Dan Appleman: Kibitzing and Commentary

My personal blog

Stunning Privacy Breach by AOL

By now you’ve probably read about the astonishing breach of privacy in which AOL posted the supposedly “anonymous” search records for 500,000 users over a three month period.
You can read more at:
siliconbeat , techcrunch , digg , reddit , and zoli’s blog
Most of the comments on these sites point out the problem of people entering personally identifiable information searches – the idea being that if people searched on topics that might identify them, then also search on topics that are embarrassing or illegal, the database effectively becomes a map to prosecution, blackmail, etc.
What most of the posts and comments miss is that the situation is even worse. Each search request also includes a very accurate (to the second) timestamp. So all the government would need to do to identify someone is to match up a couple of requests to a government owned web site by IP address and time (one can assume that while a company like Google might protect users privacy, government owned web sites probably won’t).
So, to use a hypothetical example: if someone searches for how to pass a drug test, and you find the same user paid a visit to the Department of Motor Vehicles and maybe a court site, it wouldn’t be too hard to pull the logs from those sites and see which IP address visited both at the times specified. Presto – you have some pretty solid evidence what that user is up to, and a map of their searches (who knows what else it might turn up). Plus, since you now have their IP address, you can (as a tech savvy prosecutor), subpoena their records from their ISP you now have some solid identification.
Aside from a gross violation of trust on the part of AOL, this represents a threat to the very future of the Internet. If every search you perform becomes part of your permanent record, how will that impact search?
One thing is clear – AOL cannot be trusted. This is too great a mistake to just brush off. Google has shown at least a willingness to protect user’s information, going to court to protect exactly this kind of information. I don’t know Microsoft’s stand at the moment – if anyone has information on their record please feel free to comment.

Fun Buying From Dell

Joel Spolsky just posted an item on Why Dell.com Still Feels Like Buying A Used Car that describes how Dell’s attempt to segment their customer base makes it that much harder to buy a computer (and know you’re getting a good deal).
I do have two small items to add:
First, they aren’t just trying to make more from business customers – they’re trying to make more from all customers and manage their supply chain efficiently. Thomas Friedman writes about this in his fantastic book “The World is Flat: A Brief History of the Twenty-First Century” where he convinces Dell to trace the history of all the components that make up his laptop.
Second, assuming you aren’t buying in volume and able to negotiate a better deal, here’s a hint – always check prices on both the consumer and small business sites. The consumer site may seem cheaper, but they sometimes stack the small business site with some serious rebates and premium service plans that can actually make it less expensive for a comparable or better machine.
For the biggest bang for the buck on PCs, the best deals are often the refurbished units or discontinued models, where you can get 6 month old technology for a substantial discount over the latest and greatest. I discuss this in my article “The Best Deals on Desktop PCs“.

Real Geeks Use Tools

So today I saw a funny series of Blog posts starting with Robert Scoble’s defense of his “Geekhood” after a post by someone named Cody who hates fake computer geeks.
What’s interesting about these posts are the examples that both use to define geekiness. Cody complains that Scoble doesn’t host his own Blog software. Scoble defends his geek credentials by mentioning past experience installing NT 3.5. Either way, those definitions don’t reflect the reality of the information age.
To put this in context, let’s think back 15 years or so to the Visual Basic story. Here was a tool that provided a high level of abstraction over Windows. Who were the geeks? The C++ programmers who blew off VB as a “toy language” or “glue language”, or the millions who adopted VB either as their first language or migrating from another language?
The answer is obvious – both were. The only difference was that the VB geeks were much more productive (for a wide class of applications).
The world has changed of course, and neither VB .NET nor C# provide the kind of abstraction levels that are needed going forward. We don’t have a tool that corresponds to the .NET framework the way VB related to the Windows API. Or put another way – VB was incredibly productive because it provided a level of abstraction to the underlying API for which C/C++ was the “first class” language. Today, VB .NET and C# are the “first class” languages for .NET – but we don’t yet have that new paradigm, that new level of abstraction, that will bring us to the next level (of geekiness, as it were).
Or do we?
At least in one area, I’m beginning to think that we do.
When I look at ASP .NET, I see lots of great components and features for building great web applications. At the same time, the prospect of building a site using it is – well, it’s about as exciting as Hello World was in C back in the 90’s. I’m working on a project now (not ready to talk about yet), that is web based, and building it from scratch wasn’t even a consideration.
For web applications, tools like WordPress and CMS systems like Plone, Drupel and DotNetNuke are compelling platforms on which to base new applications. Their open source nature and flexible architectures assures extensibility in much the way that VB’s support for custom controls allowed the language to do things that it’s developers never imagined.
This, by the way, should be something Microsoft pays close attention to – the vast majority of CMS systems today are LAMP systems – and this is what might cost them the web platform war (not the quality of the platform itself).
Anyway, I digress. Cody, Robert – you’re both geeks in my book.
And for the record, this particular Blog is on WordPress, that is in fact hosted on my own server – not because there is any geek value in doing so, but because my incremental cost to do so is zero (which is, coincidently, the cost of Robert’s hosting as well).

The Graduating Geek's Guide to High Finance

As many of you know, I’ve been turning some of my attention to the topic of finance and investing (the results of which you can find on my alternate blog at www.ThinkingAboutMoney.com). While most of my focus has been for somewhat more advanced investors, it occurred to me that there’s one beginners group that desperately needs financial education – new college graduates – specifically those with tech degrees.
New graduates with tech degrees suddenly find themselves making real money – in many cases for the first time in their lives. In our consumer society (devoted to separating us from our money), it’s not uncommon for them to quickly find themselves in debt and living from paycheck to paycheck.
So I wrote an e-Book called “The Graduating Geek’s Guide to High Finance” that contains the most important information they (if not everyone) needs to know about personal finance (the kind of information that isn’t taught in school). It also contains some of the career advice/wisdom that is traditionally handed down to newcomers from jaded industry veterans.
Sample topics include:

  • Money Isn’t Everything.
  • Wealth isn’t Income.
  • Start Today, well actually – tomorrow.
  • Think twice before you spend.
  • Time is Money.
  • The Tax Man cometh.
  • A Piece of the Action.
  • Stock and Stock Options.
  • Investing.
  • Start a business.
  • Going Independent.
  • Corporate Myths.
  • Buying A House.
  • Insurance.
  • Trust No One.

The Graduating Geek’s Guide to High Finance is published as an e-Book for $3.99. Now available on amazon.com.
If you’re interested in a review copy, contact me via Email.

Kudos to Bill Gates

With news of Gates’ planned retirement from Microsoft, it’s worth taking a moment to reflect on his extraordinary accomplishments:

  • He founded Microsoft
  • He managed to maintain a majority stake and control over Microsoft.
  • He recruited a team capable of managing Microsoft (in so far as any company of that size and built-in degree of chaos can be managed).
  • He built an organization strong enough to carry on running Microsoft without him.
  • He’s leaving Microsoft so he can spend his time making the world a better place by working on health projects and reforming education (something desperately needed).

While one might credit some of these to being at the right place at the right time, and one might disagree with some of his actions along the way, one can’t help but being impressed by these absolutely remarkable accomplishments.
Given the resources he brings into play with his foundation, and his talents, it’s just possible he’ll make a real difference addressing these problems. In fact, it wouldn’t surprise me if he makes more of a difference than some of the governments who are supposed to be addressing these problems.
I, for one, commend him on his decision, and wish him all success on this venture.