APIs available to developers resulted in a tsunami of applications that help to further interconnect nodes within each social network has attracted enormous amounts of energy (and, increasingly) venture capital to the platform.
Choosing to keep a clean, easily navigated interface has mattered as well. While MySpace is still the biggest social network — and by most measurements, the most popular site on the Internet, the contrast between the two services couldn’t be much larger, aesthetically, as Facebook (by comparison) radically limits the visual control a user has over a profile. It doesn’t hurt that all of the young college graduates enter the workforce with profiles, either.
If you need a sense of how bound into the tech community Facebook has become, consider how Silicon Valley reacted to a recent Facebook outage.
There’s plenty of evidence too that spending time on Facebook has also evolved into a significant productivity drain (though some disagree) and security risk. (If you’re wondering which companies lead in embracing Facebook, along with the most risk, just read Elisa’s post). The trouble is that sysadmins with itchy trigger fingers may not be able to quickly shut off the flow of bandwidth by firewalling Facebook. Unlike other more informal networks, many professionals have been using to “friend” their coworkers, clients and collaborators, along with former college roommates and dorm buddies. While LinkedIn has long been the social network of choice for many professionals, Facebook has begun eating into that market. In the online social media world, the gaps between online and offline networks are continuing to close, along with whatever space remained between work and personal lives.
Netizens my age (proud members of the “XY generation” that bridges the gap between Gen X (children of the 80s) and Gen Y (folks who don’t remember life before CDs and email or who said “trust but verify“) and older may find some elements of Facebook surprising, though perhaps not more so than MySpace. Older users are joining, however, and finding a place. While privacy options for profiles exist, unlike MySpace, there’s significant potential for embarrassment and even calamity for college or career prospects for those who aren’t wary about posting photos or blog entries that don’t put them in a good light, to put it mildly. PR professionals and marketers would do well to consider the advice of social media gurus. And, as neighborhood applications crop up, there are also alarming security concerns regarding personal safety and property, given that clever criminals can posit where and when individuals are away.
While much of the value of joining these networks can be found in keeping touch with friends and alumni — and making new ones from within that social network — the amount of information that many people are adding to their profiles has also been identified as a valid phishing risk, with significant potential for social engineering hacks that allow access to corporate networks.
What to do? As is the case with the rest of the Web-based applications that have made their way into enterprise and personal desktops alike (users keep outwitting IT when installing consumer apps, apparently), the key is likely to be adaptive security policies that both recognize the increasingly blurred boundaries between work and personal life while respecting both the bandwidth limitations high usage may inflict upon a network and the need to limit the leak or theft of potentially damaging proprietary or personal data. No one is suggesting that developing, implementing or enforcing such a policy is easy, but the consequences of failing to try may extend well beyond a public relations disaster to the organization or individual who doesn’t consider Facebook to be a risk.
There are also no shortages of critics who view the closed nature of Facebook with some distaste — “yet another profile to populate” is a new form of fatigue in the digital age. Personal data portability may become a online movement. It’s certainly been the inspiration for a business plan or two. The founder of LiveJournal, for instance, has published a mini-manifesto for portable, open social networking, according to Mashable. (It may help that Google appears to be backing him). Other observers have noted that Facebook hasn’t been proven to be a rewarding platform for advertisers yet either, though the model is still evolving, as described in this excellent article from Business.com, the Facebook Economy.
In the meantime, I’ll enjoy watching classmates and friends pop up on Facebook; lest you wonder, you can find me there as well. Be warned: I’m sticking with adding friends, coworkers and neighbors, lest I develop social networking fatigue myself.
Seriously. One of the top articles on Lifehack.org this month is 10 simple ways to save yourself from messing up your life. Here’s an excerpt:
Don’t worry about about your personality. You don’t really have one.
Personality, like ego, is a concept invented by your mind. It doesn’t exist in the real world. Personality is a word for the general impression that you give through your words and actions. If your personality isn’t likeable today, don’t worry. You can always change it, so long as you allow yourself to do so. What fixes someone’s personality in one place is a determined effort on their part—usually through continually telling themselves they’re this or that kind of person and acting on what they say. If you don’t like the way you are, make yourself different. You’re the only person who’s standing in your way.
The article’s by Adrian Savage, who blogs on Slow Leadership.
Another helpful post is Leo Babauta’s Wikify Your Life: How to Organize Everything, a hands-on practical explanation of how to keep track of just about every component of your life from within your own personal wiki. Babauta, of zen habits, has more good stuff on offer. From the site:
Babauta blogs regularly about achieving goals and becoming productive through daily habits on Zen Habits. Read his articles on 10 Ways to Reduce Your Work Week, Zen To Done (ZTD), the Top 50 Productivity Blogs, doubling your productivity, keeping your inbox empty, becoming an early riser, and the Top 20 Motivation Hacks.
Oh, I just spotted How to Become a Creative Genius by Kim Roach of The Optimized Life. Ok, I’ve got to go read now. The next time you see me, I’m bound to be new and improved. ~ Ivy Wigmore
A new messaging service has gained some real traction in the blogosphere and offline among the “digerati,” though to be fair most of those coders, writers and futurists are rarely truly offline anymore. Just look at how often they are creating “tweets” with Twitter. ![]()
While Twitter was born as a side project within the offices of Odeo in March of 2006, it’s taken adoption by A-list bloggers like Robert Scoble and Steve Rubel to raise the profile — and usage — of the tool. Twitter allows members to effectively “lifestream,” constantly providing details, mundane and trivial as they may be, of their daily lives. One user, David Troy, created an extraordinary mashup Google Maps and Twitter, Twittervision, which tracks “tweets” in real-time on a global scale, moving from one post to the next.
Twitter, along with its founders, was recently profiled in the New York Times’ Business section, along with the service, in “From Many Tweets, One Loud Voice on the Internet.” Jason Pontin, the author of the article, described Twitter as :
“…a heady mixture of messaging; social networking of the sort associated with Web sites like MySpace; the terse, jittery personal revelations of “microblogging” found on services like Jaiku; and something called “presence,” shorthand for the idea that people should enjoy an “always on” virtual omnipresence. “
As Jason points out, Twitter is currently one of the fastest growing trends on the Internet. Adoption really took off after the 2007 South by Southwest Music, Film and Interactive Conference (SXSW) which was absolutely saturated with Twittering. And it’s not just bloggers and new media mavens — U.S. presidential candidate John Edwards is using Twitter as he moves around the country.
What is Twitter? It’s a simple service with an Ajax-y Web presence that allows users to share where they are, what they’re doing and how they can be contacted. You can post to Twitter using SMS, much like Blogger or other tools. The difference is that the platform then sends those posts to a group of subscribers (friends, clients, family) by phone alerts and to your channel on Twitter. Users can turn off mobile alerts if they like — an important feature, judging from the feedback that, for some, Twitter is rather addictive. The service is currently free, though interested parties should check with their mobile telephony providers regarding SMS charges, which are certain to rise with greater use.
Twitter is part of Obvious Corporation in San Francisco, California. For up-to-date info about Twitter, make sure to visit the Twitter blog.
Tweet, tweet!
Craigslist just keeps expanding, bringing its transformative mix of forums, apartment and job listings, want ads and personals to many more communities. Craigslist now offers listings for jobs, housing, goods, services, romance, local activities, advice and much more for 450 cities worldwide, all community moderated, and, astoundingly, largely free. Has your city — or country — been listed yet? If so, keep an eye on your local newspaper, as the free and fluid online marketplace for classifieds and apartment listings that Craigslist provides are a primary driver behind the financial woes of traditional newsprint journalism.
Craigslist was founded in early 1995, by Craig Newmark, in San Francisco, CA. According to Craigslist, the networks of sites receive over 5 billion page views a month, serving more than 15 million users during that span month. In fact, Craigslist users self-publish 14 million new classified ads each month, to go with more than 750,000 new job listings each month and more than 50 million user postings in 100 topical forums.
All of that is managed by 23 Craigslist employees working out of a Cictorian house in the Inner Sunset neighborhood of San Francisco. The site supports those modest operations by charging below-market fees for job ads in 7 cities and for broker apartment listings in NYC. By doing so, Craigslist may now be the leading classifieds service in any medium.
We’ve certainly found great deals on apartments, event tickets, used electronics and all manner of other good, along with thoroughly outrageous personal ads and even a new friend or two. In fact, this editor found a job, a large CRT TV on the cheap and a new place to live this year though “CL.”