A couple of days ago I got a comment on one of my posts that struck me as unusual, it was marked as spam (thanks to akismet), but didn’t read like your standard spam. Here’s the text:

Good points raised here, (well, what I could read of it). I am afflicted with color blindness (tritanopia to be exact). I use Chrome browser (unsure if that matters), and a lot of your site is a little difficult for me to read. I don’t wish to whinge, and I know it is my problem really, nonetheless it would be cool if you could bear in mind color blind visitors when carrying out the next site re-working.

After a first glance I almost approved it without further thought, however something struck me as odd.   The comment linked to p_l_a_y_n_i_c_e .c_o .u_k, which backs up the post, still not convinced I did some googling and found a number of blogs with almost identically worded comments.   There was some differences in the wording, the browser changes, I’ve seen Chrome, Konqurer and Safari and there are a couple of different introductions.

The only thing I am sure of now is that this isn’t a legitimate comment, but is meant to serve some other purpose.   It may be just for self promotion, grandfathering links for search eangines, or potentially preparation for a drive by download attack.  I’ll keep track of the page and report any changes.

-Daniel

Well in between job interviews (I’m an Info Sec manager, based in Brisbane, AU, if anyone is hiring), I’ve been adding some new features and tidying up the code.  This release finally brings to life one of the most requested features, the ability to select a different image source for each contact.

Click (left mouse button) on a contact’s image and you’ll be presented with a dropdown list of the available image sources for that person.  Once you’ve selected a source you are happy with click outside the popup and it will disappear.

The change is displayed live as you make it, and is fixed to the source, not the image, so if someones twitter profile image is updated and that’s where you’re getting their profile picture from, you’ll see the new picture.  Which brings me slightly off-topic, SocialMail now garners profile image information from the tweet stream if twitter is being used, so the twitter image will always be fairly up-to-date and current.

As I mentioned above, only sites which are providing image url’s will show up in the drop down.  However if you want to add a profile image for a site, or (for example) add details about a niche social network, that RapLeaf or SocialMail haven’t discovered, then you can add those details to SocialMail so that they are always at hand.   This is done by the new “Manage Social Networks” popup, which can be access by clicking “[+]” next to the “Social Networks” heading.   This window allows users to manually setup and modify the social networks that are attached to a contact.   Caution is advised when using this view as it is important to get the urls correct otherwise things will not work as expected.

Other minor features that have been added in this release are:

• Integrating URLs from the addressbook, the same as was done with phone numbers in the last release
• If an alternate email address is added to a contact (in the SocialMail addressbook only) then when discovery is next run for them, both email addresses will be searched
• The number of twitter followers/followees(?) for a contact is now displayed at the bottom of the twitter tab, as is a button that allows you to follow them if you are not already.
• The ability to “reply” to tweets.

I think thats it, so here it is SocialMail v0.2.5 (right click, Save as).   I’ll post this to AMO in a few days if no-one reports any major issues.

Don’t think that because we are a quater of the way to 1.0, I am a quater of the way through the project, not by a long shot. but now that SocialMail’s framework is stabilising I can begin focussing on more integration pieces, next on my plan is OpenSocial integration, since a common API should mean I can add several sites without to much additional work.

And finally, Larry over at LEHSYS.COM has put together another video clip showing off SocialMail and some of the new features, many thanks Larry.  Check it out:  SocialMail on YouTube

It’s been a few weeks since SocialMail 0.13 was released and I’ve been busy in the mean time.   If you’ve read my last few posts you’ll know that the interface as been redone to allow a lot more information to be displayed while keeping the most recent details up front.

The interface has been converted to a tab based layout which allows us to have different screen areas for each information source, while allowing the front tab, to show the latest details from each section (user configurable).

SocialMail v0.2 also includes the first cut of twitter functionality, which once enabled adds a new tab which show the last 10 or so (configurable) tweets from whoever you’re viewing.   Users can now ‘tweet’ directly from Thunderbird with the new ‘Update Status’ functionality which will ultimately allow sending updates to multiple micro-blogging sites (twitter, myspace, facebook, linkedin, etc) as modules for those sites are added.

All  in all, a lot has gone into this SocialMail update, which is why it’s taken longer than anticipated, so I hope you all enjoy it and look forward to hearing your experiences with it.

So here it is: SocialMailv0.2.1

(NOTE: This is a small update to address 2 isssues raised by Larry)

Have Fun,

Daniel

It’s been a while since I’ve last posted an update on SocialMail so I figure it time to let everyone know what I’ve been working on.

One of the issues with the current release is that there is to much information to fit in the sidepanel.  If you have a contact that has data in each of the boxes then it forces the thunderbird window to expand, in my case (and I’m sure many others) this means off the end of the screen.    This issue is set to become much worse as I add functionality and new datasources.  To resolve this the interfaces has been reworked to use tabs to seperate the key parts, while keeping the most recent information on the first tab for easy access/reference.

Switching to a tab based layout has made things a lot clearer and will help with the integration of new data sources,  each of which can now have it’s own space to render as it needs.   Extra elements can be added as modules, without have to mess with the main code, so it will be theoretically possible for others to write SocialMail modules to extend it with specific extensions (much like SocialMail extends Thunderbird).

Twitter integration is now also well underway, with tweets being automatically displayed when you view an email from a contact who uses twitter.   Functionality to be able to post (re)tweets/direct messages/etc isn’t in yet, but thanks to the guys who wrote twitterHelper.jsm, shouldn’t take to long.

One last thing, for anyone familiar with the workings of XUL.   When I have a listbox which has the listcell-iconic style applied to it’s listitems, they aren’t selectable.  Why is that and how do I fix it?

Update: In answer to my own question, the issue is because I should have been using a listitem-iconic style not listcell-iconic.  The listcell styles don’t support selection since you typically want to select the whole item not just one cell.

-Daniel

A few people have reported having problems with SocialMail  on Linux, specifically Ubuntu has been reported but I’m sure it’s a consistent problem accross distributions and a few other operating systems.

Investigation identified that the issue was related to windows tolerating differences in the capitalisation of filenames.  I really should have caught this initially, but I’m presently without a linux desktop to test things out on, so my apologies to all the Linux users out there.

All said and done, here is a new version which fixes the issue: socialMail-v013

-Daniel

After a bit of work the SocialMail code has been tidied up and I’m ready for another release.   But this is more than just a admin release, it’s also bringing a few new features:

• Context menus for most parts of the sidepanel, includes
  • Add, modify, remove phone numbers & urls
  • Copy any of the displayed data
  • Save attachments
• Skype integration
  • You can now launch a skype call directly from socialmail by double clicking on any collected (or added) phone number in the sidepanel.  You need to enable this in the SocialMail options window and specify a default Country for numbers that don’t know have an international prefix.   Of course you need to have Skype installed for this to work.

I hope you all enjoy this release, please post your comments to let me know how its working for you.  Download here: socialMail-0.12

-Daniel

It’s been a little quite since my last post, and to be honest not much has changed on the SocialMail front.

After a bit of reflection I’ve decided to rewrite/reformat the code before adding any more functionality, this has to be done before SocialMail can be listed as an ‘approved’ plugin on AMO anyway so now is the best time to do it.   Doing so now also gives me the opportunity to restructure parts of the program to make it easier to extend later.

The main task right now is to encapsulate to code so I’m not poluting the javascript namespace any more than absolutely required.

Other bits I’m working on are related to improving the new user experience and a new landing page for socialmail.

Oh and in case you haven’t seen it yet, check out the video that Larry (from lehsys.com) has made showing off the plugin.

SocialMail v0.1 has just been released and published to AMO. For those new to the site, the goal of SocialMail is to enhance the email experience and bring social networking features to Thunderbird.

Not much to note in this version from the previous releases, mainly house keeping changes, a few bug fixes and the most visible change being our new logo.

Thanks have to go out to my brother who did the core design and inspiration for the logo and my sister-in-law (not his wife) for the color scheme and refinement of the original concept.

GET IT HERE socialMail-0.1

This marks the end of what I wanted to accomplish in the first phase of SocialMail development, all the core functionality is there.   That doesn’t mean that development is stopping!  From here we are moving to increase the social networking functionality, bringing the networks into the email experience.

Here’s a few thoughts for what is likely to come in future versions (no promises though)

• Updating status on facebook/myspace/twitter/etc simultaneously from Thunderbird
• Viewing a contacts tweets when viewing emails from them
• Viewing contacts status and details from the individual networking sites.
• Fixing defects as they’re reported

By no means is this definitive, I’d appreciate any suggestions on what you would like to see in future versions.

One last word on release strategy,  I’ll try to post  frequent updates to this site as new features are added, but I will only update the AMO listing when fixing defects or minor feature enhancements to the current 0.1 stream.  This way I won’t be causing unnecessary updates to users who want a stable experience but those who want the bleeding edge (and it has that name for a reason) can see what I’m working on as it gets done.

I hope you enjoy this release, please post your feedback, good or bad (as long as its constructive).

-Daniel

It’s been a while since I’ve done any writing on InfoSec topics, but it’s my new years resolution to take it up again, so expect more articles on info sec stuff from now on.

DataBreaches.net have updated their list of the top 10 Data breaches of all time.   What I find most disturbing about the list, isn’t the volumes (although that’s still concerning), is that 4 of the top 10 were due to poor information management and/or lack of encryption.   The causes for the other breaches (such as insiders leaking information) are harder to solve, and as such a little more (not a lot though) understandable.

• National Archives (70 Million)
• Department of Veterans Affairs ( 26 Million)
• HMRC (25 Million)
• T-Mobile (17 Million)

With the exception of Veterans Affairs, all of these have occured in the last 2 years, when the use of disk/tape encryption technology came into the mainstream.  There really is no excuse for these type of breaches anymore, if companies made it standard practice to encrypt sensitive data where ever it lives, then that would mean that over the past 2 years there would have been 128 Million less records breached. That’s almost as many were revealed in the Heartland hack!

Of course the top 10 doesn’t include breaches that go unnoticed and unreported, and if you start thinking about that you start to wonder how bad the problem really is.

-Daniel

I’ve just discovered Ubiquity from the Mozilla Labs, and it’s showing a lot of promise for changing the way the we us the web.

From the site===

Ubiquity is an extension Ubiquity is an extension that allows you to enter commands that have knowledge of page content and return new information.
===via Labs/Ubiquity – MozillaWiki.

In essence it is a firefox extension that enables users to interact with webpages in different ways.   For example, I tried my hand at writing a Ubiquity Command “Press This”, the same as the wordpress button from the admin tools page, to that I could quickly grab interesting articles for later posting.

The code is pretty straight forward

CmdUtils.CreateCommand({

names: ["press this", "blog this"],
icon: “http://www.wordpress.com/favicon.ico”,
description: _(“Launch a wordpress page so you can write an article about the current website”),
help: “.”,
author: {name: “Daniel Thomas”, email: “danielt@networklighthouse.com”},
license: “GPL”,
homepage: “http://www.networklighthouse.com/”,
arguments: [{role: 'object', nountype: noun_arb_text},
{role: "url", nountype: noun_type_url, label: "url to reference"} ],
preview: function preview(pblock, args) {
pblock.innerHTML = “Loads a new tab for wordpress”;
},
execute: function execute(args) {
var doc = CmdUtils.getDocumentInsecure();
f=’http://www.networklighthouse.com/wp-admin/press-this.php’;
e=encodeURIComponent;
u=f+’?u=’+e(args.url.text)+’&t=’+e(doc.title)+’&s=’+e(args.object.text)+’&v=4′;
Application.activeWindow.open(Utils.url(u));

}
});

Thats it, and most of that can be stripped out.  Now that I’ve registered my code into Ubiquity all I need to do to bring up wordpress is select some text and either right click and select “press this” from the context menu or type “press this” into the ubiquity website.

Now if you want to use this code yourself, there’s a few things you need to do:

• Install Ubiquity (check out the link above)
• After restarting firefox browse to “about:ubiquity”
• click on “Hack Ubiquity”
• Paste the above code into the window, making sure you replace www.networklighthouse.com with your Blog’s URL
• Click Save to File and save it somewhere safe
• Thats it your done, try it out by selecting this article, pressing ctrl+space and typing “press this”

-Daniel