Skip to main content
 

*Research* - Privacy/Anonymous User Reputation Scoring

Looks interesting, going to have to spend some time wrapping my head around these concepts.


https://www.usenix.org/conference/nsdi16/technical-sessions/presentation/zhai






 

Decentralized Web Summit Trip Report - June 8-9, 2016

It's been a week, so time for a writeup of what went down at DWS. The press below covers some details, but I'm going to talk about the _feels_.

tl;dr - Electric atmosphere, technology on the cusp, very unclear future.

I found out about this too late to attend the first day, but I followed along via the live stream while reading up on the underlying technologies and chatting with attendees using federation features of Slack.

I went in person for day 2 and immediately felt the deja vu. O'Reilly FOOCamp meets early Google I/O meets the original GopherCon. You had wise sages (or as Wendy Hanamura put it _Orignal Gangstas_) working side-by-side with the new blockchain Gangstas. The only thing missing was a game of werewolf.

The breakout sessions were tech heavy but the crowd didn't need their hand held to pull down git repos and run/modify code. Many quick demos were created.

Lightning talks (available online) had thoughtful live questions and were broad enough to cover both the underlying technology and the potential results of applying it to society. I appreciated the inclusivity and diversity.

That said the ghosts of breathless tech conferences past were all there:

*Mobile* No real demos on phones. Many talks started with 'enter this on the command line'. That said most of the p2p systems on display have really good mobile properties: eventual consistency. offline sync, etc.

*UX* Little to no focus on UI/Usability problems. There was some discussion on the "Why PGP failed" talk, and passing references here and there. But very little about how this tech would be better for users.

*Economics* This new tech is competing with dirt-cheap VPS hosts out there and a generation of software designed for centralized client-server. Privacy and long-term effects on the ecosystem are low on users feature list. With the fintech bubble about to pop, who's going to fund the development; let alone the ongoing governance. Will new bitcoin funding models be the solution? Will the incumbents embrace or reject?

*Complexity* writing cryptographic serverless code is difficult and it's easy to make mistakes. libp2p is a good start, but the tooling isn't there yet.

Despite these serious issues this is the most excited I've been about our technology space in a long time. The electricity and optimism about what might emerge from this soup of technologies was palpable. I have hope that people won't want to repeat past mistakes, and that the new stack can achieve some 10x gains. Here's some initial thoughts:

- What if your phone could pull down entire sites for use offline and have deltas propagated when connected?
- How about having all of your physical devices syncing between themselves instead of up and down to the cloud.
- How about a better UI for managing your identity public/private keys?
- What about your OnHub being your persistent home on the network?
- What about being able to archive and 'play back' entire web sites like you would a git repo?
- How about having easy micropayments as a way to break free from our current ad-supported mess?
- How about Android APKs that travel from device to device with the security of knowing that you're running the exact same code as everyone else.

... more to come.

http://spectrum.ieee.org/view-from-the-valley/telecom/internet/the-fathers-of-the-internet-revolutio...

 

Technology - Webtorrent

Go ahead and load up http://webtorrent.io/ and amaze at what WebRTC in the browser enables.

Paul Kinlan's article shows how you can roll your own serverless podcast site using WebTorrent. Of course there are serious privacy, legal, and wipeout issues involved to consider. Will talk about those in future Policy posts.

https://paul.kinlan.me/serverless-sync-in-web-apps/

 

What's the G+ tagline? Shouldn't we let users know?

How about +103403111903646616992's idea _"You are what you create"_


https://contently.com/strategist/2012/05/31/the-art-of-the-essential-startup-tagline/






 

 

Portmapper

Comcast called me. Said I was running UDP portmapper on my external IP. Oops.

This was leftover from an experiment running NFSv4 across the net. [it sucked, used sshfs instead]

Also for those who've never experienced a reflection attack it's NASTY. Attacker sends forged source-address UDP packets so all responses go to the victim host. In the past NTP and DNS provided the vectors. Back in 2006 it was PharmaMaster and Blue Security:

http://www.securityfocus.com/news/11392

http://blog.level3.com/security/a-new-ddos-reflection-attack-portmapper-an-early-warning-to-the-indu...

 

Instead of "Don't be evil" --- "Can't be evil"

Discuss









 

Hyperbolic Discounting

So here's my small request to all Googlers, watch this. Then think about all the benefits that you're discounting hyperbolically[1].

For example, technical debt is hyperbolically discounted compared to immediate features/launches.

https://en.wikipedia.org/wiki/Hyperbolic_discounting

http://boingboing.net/2016/06/09/how-will-we-keep-the-decentral.html

 

Anyone from Security team want to sign on to this? Cory Doctorow asked me to send it onwards.


https://www.eff.org/deeplinks/2016/03/security-researchers-tell-w3c-protect-researchers-who-investig...






 

Vector

This feels like something Google would have created back in the day. Impressive.

- Cross Platform
- Interoperable
- Clients on Web/iOS/Android

Wow.

https://vector.im/

 

Decentralized Web Summit

Attending the Decentralized Web Summit day 2. Hope to see some familiar and new faces.

http://www.decentralizedweb.net/

 

 

If your lucre feels filthy... drop it here.


https://supporters.eff.org/donate/






 

So who made the decision to support TPP? I'm guessing the decision making process was done in secret, just like the TPP negotiating process.

The ISDS sections of this flawed trade agreement are reason enough to take a pass.


https://en.wikipedia.org/wiki/Investor-state_dispute_settlement#__sid=rd0






 

Who's involved with this? Might go just to catch up with TBL and Brewster...


http://www.decentralizedweb.net/






 

*GopherLeaks* - Gopher @30 and Email Retention...

I'm working with a journalist writing a long-form Gopher article. I have every. single. email. from the 90s. It was incredible and allowed me to get some facts straight, relive some past glories and groan at some bonehead moments.

So I'm sad that Googlers will never get to have the same experience 30 years from now. With our 18 month retention policy and corporate ownership you'd better start keeping a [paper] diary..

[_And wow, I sure was a cocky mf back then._ and here's a Stevens reference since I was a metalhead unix programmer back then..]


https://www.youtube.com/watch?v=hjjydz40rNI






 

 

People on the outside asking me about this. No clue.

Of course Incendiary Device could be a zippo for all we know...



http://www.sfgate.com/bayarea/article/Incendiary-devices-spark-fire-at-Google-7862600.php






 

Best typo found today:

*circlepickler*










 

uiconfig.textproto + boqlet.manifest

It's basically struts.xml

At least it's not Spring's applicationContext.xml (yet...)



https://struts.apache.org/docs/big-picture.html






 

ML Chip?

I wonder why we don't have custom ASICs for oh say -- Protos?

Or even better a *Guice Machine*

Of course then we'd need a special Guice keyboard. Extra @ signs, and a @Provides button.




http://www.rcsri.org/collection/symbolics-keyboards/






 

 

Would anyone be up for an Google Internal xprize for carbon reduction by gcu reduction? I'd put some dollars to that if the results were, say 2x the gain of buying LED bulbs or cow methane.

Anyone know what the mapping is from gcu->tonnes of carbon?

Mostly I just want to see the end of useless computation...









 

Today's Birthdaily Inspiration is an homage to my hi5 days. Cala 13 has only gotten better over the years and they can almost make Assange sound good...

https://en.wikipedia.org/wiki/Multi_Viral_(song)



https://www.youtube.com/watch?v=EjSCy1GC6Sc






 

Finally got around to buying more carbon offsets after many years and was happy to see Google offers access to their program:

https://sites.google.com/a/google.com/googlercarbonoffsets/home

However I'm likely switching to Terrapass in the future since they also can offset your water usage, and oddly enough their offsets cost half of what we price internally. Also auto-pay, so I won't slack off like I did before.

Oh and fwiw I've went from 12 tons to 5 tons estimated yearly usage.



https://sites.google.com/a/google.com/googlercarbonoffsets/home






 

 

Owners of OWNERS

Want to know who owns your code?

cs -l -local "case:yes f:my/google3/path/.*/OWNERS\$" \
  | xargs -n 1 g4 owners \
  | sed -e 's/ included.*$//' -e 's/,$//' \
  | grep -v '^//' \
  | grep -v piper-group-eng \
  | egrep my/google3/path \
  | sort | uniq

Sample output

https://x20web.corp.google.com/~plindner/cargocult-oz/owners_all.txt

 

So much good. they had me just for the alt-tab, but v1.1 is epic. Markdown compose!





http://www.boxyapp.co/






 

Quantum Physics meets Hip Hop

Today's Inspiration: *Quantum Physics meets Hip Hop*

Loving this latest from P.O.S. He's such a decent guy. When Julie was starting chemo he tweeted a happy bday to her when I told him how he's been an inspiration to us working through his kidney transplant.

[guessing "daily" inspiration was a bit ambitious for this collection.]

More here:
http://www.doomtree.net/2016/03/mondays-with-p-o-s/

and liner notes on the raps here:

http://genius.com/8779700

https://www.youtube.com/watch?v=hNN6Je7XN9U

 

 

What's worse than deprecated or not ready yet?

Deprecated *AND* not ready yet.









 

I'd happily use this instead of Postmortem.


https://en.wikipedia.org/wiki/Hotwash






 

Deps

Rec'd just for this:

- No code runs faster than no code.
- No code has fewer bugs than no code.
- No code uses less memory than no code.
- No code is easier to understand than code.

http://www.mikeperham.com/2016/02/09/kill-your-dependencies/

 

If you're considering influence peddling via NetPAC you should at least know who gains...


https://static.googleusercontent.com/media/www.google.com/en//publicpolicy/doc/NETPAC-Contributions-...






 

 

Diversity and Haircuts

There's a good discussion on industryinfo about diversity and how haircuts factor into that. Don't want to derail that thread so posting here..

At 22 I went to work for the UN in Geneva. My wife and I drove 3h to Zurich to get our cuts at Time Tunnel. Geneva Salons were too snobby for a metalhead and a punk used to the Hair Police in Minneapolis.

Eventually we found found our counter cultural tribe at http://usine.ch/ and http://www.lecheveusurlasoupe.net/

What I will say is that working and living abroad taught me valuable lessons on diversity, inclusion and empathy.

http://timetunnelhair.ch/category/salon/

 

 

My latest step in my *Borgmon@Home* project.

https://rainforestautomation.com/rfa-z109-eagle/

I think I already saved the 9 this cost by adjusting our laundry schedule to hit better ToU rates and tracking down some vampire loads.


https://plus.google.com/photos/107786897865850743842/albums/6242284384095970257/6242284386346022354?...






 

Anyone have a contact at npr.org?

Their pages are generating invalid Content-Type headers:

Content-Type: text/html;;charset=UTF-8

Fixing on our end, but someone should let them know..









 

Dead Integrations

Today I confidently said to my father in law that I could make it easy for him to insert photos into gmail. Sadly Google let me down here.

Root cause bug is here:

https://b.corp.google.com/u/0/issues/26608412

Basically no one has updated the gmail compose/onepick integration to read from photos.google.com data. Instead it only supports G+ photos and albums, which are not being created any more.

So I thought, let's turn on Drive integration and use Drive OnePick. Nope. It sucks. You don't get an inline image in the message, nor can you use the photo options you normally get.

Inbox does have something that works, but I'm not going to train my 80 year old father-in-law to use another email client right after I got him moved over from NetZero(!)...

 

Reposting this in the wake of the current Nest thermostat die-off. Customers respond really well when you

- Admit that you made a mistake
- And try to make things right.

I hope our friends at Nest invest in a similar response.


https://signalvnoise.com/archives2/six_apart_does_their_customers_right.php






 

I have a dvd rip of a VHS transfer of some old Sun (we put the dot in .com) internet promotional clips.

You can see some of them over here:

http://planet-rla.com/digital-journey-2/

Happy to share if anyone wants




https://plus.google.com/photos/107786897865850743842/albums/6239084702831613217/6239084706355357970?...






 

 

 

If you want more than 10 days of Nest data you're gonna have to send your creds to a shady guy named _WebPirate_


https://plus.google.com/photos/107786897865850743842/albums/6236206815904801937/6236206812873308466?...






 

 

Not this again...

I guess they had to do something with the Chrome Bookmarks code base once they rolled it back.

See http://go/stars for the latest pitch deck and future plans.

So what does this mean for Spaces, which is also using search results?

What does it mean for collections?

Why can't we work together on this stuff instead of fragmenting? It's just so stupid.

http://techcrunch.com/2015/12/01/google-turns-image-search-into-pinterest-with-new-collections-featu...

 

Code of the West

Saw this recently and my wife asked if there was a _Code of the Google_?

*Code of the West*

1) Live each day with courage.
2) Take pride in your work.
3) Always finish what you start.
4) Do what has to be done.
5) Be tough, but fair.
6) When you make a promise, keep it.
7) Ride for the brand.
8) Talk less and say more.
9) Remember that some things aren't for sale.
10) Know where to draw the line.

 

New version of auth-refresh is out. Uses the new glogin / gcert command line commands to save you time every day.


https://groups.google.com/a/google.com/d/msg/macroadwarrior-guide/XRCmHEZGOac/ICNZ-0W5AgAJ






 

The internet has all the answers



http://style.org/unladenswallow/






 

Now cards aggressively target when I switch to hl=en-UK to get the British voice for TTS


https://plus.google.com/photos/107786897865850743842/albums/6219438267743132305/6219438269857772130?...