Reviews and links for April 2010

By . Updated on

The Spire by Richard North Patterson

3/5

A good enough holiday read and nice to see Patterson return to a straight psychological thriller rather than the last few OpEds loosely wrapped with some plot.

 

Advanced .NET Debugging (Addison-Wesley Microsoft Technology Series) by Mario Hewardt

5/5

Comprehensive introduction to low level .NET debugging - when you need to fire up WinDbg to check out the state of the managed heap, or debug a crash dump from the field you'll find this book invaluable. I wish it had been available when I started figuring out how to use SOS.

 

The Complete Stories of J. G. Ballard by J.G. Ballard

5/5

Wonderful collection of all of Ballard's short stories. It's a huge book with surprisingly few duds. My favorites include The Illuminated Man, clearly the inspiration for The Crystal World, which includes meaning bombs like "It's almost as if a sequence of displaced but identical images were being produced by refraction through a prism, but with the element of time replacing the role of light." and The Ultimate City (which isn't using ultimate in the sense of being good...). I've read most of Ballard's novels but not many of the short stories before. They're well worth the time.

 

Links

- Microsoft Agrees With Apple And Google: “The Future Of The Web Is HTML5″ from TechCrunch (Which makes it all the more tragic that a huge number of clients will still be running IE6 :().

- Comedian criticises BBC 'rebuke' from BBC News | News Front Page | World Edition (The problem isn't that it was anti-Semitic, it's that it wasn't funny.).

- UK 'has a high early death rate' from BBC News | News Front Page | World Edition (That'll be the deep fried mars bars and chips.).

- Oklahoma, where women's rights are swept away from All Salon (Competing with AZ to be the most fucked up state? Sigh :().

- Cameras capture 'Highland tiger' from BBC News | News Front Page | World Edition (Tabbs was bigger than that (a house cat)).

- MI5 dumps staff lacking IT skills from BBC News | News Front Page | World Edition (MI5 has staff without computer skills?).

- The Internet Provides. from jwz (Disturbing).

- Who Really Spends The Most On Their Military? from Information Is Beautiful (Click through to the Guardian blog post, interesting reading.).

Email marketing - don't shoot yourself in the foot

By . Updated on

Email Marketing

If you send email to customers it's important that you let them know where the email will come from and then use then use this address consistently. Using different email addresses is a recipe for getting trapped in spam filters. This is equally important for marketing and other messaging like bills and canceled flights.

I bring up flights because I'm flying to the UK later today and was planning to return on Sunday. British Airways' Cabin Crew is going on strike this weekend and my return flight has been canceled. Instead of sending a text message BA tried to notify me by email. This would have been fine if they used the address they've used for years, but instead they used a new address and a new domain. In fact in the process of canceling and re-booking I (eventually) got email from britishairways.com, my.ba.com, email.ba.com and pop3.amadeus.net.

Since I've had the same email address for twelve years now I get a fair amount of spam. I (used to - now just Gmail) use SpamArrest to keep myself sane:

94.9% of my email is spam. Since I started using the service SpamArrest has eaten 482,494 messages for me. I'm far from alone in using white list based email filtering so if you want your message to get through transparency and consistency are the way to go.

Is Intuit Insane?

By . Updated on

Yes.

Some more color. I use Intuit's assisted payroll service, which is fantastic. You run payroll straight out of QuickBooks and Intuit handles all the tax disbursement and filing for you.

I got an email today with an attachment called securedoc.html claiming to be a message from Intuit. The idea is that you open the attachment and then login to view the message.

It really couldn't look any more like a phishing email, however I called Intuit and remarkably it's a real message. They seriously expect me to open an email attachment and provide account information. The support person at Intuit was able to read the message to me and it was just a routine acknowledgment that some tax rates had been updated.

Intuit is seriously training its customers to fall victim to phishing attacks. The right approach would be to say that a message is available and to log in to your account to retrieve it, or better still to send a message through the existing system in QuickBooks. Securedoc.htm is just begging customers to provide their account information to the bad guys.

Intuit's payroll service stores bank account information, employee Social Security numbers and other data that you really don't want to expose. If you're an Intuit Payroll customer please call and complain. If you've received one of these messages I'd also recommend forwarding it to spoof@intuit.com, their address for reporting phishing attacks. 

 

MMS Photo Upload to Facebook

By . Updated on

Does Facebook now hate MMS? For the past couple of weeks every time I tried to send a photo I got the following error message:

You have uploaded from an unrecognized address. For instructions on how to upload photos to Facebook, go to http://www.facebook.com/mobile"

I got this sending to both mobile@facebook.com and 32665. The referenced page is no help at all, and my phone number is registered with Facebook Mobile.

It turns out that there's a new secret email address. On the Facebook site click the icon to share a photo:

Facebook MMS Upload Step 1

Then click Upload a Photo:

Facebook MMS Upload Step 2

Then click upload via email:

Facebook MMS Upload Step 3

Your personal email address is finally revealed and can be used to send a photo via MMS.

Facebook - update your error message to point this out!

Licensing Fail: WinZip vs. ScanToPDF

By . Updated on

Software License

Software licensing is a tricky art - too little security and you leak revenue, too much and you leak customers. I worked on several license management systems at Ç-Dilla and Macrovision so I've spent far more time than is healthy thinking about this problem.

In general I think the best system is one that helps keep honest users honest. A speed bump that itches the conscience but doesn't get in the way of legitimate customers getting their job done.

I just migrated to a new computer and have finished several days of installing software and drivers. This is never a fun task, but I've been through it a few times and keep all my license information on a NAS drive to reduce the pain.

WinZip has a great trial model. The product is fully functional and nags you just enough that you'll eventually pay. I've been a customer for years, and as I moved to Windows 7 I emailed to ask about upgrade pricing. I got a prompt response and was up and running in no time.

I didn't need to upgrade. The old version of WinZip installed just fine using an existing license key.

ScanToPDF from O Imaging was a different story. The license is locked to a PC, and there's no way to move it automatically. You have to email them. It then gets worse - there's an "administration charge" to move a license. So as a paying customer I have to wait for the UK office to respond to email and even then I can't continue to use the product I've paid for.

I'm sure it's in the small print somewhere.

But the impact is that ScanToPDF has lost a customer, an advocate (I've suggested the product to others in the past, never again) and infuriated me enough to throw up a negative blog post. Is the administration charge really worth it?

At Catfood I use very simple license keys locked just to an email address. I'll refund any purchase with no questions asked. I'll issue new licenses as needed to keep customers happy. I have an online service to retrieve lost keys.

The products get pirated immediately, and finding a key generator doesn't take a lot of sleuthing. I don't care about this at all, because happy customers recommend products to their friends. Pain-free licensing is absolutely key to happy customers. Don't fall into the trap of putting your energy into complicated licensing and enforcing procedures. Add a new feature instead.

State of the Micro-ISV-osphere

By . Updated on

I was a micro-ISV (µISV) for years before I heard of the term. It was coined by Eric Sink to describe a one man software shop, and is now generally used for any small software company.

There isn't much market data available this far down the long tail so I've spent some time analyzing PAD files to see if I could answer a few questions.

PAD is the Portable Application Description specification from the Association of Shareware Professionals. It's used to describe software for submission to download sites. How useful these sites are is another question — read Scott Kane on this if you haven't already.

I spidered all the PAD files listed in the ASP directory, downloading data on 76,066 products from 39,861 µISVs (companies / people / publishers). It's not a perfect data set as there are PADs that aren't software and µISVs that don't use PAD. I've also heard that some people are developing web apps these days. But here goes…

Where are the µISVs?

Countries with the most micro-ISVs

Overwhelmingly in the US. Other countries with more than a thousand listed are the UK, Russia, China, India, Canada, Germany and Australia (in descending order). Most countries have at least one µISV but the numbers fall off pretty quickly.

How much do µISVs charge for their products?

Micro-ISV product cost distribution

$29.95.

About a third of products are free and a third fall into 9 price points (all ending in 5). I found over a thousand different US Dollar price points overall.

The most expensive product was a $150,000 Green Living site license from South Beach Software (an order of magnitude more expensive than the runner up).

How large are µISVs products?

Micro-ISV product sizes

There's not much action past 20 MB. Most downloads are between 1-2 MB. There's an interesting little spike around 14 MB. I guess this is a popular framework, possibly Java? The largest download was almost 1.5 GB.

Are µISVs still releasing downloadable software?

Most recent micro-ISV product release by month

This is a tough one to get at because PAD files just tell you about the most recent version, not the release history. The chart really shows a last update distribution for the products in the PAD catalog.

There's a large number of products last updated in mid-2008 with nothing comparable in 2009. Could this be a drop-off in PAD usage? A shift to web apps? Maybe final releases before the recession hit leading to less spare cycles for side projects (my µISV certainly pays for beers rather than mortgages).

How many products do µISVs publish?

Micro-ISV products per company

This final chart shows that most µISVs have just one product. Of course in some cases there might be a brand per product and still a single entity — it's impossible to separate this out from the PAD data. The largest number of products from a single µISV is 616.

How many people don't read this blog?

By . Updated on

People who don't read ITHCWY

This is a joke metric that I first proudly displayed on Catfood Magazine back in 1997 (it's broken on the archive of the site). Everyone had a hit counter back then, but as far as I know we were the first site with a non-hit counter.

The dirty secret was that the counter just showed the world population. The readership was a rounding error.

My new count of non-visitors uses the US Census Bureau's world population estimate and subtracts unique visitors from the Google Analytics API. The count is cached for an hour so it doesn't slow the page down too much.

Updated 2022-11-15 14:50:

The United Nations says:

"The world’s population is projected to reach 8 billion on 15 November 2022..."

And the 8 billion number is being widely reported today, however my current unread count is a paltry 7,932,915,881. That's because the US Census world population estimate is a lot lower, by over 66.8M people. That's approximately France!

How to get technical support without spending hours on the phone

By . Updated on

Old Phone

Them: Hello, my name is Phil, how can I help you today?

You: My DSL connection is slow.

Them: Okay, I can help you with that, have you...

You: My first thought was that the Linksys router that's been working perfectly for five years has gone wrong. So I connected my computer directly to your off-brand modem with the same result. I then thought that the problem must be with the computer, so I reinstalled it from the manufacturer discs and rebooted about seven times.

Them: Let me connect you to my supervisor...

Them: Tap, tap, tap, oh, we seem to have switched your service back to the basic package. Tap, tap, tap, fixed.
Sometimes it's fun to argue with support. Sometimes you just need to short-circuit the idiot script to get through to the person who can fix the problem.

I think it's time for CAPTGUAs or Completely Automated Public Turing test to tell Geeks and Users Apart. A quick puzzle or two that bypasses the first couple of levels of support.

Business of Software 2009

By . Updated on

A Conference

I'm a Joel Spolsky stalker at the moment - after Stack Overflow DevDays last month I spent three days this week at the Business of Software conference in San Francisco.

It was an incredibly high value conference, in terms of both speakers and attendees. Next year it will be back in Boston, which sucks for me, but I'll make every effort to attend.

I was really excited to see Geoffrey Moore speak. An old boss once bought a crate of Crossing the Chasm for everyone in the division to read. It's still the best business book I've ever read. At the conference Moore spoke about innovation - specifically differentiation (get out of the competitive set), neutralization (get back in to the competitive set) and optimization (productivity gains). All three are essential, but you're shooting yourself in the foot if you spend too much time on neutralization - "Best of breed is a suckers game". His thesis was to do the bare minimum needed to stay competitive and then pour resources back into differentiation.

A theme of the conference was on motivating yourself and others - how to build a great company/culture. Several speakers talked about carving out time for creativity and fun. Carsonified evidently operates on a four day week. I've spent the last couple of years on a six day week... lots of food for thought here.

I convinced myself to attend this year after watching some of the videos from the 2008 conference. These are available on the Business of Software Ning - I'd recommend joining and checking them out. Hopefully videos from this year's conference will be posted soon.

Do I need a Zumbox?

By . Updated on

Zumbox is trying to take the paper out of the postal system. It's a laudable goal, if it takes off it would stop me from feeling that I need to do this:

Junk Mail Solution

Signing up is easy. Enter your mailing address and Zumbox send you a letter with a verification code. Once verified you can start sending and receiving mail online. You can mail a few people for free, bulk mail is five cents per recipient.

Of course you'll only receive mail that has been sent to you via Zumbox. It's not a mail scanning service (like Earth Class Mail) so you end up with yet another mailbox to check.

Zumbox is trying to help businesses go paperless. This includes bills and other necessary communication. It also includes junk mail.

My experience so far is mainly junk mail. I did get a circular about recycling from Gavin Newsom but otherwise just a stream of special offers.

This is a big problem because Zumbox provides very little control over email notifications:

Zumbox Email Preferences

It's all or nothing. Either I get a daily email reminding me to go look at junk mail, or I get no notification at all (and might miss the next thrilling update from Gavin).

Most of my bills and statements are already paperless via email. This isn't as secure as Zumbox, but I'm not sure how much of an advantage this is as I really just need notification.

I really want to like Zumbox, but right now it's just another source of spam.