Fire Island Blog

Yahoo have launched a new AJAX-rich homepage and they’ve taken the bold step of designing for screen resolutions of 1024 x 768. Good to see one of the big hitters recognising that things have moved on. I’ll take that as confirmation that we don’t need to worry too much about people stuck in the dark ages. (Until we get our own meaningful stats, of course).

There’s an interesting article in the Guardian Technology supplement today titled What is the 1% rule? which looks at “an emerging rule of thumb that suggests that if you get a group of 100 people online then one will create content, 10 will ‘interact’ with it (commenting or offering improvements) and the other 89 will just view it.”

The article references statistics from YouTube, Wikipedia and Yahoo Groups and suggest that “a site that demands too much interaction and content generation from users will see nine out of 10 people just pass by.” This is clearly something to take into account when designing the new Festival Builder app.

I often use Flickr to look for interesting photos to use in mockups. I’m usually looking for a certain subject, so Flickr tags are a great fit for this. Trouble is it involves a few too many clicks and becomes frustrating if you do it repeatedly, plus Flickr searches default to ‘Most recent’ which are usually a bit dull.

So I made a little bookmarklet that I keep in my browser toolbar. Click it and it gives you a prompt box, enter the subject/tag you are looking for and you’ll be redirected straight to a Flickr results page filtered by ‘Most interesting’. Six clicks reduced down to just one!

Just bookmark this link or drag and drop it to your toolbar…
Find interesting pics of ‘whatever’ at Flickr

Well, this is a bit of a blow for any company building widgets targeted at MySpace users. In order to prevent the spread of Flash based adware worms, MySpace are inserting code into Flash objects that stops external links working. The latest version of Flash Player 9 is required for this ‘fix’ to actually work and you can bet ya life that MySpace are actively encouraging users to upgrade, indeed MySpace’s own video service now requires Flash Player 9.

I’ve just tried it myself and sure enough, Flash objects that have a simple getURL action written into them, which opens a site in new window, now fail to work when they are embedded in a MySpace profile. MySpace are actually inserting an extra parameter into the HTML code that users embed into their profile, namely allowNetworking=internal which prevents the Flash object from any communication with the browser, the chief use of which is usually to open a hyperlink to a third-party website. Now, obviously these techniques can be used for nefarious means and MySpace wouldn’t be doing their job if they didn’t protect their users from malicious attack. But in doing so they have crippled a great many legitimate, honest service providers.

This is potentially pretty catastrophic for any company that is using MySpace as a way to spread the word about their product or service. We hope that Fantasy Festivals will fall into this category in the future, once we have built our Flash posters.

There’s more detail at Techcrunch… MySpace security measure disables viral spread of widgets.

Utterly pointless, totally illegal but great fun! Fire Island radio is rocking live and direct at ya from, er, over there in the sidebar. Basically it’s just a few of my favourite tunes. If any one has any requests, just let us know.

Peter Cashmore at Mashable is reporting that Cooqy has managed to bypass the recent MySpace Flash link blocking fix. Cooqy provides a Flash interface for searching and browsing eBay auctions and it would appear that their MySpace profile carries Flash widgets that (on my PowerBook at least, with Flash Player 9 installed) can successfully open new browser windows.

I’ve taken a quick squizz at the code and it seems that MySpace has not inserted the crucial allowNetworking=internal attribute into Cooqy’s widget embed code. Check it out:

<embed src="http://www.cooqy.com/cooqyMain.lzx?lzt=swf&debug=false&lzr=swf8" quality="high" scale="noscale" salign="lt"  width="500" height="600" bgcolor="#ffffff" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" flashvars="server=http://www.cooqy.com&title=<i>Cooqy</i>"/>


So what’s different about Cooqy’s code and why has MySpace interpreted it differently? Well for a start they’re using Open Laszlo to power their site and to serve the widgets, just take a look at the src attribute above. Another thing that’s different is the string they’re inserting with the flashvars attribute.

It’s the flashvars line that seems to be causing getURL() actions to work, even when Flash Player 9 is installed. On closer inspection it seems to be the extra italic tags inserted into the flashvars attribute that causes the MySpace code parser to fail and to not insert that crucial allowNetworking=internal attribute. I’ve posted an example on my own MySpace profile and those extra italic tags do the trick. I too have a Flash widget (sort of) that can open new browser windows.

Try it yourself, does it work?

UPDATE:
MySpace have closed this loophole now