Last night I was about to release a new version of django-flatblocks, when I ran into a weird problem:

$ python setup.py check -r                                                                                                                                                                           [develop] 13:58+0100
running check
Traceback (most recent call last):
  File "setup.py", line 32, in <module>
    zip_safe = False,
  File ".../distutils/core.py", line 152, in setup
    dist.run_commands()
  File ".../distutils/dist.py", line 953, in run_commands
    self.run_command(cmd)
  File ".../distutils/dist.py", line 972, in run_command
    cmd_obj.run()
  File ".../distutils/command/check.py", line 69, in run
    self.check_restructuredtext()
  File ".../distutils/command/check.py", line 111, in check_restructuredtext
    for warning in self._check_rst_data(data):
  File ".../distutils/command/check.py", line 138, in _check_rst_data
    parser.parse(data, document)
  File ".../docutils/parsers/rst/__init__.py", line 157, in parse
    self.statemachine.run(inputlines, document, inliner=self.inliner)

    .....

  File ".../docutils/parsers/rst/states.py", line 991, in implicit_inline
    return [nodes.Text(unescape(text), rawsource=unescape(text, 1))]
  File ".../docutils/nodes.py", line 331, in __new__
    return reprunicode.__new__(cls, data)
UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 26: ordinal not in range(128)
</module>

The cause of this issue was a bit unexcected: A string in the release notes of a version I had already released about a year ago. So what changed? Probably the Python version but also most definitely the version of docutils I had installed in order to preview the release notes before every release.

So I started downgrading from 0.8.1 all the way to 0.5.x to finally make the check command not die on me anymore.

There is also an issue in Python's issue tracker which has a patch attached (and committed) that solves this issue. So if you don't want to downgrade docutils in your virtualenv, this is probably the way to go :-)

"When setup.py check fails" was written by Horst Gutmann and is licensed for reuse under Creative Commons Attribution-Share Alike 3.0 Austria License.

Up until recently, the Website Team was a sleepy team within phpBB that acquired team members from other teams and worked behind closed doors in order to ensure the full operation of the website. It is a team that is not very well publicized nor is really known what exactly we do. It has had its lows and even fewer highs, but now the need is too great to keep our operation small and closed.

The past

This historically small team has been known to take current phpBB team members in prior to their departure, during a time where it is not easy for them to contribute much at all. General website maintenance fell to the team’s themselves, each of them taking care of their patron area of the website. While this worked for a while, it has caused more issues than it was worth. Our website is inundated with duplicate CSS, inefficiency in JavaScript, and general chaos in the backend code.

The present

During the past year, the website team has been making the transition from a sleepy team who takes care of few things to a more active team that handles day-to-day maintenance and testing prior to deployment of the website.

We’ve picked a few members and lost many. This is mainly due with the fact that this is only team where it is impossible to get help directly from the community because it’s an internal codebase. It may not have been very noticeable, but any team member the website team picked up was formerly on another team within phpBB.

The future

Currently, we have serveral maintenance projects we are overseeing and one very large project that’s early in development. Unfortunately, we are not in a position to announce these at the moment. I do think it is worth mentioning though, for we are eventually looking to adopt a more open model, even going so far as to release some new code we’re writing on github in an effort to pick up contributors.

To do so, however, we’ll need some help. The future of phpBB.com is a blank slate–and we’re looking for designers, programmers, and other individuals with skills who can help draft the slate into a reality. If you’d like to help out, and have the time and ability to do so, please contact Sam with samples of your work (P.S. being active on the forums on phpbb.com and Area51 are a huge plus). This is your opportunity to make an impact on the phpBB project for users, developers, team members, and more.

"Bam" became the tagline of celebrity chef Emeril LaGasse at the start of the last decade.

With Emeril's star having largely faded, a coalition has now proposed a new use for the word. They propose to use it as an acronym to replace the word "Jazz". The acronym's long form? Black American Music, and Nicholas Payton introduces us to the new genre with his new album, "Bitches."

The word "Coalition" may not be the right one. It appears that Nicholas Payton was the first to publish his thoughts on the issue on his blog in a lengthy November entry where Payton simply states several dozen reasons why "Jazz" is no longer a relevant term. A few other musicians have signed on since then although I have been unable to find a listing.

So I give you two pieces of music to compare, both taken from Payton. First is the quintessential "Take Five" from Dave Brubeck. http://www.youtube.com/watch?v=BwNr...
And the second is off of Payton's recent release, "Bitches" (apparently a reference to Miles Davis's groundbreaking 1970 Columbia release, "Bitches Brew") is the original composition "Give Light. Live Life. Love." http://www.youtube.com/watch?v=OXgy...
Not so different, stylistically. Close enough that they can be described using the term jazz, I think. But one has sold millions of copies (over 43 years) and the other would be delighted to sell 100,000.

And that is really the core of Payton's argument -- Jazz is a hard sell in America today. Maybe jazzers should try something else.

With that, "Bitches" provides some interesting new tracks such as "iStole Your iPhone" which melds elements from Jazz, the Caribbean, and Urban music. But take away the vocal track, and its still jazz.

Another part of Payton's explanation is one that flirts with "Occupy Jazz." Payton tries to convolve jazz with the n-word, calling it in a subsequent blog entry "the derogatory j-word." I don't want to touch that one, so I simply quote someone hopefully more versed in the field than I, AllAboutJazz columnist Greg Thomas

Equating jazz with the "n" word, is, in my estimation, not wise.

My total opinion of the project is this: I feel it is a fool's errand for Payton to try changing a genre that has become known for its closed-mindedness, a genre with few living influential figures, and hundreds of academics who will try to defend the original label by psychoanalyzing the statements deceased greats like Miles Davis.

The album itself probably deserves 3 and a half stars on the five star scale. If not for Payton manufacturing this controversy, it probably would have slipped under the radar of almost everyone as being too experimental -- which suggests that Payton's speaking out is having the desired effect. If not for the "BAM" storyline, I never would have heard of the album. It will be interesting to see if the statement causes Payton to be shunned in the future, though.

Since we opened up development and moved our code onto GitHub, we’ve received several contributions. It allowed a number of non-development team members to contribute. We have been listing these contributors in the 3.0 release announcements, and you can also see them on the area51 contributors page.

However, I think we can do better. And this is why I want to reach out to the modding community. We have limited ressources and we need your help.

Contribute patches

The bug tracker is filled with bug reports. You may have reported a few bugs yourself. There’s so many, it’s likely that a large amount will never get fixed.

This is your chance. If you ran into a bug that really bugs you (pun absolutely intended), now is the time to fix it. If you’ve interacted with the MODding community, maybe by submitting some MODs to the cusomisation database, you should already be somewhat familiar with the phpBB code base and its coding guidelines.

Creating a patch is like creating a MOD. Except you don’t have to write a MODX file. Instead you can have a diff generated for you or just use git to manage the changes.

Once you are done with your patch, you can either attach a patch file to the ticket, or you can be awesome and create a pull request on GitHub. Pull requests make it easier for us to read, discuss, and test your patch. For this reason it will likely be merged faster.

Review pull requests

Pull requests are patches awaiting review. Most of the time they will be from developers. That’s right: every change to the phpBB code base needs to be reviewed by another developer. This allows us to catch problems early, and distribute the blame when something goes wrong.

There is a list of open pull requests that are waiting to be merged. Some of them already have comments, while others have not been reviewed yet.

Reviewing these is a lot of work. But you can help! If you know the phpBB code base well, you can help by checking the diffs and making sure no new problems are being introduced. Be sure to comment with your opinion; even simply saying “looks good” is helpful because it shows that someone has reviewed the patch.

The other thing you can do is test pull requests. Reviewing is nice and dandy, but testing allows you to see if things are really working. And this is very similar to testing MODs. So if you are a MOD author or maybe even a junior MOD validator, this process should be fairly familiar to you. The only difference is that everyone will be watching you.

Git

We use git for version control. This may be intimidating to lots of you, but for development there is really no way around it. It is a great tool, and I encourage anyone who writes code to learn how to use it.

You will first need to fork the phpbb3 repository. Then you will need it to create a branch on your fork for your change. When you have finished your patch, push to your fork on GitHub and submit a pull request. You can also checkout someone else’s branch with that person’s proposed changes, in order to test it.

I’ll be honest with you: it’s tough.

But there are lots of great resources out there! One of my favorites is the “Getting Git” talk by Scott Chacon. He explains the basics of how git works. This really helps you to get an initial understanding, so that you can move on to learn how to actually use it. Some great guides that can get you started using Git are the Git Reference or Pro Git. And we also have the Working with Git article on the phpBB wiki.

And fear not, we are here to help. If you run into any problems, just come onto IRC and ask.

In conclusion

So there you have it, secure your place on the area51 contributors page!

If you have questions or just want to see what we are up to, join us in the #phpbb-dev IRC channel on irc.freenode.net.

I have posted a topic on phpbb.com letting folks know I’m not going to renew my phpBB3 MODs-related domains. If you’re interested, hop on over to phpbb.com and send me a PM to let me know.

First come, first served.

Written by: Unknown Bliss

Within this article I’m going to briefly outline how to create your modification, package it up, submit it to the Modifications Database and support it afterwards.

Writing MODs can be so simple but yet so complex. It really depends on what MOD you wish to make. If you wish to make a portal or arcade then it will be quite complex. If you just want to make dynamic page titles or ACP Link in header it will be a rather small trivial task.

The first thing you need to do is open up word or notepad and prepare information on your modification, a brainstorm of ideas. It should include items such as your modification name, description, what sort of features you might include and what requirements do you want. Then you need to think about what features you’ll need. For instance, if you are creating a portal, will you have a configuration setting to toggle or re-order individual modules?

Once you have a good idea of how you want to make your MOD you can start to do a bit of research. Take a look at something similar. If you’re designing a blog with articles and comments then take a look at phpBB’s Topic and Replies system. See how it works and what can be done with it. While you’re doing research feel free to note down bits and pieces of information for future reference.

Once you know what you’re making and you have a rough idea on how you are going to make it, you can start working on it. Normally, it’s easiest to start with the database structure. If you have a bug tracker you know you need to make the table for tickets, the table for projects, table for comments/replies, table for logging etc. So plan this structure out.

After you have done all the planning, notes and researching you can install your test board. I recommend you use QuickInstall (QI) as it does a lot of items already done for you and it can generate multiple boards faster. If you use QI then I always find it’s best to populate your board with users and posts as it can come in handy later on. If you don’t use QI then you need to install a board then enable debug and debug extra. You also should change the recompile style components option to ‘yes’ inside ACP –> Load Settings so you don’t need to refresh your style components or cache every time you make an edit to a style file. There is a blog article about QI here

Now that you have a test board, you should use your DB Structure Plan to make your database changes. If you need to add something later then you can. Once you have your database changes in place what you’ll need to do next is write the PHP functions files. I can’t say much about this except that this is when you need to take out your notes and use a checklist of everything that you need to include.

Once you have made the PHP Function Files you need to create the basic language PHP files. At the moment, you won’t have much to put in them. However, you will need to put in the basics, such as, if you are making a set of modules, you will need language entries such as “Recent posts”. Just a reminder that all standard language files should be inside /language/en/mods as all MODs should have an English language built into the MOD. Any additional languages should be in additional MODX Files but I’ll come back to that later. As a general rule it’s normally useful to have a generic error and success message for most MODs.

Now that you have made you language and function PHP files you need to make your template files. These may need to contain the Overall Header and Overall Footer and sometimes forum jump but otherwise its up to you what goes in them. One very common error people make is putting hardcoded language inside template files. This is against phpBB Coding Guidelines and it will make your Modification deny worthy. If you can remember this rule it then means less of a nightmare later on when your MOD is denied for hard coded language and you then have to re-submit it. Note: Hardcoded language can be anywhere, the most obvious and common place to put it is in template files but you can put it in most files and that’s where it normally catches people off-guard.

Now you need to make your PHP file that the user will visit (such as viewtopic.php or blog.php or index.php rather than /includes/acp/info/blog.php). An attempt should be made to keep file names short and simple like portal.php or blog.php rather than my_absloutley_almighty_cool_portal.php.
Once you have a working set of files you need to start adding your ACP, UCP, MCP etc. Modules. I’m not going to go into much more detail with regards to this much except to say that when designing these try to keep them looking uniform with the built-in modules in these control panels.

Now you should have a working test board. At this moment in time you shouldn’t have all of your features implemented except the very core and basic ones. Now you need to add your UMIL files. To do this just generate a UMIF File with the hosted UMIF Generator. Also make sure you include a copy of the latest UMIL and you must make sure this is always the latest and when a new version is released remember to update. Outdated UMIL makes a MOD deny-worthy.

So now its time to create a development topic in the phpBB.com MODs in Development Forum. Make a topic and I recommend you use the suggested template for your topic. At this moment in time don’t attach any downloads and keep the status as [DEV] but if you wish you can provide screenshots.

Now you need to package it into a MODX. I suggest you use the MODX Generator. Once you have this you can then edit the MODX using the MODX Creator with additional information.

Now that you have made your MOD you need to make a new board. This board should be the same as the one you made earlier with debug, debug extra and AutoMOD. Now you need to zip up your modification, go into AutoMOD on the new board and upload it using the upload feature within the AutoMOD module. Once it has been uploaded, install it. If it fails but you can’t see why double check if you have used spaces instead of tabs and vice-versa in finds. Once you have AutoMOD working you are almost ready to submit your MOD.

You should now update your topic to Alpha or Beta (ALPHA is for a VERY unstable MOD. BETA is generally when almost all of the features have at least been implemented, but not much testing has taken place) and add a download link. Downloads aren’t required for the alpha stage but are recommended; otherwise how do people test your MOD and provide feedback? Downloads for beta are required due to rule 3d. The MODs in Development Forum is a place to get ideas, free beta testers and market your Modification so you should take advantage of it.

Once you have added a download I recommend you test your MOD thoroughly for any bugs and fix them. There is a blog post about how the Junior MOD Validators test (and I recommend you test it in the same way) here. Once you are quite sure that all of the bugs have been squashed and that all of the features have been implemented, as you planned from the start, you can promote the MOD status from the BETA to RC (Release Candidate) stage. Many MOD authors will not accept any more feature requests for the current MOD version, pushing any further requests back to the next major version (X.Y). At this point, your MOD should be ready to be submitted for validation by the MOD Team for approval and release into the MOD Database.

To submit it for validation you need to create a Modification type contribution in the MOD Database. For the contribution details, you should generally use the same information as was used in your MODX install file. You will also have the opportunity to include further information, such as a demo URL and screenshots. Finally, select one or more relevant categories into which your MOD fits. Note that at the bottom of the submissions page there is an option to upload screenshots, not revisions.

The next page to come up will be the “New revision” page. On this page you should upload your zipped up Modification, type in your version number and version name (can be the codename for the release or just the version number or the name of the mod). Then you have the notes to the MOD Team section in which I personally add a note of thanks to those who out of their own free time test and validate my MOD’s code but its up to you what you enter into this section.

Once your MOD has been submitted, it is a waiting game of sorts while the MOD Team and Junior MOD Validators review the code and test the functionality. Note that it can normally take a month, sometimes more, for the entire process to be completed, due to the number of MODs submitted. Once your MOD has been approved or denied, you will receive a PM with validation notes. This can include issues in the code, or problems found while testing. Even if your MOD is approved, it is suggested that the validation notes be taken into account for the next version of your MOD. If your MOD is denied, most of the issues found in the report must be changed before your MOD can be resubmitted. If you find that something in the validation report is incorrect or that there is an issue in the report, you may communicate that by replying to your Queue Discussion topic, found in the Discussion/Support tab of your Contribution page. This topic is only viewable to you, the MOD team, and the Junior MOD Validators. If your MOD is denied multiple times, do not become discouraged. Sometimes, when different people look through your code and test your MOD, different problems will be found. Simply fix the issues and resubmit your MOD.

So when you get your MOD approved it is time to provide support for it. This is not required but is asked for by the phpBB.com MOD Team that you update for new versions/bug fixes and support your MOD. I suggest you subscribe to the support tab in your Modification section in the Modifications Database so that you get updates when support is posted. When new phpBB Versions are released you are asked to re-submit it with any fixes that my be required.

If you wish to add features to it you can also re-submit it at any time for that.
And that’s it really. If you have finished this Modification perhaps you would like to start work on another modification (Maybe from the MOD Requests Forum).

In closing, this guide is just that: a guide. It is how I tend to approach the MOD writing process. If you have a method that works better for you, then you are welcome to use that and possibly share it in the discussion topic. It is quite common to skip the earlier section with planning but that is totally up to you. It can, however, prevent confusion, duplication and missing code later on.
Also remember, if you ever need help with anything MOD related you can always ask in the MOD Writers Discussion, in the Queue Discussion Topic (for queries about issues in a validators report being un-reproducible, queries as to what they mean or any notes to the team about issues that arise in validation etc.) or by asking on the FreeNode #phpbb-coding IRC Channel.

Way back in 2009 phpbb.com was hacked via an exposure in the phplist mailing list software. (Just to be very clear, there was no exploit found in the phpBB code used to run the site, only this supplementary program used to run the email notification system.) One of the results of the hack of phpbb.com was that several thousand user passwords were exposed and posted on the Internet. They were exposed, frankly, because they were too simple, and that’s not phpBB’s fault.

Pet Names Don’t Make Good Passwords

People often struggle with remembering passwords. Yes, there are programs that can help you with that, but are they really that much more secure than writing things down on a piece of paper? Here’s one take from one of my favorite web comic authors:

The bottom line is that a password is supposed to protect an account from unauthorized access. It’s not supposed to prevent authorized access, but for infrequently used resources it can do that as well.

Password Storage

One indicator of concern to me is whether a web site can send you your existing password when you forget it. That means they’re likely using an encryption process rather than a hashing algorithm to store passwords. And that means anyone with access to the decryption key can read every password in the system. phpBB2 uses a hashing algorithm which means as a board owner / administrator I can safely say to any of my users that I cannot tell them what their password is. I can assign them a new one, and of course there is a self-service option available to phpBB2 users that will do just that, but I cannot tell them what their existing password is. In a default phpBB2 installation a user password is hashed and stored as a 32 character string. Similar passwords will generate very dissimilar hash strings, so there is no way for someone to easily guess what a password might be simply based on the results of the hash. For example, here are a few similar input values and the resulting MD5 hash outputs:

test     098f6bcd4621d373cade4e832627b4f6
Test     0cbc6611f5540bd0809a388dc95a615b
tset     751ec45015a704a39dc403001c963e97
test1    5a105e8b9d40e1329780d62ea2265d8a

Despite the similarity of the input values they all have very different hash values. That means that similar hash values are going to have very different input values as well. Also, because a hash is generated by a one-way function there is no way to recreate the input value based on the hash. (There are some cases where two different input values could generate the same output hash; that’s allowed.)

If that’s the case, then how can I tell if a user has entered the correct password when they log in? It’s actually really simple. When a user logs in, phpBB takes the password provided on the form, hashes it, and then compares the resulting hash value to the hash stored in the database. As long as the input values are the same (entering “test” as my password will always generate 098f6bcd4621d373cade4e832627b4f6 as the hash value) then the password matches and the user is logged in.

How, then, were hackers able to decipher the passwords stored in the phpBB.com database if there is no way to reverse a hash process? They didn’t. Instead they used a lookup table (also called a rainbow table) to match up known hash values with their source value. Imagine taking a dictionary and running every word in it through the hashing process. When you’re done, you have a list of hashes and their source. By matching password hash values against the list of known entries the hackers were able to figure out what a number of phpBB.com user passwords were.

To help defeat this sort of process, phpBB3 now uses a salted hash which provides even more security. I imagine someone has back-ported this to phpBB2 as a MOD but I have not had time to look for one yet. But the fact is if a secure password is used (a combination of words and numbers, or as the cartoon above suggests several words run together) the odds of the password appearing in a rainbow table are extremely slim, and even the simple hashing algorithm used in phpBB2 is essentially safe. Even changing the case of one letter helps, as shown in these two hash examples from earlier:

test     098f6bcd4621d373cade4e832627b4f6
Test     0cbc6611f5540bd0809a388dc95a615b

Changing the “t” to a “T” changes the hash. It might be even better to change something other than the first letter, for example changing the “e” to an “E” as in tEst. That’s a very easy word to remember and it’s not likely to show up on any rainbow table, unless a hacker wants to run every possible combination of upper and lower case letters for every possible dictionary word. Ultimately it would be better to use a combination of letters (mixed case), numbers, and even symbols where allowed.

So how important is it that phpBB3 uses a salted algorithm for passwords? If people were smart about what passwords they use then it really would not matter so much. But as shown in some of the related links at the end of this post, people are not very smart about the passwords they pick. In that case, the salting process is quite beneficial.

Social Engineering

Which brings me to my final issue for this post: people can be fond of certain passwords and often use (reuse) them on more than one site. If you use the same password for a phpBB board that you use for your banking system, then change it. Change it now. For one thing, most phpBB board owners do not use a secure protocol (such as HTTPS rather than HTTP) for their sites. That means the password is exposed during the transmission of the form data. Ultimately no matter how a password is stored or how complex the password might be, if people can be tricked into giving up their passwords by phishing emails, web site plugins, and other techniques, that’s a problem. If a hacker manages to grab the password for one site, they may then be able to use it on other sites. I have made a practice of using a unique password on every service I sign up for in order to prevent this for a very long time. But once again, xkcd.com says it better:

Related Links

• phpBB Password Analysis
• 500 Worst Passwords

I really like Google+. It is kind of the perfect mix of Twitter's new-like streams and Facebook's user management. That and much more managable discussions than on Twitter. I hope I'm not the only one who has sometimes a problem keeping up with what discussion a certain @reply was now part of.

The killer feature: volume control

The last new feature that heaved Google+ over Twitter for me was the addition of the Circle Stream Volume control introduced just a couple of days before XMAS. This way my main stream has become usable again while before it I mostly moved from circle to circle and stayed as far away from the main stream as possible due to information overload.

Right now I have more or less the following main circles:

• Family (mostly vacant right now but I'm working on that)
• Friends
• Following
• Django
• Brands
• Company

Friends and Family are tuned all the way up while Following and Brands end up not being included in my main stream at all. Django and Company are kind of in the middle ground because news from friends are simply more important than news about Django. This way I can finally use the main stream once again for what is important while keeping the rest of interesting stuff only at max. one click away :-)

The conference use-case

During conferences my priorities shift a little bit. There I first of all want to know what's happening around the conference; something that Twitter and its hashtags excel in right now. Finding nice restaurants to relax after a long conference day is just so easy if you "follow" the conference hashtag.

Here Google+'s search subscription comes in which basically allows you to bookmark a search-term (and/or hashtag) and the search result is auto-updated if you keep the page open (similar to Twitter's search but a bit more automatic. Think of a Twitter-wall).

So basically this use-case would be covered if people would just use Google+ more during conferences ;-) #GDDDE in Berlin this year was a nice start, though which discussions about presentations more or less happening in real-time there.

Topic streams

But what if you could combine search-subscriptions and circles? As you've seen up there one of my main circles is for people being involved with the web framework "Django". Now, naturally, all these people do not only write about Django all day but also about other things that are important in their lives. While definitely interesting I'm mostly following them because their role in the Django community. For the personal stuff I have the "Friends" circle (these two circles are not mutually exclusive ;-)).

What I'd really love to see is a way to search only within a circle, similar to how you can search within a single domain on Google. Something like: "django circle:Django"

Circle operations

Another but only minor issue for me is that there is no easy way to share something only a withset of people. Think about sharing something with people who help you organize a birthday party for a friends. You can't really share it with "Friends" simply because the person whose birthday part you're organizing is probably also in that circle. Or if I wanted to share something with all the Django developers who are Friends, I'd have to pick them name by name. SET OPERATIONS, PLEASE! :-)

Like "+Friends -Peter" and "+Django AND +Friends".

User Content Policy

Something you can't really get around writing about Google+ is their enormous support for the photo community. People like Thomas Hawk and Trey Ratcliff are probably the best advertising Google can get for their social network. With Brian Rose Google+ even has its own community manager for the photography sub-community.

On the other end of the spectrum you have #10 of the User Content and Conduct Policy:

10. Sexually Explicit Material

Do not distribute content that contains nudity, graphic sex acts, or sexually explicit material. Do not drive traffic to commercial pornography sites.
Your Profile Picture cannot include mature or offensive content. For example, do not use a photo that is a close-up of a person’s buttocks or cleavage.

I totally understand that Google+ is owned by a company that has a reputation to uphold, but #10 is far to restrictive. Sure, it bans porn, but it also bans any kind of nuditiy which is far to broad a term esp. when it comes to photography. In this regard I think 500px's approach with the NSFW flag is far more appropriate where you basically have a setting in your profile that either hides or shows nudity. Google+ also has the advantage of providing a way to share content explicitly with certain groups so they won't end up being public.

If you've read the quote above, you've probably also read the last 2 sentences which handle profile picture, something MG Siegler hit a couple of days ago when his profile picture was removed. I guess using that finger in a profile picture kind of violates the whole "mature" part in #10. Wether or not doing that as a rather public figure in a public profile is a different story, though.

Pages

On the other hand and compared to other folks and the topic above I'm far less skeptical when it comes to the so-called "Brand Pages". When Google+ first launched, there was absolutely no support for companies to promote their content. In fact, every G+ profile had to be associated with a real person. When brand pages finally launched more than a month ago, some people felt quite disappointed. There was not a lot of bling and even less features. Brand pages, once again, could only be associated with a single G+ account which caused some really funny situations.

Back then I immediately created a brand page for our local Python usergroup in Graz which I by now use over Twitter for sharing news and informations with the community. And since mid-December we can also finally have more than one account with write and management access to it :D Right now I'm still the only manager of that page but I hope this will change with our first virtual meetup next week :D I'm personally really curious how the hangouts feature of Google+ will work out for something like a community meetup. There are some rumors that Google is working on allowing more than 10 people to join a hangout as visitors but sadly this didn't made it live in time.

The API

During the #gddde in Berlin this November I attended a presentation by Chris Chabot about what Google has planned for the Google+ API and why it has been rolled out so cautiously. It certainly makes sense to first offer access to the content this is already publically available anyway and then slowly add more features. I also kind of doubt that the lack of an official read/write API has hurt the network so far. The mobile apps right now are quite usable and for site-integrations the public part is a good first step.

That said, I'd be surprised if Google+ was still without a write-API in a year. An iPad client would be nice, too ;-)

OK, and now I'm off to enjoy the awesome Google+ integration of my Galaxy Nexus in the finally snowy Klagenfurt!

"Google+ and me" was written by Horst Gutmann and is licensed for reuse under Creative Commons Attribution-Share Alike 3.0 Austria License.

I’ve seen several phpBB boards over the years that swap out the regular graphic objects for holiday objects at certain times of the year. At phpbb.com they have previously done this for Halloween as well as the year-end holidays. I’ve done the same thing for my biggest board “BOB” by replacing the regular logo:

with one of several holiday logos:

And of course this:

During the American Thanksgiving week we used this:

Over at the phpBB2 Refugees site we’ve swapped our normal refugee tent for one with a more holiday feel for the last several weeks:

Right now this is a manual process, which means I have to remember to edit the php code to invoke the new logo (or alternately use ftp to upload a replacement logo with the same name over the current one). Manual process? for Dave?

I’m setting up a database table with dates and alternate logo names, and will set up a cron job that every night at midnight checks to see if holiday logos are needed for the following day or not. On BOB we rotate among several logos, so there could be more than one logo at any given time. The logo information is then written to a cache file where it will be used for the following 24 hours.

Easy as pie.

Holiday pie.

I read this morning a topic in the MOD Authors forum at phpbb.com where the topic poster was trying to figure out a way to encrypt / decrypt private message text. The technical challenge was easily overcome, as someone posted some code that allows the board owner to do exactly that.

The problem is, it accomplishes nothing.

Private messages are often a hot topic for board owners, probably because of the privacy implications of the name “private” message. As most board owners probably know, private messages are not truly private. Anyone with database access can read the private message text. Anyone with access to a backup SQL dump can do the same. But who has this type of access, and what can be done to prevent it?

Board Owner Access

In many cases, only one person owns and manages a web site that includes a phpBB board. In this case, that person is likely to have the administrator passwords for the phpBB board, the SQL database password, and ftp or even shell access to the server itself. Even if that person does not start out knowing the SQL database password, they can get it easily enough by downloading the config.php file and getting it from there. Now suppose that private messages are encrypted as suggested in the topic listed above. Is the data safe?

No, I’m afraid not. The data in the database is encrypted, but by definition the information has to be able to be unscrambled for the PM recipient to be able to see it. All the board owner has to do is download the php code to obtain the encryption key and then use it to decrypt the data. It turns out it’s not the fact that the data is encrypted or not, because the board owner has access to the data and the tools required to decrypt it. The board owner can still read private messages, it just takes longer.

Encryption Versus Hashing

Passwords are hashed, not encrypted. This means that even though the board owner can see what the hash string is in the field in the database, there is no way to de-hash the data. By definition a hashing algorithm is one-way. But if the private message text is hashed, then there would be no way to get the original text back! That’s why as a board owner I can change a password to something new, but I cannot tell you what your original password was.

The point is, hashing is secure. My password is relatively safe. Encryption by definition has to be reversible, and there is really no way to eliminate all avenues of accessing that information as long as access to the raw data is possible.

It’s About Trust Not Technology

Even in a more complex environment where there is more than one person with access to and permissions to manage a web site there is only so much that can be done to compartmentalize the issue. Someone, at least one person, is going to have access to the server. Even if it takes two or more people (one to get into the database, the other to decrypt the data) private messages are still not so private.

It all comes down to trust. If I don’t want someone to read what I wrote, I don’t write it down. I have to trust that a board administrator is not going to go about reading private messages, or that they’re not going to edit my post to make it look like I’m saying something that I didn’t, or that they’re not going to install a key-logger that captures my password as it’s entered on the login screen, or that they’re not going to try to … well, it goes on from there. Adding encryption to private messages doesn’t fix the issue.

And here’s one more loophole. I mentioned above that password information is hashed and therefore I cannot log in as “you” because I cannot determine your password. But I can do this:

• Log in to the SQL database and retrieve the hash for my password
• Also retrieve the hash for your password and save it
• Update your account so that your hash value is equal to mine. No I “know” your password because it’s the same as mine.
• I log in and do whatever I want to do as “you” because I have effectively stolen your identity
• When done, I reset your password hash back to the original value so you can log in again, and you have no idea that anything has happened

Not very nice, but certainly possible. You just have to trust me not to do these things.

It’s for this and other reasons I have removed the PM feature from the boards that I manage. By removing the illusion of privacy implied by the name “private message” I don’t have to deal with this.

• Yes. Thank you Burnley. Fantastic result. #twitterclarets #
• 4 minutes? Where has that come from? Come on Burnley! #twitterclarets #
• Fucking referees. #twitterclarets #
• I'm having kittens here. Please hold on Burnley. Please. #twitterclarets #
• @mikeparsons11 2-1 up at West Ham #
• Have literally just danced around the house #twitterclarets #
• Come on Burnley. We can do this. Come on! #twitterclarets #
• Clarets Player just gone off here! #twitterclarets #
• Come on Burnley! #twitterclarets #
• Bloody hell. Disappointed with that after doing so well first half to defend. #twitterclarets #
• @dazbentleybfc show him what proper highlights are, send him a link to Clarets Player #twitterclarets #
• Bloody hell Yakubu, don't you know Agent Kean is on a mission? #twitterclarets #
• Happy with that. Keep 'em out and get a cheeky winner? #twitterclarets #
• 0-0 at HT please Burnley #twitterclarets #
• Come on Burnley, defend for your lives #twitterclarets #
• Anybody else apart from me and @adamzander not got Clarets Player commentary? #twitterclarets #
• @dazbentleybfc RT @MarkTheDaemon: What time is Clarets Player kicking off today? All quiet at the moment from where I am? #twitterclarets #
• What time is Clarets Player kicking off today? All quiet at the moment from where I am? #twitterclarets #
• Come on Burnley, couple of quid on at 5/1 for us to win today. I can feel it. #twitterclarets #
• Fair old road trip for #Euro2012 this http://t.co/xSAhuQ3P #
• @SkyBet surprised the odds are that short to be honest… #Euro2012 #
• Back to Eurovision! #Euro2012 #
• We can work with that, life is okay #Euro2012 #
• Group D please #Euro2012 #
• Group of absolute death that #Euro2012 #
• Fuck. Group 4 please. #Euro2012 #
• We do not want Group B #Euro2012 #
• Once more with feeling for the technical explanation anyone? #Euro2012 #
• Nice touch by UEFA that, well done #Euro2012 #
• 'enjoyable and forgettable championship' sounds about right #Euro2012 #
• @HayleyMcQueen might not be finished by 7pm if they keep going like this! #Euro2012 #
• @dazbentleybfc it's so bad it's good. Eurovision 6 months early #Euro2012 #
• This is comedy gold. #Euro2012 #
• This is painful. X Factor is tomorrow night… #Euro2012 #
• @bodenknights @jackcork1 BBC2 as well, Jonathan Pearce is doing a good Wogan Eurovision impression #
• 80p for a beer? Let's go. #Euro2012 #
• Pearce is commentating over this thinking 'bollocks, bollocks, bollocks' #Euro2012 #
• Get on with the draw, none of this FIFA warmup bollocks #Euro2012 #
• @jessyka19 I haven't even got an advent calendar… x #
• http://t.co/07RvTDgK great news for Sunderland if true, O'Neill is a quality manager #
• This basically sums up my views on Clarksongate http://t.co/pQkWThCf #
• £36 a ticket? Robbing bastards. #lufc #twitterclarets #
• @cstanworth86 @AgentKean classic, which CM poster has dreamed that up? #twitterclarets #
• Good to see @OrangeHelpers getting rightly blasted for changing the rules of the game half way through people's contracts. Shame on you. #
• Ipswich like a pub side? Insult to a lot of pub sides that, looks like some abject defending for the goals on SSN #twitterclarets #
• Bit of a tash going for #movember can't wait to get rid of it though http://t.co/E99Hiopk #
• Check this video out — Clarets Player – Bringing the boys to you_Nov 2011.mov http://t.co/qCXXBoDL via @youtube #
• Crap effort by @OrangeHelpers increasing the prices on PAYM contracts when you signed up for one amount. Glad my 2 years is nearly up. #
• http://t.co/SDAw6lU1 Joking aren't you @OrangeHelpers ? I'll be taking my business elsewhere when my contract runs out in a month or so. #
• @Natalie_Bromley stick the heating on! Us poor students can't afford to #
• Fuck off BBC, showing Southampton and West Ham's goals but not ours. Do your job and have a midweek highlights show. #twitterclarets #
• @jessyka19 lol, let me know when you're next in town and we'll have a mini tweetup x #
• @jessyka19 yeh I was, we were near the front on the dancefloor when he was on, then on the seats on the left by the bar, where were you? X #
• @jessyka19 lol, I was pretty pissed last night to be fair. Monday night at Tramps does it to you x #
• Agent Kean doing a star performance. Looking forward to his next game I'm sure. #twitterclarets #
• @jessyka19 bit pissed up last night were you? #
• We want 5. #twitterclarets #
• Super super super super stuff Burnley. Fantastic. #twitterclarets #
• Oh @dazbentleybfc don't jinx our clean sheet aspirations! #twitterclarets #
• Super stuff Burnley, keep it up #twitterclarets #
• Sounds like it's blowing a gale in Burnley tonight #twitterclarets #
• Jay/Burnley First Goal Wincast at 7/1. Come on Burnley! #twitterclarets #
• Waking up with Andre… scary RT @dazbentleybfc: A little Freeview video treat from Clarets Player
  http://t.co/xo2HP3uY #twitterclarets #
• @Drudgey sorry, didn't mean to have a go at you earlier, just whoever posted it on YouTube I don't agree with. Hope you're okay x #
• Budweiser is horrible. Even worse when it's at room temp… Eugh. #
• @Drudgey have a good time, we've got another one of the Z Factor rejects coming tonight to sing 2 songs at about 01.45 tomorrow morning #
• Hate to disappoint but RT @TurfmoorJo: @MarkTheDaemon – I love Norad.. Me & my 23 year old son stay up tracking him x-mass Eve.. Excited! #
• @Drudgey same, especially after seeing him on Football Focus Saturday morning. Was completely fine and totally happy, no idea what changed #
• Darts then a cheeky night out? Sounds like a plan to me. #
• @Drudgey just can't see why someone would go "I know, I'll post this on YT" after seeing a man clearly distraught and in bits on the telly? #
• @Drudgey heartbreaking enough for someone to post it on YT? Sure the lad is able to grieve in private, dont agree with it being uploaded imo #
• Incredibly moving 606 tonight, @RobbieSavage8 was in tears at the end. #RIPGarySpeed #
• Balotelli you utter twat. Spoiling my fantasy team by being a total knob. #
• @MaryLNaylor should relight automatically, if it isn't there might be an ignition button – check to see if there is power + gas going to it #
• Shocked. #RIPGarySpeed #

• Install imageMagick
  
• Run this command
  

  Code:

  mogrify -format png *.tif

  
  

James Gilmore Jr. himself was deceased nearly 11 years ago. But his company, Gilmore Enterprises lived on -- until today, when the sale of its final major asset closed.

It seemed to me like this was a good time to look back at a man who had fingers in many industries. By the time he was fifty-one, Gilmore had won a term as mayor of Kalamazoo, MI, purchased a string of car dealerships, operated numerous broadcasting outfits, helped run a family department store, and taken an Indianapolis 500 championship.

I begin with the division of Gilmore Enterprises that lasted the longest. The company purchased five TV stations, nine AM/FM broadcasters, and dozens of cable systems from its beginnings in the early 60s. The broadcasting business, though, was wound down relatively quickly, selling off its assets one at a time through the 80s and 90s. With one exception. WEHT in Evansville/Henderson was the second acquisition of Gilmore Broadcasting, having been purchased in 1964. (KODE was the first; the two will very soon be reunited under Nexstar ownership.) Gilmore was responsible for moving the allocation from channel 50 to channel 25 and erecting the taller tower now seen on Marywood Drive in Henderson. It was by far the longest holding for Gilmore Enterprises, 47 years. In all frankness, the ownership of WEHT wasn't all that distinguished in the final decade or two. Viewers have often complained about the news set, which has remained the same since the Great Affiliation Swaps 16 years ago. It is rumored that much of the back-room equipment is similarly dated.

It is this division which is effectively winding down today. I'd like to take a moment to look at the other operations of Gilmore Enterprises through the years.

The department store was run by James's uncle Irving for the majority of his life. It is suggested that James helped clerk at the store, although I suspect he played a larger role than is suggested. Gilmore Brothers' Department Store operated continuously for 114 years in downtown Kalamazoo, but the final 15 years were outside the auspices of the Gilmore family, after Irving Gilmore's death.

The automobile dealerships were centered in Kalamazoo, although the company expanded across the country. Gilmore operated Gilmore Cadillac-Pontiac in Kalamazoo for decades. In 1989, he purchased Anthony Abraham Chevrolet in Miami from its namesake, briefly owning what was billed as "the largest Chevy dealer in the US" at the time. The Florida business was sold to AutoNation in the 90s, and it is not clear to me what happened to the Michigan branch.

(An aside: Gilmore continued to fly a large American flag outside Abraham Chevrolet, not unlike the one that flies to this day outside the studio of WEHT. It would be interesting to see if this was true elsewhere.)

Gilmore ran for two political offices in his life. He won the mayorship of Kalamazoo in the 1958 election, serving a two year term. That term appears to have been fairly unremarkable. He returned to private life and his communications business in 1961. Gilmore was brought back by the Republican Party to run for Congress in 1981, when he was soundly defeated by incumbent congressman Howard Wolpe.

Now, for the achievement that gave Gilmore his greatest national attention: auto racing. According to the Gilmore biography that was presented when he joined the Michigan Motorsports Hall of Fame, Gilmore saw his first Indianapolis 500 Mile Race in 1966 on an invitation from Citibank. He became enamored with the sport and sponsored his first race car in 1967. Early on Gilmore sponsored some relatively unknown drivers. Late in 1973, a much more famous driver was found, one who would continue racing for many more years: A. J. Foyt himself. Foyt drove for Gilmore Enterprises from 1974 until his retirement as a driver in the early 90s. He won his final Indy 500 as a driver in 1977. It was the only 500 win for Gilmore Enterprises. After retiring, Foyt went on to purchase the racing arm of Gilmore Enterprises, and the business lives on as A. J. Foyt Enterprises, with entries in all the major racing series and some success to show, particularly in IndyCar.

The personal relationship with between Gilmore and Foyt lasted until Gilmore's death, and allowed Gilmore influence in other places. For example, a recent auto auction brought forth the custom Chevrolet Corvette that Gilmore had ordered in 1984. Only one other like it exists, and it is owned by A. J. Foyt.

James S. Gilmore Jr. passed away on December 31, 2000 in an automobile accident.

Photo Credits: Gilmore Portrait: Michigan Motorsports Hall of Fame; WEHT Logo: Gilmore Enterprises; Gilmore/Foyt Photo: Michigan Motorsports Hall of Fame

• Stunned. We actually won. #twitterclarets #
• Just seen the second goal on SSN again – who the hell was supposed to be tracking the runner? #twitterclarets #
• What a shite game of football that was. Give up with Burnley sometimes. #twitterclarets #
• Not at all convinced about tonight, could be a miserable night in Birmingham. Hope not though #twitterclarets #fb #
• Kean has actually signed a new contract? Confirmed? Fantastic news if true, he's the man for the job #
• @jessyka19 snob! Don't you remember being at uni and not having any money? Iceland is cheap x #

Last weekend I had once again the chance to participate in a Google Developer Day event. While last year's event took place in Munich and had about 1000 attendees, this year's was twice as big with more than 2000 guests. Organized by the local GTUG and Google the event was a great opportunity to learn about new tools provided by Google but also to get a chance to chat face to face with the people behind them.

This year's GDDDE had roughly 5 thematic tracks: Android, Chrome & HTML5, Cloud, Google+ as well as a track dedicated to sessions by two universities in Berlin and Brandenburg. Given that I still don't have an Android device (although they are getting more and more tempting with ICS) I only attended the Chrome, Cloud and Google+ tracks.

To be specific, I attended following talks:

• "Making Your Web Apps Accessible Using HTML5 and ChromeVox" by Mark West (more on that later)
• "Using the Google+ APIs" where +Chris Chabot gave a quick rundown of Google's strategy regarding providing APIs to Google+ step by step
• "Building Integrated Applications on Google's Cloud Technologies" by +Michael Manoochehri mostly about the prediction API in GAE
• "Privacy-related APIs for Google Chrome Extensions" by +Dominic Battre, +Bernhard Bauer and +Pam G where they gave an introduction of some of the extension APIs (like proxy and content settings) currently in the pipeline for Chrome
• "V8 Performance Tuning Tricks" by +Daniel Clifford
• and last but not least "DevTools Tips and Tricks" by +Ido Green

Mariusz Kaczmarek made a nice collection of the slides where available on Google+.

I also wanted to learn more about how Google plans to integrate Go into GAE but, sadly, that talk was cancelled - which was ironically also one of my highlights of the event due to how it was cancelled, which I wrote about on Google+:

Google is looking for their speaker on "Go on App Engine" at #GDDDE. I have to admit, getting stuck at these nice buffets all over the building is pretty easy :-)

Update: LOL, speaker is in Australia right now :D

All the talks were great: well prepared, interesting and highly entertaining. If I had to choose one of these I'd probably go with the very first one about accessibility features for the best talk of the day. It was just great seeing +Mark West explain accessibility issues in the markup right via ChromeVox.

Once again an awesome event which once again killed my todo list (not that it has even remotely recovered since the last conference) :-) A big "thank you" to all the organizers and everyone who made this nice weekend possible :-)

Python Usergroup Berlin

On Thursay before the GDD there was also a meetup of the Python Usergroup Berlin (PUB) where Wesley Chun from Google gave a couple of talks about various topics from things like writing books with OSS to "Python in the Medical Industry". A big thank you to the folks behind this usergroup to organize the meetup.

Sight Seeing

Since I had a bit of time before these two events I also went for a little sight seeing tour through Berlin. Sadly the weather didn't really play nice so the light wasn't really helping when taking some pictures. If you still want to see them, you can find them here :-)

"Google Developer Day 2011 in Berlin" was written by Horst Gutmann and is licensed for reuse under Creative Commons Attribution-Share Alike 3.0 Austria License.

Just minutes ago, Mark McVicar said farewell for the final time on the NEWS 25 Sports Channel. As reported by Jacob Newkirk over the last few weeks, McVicar is among those losing their job shortly as Nexstar takes over operation of WEHT December 1, and today's Mater Dei/Guerin Catholic game was the final scheduled local broadcast before the channel shuts down.

During my time in college, I was able to work with several current and former staffers of the NEWS 25 Sports Channel, from McVicar himself to some of the producers, statisticians and camera operators.

I would take the opportunity to work with any of them again if it arose, and I hope everyone lands a position quickly.

• Bloody Marriner making a name for himself and giving bastards a pen in the last minute. Typical. #
• Anything we can do, bastards can do better? 3-2. Agent Kean strikes again! #twitterclarets #
• @TurfmoorJo Jay #
• @dazbentleybfc do we know if it is the same shoulder as before Daz? #twitterclarets #
• Bastards managed to lose their lead already, that's cheered me up slightly #
• And now bastards are winning. Can this day get any worse? #
• Genuinely fucked off with that last 25 minutes. Crap. #twitterclarets #
• Fucking sloppy, useless, wank defending has cost us yet again. #twitterclarets #
• Very nearly just put my fist through the kitchen worktop. #twitterclarets #
• Penalty all day long. But Grant should have been sent off first half so just about evens? #twitterclarets #
• Grant just handled outside of his area clear as day… #twitterclarets #
• BBC just confirmed a dislocated shoulder for Austin. Terrible news. #twitterclarets #
• Is that the same shoulder as he dislocated before? Looks a serious injury, poor lad was in tears #twitterclarets #
• Out of the loop, what is going on with Paul Fletcher? #twitterclarets #
• Absolute classic, one for the #twitterclarets — Steve Kean is… An Idiot Aboard http://t.co/3MFueSuP via @youtube #
• Little bit of Sit & Go before bed I think #
• Covered a housemates door in tin foil so he can't get in or out. Standard. #
• Sepp, you're a massive twat. Of course there is racism in football, just because the vast majority of it doesn't get reported… #
• Pre drinking with the #crcsocial #
• @Grimdog5 welcome to twitter! #
• Finally in the money in this tourney, been a two hour slog though #
• What happened to iOS5 delta updates? Another ~700MiB download for the iPad 2 iOS 5.0.1update… #
• @jessyka19 camp bed? Is there anything else worse in the world? Even less sleep than usual for you tonight x #
• Came very second in the darts tonight… #

The following is a survey conducted on the web by the University of Evansville campus magazine, the Crescent:

Almost 75% of respondents say that you must have an internship experience to be employable. I don't like that idea, but I understand a competitive job market in many industries can force students to become student-interns, or (worse) student-unpaid-interns

It seems to be a commonly accepted fact outside of Evansville. There are a number of universities where 60% or more of graduates held internships at one point. The linked USA Today article covers the main ground that is relevant here, but there's one more thing I don't understand:

Why do colleges charge full tuition prices for internship hours? It costs the school approximately nothing to administer an internship. Not a minute of faculty time is spent on internships (unless the internship is within an academic department). The clerks who do the processing are paid at a much lower rate than faculty, and probably only spend a few minutes on each student-intern.

What service does the university provide that's worth somewhere between $300 and $2500 (depending on your school's tuition prices and guidelines)?

• I am so pissed off right now it's incredible. #
• Love The Jury on ITV1, hate the ad breaks… #
• Tempted to play a bit of late night poker before bed #
• @JamboTheJourno sure you've paid the bill? #
• @jessyka19 flat pack doesn't respond well to the hammer technique x #
• 3-1. Against Bristol City. Really? #twitterclarets #
• Finished. Home time. #

One of the biggest complaints I’ve had with running my boards on phpBB2 is that the javascript used for BBCode and smilies insertion during the posting process offers poor (if any) support for modern browsers. Rather than reinvent the wheel, I spent some time to port parts of the subSilver2 template from phpBB3 back to phpBB2. While testing is not completely done, it seems to have been a success. I copied editor.js straight out; I don’t think I made any changes to that file but I will go back and verify that before I post a MOD. There were some minor changes made to posting_body.tpl and posting_smilies.tpl to call the new functions. For example in phpBB2 to insert a smilie we called the emoticon() function and now it’s calling insert_text() just like the BBCode insertion process.

I used the same function to update my canned messages MOD as well.

Oh, and I updated the color picker just a bit. The original color picker used values of 00, 40, 80, and two more to create an array of colors that was 5×5x5. I changed it to the old “Netscape Safe” color palette and used 00, 33, 66, 99, CC, and FF and created a 6×6x6 grid instead.

I have the new posting form activated on two different boards for the moment. As long as I don’t find too many issues I will write it up as a MOD.

• I'm at Lyberry (Portsmouth) http://t.co/fxUjerXN #
• Sending out a search party for my drink…. #
• @jessyka19 let me know when you're in town, there's a pretty good chance I'll be out at the same time! x #
• @jessyka19 you tearing Worcester up tonight then? x #
• I'm at Yates (Portsmouth) http://t.co/g0Dnfn1w #
• @MaryLNaylor sausage x #
• Cheeky night out in Portsmouth seeing as I'm in the area? Don't mind if I do, let the good times roll #
• @jessyka19 Worcester ftw x #
• @OptaJoe can't claim that as Rooney's goal, surely? Is there a CL dubious goals committee? #
• Final tweet of the night should go to @billysharp10 the ultimate professional. Thoughts to you and your family at this difficult time. #
• Bloody nippy out there tonight, winter certainly on its way #
• ALL ABOARD THE GENK BUS! #
• So which Burnley have turned up tonight? #twitterclarets #
• @Drudgey yes, gimme money please http://t.co/L9q8PUY6 x #
• Two desperately poor products as well, regardless of pitching ability/skills #apprentice #
• Just watched Young Appentice, two words. Pretty poor. Very ordinary candidates all round, nobody stood out as impressive in the least #
• @Josh_Hodkinson don't say that, we need him to last until at least the new year, if not after for the mission to be a success #
• @FlandersClaret you should have a DM #
• @FlandersClaret can't seem to drop you a DM, if you follow me I'll send you my address, cheers #
• @FlandersClaret not at he moment, keep meaning to join up though #twitterclarets #
• Knackered, good to be back in me bed at home. #
• @Drudgey '10 crouches and 2 keepers wouldn't have kept it out' according to sky. Told you it was your loss missing a quality game x #
• @Drudgey where is the burnley match report eh? we won 3-1, should be extended highlights on FL show tonight x #

As I was working through some code last night I found another “in progress” MOD that I wanted to add to the list of MODs in progress that I published yesterday. Over the years I’ve seen cases where someone from the other side of the planet has a dicey Internet connection and they end up submitting the same post twice because their browser submit times out. Or someone might post the same question in more than one forum, thinking that they’ll get more attention. Or a spammer might hit multiple forums with the same post multiple times.

I think I’ve managed to come up with something that definitely helps solve the first two scenarios and as a bonus helps the spammer problem as well. I call this my “Cross Post / Double Post” MOD, and it’s being tested on my beta board now.

The MOD design has so far turned out to be fairly simple. I tie into the flood control process and retrieve the post text for the last three posts by the user. From there I take the current post text and compare it to the prior posts. The first check is a straight equality check, meaning I check for the exact same post text. This will catch the “copy/paste” folks with very little overhead. If the post text is not identical, then next I use a function called similar_text(). (similar text reference at php.net) This function takes three arguments. The first two are the two strings to compare, and the third is a variable to store the results of the comparison, which is a number from 0 to 100. The result code should essentially be treated as a percentage. If the two posts are 95% similar then I check to see if the original post already in the database is in the same forum as the new post being attempted. If the forums are the same, then a “Double post” exception is triggered. If the forums are different, then a “Cross post” exception is triggered instead.

The number of posts (3) and percentage of similarity (95) are both controlled via the board configuration screen, so it’s quite flexible. Setting the percentage threshold to zero (0) is the same as turning the comparison process off.

This MOD is being tested on my “beta release” board right now. The first version of the MOD did not use the similar_text() function mentioned above. I attempted to use the soundex() function instead. However it seemed that the soundex() function did not look at enough text, so posts that were clearly different were still being reported as being the same. Switching functions solved that issue.

I’m now wondering if I need to deal with setting different threshold values for different forums. I hate to do that, as it drastically increases the complexity of the code. But for example there are many forum “games” that people play in an “off topic” type of forum. Some of those games look very repetitive, and would potentially trigger the CP/DP exception handling. Then again, the current logic looks across all forums, so as long as the person is active in more areas than just the off-topic games area it might be okay. I don’t want this feature to get in the way of normal use, but I do want to help out the moderator team by capturing / rejecting double post and cross post events.

Stay tuned for details as we start user testing this week.

What has Dave been working on lately? Not blog posts, obviously. Here are the headlines…

1. Full-Text Search
   I created a full-text index on the post subject and text over a year ago to see if maintaining that index would cause any performance issues. I’m happy to say that I have not seen any challenges from inserts / updates with this index in place. I’m going to be altering the search screen to allow the full syntax offered by MySQL on this type of index and hope to release that in a few months. Some of the challenges I have not yet decided how to solve are things like limiting forums – either by security or user preference – and other criteria that can be entered on the standard search screen.
2. Capture Post Revisions
   I’ve also added some code to capture post revisions. We’ve had a couple of folks that come back to our board and edit their post, removing all of the text and leaving only something like “…” instead. This destroys the continuity of the topic, and as a result we’re going to now track post revisions by capturing the post text history. If needed a moderator will be able to review and then restore a prior post, and ultimately lock that post from further editing. As with the full text search I have done fairly extensive testing on how this is implemented in order to ensure that performance does not suffer, and I’ll have a few blog posts about that process. This MOD is completed and I expect to roll it out onto the main board in a few weeks. (FWIW, I first talked about this post several years ago, and am just now finally getting it completed.)
3. Moderator Posts
   I’ve added a new field to the post table that allows a moderator to designate whether it’s a moderator post or a user post. For example, moderators can certainly participate in a normal board conversation as a regular person. But they may also add posts in their role as a moderator. This new feature will format those posts differently so they stand out, will automatically remove the “personal” aspects of a post such as signatures, and does not increment a moderator post count for this type of post. It is intended to be a way for moderators to be able to separate out their moderator posts from their board participation posts. This MOD is also completed and expected to be released shortly.
4. Including External Content
   I’ve added some cron jobs that parse RSS feeds from several blogs owned by board members. Their blog posts are automatically set up as part of their signature (as “Latest Blog Posts”) and updated once an hour. For bloggers that our community wants to recognize, this is a great way for them to get additional exposure without having to manually update their signature every time they publish a new blog post. This part of the MOD is already in use on our board. Only board admins can currently enter blogger information, as we want to go through a review process and certify blogs rather than allowing just anybody to link to an external site. This was done by altering the administrator user edit form and leaving the regular user profile form alone.

   As an extension to this, I’m also pulling in the content from the blog post and storing that in a hidden forum. As the blog posts are added to the forum they are obviously added to the full-text index because they’re part of the same table. I am also adding these posts to the standard phpBB2 search tables at the same time. That way if someone searches for term “X” and that’s found in an external blog post, they’ll see a link in their search results. The blog address is stored on the topic table and a different icon is used to show the user that they’re leaving our board and heading to an external site. I have all of the main work done; the last requirement is altering search.php so that it offers the ability to include / exclude external content and then react to that setting accordingly. I hope to get this completed in the next few weeks.

5. Social Media Profile Links
   I’ve added Facebook, Twitter, and LinkedIn fields to user profiles. These are displayed along with the other profile links, using smaller 18×18 pixel logos. I’m planning on going back and redoing the other profile links to use the same form factor but that part hasn’t been done yet. Here are the images I’ve made, using logos or other material provided by each service provider.

One thing that many of these MODs have in common is my concern for performance. We’re over 750K posts now, and still running extremely well on a server that is hosting several dozen sites, although none of them as active as our big board. Every time I touch the code performance is a primary goal. Another MOD that I’ve been planning is to port the phpBB3 posting form back to phpBB2 since it does a better job of supporting modern browsers as well as proving some additional formatting features. I haven’t even started on that yet, but I think it would be good. Now that I’ve personally switched to Chrome as my standard browser I’m noticing some interesting quirks.

So that’s what I’ve been up to for the past few months.

• Great performance though, everyone must be happy with that result. UTC! #twitterclarets #
• Really bloody annoyed at not keeping a clean sheet #twitterclarets #
• Let's get a clean sheet, come on lads #twitterclarets #
• Time to go, time to go… 3-0 #twitterclarets #
• Dirty bastard, should be straight off #
• @Drudgey seriously? Your loss #justsaying #
• Wallace tells Bikey to fuck off before planting it in the top corner. Quality. #twitterclarets #
• @Drudgey you watching the Burnley game? STUNNING free kick by Wallace #
• Beautiful ball into the box, fantastic effort 1-0 #twitterclarets #
• @MBrundleF1 commentary box without a window is worth a mention! #
• Pissing it down in Burnley I see, nothing changes #
• Bloody good effort Agent Kean, you've done us proud #twitterclarets #
• YESSSSSSSS GET IN THERE NORWICH! #
• Least Preston are tanking, 3-1 now #
• Bloody hell Norwich #
• Happy days RT @Josh_Hodkinson: Another unhappy day for Judas haha. #
• Oh Owen, how you've let yourself go. Conceding pens now. #
• Fucking bastards, come on Norwich, sort yourselves out #twitterclarets #
• Unbelievable Jeff! #
• Fantastic. Just fantastic. Arsenal 5-3 Chelsea #
• Best game I've seen for quite a while #
• 3-3. Time for a winner? #
• Gary Neville is genuinely pissed off at the qualify of defending in this game. Love it. 2-2. #
• @Fletchian66 and then when he does score, it's offside. Can't win can you? #
• How many great chances have gone amiss in this game already? #
• Even more annoyed we didn't win on Tuesday now, would have had bastards at home #twitterclarets #
• @Drudgey early kick off isn't it? Anybody would think it was a derby. Still, the United 'fans' have a long drive home south I suppose #
• @jessyka19 lol, where are you working? X #
• Second string City side tearing Wolves apart here #CarlingCup #
• Hate football at times. #twitterclarets #
• Deliberate typo? http://t.co/hX1Deyt6 #
• Is it time to be depressed yet? #twitterclarets #
• Loftus Road? That was Chelsea, who is this prat they've got presenting tonight? Bring back Jeff. #
• Would love Aldershot to go 1-0 up tonight #
• @Drudgey you know what I mean! Christ, never happy unless you're ripping me to shreds are you? #
• @Drudgey it was meant in a "she's that loyal and will still be supporting them when she's 80" way, and you know it #
• BBC – Paul Fletcher: From Clapton to Manchester United http://t.co/LENTHsqi #
• @Drudgey You in 50 years time http://t.co/gMn0A4Qi in a red shirt obviously #
• Any #twitterclarets going to Cardiff tonight? #
• He's a comic genius – Mario Balotelli becomes Manchester's ambassador for fireworks safety http://t.co/ZVBQqF6w via @guardian #
• Can't wait for Football Weekly after the United scoreline yesterday #
• @Football_Agent9 550/1 according to @SkyBet #
• Haha this is quality. United must be sick as pigs #
• United outclassed today #
• @jessyka19 post em on twitter? #
• Christ, it's been an awful week in motorsport generally. Can't believe the news about Simoncelli #
• I expect Clarets Mad are predicting a top two finish for us now? #twitterclarets #

• Been up for 27 hours. Knackered. Going to bed. #
• Wolves v Swansea… Could I be less excited about that fixture. Going for under 2.5 goals in that game #
• Always the hardest part of the night is the 01:00-05:00 bit of the shift, even with two Red Bulls and a Tesco sandwich to keep you going #
• @jessyka19 you aren't supposed to scare the customers you know #
• @Natalie_Bromley don't leave us hanging, what was intriguing about him? #
• Pleased to have won the #twitterclarets #capcomp last night, good start to Friday morning #
• He had that catch as well, bloody England #IndvEng #
• @Paul__Fletcher Burnley were one of them according to @dazbentleybfc #twitterclarets #
• Hope we voted against… RT @OliverKayTimes: Only 46 of the 72 Football League clubs voted in favour of EPPP according to @MirrorFootball #
• Dart board up, got to get some practice in now… http://t.co/6pEwhlVF #
• @dazbentleybfc Charlie advises Chris to think about certain posters on message boards when throwing for motivation #capcomp #twitterclarets #
• Having a quick browse of Clarets Mad… Terrible idea. 114 posts on the 'Howe out' thread says it all… #twitterclarets #
• Bloody freezing this morning, need to stick the heating on I think. Very un student thing to do. #
• Massively pissed off with Burnley at the moment #twitterclarets #
• Burnley not turned up again? #twitterclarets #
• Loving Twitter on the iPad, big keyboard makes all the difference compared to the iPhone #
• @kyle_eaton19 iPad only arrived this morning #
• iOS 5 upgrade taking _ages_ #
• England back on form in the cricket I see #
• @Drudgey Something to interest you perhaps? http://t.co/tMAEQEGr #
• Fantastic news RT @dazbentleybfc: BREAKING: Jimmy McIlroy to become next Burnley FC President
  http://t.co/BETZ4y9u #twitterclarets #
• @nickbinns he was busy with a camera last night as well, 200 photos #
• Wow Facebook, what's with all the bloody emails? http://t.co/3IDO9pur #fb #
• Chicken Farmers, bottom of the table. Happy days, I'll sleep sound tonight #twitterclarets #

• Fantasy team this week has been a complete disaster as well. Going to have to get completely pissed tonight to forget about it all #
• @MaryLNaylor ah well, how was the game apart from that? I thought we'd turned a corner with that decent effort against Saints and Forest #
• Shouldn't laugh like but this is the best explanation I've had RT @MaryLNaylor: @MarkTheDaemon because grant nearly killed a bloke #
• And, why were we playing 10 fucking minutes of added time? #twitterclarets #
• @adamzander me@markbarnes.org will do #
• Glad I didn't travel to go and watch today's game if I'm honest #twitterclarets #
• @adamzander can you drop me an email with the details, can't find the fb message you sent #
• Scrappy as fuck, get Rooney on #
• Crap first half that, nearly falling asleep #
• EJ can't get a visa for Korea? #bbcf1 #
• @Drudgey what's it like legally mugging Chelsea fans in their own stadium? Don't forget to put all the takings in the till either… #
• @Drudgey big game tomorrow, what's your prediction? I'll be sat in front of my Sky+HD box watching it #
• @Drudgey You mean you only scored one? #formistemporaryclassispermanent #
• Picked up Senna on DVD at Tesco tonight, amazing documentary. #
• Love a bit of Shameless #
• Watching a Spanish masterclass on BBC2 #
• I do love the Harry / Ruth storyline in Spooks, they should run away and be happy together in the finale #fb #
• My under 2.5 isn't looking super clever for this game… #
• Hartlepool are absolute shite in this game #
• @Natalie_Bromley what are you doing working on a Sunday? Day off Brommers, it's the Lords day #
• @adamzander yeah, was on the piss last night so haven't done anything yet, will sort it out tomorrow #
• Hoping for under 2.5 goals in this game, don't let me down #
• Clarke back on the telly for Sky #twitterclarets #
• Great night out, good to be reunited with the old foresters on a night out again #

• God I love Sky+. How did we ever live without it? #fb #
• @jessyka19 moaning about people moaning? x #
• Useless useless Rooney #
• Beers in, bets on, ready for a good England performance. 80/1 for Eng 5-0 #eng #fb #
• http://t.co/wVXNMsa2 "It's a good place to like get your bus" It's a bus station you bloody idiot #goodoldpreston #twitterclarets #
• #fm2012 demo downloading now. Happy days. #
• Sky Sports – £40. Installation – free. Getting Sky Sports in the uni house – priceless. Good day. #fb #
• Mega work by the Sky lads, installed and ready to go in less than an hour #fb #
• Fucking hell, Steve Jobs is dead? #
• @GirlOnATerrace did you buy the shop as well? Thought it was impossible to spend that much in there #
• @Josh_Hodkinson @Jenni_BFC christ, serious then. Hope the lad is okay #
• @jessyka19 you have a hot tub? x #
• Anybody know what actually happened to Tom Bender at Accy? Sounds serious if the game has been abandoned #
• I can sum up the next hour of tweets with the following 'ZOMGGGG IPHONE4S!!!1!1one!!!' #
• @jamesbird result, love it when that happens #
• LOL. That is all. RT @AndyDean87: Brian Laws is the favourite for the NFFC job. That would be a truly dreadful appointment #twitterclarets #
• Pics or… Actually don't bother RT @Natalie_Bromley: Pensioners protesting outside my office in their pants. I am genuinely speechless … #
• Uni would be great if it wasn't for the lectures #tooearly #
• Morning tweeps, how is the world treating you all today? #
• Wanna go to bed #nightshift #tired #
• @TurfmoorJo probably out looking for a mad runner at 2.30 in the morning #
• And so the long night begins… #
• Martin Atkinson sounds like a walking disaster area today, will have to catch highlights when I get home #motd #

• @nickbinns not staying up for our 30 seconds on the FL show? #twitterclarets #
• Agent Kean doing fantastic work at Bastards, long may this fine run of form continue #twitterclarets #fb #
• If I had a quid for every time someone has said 'You here all night?' … #
• Still, working on a Saturday does have some benefits, like missing the latest instalment of #zfactor #
• 24 hour race meet, going to be a long night with the public. Roll on 7am #
• Cort on international duty? It's not April 1st, come on #twitterclarets #
• Good to see Martin O'Neil doing some punditry for ITV, really rate him as a manager #
• @jtindall1977 if we win like that every week I'll pay for their tickets! Great effort tonight from all the lads #twitterclarets #
• Tevez being a twat? And yet people are still surprised? Why? #
• Got home, still can't believe that result. What an amazing first half, if that's a sign of things to come it's fantastic #twitterclarets #
• Well well well. Can you believe it. 5-1. #twitterclarets #fb #
• Can't believe my eyes. 3-0 up. What's going on here? #twitterclarets #fb #
• Nothing else in the world like a Burnley home game under lights. Can't beat it. I'm going for a 2-0 win #twitterclarets #
• Worshipping at my church again. Win is due tonight, 2-0 (@ Turf Moor for Nottingham Forest vs. Burnley) http://t.co/PCJ1ZvT4 #
• @MsGaynorBoult best place to be, we don't bite you know #
• Bit cynical by the tories to get someone to cut the power at the Labour conference during the leader's speech #
• Bloody freshers flu, everyones got it #

This evening the National Weather Service issued a Tornado Warning for a remote portion of the Evansville television market with approximately 8,000 people and a population density of 30 per square mile. The weather service warned for the possibility of a weak tornado, surely an EF0.

Two of the television stations in the market have the blanket policy that "whenever a tornado warning is issued for our DMA, we will carry continuous coverage."

Combine that with one of those two television stations carrying the Colts/Steelers game when that tornado warning is issued, and the first reaction is to look at the competition: if they don't cut in, we won't either and just hope nothing happens.

When that fails, it doesn't take long for some folks to be upset.

After about five minutes of a fill-in meteorologist fumbling, not knowing what to say other than explain how unlikely it is that there is anything damaging actually happening in a remote corner of the DMA and that he'd rather be watching football too. Meanwhile, the staff in the the control room rigs this up:

Let's back off for a moment and look at the big picture: who benefits from policies like this? Is it the public, or is it only insurance that the media outlets, who make big money on weather coverage, don't get egg on their face by missing even the tiniest event?

I'm not suggesting that these decisions be made based solely on what programming is on the air. I'm suggesting that a decision to insert a 60 second bulletin could have been made because of the lack of severity in this situation. Perhaps, in those 60 seconds, folks could have been directed to watch the competing station for full coverage.