Drupal Camp Victoria next Weekend

Drupal Camp Victoria LogoDrupal Camp Victoria is happening all day Friday and Saturday Sept 5th and 6th. It’s hosted by North Studio at their training center, 301-771 Vernon Ave (plaza just coming into Victoria, near Save-On-Foods, Walmart).

It’s a free event, and if you work is any way related to the web, you will be missing out if you don’t attend. Register now before the event is full.

Besides, we need to support the grass roots Victoria tech scene — stop the Vancouver tech drain ;-)

Dave Olson points out that it’s “strategically scheduled for the same weekend as The Great Canadian Beer Festival”. So it seems safe to expect a good turnout from Drucouver. I know Boris Mann will be in attendance, and participating.

I hope to at least make an appearance. I’ll be looking for opportunies for WordPress collaboration. But me making it there is based on the whim of my baby son — and I won’t have it any other way.

Broken WordPress Plugin or Theme, Blame Me

WordPress community superstar and regular web tools collection contributor Jeff Chandler (jeffr0) recently published a passionate article, “Stop Blaming The WordPress Team“. The article is about plugin developers blaming WordPress for too frequent updates without testing of popular plugins. His conclusion ends “So the next time you upgrade WordPress and realize your favorite plugin is broke, don’t blame the WordPress team, blame the source.” There are almost 200 comments on the article, and reading through them I imagine almost all perspectives are represented.

My hope is you don’t blame anyone. Maybe, it’s the core WordPress developers fault, maybe it’s the plugin or theme’s author, but that matters much less than everyone involved staying positively pumped.

The worse possible outcome is plugin developer and theme designer exhaustion. These people are as much the WordPress team as anyone is!

Thank contributors. For many that is all the compensation they are looking for, but don’t berate the contributor that is looking for more.

The blame game doesn’t help. Instead, if the plugins or themes you use are a gift to you (free), blog about, comment on forums, write the authors directly thanking them for the work that you miss because it isn’t working with the newest version of WordPress. Why wait till there is a problem, thank them today.

If you really need to blame someone, blame me. I can take it.

Canadian Moose Spotted in Beijing

For years when people ask if I have any siblings, I’ve said, “Yes, I have a brother. He looks like me, but is a taller, strong version. A real Canadian Moose.” And I’d raise my shoulders and pretend to flex.

My brother living in Beijing was described in a Metro News article as “[sporting] a tall frame and sandy brown hair.” The article quotes his advice of tolerance:

“People yelling “hello” at you, asking to take their picture with you, staring, or commenting on the sharpness of your nose — they don’t mean any harm by it,” he said good naturedly.

The TypePad Trap

So during my talk “Switching to WordPress Painlessly” at WordCamp, (video coming soon!) Six Apart’s Open Platforms Tech Lead David Recordon was in the audience and rather than have a chat with me at any one of the numerous times we passed during the day, he made this cute tweat instead:

TypePad's API is AtomPub, an IETF standard, which includes all the URLs for your posts; despite what Lloyd Budd just said. #WordCamp

There are a couple of things immediately apparent from David’s tweat:

  1. He has never exported a blog from TypePad
  2. He has never written a blog exporter using AtomPub

Never exported a blog from TypePad

I know this because I’ve done numerous TypePad exports and also working through my customers trying to get support from Six Apart in the export. For most TypePad blogs, it’s impossible to truly export the blog. Six Apart provides no tools or documentation on how to export in a way that preserves the permalinks, and because of a bug in TypePad and an unpublished permalink creation rules that have changed over the years, it guarantees a tedious, manual process to truly export the blog.

About a year ago, I approached members of the Six Apart leadership team in the hopes that they would commit to fix this issue. I was really nice back then and the whole time until recently. Now, I’ve concluded they were playing games.

Six Apart CEO Christopher Alden’s even promised “A Bright New TypePad in 2008“, “TypePad is the only blogging service that gives you complete ownership of your blog”. Appreciate the humor of that? You are trapped on TypePad.

Chris, and all the leadership team will wave their hands, “AtomPub is the answer.”

Never written a blog exporter using AtomPub

Having tried to guide Ronald Heft Jr in creating AtomPub exporters for TypePad and Movable Type, my only conclusion is that no member of Six Apart has written a blog exporter using AtomPub.

Six Apart VP Anil Dash likes to brag about them having helped create Atom and AtomPub. An exporter would have been one of the perfect real world applications to create as part of the creation of the specification. And wouldn’t you think if they were going to tell everyone that is the solution to exporting from TypePad that they would have built such an exporter? They couldn’t have because you can’t without hacking around AtomPub, a lot, which is what Ronald has done.

Then as we had it working, hacks and all, this past weekend, TypePad changed it, fixing one aspect of their AtomPub (drafts are identified), changing a few things that we can adjust to (changed the URL endpoints, switched to MT tag names for consistentency), but also breaking our importer:

  • Can no longer retrieve comments on posts.
  • No longer contains Pages.
  • XML-RPC for trackback retrieval broke.

These issues have been reported to Six Apart and hopefully they will be fixed soon, but there is absolutely zero transparency. There is no way for us to check on the status of these issues.  Wouldn’t you expect the changes to be documented on the “The Official Everything TypePad weblog” and mentioned on “Six Apart Status“?

I cringe to think of the mess it would have been if we had already included the TypePad AtomPub importer in a release.

It seems that independent developers are left out in the cold.

The open web starts at home

Although, I’m excited by the work Ronald is doing, should it really be necessary for TypePad customers to come to the WordPress community to export their blogs?

I’m reminded of Dave Winer’s excellent article “How to do data portability” which includes “The best way to achieve data portability is to just do it”. That article really moved me, data portability, and by extension the open web, starts at your own company, on your own product.

How much longer do TypePad customers have to wait before they can export their blog?

Movable Type and TypePad Passwords in Plain Text

“If Movable Type was as popular, and under the same amount of scrutiny, I can’t imagine they would still be storing passwords as plain text.” upset at least one reader of “Movable Type Pro, Setting Social Networking Free, Vaporware, WordPress, BuddyPress“. His comment wasn’t polite, so I’ll answer without here without publishing it or calling attention to the comment author.

While working on the TypePad and Movable Type AtomPub Exporters (still in progress), programmer Ronald Heft Jr had a problem interacting with the WSSE authentication both use. The problem ended up being in his own code, but it also led to some interesting observations about how the authentication works.

TypePad doesn’t require as secure code.

  • TypePad can handle the WSSE nonce either base64 encoded or plain text. Movable Type requires the nonce to be base64 encoded. Ronald had been using base64 on the nonce from the beginning, and TypePad accepted it. The APE does not encoding the nonce, so it works with TP but not MT.
  • TypePad allows the same nonce to be used multiple times, while Movable Type requires a new nonce for each request. The AtomPub library Ronald had been using did not regenerate the nonce as it was centered around TypePad. Once he started giving a new nonce for each request, MT started authenticating.

This is a good reminder that allowing programmers a less secure option, and they will likely take it because they trust you, and have other deadlines.

WSSE authentication is inheritantly insecure.

When Ronald looked in his Movable Type database he found that the passwords were stored in plain text. WordPress remote access development lead Joseph Scott explains that the only way to support WSSE is to store the passwords in plain text on the server, which is one of the reasons why WordPress won’t be supporting WSSE.

Movable Type Pro, Setting Social Networking Free, Vaporware, WordPress, BuddyPress

Six Apart VP Anil’s response today on the official Six Apart blog to my Movable Type Pro Introduction video parody doesn’t surprise me, but where is the link love?

Read More »

Movable Type Pro with Comments

I’m sure Movable Type Pro is a fantastic product, but when I watched the introduction video in the announcement article I wasn’t feeling the “profoundly powerful new set of capabilities that shows the web where blogging is going next.”

I thought it was ripe for parody, and so here is my voice-over:

Update: Six Apart shared my video with all of their customers, but gave no link love or attribution to me (no Lloyd Budd anywhere in sight), see my response “Movable Type Pro, Setting Social Networking Free, Vaporware, WordPress, BuddyPress

1st Olympics on Television? America, Of Course! Wikiality

“1960 Winter Games. CBS paid $50,000 for the right to broadcast the games in the United States, and this marked the first time the Olympic Games were televised.”

Read More »

Sharing Files Online, Box.net

I was helping a friend last night find a solution to easily share Microsoft Office and PDF documents for review and for sharing with students of his seminars. After looking at what is out there, we settled on box.net.

Read More »

Delicious Finally Fixes Most Blatent Usability Issue

It’s web address. Although, Delicious Social Bookmarks has had the delicious.com URL as long as I can remember (3yrs?), it’s only now retiring del.icio.us in favor of it.

Read More »