Thursday, May 30, 2013
Local + Cloud Sync
Apparently Dropbox went down today, but I didn’t even noticd. All the files I was working on were local and worked perfectly in the interim downtime. This is the value of local caching plus cloud storage and sync. It’s magic.
2011 was the year when every VC banged the drum “What are you doing about the transition to mobile?”
2014 will be the year when everyone bangs the drum: “What are you doing about multi-device?”
Cloud storage with local, multi-device sync will be table stakes soon for any great internet-delivered service.
(photo from Dropbox Error Page via Dropbox Currently Experiencing Widespread Service Outage | TechCrunch)

Local + Cloud Sync

Apparently Dropbox went down today, but I didn’t even noticd. All the files I was working on were local and worked perfectly in the interim downtime. This is the value of local caching plus cloud storage and sync. It’s magic.

2011 was the year when every VC banged the drum “What are you doing about the transition to mobile?”

2014 will be the year when everyone bangs the drum: “What are you doing about multi-device?”

Cloud storage with local, multi-device sync will be table stakes soon for any great internet-delivered service.

(photo from Dropbox Error Page via Dropbox Currently Experiencing Widespread Service Outage | TechCrunch)

About 10 percent of the Netflix subscribers… finished the entire season of “Arrested Development” on Sunday.

- SAI

So the reviews for Arrested Development are poor… but holy crap is that an amazing statistic.

Lets do the math. 30 million total subscribers * 10% * 15 episodes * 28 minutes per episode / 60 minutes = 21,000,000 hours of TV watched in one day.

And that’s ONLY the people that finished all the episodes. I’m sure there’s a long tail of the netflix subscriber base that watched only a couple episodes…. that’s crazy.

My own $0.02: after watching the first two episodes I was a little disappointed, but after watching 5 episodes I completely loved the new season. It’s very layered… if you want to get all the jokes you have to pay close attention to details you don’t quite grasp yet to fully enjoy the following episode. It’s clever. I rarely get to use my brain at all when watching a sitcom.

Wednesday, May 29, 2013

What Software Do You Pay Foward?

Every modern Internet company has been built standing on top of the shoulders of giants. With the very rare exception of a full Microsoft stack company (1 in 1000 pitches I see), everyone relies on open source technologies to power their web stack.

Because companies that leverage open source tech get so much value for free, I think they all owe it back to the community to either A) allow their engineers to contribute back to the projects they use or B) open source some piece of their stack themselves. For example Twitter did a wonderful job of this with Twitter Bootstrap.

It’s the Pay It Forward rule of software development.

Tuesday, May 28, 2013
Ars Technica has a great article today on attacking one-way hashed password lists.  They fed a list of 16,000 hashed passwords to three expert crackers; who defeated 90% of the list in under a day.
The whole article is both intellectually fascinating and also horrifying.  Salting passwords (the process of appending a text snippet to a password before one-way hashing it) is apparently nearly useless, despite being an industry standard best practice.
The list that Ars fed to the crackers was MD5 encrypted.  MD5 has been banned in use at Microsoft engineering (clearly with good reason).  So, one big lesson is stop using MD5 and instead switch to a one-way hash that can scale over time, such as bcrypt.
The picture above shows the benefit of using long passwords; complexity in cracking via brute force methods spikes to the sky once you get to double-digit password lengths.  

(via Anatomy of a hack: How crackers ransack passwords like “qeadzcwrsfxv1331” | Ars Technica)

Ars Technica has a great article today on attacking one-way hashed password lists.  They fed a list of 16,000 hashed passwords to three expert crackers; who defeated 90% of the list in under a day.

The whole article is both intellectually fascinating and also horrifying.  Salting passwords (the process of appending a text snippet to a password before one-way hashing it) is apparently nearly useless, despite being an industry standard best practice.

The list that Ars fed to the crackers was MD5 encrypted.  MD5 has been banned in use at Microsoft engineering (clearly with good reason).  So, one big lesson is stop using MD5 and instead switch to a one-way hash that can scale over time, such as bcrypt.

The picture above shows the benefit of using long passwords; complexity in cracking via brute force methods spikes to the sky once you get to double-digit password lengths.  

(via Anatomy of a hack: How crackers ransack passwords like “qeadzcwrsfxv1331” | Ars Technica)

Friday, May 24, 2013
Now that trading is all electronic, computers matching bids, why don’t markets stay open 24 hours to prevent nonsense like this?

Now that trading is all electronic, computers matching bids, why don’t markets stay open 24 hours to prevent nonsense like this?

Two days ago was my three year anniversary with @DrDiver.  We had a small wedding along the coast of RI, and we loved every second of it.  
When I woke up two days ago, I did what I usually do within the first 15 minutes of pulling myself out of bed and back into the real (and digital) world: I loaded Timehop.
This screen cap above was what I saw.  I got a chance to take 5 mins in my morning routine to sit and reflect on this awesome day by scanning through a bunch of photos that were pulled in from my Dropbox.
When Jonathan and Benny started Timehop (then called 4SquareAnd7YearsAgo), they painted for me a vision of the value in all the social content we are creating together online, after the content falls past the 24-hour shelf life of news feeds and timelines.
The company’s latest feature, launched yesterday, goes a step further than social feeds: you can now pull all your private photos into Timehop, so you can relive them on each anniversary.
My morning two days ago was such a killer experience. Not only was it a wonderful shot of nostalgia and emotion, but additionally I emailed off a couple photos from the app to relevant people, so it sparked me to reconnect with my closest friends and family too. I highly recommend you start syncing up your photos and try it yourself.
One final reason: this will be great ammo for #tbt!

Two days ago was my three year anniversary with @DrDiver.  We had a small wedding along the coast of RI, and we loved every second of it.  

When I woke up two days ago, I did what I usually do within the first 15 minutes of pulling myself out of bed and back into the real (and digital) world: I loaded Timehop.

This screen cap above was what I saw.  I got a chance to take 5 mins in my morning routine to sit and reflect on this awesome day by scanning through a bunch of photos that were pulled in from my Dropbox.

When Jonathan and Benny started Timehop (then called 4SquareAnd7YearsAgo), they painted for me a vision of the value in all the social content we are creating together online, after the content falls past the 24-hour shelf life of news feeds and timelines.

The company’s latest feature, launched yesterday, goes a step further than social feeds: you can now pull all your private photos into Timehop, so you can relive them on each anniversary.

My morning two days ago was such a killer experience. Not only was it a wonderful shot of nostalgia and emotion, but additionally I emailed off a couple photos from the app to relevant people, so it sparked me to reconnect with my closest friends and family too. I highly recommend you start syncing up your photos and try it yourself.

One final reason: this will be great ammo for #tbt!

Thursday, May 23, 2013

MOOC Sports… Proud Home of Digital Scholar Athletes

How long before a MOOC provider attempts to field a NCAA sports team?

The Coursera Cosmonauts… Udacity Kumquats… EdX Oxen… endless possibilities. :)

I give it 3 years before someone tries this, likely in parody. Over/Under anyone?

Hard Tech Challenges Are Great, But Not Necessary

I met a set of founders recently that were solving a real problem for a known market. So far so good.

The solution the team implemented was technically trivial. It was a simple CRUD app that, if built on top of a web framework like Rails or Django, could probably be implemented in 7-10 days by a developer and designer paired up. And it probably was.

The solution was effective. Initial user testing showed that the solution addressed the problem well, and the customers were providing enthusiastic feedback.

I think the Andrew from 6 or 7 years ago would get really hung up on the trivial technical challenge. “This is so simple… Won’t 5 clone competitors popup overnight?” I might have said.

This is a classic pitfall that engineers often stumble into, myself included. But the triviality is irrelevant to product-market-fit, and that fit is paramount early on in a startup.

I love it when engineers push the boundaries of what’s possible with technology. Elegant hacks to difficult engineering challenges are inherently sexy. But, they are neither necessary nor sufficient to build a big company.

Wednesday, May 22, 2013

Innovators Patent Agreement

I love the Innovators Patent Agreement (IPA). I think it perfectly captures the spirit of how intellectual property should work in today’s era. Rather than butcher the description with my own short hand, here’s a concise description right from the GitHub page where the IPA is hosted:

The Innovators Patent Agreement (IPA) is a new way to do patent assignment that keeps control in the hands of engineers and designers. It is a commitment from a company to its employees that patents can only be used for defensive purposes. The company will not use the patents in offensive litigation without the permission of the inventors. This control flows with the patents, so if the company sells the patents to others, the assignee can only use the patents as the inventor intended.

I’m delighted that four Spark Capital portfolio companies have already embraced the IPA: Lift, Jelly, Stack Exchange, and Twitter. If I were an engineer considering multiple job offers, I know the IPA would factor in my decision-making. I’ve seen countless inventors embarrassed by how their patents have been used offensively without their permission, absurdly long after their date of invention and leaving their company.  

While I hope more Spark portfolio companies will follow, that’s up to the companies to make that decision, and, along the same lines, please don’t confuse the musing on my own blog with Spark’s official stance.  I sweep the floors there.

I feel strongly that offensive usage of patents is net-innovation-destructive. It’s not a position i’ve come to lightly; I’ve arrived over 5-7 years of consideration and internal debate.

Tuesday, May 21, 2013
garychou:

This is a sign of a healthy and prosperous Yahoo! Group.

People totally underestimate the asset Yahoo has in Yahoo Groups. Once they build a killer mobile app to access these communities, they’ll realize the Ning vision that Ning never could. Networks of networks.

garychou:

This is a sign of a healthy and prosperous Yahoo! Group.

People totally underestimate the asset Yahoo has in Yahoo Groups. Once they build a killer mobile app to access these communities, they’ll realize the Ning vision that Ning never could. Networks of networks.