DFdou's Blog Life is short,Be yourself.

1301/100

Google-New Approach To China

真是每天都有新闻,今天比昨天的baidu被干掉还要厉害。Google官方博文如下(被xxx的党和谐了):

Like many other well-known organizations, we face cyber attacks of varying degrees on a regular basis. In mid-December, we detected a highly sophisticated and targeted attack on our corporate infrastructure originating from China that resulted in the theft of intellectual property from Google. However, it soon became clear that what at first appeared to be solely a security incident--albeit a significant one--was something quite different.

First, this attack was not just on Google. As part of our investigation we have discovered that at least twenty other large companies from a wide range of businesses--including the Internet, finance, technology, media and chemical sectors--have been similarly targeted. We are currently in the process of notifying those companies, and we are also working with the relevant U.S. authorities.

Second, we have evidence to suggest that a primary goal of the attackers was accessing the Gmail accounts of Chinese human rights activists. Based on our investigation to date we believe their attack did not achieve that objective. Only two Gmail accounts appear to have been accessed, and that activity was limited to account information (such as the date the account was created) and subject line, rather than the content of emails themselves.

Third, as part of this investigation but independent of the attack on Google, we have discovered that the accounts of dozens of U.S.-, China- and Europe-based Gmail users who are advocates of human rights in China appear to have been routinely accessed by third parties. These accounts have not been accessed through any security breach at Google, but most likely via phishing scams or malware placed on the users' computers.

1308/090

g.cn,google.cn,google.com

首先g.cn==google.cn,这个大家应该都知道,然后就是和google.com的区别.
用一个例子来说明,大家可以g.cn搜索一下"许志永",然后在google.com搜索一下,就会发现了.
g.cn是针对国人的,所以会受到天朝的约束,所以才会有"搜索结果可能涉及不符合相关法律法规和政策的内容,无法显示。"
而google.com则不受此约束,另外,google.jp之类的自然也不会受此约束.
所以要看到更加丰富的内容,大家可以尝试google.com,而不是google.cn!

Tagged as: No Comments
1205/0910

Google Maps API for Flash Demo

Google Maps API的ActionScript3版本出来已经有一段时间了,今天在官方文档(里边有很详细的介绍)那看了一下,做了2个Demo,关于中文版的地图…恩,,是没出?还是SDK里可以设置语言?知道的告诉我一下,我是农民,不知道怎么设置。
先是一般的地图,带标记,拖动,和位置查询。

2804/090

Time to Patch Google Chrome or IE?

This article learned from readwriteweb.com and written by Sarah Perez.

Earlier this month, a problem was discovered in Google's new web browser, Google Chrome, that would have allowed an attacker to launch and run scripts on a compromised machine. The issue, originally discovered by Roi Saltzman of the IBM Rational Application Security Research Group, had been given a security rating of "high." Interestingly enough, although the attack takes advantage of security issues in Google Chrome, the initial entry point for the malicious code would have taken place in Internet Explorer.

Goolge has now released a patch for this issue. If you want to make sure your browser is up-to-date, click through for the instructions.

About the Security Issue(s)

According to researcher, Roi Saltzman, a malicious attacker can use three separate issues in parts of Chrome to create attacks that endanger users who surf to a malicious web site using Internet Explorer. Chrome program manager, Mark Larson, explains that the flaw could have caused Google Chrome to "launch, open multiple tabs, and load scripts that run after navigating to a URL of the attacker's choice." (Yes, it seems that to get the malicious code working, a user would still need to be surfing with IE.)

How to Fix Your Copy of Chrome

Now that a patch is available, you can update Google Chrome on your own. Even if you never run IE, it's always a good idea to have the latest version of Chrome installed. Although Google says that the browser will update itself automatically, on my machine, the update had not yet taken place on my ever-open copy of Chrome - I had to force the update manually.

If you want to do the same, you'll need to first click on the Settings menu in Chrome. This is the menu to the right of the address bar which is identified with an icon resembling a wrench. In that menu, click the option "About Google Chrome." If you need the update, it will begin automatically. Once complete, you'll be prompted to close and then reopen the browser for the update to finish installing.

about_google_chrome.png

To be extra sure that the update took, you can return to that menu option after relaunching Chrome and make sure that the version number reads 1.0.154.59.

--------------------------------------------------------------------------------------------------
Chrome爆出一个搞笑的漏洞,可以在Chrome多进程里加载外部Script代码,然后对中招的人进行攻击,但是这个攻击还需要使用者打开IE才能完成……也就是说,使用Chrome会被人使用这个漏洞攻击,但是这个又是基于IE的……好无语啊我……啊哈,Google translate “好无语啊我” to “Ah well I am speechless”……Just for fun~

2404/090

OpenID

OpenID
最近正在看关于OpenID的资料,就转一篇吧,内容来自:http://openid.net.cn/,具体原文请参阅:http://openid.net/

104/090

Google鸟看—打造全球最大的山寨信息网

pigeon
关于“谷鸽鸟看”计划
2009年4月1日,总部位于美国加州山寨城(Mountain Village)的谷歌公司正式推出“谷鸽鸟看”计划。该计划旨在利用装备了 CADIE 芯片和软体,并被赋予了超智能信息处理能力的“谷鸽”,动态采集、整理和分享山寨信息,打造全球最大的山寨信息网。简言之,“谷鸽鸟看”计划的使命是:
鸟看全球信息,使人人皆可山寨并从中受益!
官方地址:http://www.google.cn/intl/zh-CN/google_pigeon/index.html

2802/092

Google也玩Twitter

Google的官方Twitter地址:http://twitter.com/google
Google的第1条信息是:“I'm 01100110 01100101 01100101 01101100 01101001 01101110 01100111 00100000 01101100 01110101 01100011 01101011 01111001 00001010”,这串二进制代码翻译过来则是Google搜索引擎中的“feeling lucky”,中文版对应的是“手气不错”。
WOW里边也有类似的内容,那个又长又臭的矮人副本里,就有类似的二进制卡片,我似乎一直没做完那个任务。
听说卡片上二进制的代码翻译过来是“欢迎来到魔兽世界”,话说这也是BLZ的Kuso作风之一了。

Tagged as: , , 2 Comments
2202/090

Google-Picasa

原本图片是存放在虚拟主机上,但是在上次移动主机地址后,放弃了这个想法,移动起来很累。
于是决定找个图片存放处,选择了Picasa。
国内有个提供同样服务的东西,就是Yupoo,但是隔断时间不登录就会无法显示图片,不爽。
相对来说,Picasa的WP插件和方便性都比Yupoo好,上传之后的图片大小又有很多份供选择,自然就选择了Picasa。只不过,Picasa的图片调用有些小麻烦,大小超过一个数值直接使用图片路径会无法显示,需要加上?imgmax=xxxx才行。
对了,还有Flickr也可以选择,同样WP插件也不少。
2者选择哪个,就看大家的喜好了。

Tagged as: , No Comments
602/090

Extensions for Google Chrome Coming In May?

Chrome
Comes from http://www.techcrunch.com/2009/02/05/extensions-for-google-chrome-coming-in-may/.

If the schedule for Google’s big annual developer conference is any indication, we should expect to see an extension platform released for Chrome sometime this May.

Programmer Nicholas Moline has noticed a session called “Developing extensions for Google Chrome” among the 38 sessions posted to the Google I/O website. It sits alongside two other Chrome-specific sessions (the others titled “Exploring Chrome internals” and “V8: Building a high performance JavaScript engine” respectively) and carries the following description:

Learn how Google Chrome makes it easy to write extensions using the web technologies you already know. This talk will cover the basics of the extension system (distribution/packaging, installation, updates), as well as the different APIs to enhance with the browser.

This isn’t a guarantee that extensions will be released before or during the conference, but it’s hard to believe Google would hold a session on the topic if we didn’t see them sometime around the date of the conference.

Extensions, which are very popular among Firefox users, were notably absent from Chrome when it launched last September. Google has since made it clear that it has always planned to provide for them at some point. However, many have taken it into their hands to hack away at Chrome on their own.

As Google Operating System points out, Google has already enabled user scripts for Chrome. A draft of the extensions model can also be found here.
-------------------------------------------------------------------------------------------------------------
Chrome总算是要支持插件了,就算从五月份开始支持,最近一段时间内插件的数量和质量虽然无法跟上Firefox,但是过不了多久,两者插件都应该趋于饱和。
然而这样一来,作为同样是Firefox和Google的死忠们,该选用哪款浏览器呢?
唉,Firefox和Google的关系要变的微妙了。

1501/090

Google Calendar的API和外部调用

google calendar
前几天在跟小胡胡诌的时候谈到了Google Calendar,说能不能在Blog里嵌入Google Calendar的内容。
今天中午刚好有时候看了下,Google本身提供了一整套Google Calendar的API,不仅可以调用Google Calendar的内容,
还可以进行内容添加和修改的操作,具体API内容请查看Google Calendar API 官方文档
如果只是在某一个地方掉用Google Calendar,那还是很简单的,进入自己的帐号,点击Calendar,然后在左边点击"设置",
就会看到上边这张图了,下边这段iframe代码就是Calendar,放到需要显示的地方就可以了。

//宽度跟高度,颜色都是可以自己设置的
<iframe src="http://www.google.com/calendar/hosted/novait.net/embed?src=doufu%40novait.net&ctz=Asia/Shanghai" style="border: 0" width="800" height="600" frameborder="0" scrolling="no"></iframe>

我弄了一个Google Calendar来记录平时的流水帐,详情请点击这里查看
另外听说,在Wordpress内调用的话,存在这么一个插件叫wpng-calendar,看截图可以比较完整的展示日志内容,
有兴趣的可以去下载安装个看看。

2912/082

由Google文档驱动的在线调查表单

表单效果地址:https://spreadsheets.google.com/viewform?key=pGHFRk_DSt55zWFCeT5BAGg
制作过程很简单,分以下几步进行:
1.进入Google文档,新建一个form;
2.依次输入需要调查的题目,帮助信息以及备选答案;
3.设置玩题目跟答案之后,选择More actions里的Edit confirmation,修改提交表单后的提示信息;
4.保存Form,接着在页面点击页面底部的Form地址就可以访问了,同时你可以选择Email this form把它发送给朋友;
5.点击See responses 查看统计信息summary和每个人的调查信息spreadsheets.

212/080

Google透露Chrome扩展计划

Google日前透露他们为Chrome增加最急需的特性:可以添加扩展功能,让用户通过扩展定制自己的浏览器。虽然广告是Google的一大业务,但是他们称其中一个扩展就是具有拦截广告功能。虽然Google尚未透露扩展功能开发的时间线,但他们将在开源版Chrome浏览器Chromium上进行。

据悉Google的扩展计划包含以下几点(PS:和firefox很相似,好像是以FF的扩展为样板):
(看起来FF插件移植到Chrome并不是不可能的事,也许明天,也许后天,咱就可以使用Chrome来做CSS兼容性测试了 :meinv )

书签/导航工具:Delicious工具条,StumbleUpon,网络存储历史记录,新页面剪贴板加速装置;
内容增强:Skype扩展,Real Player扩展(为什么会是Real Player……),自动连接(缩减网址,电话号码等);
内容过滤:广告过滤,Flash过滤(ORZ大家都喜欢加屏蔽Flash的设置),隐私控制,父母控制;
下载助手:视频下载助手,下载加速器,DownThemAll, FlashGet。(没有迅雷?)
其他特性:ForecastFox, FoxyTunes, Web Of Trust, GooglePreview, BugMeNot 。
其中,Google特别强调了广告过滤功能,它采用的可能性是最大的。

Tagged as: , , No Comments
2808/080

目前几个开放平台/说不尽的SNS

由于目前没什么麻烦的事在忙,所以准备给自己找点活做,刚好在申请5d6d论坛的时候发现康盛创想在做Manyou(MYOP)的推广,正好了解了下。
目前国内大的开放平台有51.com,xiaonei.com,还有康盛的Myop。
而国外,google的open social,facebook,myspace等。
考虑了下,放弃国外的开放平台,恩……觉得一来中文文档资料比较少;
二来,google的open social么,google本身没有社区,要依靠第3方社区来加入open social,太被动。
facebook也是如此,似乎要求开发者使用他们自己定义的一套语法(PS:这点没去核实),另外facebook开放平台已经有段时间,现在应用已经有不少了,比较讨厌=。=
myspace,……看了下截面,感觉是翻版的facebook,直接放弃……
接着国内的,51.com,恩,51.com开放平台资料还算全,听说也是语言无关性,不过在官方只看到PHP跟Java的SDK。
另外……总觉得51.com做的不够漂亮……所以……放弃。
xiaonei.com,恩……又是facebook!地址:xiaonei.com开放平台
放弃,原因。。。既然是仿照,不如直接参加原创的开放平台。
剩下的是Myop,恩,跟上边的sns社区不一样的是康盛出名的地方不是他的sns社区,而是他生成的sns,discuz,supesite,ucenterhome,使用康盛产品的社区非常之多。
一来,个人觉得康盛的盈利模式比较独立,让我想起一个故事,在一个地方,很多人听说河对面有宝石,结果大家都往河对岸赶,而这时候有个人却做起了摆渡的生意。
十分多的人蜂拥到了对岸,却失望而归,而摆渡者却很明智的赚了一票。
康盛似乎是扮演了摆渡者的角色,恩,只能说是似乎吧~
呵呵,搞不好河对岸有黄金的传说,本身就是摆渡者的谎言。
言归正传,二来,看了下Myop的网站,文档跟资料都比较详细,而且列出了支持的语言及版本。
总的来说,给我的感觉是比国内其他开放平台要来的专业些,这可能是因为康盛多年发展的关系。
说起来Uchome也是facebook的翻版,恩,基本没区别~不过颜色搭配比xiaonei的好一些,灭嘿嘿嘿嘿嘿!
恩,先扯到这了,Ucenter跟Ucenterhome下载好也~开工了~
PS:早上查资料居然看到有人把Facebook翻译成脸谱!囧,非常囧!

2306/080

Google在线办公系统

这个是Google推出的在线办公系统的一个小功能,类似于微软的PPT。

可以点击下边的链接看下效果~感觉很适合多人工作环境下的文件分享。
http://docs.google.com/Present?docid=dc8mbfcr_23gq3zf5gc&skipauth=true

Tagged as: No Comments