Tag Archives: gmail

Orange Link nous demande nos mots de passe: pas au point!

[en]

There is absolutely no excuse, in 2010, for asking people to enter their Gmail, Facebook or Twitter passwords on third-party sites. And that is precisely what the "social media to SMS" service Orange Link is doing for Gmail and Twitter, though they got Facebook right. Laziness or scary cluelessness?

[fr]

Orange Link est un service d’Orange.ch qui nous permet de recevoir des alertes SMS de services comme Twitter, Facebook, et Gmail (et aussi, d’envoyer des SMS à ces services).

Orange Link

Très cool. J’espère en passant qu’ils sont aussi en train de bosser sur un partenariat avec Twitter comme l’ont fait d’autres opérateurs.

Ce qui est beaucoup moins cool c’est qu’ils nous demandent nos mots de passe Twitter et Gmail!

Orange Link - BAD BAD password anti-pattern

Regardez ce que je disais en avril 2008, il y a plus de deux ans:

I have an interest in social network portability (also called “make holes in my buckets”) — I gave a talk on SPSNs from a user point of view at WebCamp SNP in Cork recently — and I am also concerned that in many cases, implementations in that direction make generous use of the password anti-pattern (ie, asking people for the password to their e-mail). It’s high time for design to encourage responsible behaviour instead. As the discussion at WebCamp shows, we all agree that solutions need to be found.

Les gens ont tendance à être d’une naïveté affligeante avec leurs mots de passe, tant dans le choix de ceux-ci que l’insouciance avec laquelle il les prêtent à autrui ou les entrent sur n’importe quel site qui le leur demande.

Il est irresponsable de la part d’une entreprise comme Orange.ch d’encourager les gens à entrer leur mot de passe sur un site qui n’est pas celui du service en question. On est en 2010, loin de la situation en 2008 référencée plus haut, et OAuth et autres services du genre sont une réalité. Texprezzo et Textendo, qui fournissent la technologie derrière Orange Link, ne nous demandent d’ailleurs pas notre mot de passe Facebook, mais utilisent Facebook Connect pour accéder à notre compte.

Orange Link -- Good

Facebook | Request for Permission

Il n’y a donc aucune excuse pour ne pas procéder avec les technologies similaires à disposition pour Twitter et Gmail. Début 2009, Twitter était sur le point d’implémenter OAuth, ce qui a été fait depuis lors — lire la FAQ de Twitter sur OAuth. Quant à Google (pour Gmail), eh bien, depuis mars 2010 (enfin!) ils parlent aussi OAuth.

Je ne sais pas s’il faut en conclure qu’ils s’en fichent ou qu’ils sont mal informés/inconscients — mais à ce point, j’avoue que ça ne m’inspirerait guère confiance.

Similar Posts:

Posted in My corner of the world, Social Media and the Web | Tagged données, e-mail, facebook, facebook connect, gmail, grave, identification, inconscient, mots de passe, oauth, orange link, orange.ch, safety, securité, texprezzo, textendo, twitter | 6 Comments

Extracting Web Apps From the Browser: Fluid and Prism

[fr]

Prism et Fluid sont des applications OSX qui vous permettent de créer des mini-applications qui sont en fait une fenêtre de navigateur (Firefox ou Safari) qui n'ouvre qu'une seule URL. Pratique si vous avez l'habitude de consulter Gmail, Twitter, Digg etc. via leur interface web.

[en]

This has been a productive morning for a lazy Saturday. A tweet from Tom Morris put me on the track of Fluid, and then Prism. (This is for Mac users, by the way.)

Fluid and Prism are both site-specific browsers, the first based on Safari, the second on Firefox. If you’re the kind of person who always had a Gmail tab open in their browser, and maybe another for Twitter, and for blog comments, and Google Docs, and for Friendfeed, and god knows what, you’ll like this.

Personally, the reason I like desktop clients is that they separate the web service I’m using from the browser. I can Cmd-Tab to it. I don’t see it all the time when I’m in my browser. I don’t lose the tab when my browser crashes.

Site-specific browsers basically allow you to create a simple application which is in fact a single browser window that opens up one single web page. Links in that web page, when clicked, get opened in your default browser.

I have now created “apps” for Identi.ca, Wave, and Gmail, so far. It’s as simple as filling in a small form with URL and title fields.

My only gripe is that I haven’t yet figured out how to replace the URLs favicon by another larger one as the app’s icon. Blown-up favicons are really ugly. I’ve found some sources of icons online, but am not finding all those I need, and clearly not managing to “install” them (I’m sure I don’t need to re-create my apps).

Similar Posts:

Posted in OSX | Tagged app, browser, fluid, gmail, osx, prism, twitter, wave | 9 Comments

Google Identity Dilemma

[fr]

Depuis des années, j'utilise une identité "fantaisiste" pour tous mes services Google. C'est mon identité principale (vous voyez de laquelle je parle si on est en contact). J'aimerais passer à prénom.nom comme identité principale (je la possède aussi) mais tous les services Google sont rattachés à la première, et je ne vois pas vraiment comment m'en sortir. Idées bienvenues!

[en]

When I created a Gmail address all these years ago, I chose a “funny-cute” name that was easy to remember for most of the people I knew. I was on IRC all day back then, and my nickname was bunny(wabbit_), and people knew I was Swiss.

I didn’t really think my Gmail address would become so central to my online identity, you see.

Of course, I also registered firstname.lastname and redirected it onto my main e-mail address and identity.

As years went by, Google added all sorts of services that got tied onto this identity (not to mention the 2.5Gb of archived e-mails and chats). Google Talk, Google Profiles, and recently, Google Sidewiki and Google Wave.

These last weeks, I’ve been wondering if I shouldn’t “make the switch” and use my more serious “firstname.lastname” e-mail address as my main identity. Actually, to be honest, I’d like to. But there are obstacles — oh, so many.

First, all my contacts are linked to my current account. All my e-mail is stuck in it. My Feedburner and Google Reader settings are linked to it. My blogger blog is. My calendar. Everywhere I use my Google identity for a third-party service, here we go.

And Google does not allow you to link one Google account to another (sure, you can redirect mail, but that doesn’t solve anything).

So, do you see my problem? If you have any bright ideas, I’m listening. I would really like a solution.

Similar Posts:

Posted in Connected Life, Personal | Tagged calendar, centralization, dilemma, e-mail, feedburner, gmail, google, google reader, google sidewiki, google talk, google wave, identity, name, profile, services | 12 Comments

Flickr and Dopplr: the Right Way to Import GMail Contacts

[fr]

Il est maintenant possible d'importer des contacts depuis GMail (ou Hotmail) sans devoir divulguer son mot de passe, aussi bien chez Flickr que chez Dopplr. Génial!

[en]

A few days ago, I saw this tweet by Matt Biddulph soar by:

Impressed by passwordless import at http://www.flickr.com/impor… – does anyone know if that’s a public yahoo API they use? want!

I immediately went to investigate. You see, I have an interest in social network portability (also called “make holes in my buckets”) — I gave a talk on SPSNs from a user point of view at WebCamp SNP in Cork recently — and I am also concerned that in many cases, implementations in that direction make generous use of the password anti-pattern (ie, asking people for the password to their e-mail). It’s high time for design to encourage responsible behaviour instead. As the discussion at WebCamp shows, we all agree that solutions need to be found.

So, what Matt said sounded sweet, but I had to check for myself. (Oh, and Matt builds Dopplr, in case you weren’t sure who he was.) Let me share with you what I saw. It was nice.

Go to the Flickr contact import page if you want to follow live. First, I clicked on the GMail icon and got this message.

Flickr: Find your friends

I clicked OK.

Flickr and Google

This is a GMail page (note the logged in information upper right), asking me if Flickr can access my Google Contacts, just this one time. I say “yes, sure”.

Flickr: Finding my friends

Flickr goes through my GMail contacts, and presents me with a list:

Flickr: Found your friends

There is of course an “add all” option (don’t use it unless you have very few contacts), and as you can see, next to each contact there is a little drop down which I can use to add them.

Flickr: Contacts

When I’m done adding them, Flickr asks me if I want to send e-mail invites — which I don’t.

Neat, isn’t it?

Well, the best news about this is that Flickr isn’t alone. Dopplr (remember Matt?) does the same thing — and also for Windows Live Hotmail now.

DOPPLR: Passwordless GMail contact import

Note and question mark: I just saw Dopplr announced GMail password-free import back in March, before Matt’s tweet. Did Dopplr do it before Flickr? Then, what was the tweet about? Thoroughly chronologically confused. Anyway, passwordless import of GMail contacts rocks. Thanks, guys.

Update: Thanks for the chronology, Matt (see his comment below). So basically, Matt’s tweet was about the fact that though GMail and Hotmail allows services like Dopplr and Flickr to access contacts without requiring a password, Yahoo doesn’t. Flickr does it from your Yahoo account because they have special access. So, Yahoo, when do we get a public API for that?

Similar Posts:

Posted in Social Media and the Web | Tagged contacts, cork, dopplr, flickr, gmail, import, matt biddulph, security, snp, social networking, social networks, Social Software, twitter, webcampsnp | 15 Comments

Inbox to Zero in no Time

[fr]

Un moyen radical (et quasi instantané) pour atteindre le fameux et très convoité inbox zero.

[en]

So, having trouble keeping your inbox count down? Piling up in the hundreds, the thousands, even? I have a totally foolproof method to bring your inbox count down to the coveted zero. It’s been tested in GMail, but I’m sure it works in other e-mail clients too.

The best part of it is how fast it works. The result is guaranteed.

Are you ready for it? Just follow these two simple steps:

  • click on “Select All”
  • press the “Archive” button

There! You’re done! Inbox to zero in now time at all. It works — or you can have your money back.

Now, for the slightly more serious part.

I really did this, this summer if I remember correctly, during a conference. I mean, I wasn’t going to go through all that piled up e-mail anyway. Most of the e-mails were obsolete — when stuff is really important, people e-mail again, and again, or call you, or tweet you, or catch you on IRC or at an event.

Once your inbox actually is at zero, it’s much easier to keep it to zero. Archive without mercy. Answer easy stuff as soon as you see it (I do that to the point some people have told me my e-mails have become a bit curt, so I’m trying to add a bit of cream in again — but the basic principle remains: do it now). My inbox sometimes goes up to 40 or 50 if I stay away from the computer, but then I bring it back down again, over a few days. If I haven’t seen zero in some time, it’s time to deal with those two things lying at the bottom of my inbox for the last 10 days — or decide that I won’t, and archive them.

Sometimes, I feel I can’t keep up anymore, or don’t want to “deal”, so I archive.

Does that sound like I’m mistreating my e-mail? Sure. But so is letting it pile up in your inbox for weeks, months, and years.

Similar Posts:

Posted in Life Improvement | Tagged e-mail, gmail, gtd, inbox, inboxtozero, lifehacks, method, Practical, procrastination, productivity, Psychology / Sociology, recipe, trick | 17 Comments

Quechup = spammeurs

[en]

If you get invitations to join Quechup, don't. They will spam your whole address book without asking you for permission.

[fr]

Si, comme moi, vous recevez dans votre boîte trois ou quatre invitations provenant de personnes que vous connaissez (bien ou moins bien) à rejoindre le réseau social Quechup, n’y touchez pas! ils spammeront tous les contacts de votre carnet d’adresse sans vous demander votre avis!

Voici ce qui se passe: vous vous inscrivez, imaginant qu’un de vos amis vous recommande le service. Ensuite, comme vous commencez à en avoir l’habitude, Quechup vous propose de regarder dans votre carnet d’adresses pour voir si des contacts à vous sont déjà inscrits au réseau.

Vous donnez donc votre adresse et votre mot de passe pour que Quechup aille regarder, confiant que le service, comme d’autres que vous connaissez, vous proposera une liste de noms déjà inscrits que vous pourrez ajouter à vos contacts, et vous permettra aussi si vous le désirez d’inviter par e-mail certaines de vos connaissances.

Erreur! sitôt en possession de votre carnet d’adresses, Quechup envoie aussi sec une invitation à toutes les personnes qui s’y trouvent, sans que vous puissiez l’en empêcher.

Donc: Quechup => poubelle.

Si vous vous êtes fait prendre, premièrement ne vous donnez pas trop de coups de pied, d’autres s’y sont fait prendre (et pas des moindres, parfois, comme Hugh McLeod). Et deuxièmement, avertissez vos contacts (via mail ou blog) de ne pas donner suite à la jolie invitations personnalisée qu’ils viennent de recevoir de votre part… avant qu’il ne soit trop tard!

Empêchez le fléau Quechup de se répandre!

Similar Posts:

Posted in Social Media and the Web | Tagged addressbook, Announcements, badpractice, carnetd\\\'adresses, contacts, e-mail, factice, gmail, internet, invitation, marketing, motdepasse, password, quechup, réseausocial, security, Social Software, socialnetworking, spam, spammeur, yahoo | 10 Comments

Please Make Holes in My Buckets!

[fr]

Tour d'horizon de mes différents "profils" à droite et a gauche dans le paysage des outils sociaux (social tools). Il manque de la communication entre ces différents services, et mon identité en ligne s'en trouve fragmentée et lourde à gérer. Ajouter des contacts en se basant sur mon carnet d'adresses Gmail est un bon début, mais on peut aller plus loin. Importer ses livres préférés ou des éléments de CV d'un profil à l'autre, par exemple.

[en]

Facebook is Stowe‘s fault. Twitter was because of Euan. Anne Dominique is guilty of getting me on Xing/OpenBC. I can’t remember precisely for Flickr or LinkedIn or — OMG! — orkut, but it was certainly somebody from #joiito. The culprits for Last.fm, DailyMotion and YouTube have disappeared into the limbo of lost memories. Kevin encouraged me to sign up for a good dozen of blogging platforms, open a MySpace account, and he’s probably to blame for me being on Upcoming. As for wordpress.com, I’ll blame Matt because he’s behind all that.

Granted, I’m probably the only one responsible for having gotten into blogging in the first place.

Let’s get back on track. My aim here is not primarily to point an accusing finger to all my devious friends who introduced me to these fun, addictive, time-consuming tools (though it’s interesting to note how one forgets those things, in passing). It’s more a sort of round-up of a bunch of my “online selves”. I feel a little scattered, my friends. Here are all these buckets in which I place stuff, but there aren’t enough holes in them.

Feeds are good. Feeds allow me to have Twitter, del.icio.us, Flickr, and even Last.fm stuff in my blog sidebar. It also allows me to connect my blogs to one another, and into Facebook. Here, though, we’re talking “content” much more than “self”.

One example I’ve already certainly talked about (but no courage to dig it out, my blog is starting to be a huge thing in which I can’t find stuff I know it contains) is contacts or buddies — the “Mine” in Stowe’s analysis of social applications. I have buddy lists on IM and Skype, contacts on Flickr and just about every service I mentioned in this post. Of course, I don’t want to necessarily have the same contacts everywhere. I might love your photos on Flickr and add you as a contact, but not see any interest in adding you to my business network on LinkedIn. Some people, though — my friends — I’ll want to have more or less everywhere.

So, here’s a hole in the buckets that I really like: I’ve seen this in many services, but the first time I saw it was on Myspace. “Let us peek in your GMail contacts, and we’ll tell you who already has an account — and let you invite the others.” When I saw that, it scared me (“OMG! Myspace sticking its nose in my e-mail!”) but I also found it really exciting. Now, it would be even better if I could say “import friends and family from Flickr” or “let me choose amongst my IM buddies”, but it’s a good start. Yes, there’s a danger: no, I don’t want to spam invitations to your service to the 450 unknown adresses you found in my contacts, thankyouverymuch. Plaxo is a way to do this (I’ve seen it criticised but I can’t precisely remember why). Facebook does it, which means that within 2 minutes you can already have friends in the network. Twitter doesn’t, which means you have to painstakingly go through your friends of friends lists to get started. I think coComment and any “friend-powered” service should allow us to import contacts like that by now. And yes, sure, privacy issues.

But what about all my profile information? I don’t want to have to dig out my favourite movies each time I sign up to a new service. Or my favourite books. Or the schools I went to. I mean, some things are reasonably stable. Why couldn’t I have all that in a central repository, once and for all, and just have all these neat social tools import the information from there? Earlier today, David was telling me over IM that he’d like to have a central service to bring all our Facebook, LinkedIn, OpenBC/Xing, and MySpace stuff together. Or a way to publish his CV/résumé online and allow Facebook to access it to grab data from it. Good ideas, in my opinion.

I’ll mention OpenID here, but just in passing, because although in my dreams in used to hold the promise of this centralised repository of “all things me”, I don’t think that it’s what it has been designed for (if I get it correctly, it is identity verification and doesn’t have much to do with the contents of this identity). Microformats could on the other hand certainly come in handy here.

So, please, make more holes in my buckets. Importing Gmail contacts in sticking feeds here and there is nice, but not sufficient. For the moment, Facebook seems promising. But let me use Twitter for my statuses, for example, or at least include the feed somewhere (I can only include one feed, so I’ve included my suprglu one, but it has a huge lag and is not very satisfying). Let me put photographs in my albums directly from Flickr. Talk with the profiles I made with other similar services. Grab my school and work info from LinkedIn and OpenBC. Then make all this information you have about me available to republish how I want it (feeds, feeds, feeds! widgets! buttons! badges!) where I want it.

Also, more granularity. Facebook has a good helping of it: I can choose which type of information I want to see from my contacts. I can restrict certain contacts from seeing certain parts of my profile. I’d like fine control on who can see what, also by sorting my people into “buddy groups”. “Friends” and “Family” as on Flickr is just not enough. And maybe Facebook could come and present me with Stowe-groupings of my contacts, based on the interactions I have with them.

Share your wild ideas here if you have any.

Similar Posts:

Posted in Connected Life, Social Media and the Web | Tagged Animals, Announcements, atom, Blogger musings, blogging, Cinema / Films, contacts, dailymotion, del.icio.us, Events, exchange, facebook, feeds, flickr, friends, Geek / Technical, gmail, internet, Internet / Computers, Kit du blogueur, lastfm, linkedin, microformats, myspace, network, Online Culture, openbc, openid, orkut, profile, publishing, rss, sharing, Social Software, socialapplications, socialnetworking, socialtools, Software and Tools, suprglu, Temporary, Thinking, twitter, wordpress.com, xing, youtube | 22 Comments