Archive for June, 2008

For-profit corps can change the world

Sunday, June 29th, 2008

A common trait among forward-thinking Generation Y “millennials” are that they don’t just want to make money (who doesn’t?), but to also do good by giving back some how, by changing the world for the better, by actually making difference. For this group of young adults, they may have struggled with the question of “to work for a non-profit or for-profit?”

The lines between the for-profit and non-profit jobs are blurring, which means that the actual experience gained, and the job compensation, whichever your choice, is roughly the same. Thus, this question can be effectively boiled down to, “which path feels better?”, or “which as a larger touchy-feely” factor?

In light of all the large corporation scandals (wow, Wikipedia has a list here), it’s no wonder that the winner to the touchy-feely question is undoubtly, the non-profits. However, I do think, nay, believe that if executed properly, for-profits can make a larger and more lasting impact on the world.

This is exactly what Bill Gates has done, all “Microsoft is evil”  puns aside. From Anil’s blog:

Bill Gates has pulled off one of the greatest hacks in technology and business history, by turning Microsoft’s success into a force for social responsibility. Imagine imposing a tax on every corporation in the developed world, collecting $100 per white-collar worker per year, and then directing one third of the proceeds to curing AIDS and malaria. That, effectively, is what Bill Gates has done.

Now that, is powerful. Microsoft might as well be a sovereign multi-national government. I think this is a feat tough to pull by a non-profit–simply because it might involve some questionable tactics in business.

I’ve blogged here about a book by C. K. Prahalad, titled “Fortune at the Bottom of the Pyramid“, which essentially concludes with proof that making profit is not mutually exclusive from helping the poor. Prahalad is a distinguished professor of strategy at the Univ. of Michigan.

Lindros P88 composite blade

Saturday, June 21st, 2008

I broke my blade at practice 2 weeks ago and was shopping around today for a new blade, finally settling on a Lindros P88 right hand composite blade. My team captain happened to be at the pro shop, helping me pick and gave me a crash course on the “science” behind picking a blade (wow, I didn’t know that there were _that_ variables). Mostly, I just pick a stick whose flex is in the 70′s range, with a decent blade curvature that I can see myself living with, and a stick with some cool hockey player’s name on it.

I thought the famous player’s name on the hockey stick is just to make it look cool, some marketing ploy. Today, I realized that those names actually mean something about the stick/blade that would actually affect my handling! Anyway, so I looked up Eric Lindros, and turns out .. he is quite a cool guy.

He checks (and fights) really well. In this video clip, he evens knocks the other guy down during a face-off! :D

His jersey number is 88; is that why the blade is a P88? I’m guessing 88 is probably _not_ the Morse code short hand for “love and kisses“. Ham radio operators usually sign off with “73″, which is a short for “best regards”. Random trivia for you :) who else mixes wireless radio transmissions+Morse code with hockey?

Lindros P88 composite blade

As a side rant, I had a match today .. and twice I had someone knock me over on ice and say, “Sorry man, you alright?”. Come on, it’s friggin ice hockey–not ice ballerina. No need to be polite. It wasn’t even a hard hit. This isn’t a “polite” sport (not to be confused with un-sportsmen-like conduct). Apologizing for little things like that annoys me more than it makes me happy. I got sent to the penalty box for 2 minutes, for “uhh, number 7, .. minor roughing”. Apparently I hit someone’s face on the ice while trying to get up from a pileup on ice. I didn’t notice. Okay, so I did apologize for that one .. but the minor stuff, please don’t apologize — I can so handle being pushed around.

JavaScripherTution in{j|f}ection

Monday, June 16th, 2008

This is a cross-post from my company‘s blog that I posted today.

The injection of malicious <script src="malicious.js"> JavaScript tags on a massive scale into everyday popular and reputable Web sites, commonly visited by the casual surfer at home (and at work), has been the trend. Today, as my team and I here at Security Labs made our routine rounds around the block to spy on what the bad guys are up to next, we discovered a somewhat weak but interesting piece of malicious code, whose techniques date back to the early days of encryption – the substitution cipher.

Wikipedia has a good introduction on this topic:

In cryptography, a substitution cipher is a method of encryption by which units of plaintext are substituted with ciphertext according to a regular system; the “units” may be single letters (the most common), pairs of letters, triplets of letters, mixtures of the above, and so forth. The receiver deciphers the text by performing an inverse substitution.

Doing a character for character substitution, using a keyword of “MALCODE“, we get:

Plaintext:  ABCDEFGHIJKLMNOPQRSTUVWXYZ
Ciphertext: MALCODEHIJKFBNGPQRSTUVWXYZ

Using that mapping, we can encrypt a message from a hypothetical botnet master to his/her herd of bots from this:

LAUNCH THE DDOS ATTACK NOW

to this:

FMUNLH THO CCGS MTTMLK NGW

It’s a very trivial algorithm, and extremely weak in terms of the protection it provides (by today’s standards), but it is definitely good enough to conceal the true message from casual prying eyes. This was certainly as good as bulletproof during the days of Julius Caesar (wow, we’ve come a long way!).
(more…)

My App Engine “Wall”

Friday, June 13th, 2008

I was messing around with Google’s App Engine this week, and learning some Python (the programming language, not the snake! I had someone ask me that) at the same time.

App Engine (for scalability reasons) does not support SQL, but instead provide and API they call Datastore for persistent storage. For the app I made, I queried for data ordered by date, but for some reason the result set still comes out unordered. Odd. I’m probably not calling it right. Anyway, it was just an exercise to see what App Engine was all about.

Here’s a replica of the Facebook Wall I made, feel free to write your heart out. As you can see, I’ve had friends say some really nice things about me already. The full address is liew.appspot.com .. but there’s an iframe to it if you’re too lazy to click on that link :)

Update 6/15/2008 — Tinkered around a little and realized why its unordered .. I lost the timestamps on some of the posts, so for those that come out unordered, it’s because there are no records of which came first (the timestamp was NULL). It should be fine going forward. The un-stamped posts take precedence in ordering over the stamped ones, so you may have to scroll down a little to see your post (or just CTRL-F it).

Web 2.0 weekend roundup: Mashup (projected) money, Slide, plus mobile

Sunday, June 8th, 2008

Forrester reports that mashups are taking off. A trend/wave to take note of. This reminds me of what Greg McAdoo (VC with Sequoia) said, that the tiny companies have no power to change waves (technology trends), only the option of riding the wave. So here’s the wave, for those who want to ride it!

Mashups — custom applications that combine multiple, disparate data sources into something new and unique — are coming to the enterprise. Forrester projects that the enterprise mashup market will reach nearly $700 million by 2013; while this means that there is plenty of money to be made selling mashup platforms, it will affect nearly every software vendor. Mashup platforms are in the pole position and ready to grab the lion’s share of the market — and an entire ecosystem of mashup technology and data providers is emerging to complement those platforms. Those vendor strategists that move quickly, plan a mashup strategy, and build a partner ecosystem will come out on top.

The full report costs $775 ( ouch! psst .. can someone share? :) )

I got that link from Dion Hincliffe’s report on the mashup industry. An interesting read, do check it out — I do no justice in summarizing it here. It’ll get you a quick overview of the state of the mash-o-sphere (did I just invent yet-another-useless new Web 2.0 buzzword?) Plus, it features cool San Diego tech startup by two cool people I know; shoutouts to my friends Steve and Aaron from MindTouch!

On another note, Slide reports that they are doubling down their efforts on their current top widget properties to make them even better, .. implying that they are going to slow down on churning out new and potential “disruptive” widgets. I’m all about focusing on your core business for sure, but I hope they still carve out some time (as a percentage) throw stuff against the wall to see what sticks, since there’s no time better to encourage innovation than during hard times. Maybe this is all just an investor-relations fluff .. in which case, fine.

Max Levchin is no stranger to innovation, and I am sure he knows what he is doing. He is definitely someone I admire, and I’ve covered him previously on my blog here before.

Someone I spoke to this weekend was blindingly oblivious to the revenue opportunities in value-added services for mobile, so I thought including this pretty picture from this very worthy blog post from Alec Saunders here was in order.

Silly wabbit, of course you can make money writing apps for mobile :) — just google for {iPhone, Android, Blackberry} fund.

mobile value added services: long tail