Web Design Secrets For Professional Photographers: Five Keys to a Successful Website

By : Robert Provencher

Professional photographers are aware that if they are going to be in business, they are going to need a website. This is particularly true for photographers who focus on wedding photography and portraiture - potential clients want to see what you can do before they give you a call. Even if they do happen to call before viewing your work, they may ask for the address of your website. If you don't have one, rightfully or unrightfully, you may be considered an amateur - and perception is just as valid as reality.

Many companies, like Yahoo! and GoDaddy.com and many others will provide software for you to create your own pages if your sign up for their hosting services. Some photographers may find it easier to let a professional web designer put their site together for them. Or better yet, learn the basics of web design and create your own. That way you get to add samples or monthly specials whenever you want. Either way, there are five key elements that every site should have. Most web designers focus only on the design element of web creation and fail to see the sales power and marketing muscle that can be yours when used effectively. Here are five key ideas:


1- You must establish credibility - freely present your credentials and a nice portfolio. Avoid unprofessional graphics at all costs, misspellings, and grammatical errors. The most important message you can telegraph to your prospect is your work. In it holds your biggest benefit that you bring to your prospect. They must be able to see your best work, and as many samples as possible.

2- User-friendliness - make it easy for your site visitors to navigate - they shouldn't have to go backward to go forward. Or wait for slow loading flash files or work their way through cluttered layouts. And, please avoid the number one mistake that 90% of the photographers do over and over. What is it? Black background with light or white text. I know, I know, you want to look cccooooolll and artsy. But the fact is, and many studies have proven this to be true, that black text on white is the most easily read. Think about it. We read newspapers, magazines, books etc etc etc....alll black text with white backgrounds. Why do you want to go against the current? Ego. That's why. Don't let your ego steer you. Let common sense be your guide.


3- Include a Frequently Asked Questions (FAQ) section. You'll be the one to write and answer the questions, anticipating your customer's needs for information. This is your chance to add facts that don't fit neatly onto your other pages. Of course you can include portrait planning tips, location ideas that work best for specific portrait ideas or at certain areas in your area. Include as much information as you can possibly come up with to pre-emptivelly answer the questions your prospect has in their heads. This is a great opportunity to help your prospect in a consultive way. You will be perceived as professional and someone whom they will want to do business with.

4- Promote your site. By this I mean managing traffic that arrives to your site through search engines and other online methods or any traffic that is generated by other media sources outside of the web, such as your local newspaper, yellow pages, business cards etc. You can easily and readily find out how many searches are done using specific search terms to do with your city or town. Have your site optimized so it ranks high enough in the search engines and you will get pre-qualified and targeted leads visiting your site. You can also buy qualified leads from google.com or overture.com. Your websites' job is to effectively sell these leads into clients. Overture and sites such as wordtracker .com have programs you can use to help you research search terms.

5- Sell. That's right, sell. Too many portrait studio owners are afraid of selling. They seem to think it is nasty and negative thing. Fact is selling is simply offering a fair and mutually beneficial service. The more you tell you better you sell. You mustn't be afraid to extol the virtues of your service by making offers, pointing out the benefits and backing up those benefits with the features. The truth is people are afraid of salespeople who don't reveal enough information. That's why your website is the perfect opportunity to sell, and have the site do a lot of the selling for you by using an informative and consultive approach.


A website should be a reflection of what your business is. You can't add anything to your web site message that conflicts with the reality that already exists. If you offer great service and products and have a great reputation within your community, your website will be an extension of that message.

A website will not magically create anything for you. You must have something to offer. This is your message. It is what makes you and your business different from all others. Your website is merely a delivery method of your message. An extension of you and our studio.

If you have an innovative approach to your packaging and products, that is a part of your message and it will and should be used as part of your sales message. If you have a dirty, cluttered place and your website suggests otherwise, what kind of message will you give to clients when they do show up at your place of business after they've checked out your website?

Take a good look at what exactly your business message is. What is your typical client like? How do they usually buy from you? These are basic, yet essential questions that will reveal more information for you to use in your marketing arsenal.

Remember that your website is an ad, and advertising is selling. Selling is serving. And serving is informing. With that golden rule as a guide you can never create ads or offers that otherwise would hold anything other than the customers needs as top priority. And you will profit by building a trusting and repeat client base.

Printing Digital Photos Online

By : Marc Lindsay

Most people who buy a digital camera would often go out later to buy a photo printer. It's perfectly fine to do this however what most people don't know is that it's cheaper in the long run to print your photos online. Let's go through why this is the case.

Digital Photo Printing At Home

Let's say you bought a camera for $400 and you then decided to print your own photos at home. You buy an average photo printing for around $200. It'll cost you around $40 (almost double for a new cartridge) to change your colour ink cartridge and that's if you recycle them. However using recycled ink cartridges can cause your printing to break down. On top of that you'll also have to buy photo paper for around $50 for a pack.

If this is still ok with your budget and maintenance cost, you'll be surprise to see the quality of the prints when they come out. If you have an average printer you won't be pleased with the quality. And if you're after quality you'll have to get a better printing which could set you back around $300 to $500 depending on the model. You'll still have to pay for ink and paper which could cost more depending on the model.

Now if you can accept all the disadvantages of printing at home you'll be even more disappointed to know that if you wanted to print a large size photo, you're printing might not be able to do so.

Digital Photo Printing Online

Printing your photos online is an alternative solution for people who don't want the hassles and cost involved with having your own home printing lab. Online printing websites all come with facilities for you to upload and enhance your photos if you haven't already done so.

Some online photos shops even allow you to print your photos on T-Shirts, mugs, calendars and much more.

And one of the major benefits of online printing is that you can save money when you print in bulk and you can also get them delivered right to your door step!

If you haven't already tried online printing I do suggest you give it a go and see how you like it. It's very fast, cheap and saves time because you can get them printed while at work or in a café.

Ballmer: Yahoo brand will live

By Ina Fried

Microsoft says it can find $1 billion in cost cuts by combining Yahoo's business with its own Internet services operation, however CEO Steve Ballmer says the Yahoo name isn't one of the things on the chopping block.

"Yahoo, the brand, will live," Ballmer told BusinessWeek.

Even if the brand lives, though, it is unclear which of Yahoo's technologies Microsoft would adopt. A merged company would have to choose among two e-mail systems, to ad platforms and two instant messaging systems, to name just a few of the many overlaps.

Microsoft has thus far offered few details on what it might look to cut if its deal goes through, and Ballmer didn't offer much in the way of new details in the magazine interview.

Of course, the biggest hurdle at the moment is convincing Yahoo to take its offer, one which has declined in value since it was made last week.

Better your Gmail, again

By Seth Rosenblatt

Better Gmail 2 is a Firefox extension that collects a bunch of Gmail customization scripts from Greasemonkey under one control panel. The latest update, to Version 0.3, brings Better Gmail 2 mostly up to speed with features that were in the original Better Gmail, but had to be abandoned when Google rewrote Gmail's code last November.

The biggest of the latest additions include a revamped insertion of Google Reader into the Gmail user interface. This is not merely a rehash of what came before, but a better-looking, faster-loading UI that makes switching between Gmail and Reader seamless.


There's also a new rollover highlight for messages. The highlight colors aren't customizable, but it's still a great little tool for grabbing your attention, and the colors change depending on whether the e-mail you're currently mousing over has been read or not. One-click conversations have returned, too. This tool inserts a small head-and-shoulders icon in between the star and the e-mail sender. Click on it to show all recent conversations with that person.

Skins are back, with two flavors for those who get sick of Gmail's layout. "Grays and blue" gets rid of most of the white in the interface in exchange for a more muted palette, while the Gmail Blue Skin leaves the whites intact but creates different shades of blue backgrounds behind the navigation options. Both include substantial font changes.

The plug-in's other features are nothing to sneeze at, either. You can forced encrypted connections for security, change the attachment icon to reflect the file type, modify keyboard shortcuts, automatically show message details, and more. Better Gmail 2 is a must-have Firefox extension.

Napster kicks it old school with MP3

By Jasmine France

For my money, one of the most exciting pieces of news coming out of CES this year is Napster's announcement that the service will be offering up its entire download catalog in the DRM-free MP3 format. It may not be free, but it still hearkens back to the olden days of Napster. Of course, Amazon.com's digital music store has been selling MP3 files for months now (and eMusic much longer than that), but having another major online music service push for the most universal of digital music formats is just one more step in the right direction--it makes things infinitely less complicated for the consumer to have access to one type of file that will play back on any MP3 player or computer.

The change is set to roll out in the second quarter of 2008 and will apply to Napster's entire catalog of pay-per-download tracks and albums. Subscription tracks will still come in the DRM-wrapped WMA variety, a necessary evil for that type of service.

Glogster brings glitter graphic blogging to the masses

By Josh Lowensohn

Glogster is a new publishing tool that's been making the rounds over the last week. The service is focused on letting people create "posters" of various bits of premade and user-generated content using a Flash editor. Unlike some blogging platforms, Glogster has no inclination to go after people who want to write something every day. Instead, the site is geared toward the tween crowd, or anyone else who enjoys partaking in glitter graphics, or those strange greeting cards with dogs and cats that have been Photoshopped to have enormous eyeballs. That being said, using the right tools, Glogster users can create classy looking stuff with a distinct visual style, even if it's got a single-use, disposable life cycle of something like an e-card.

Glogster's editing tool is simple to use, although a little flawed from the get go. Its categorization, which divides up all the content you can place onto a Glog, places a limited number of items together that the user must then sort through one piece at a time. Considering the amount of preproduced content that can be placed on the page, it's an exercise in patience for people to find what they're looking for. In comparison to what I consider a comparable Flash editing environment, video mashup tool Flecktor and competing scrapbooking service Scrapblog do a far more graceful job at putting all the options in one place. The one saving grace is that anyone can dive in and start making a "Glog" without having to register with the service, which is a great way to get a feel for things. Each premade item is also a vector graphic, meaning you can resize it ad nauseum and it won't get pixilated.

Besides being a niche publishing platform, Glogster doubles as a social network of its own. Users can add each other as friends, and each Glog gets its own place for comments and a five star rating that can get it featured on the "top glogs" section. Users can also embed a Glog elsewhere (example), although for some strange reason you can't pick out how big it is, so it looks enormous nearly anywhere you put it.

While there's no integration with some pre-existing photo and video hosting services to help users pull down media they've already had to upload, my guess is that Glogster will add that later down the line. In the meantime, you're required to upload both pictures and videos, the latter of which requires a fair bit of processing after upload before you can add it to a Glog. Scale that to three or more video clips and things get tedious.

I'm not quite sure what to think about Glogster. It's certainly not ugly, but it can be in the hands of its users, who have already created a wide array of Glogs that fall mostly on the side of visual overload. It's amazingly simple if you're just sticking to images with text captions, although compared with Scrapblog, it's missing some of that panache and easy integration that I think keeps users coming back.

Web achievements 101: Things to do before you die

By Josh Lowensohn

While the Internet might be a soulless place that's mostly devoid of any real human warmth or compassion, there are certain things that make it better. While there might be a YouTube, we're still very much the me generation when it comes to defining a personal identity online. Some of these "Web achievements" people pick up over the years require some serious talent. Others can be had with a little luck. We've compiled a list of some of the more prominent ones--consider it a list of things to do on the Internet before you die.

Skill.
Achievements that require talent, skill, or personality

Get on Flickr's interesting picture wall. Flickr's interestingness algorithm is based on several qualities of user interaction with a photo. Flickr lists them as "where the clickthroughs are coming from; who comments on it and when; who marks it as a favorite; its tags and many more things which are constantly changing." In short, it's about how popular your photo is on an aggregate scale.

Chances of it actually happening: Depends on skill. It could be one of the best pictures on earth, but if nobody's looking at it, you're out of luck. That being said, the photos you tend to see on Flickr's explore page (the listing of interesting photos) tend to be great-looking, but even the occasional bad shot of something amazing makes the cut.


Make the YouTube featured videos list. This elusive honor puts your video on the front page of YouTube.com. Many unknown artists have gotten huge view counts and channel subscriptions out of a front page spot, which gets millions of eyeballs each day.


Chances of it actually happening: Slim. The smattering of videos in the featured videos section on the front page is picked out by a team of YouTube editors. These folks are in charge of cool hunting, and given the amount of content that's uploaded to the site each day, the best way to get noticed might be to get picked up on some other social sites for visibility first. Mark Glaser from PBS' MediaShift has a great post on the editorial process here.


Get your post on The Best of Craigslist. This elusive honor is reserved for some of the best-written, or just plain obscure postings on the popular classifieds site. There's no real science to it beside the fact that your post must be nominated by a certain amount of users before it's picked out from the crowd.


Chances of it actually happening: Slim. Getting on Best of Craigslist is incredibly tough. Nationwide only a handful of posts are picked out each week, and you're relying on Craigslist users to not only read what you've written, but nominate it.


Making the front page of social news site like Digg, Delicious, Reddit, Slashdot, and Newsvine.


Chances of it actually happening: Reasonable. The beauty of getting on these sites is that you don't have to write an article you're submitting. In most cases, the only responsibility is to write title and description. Adding a little style and flair to the original title and description can do wonders. On the other hand, writing a story, taking a picture or video that makes the front page of any of these sites is a far greater achievement than simply adding the link.

Continue reading to learn about repetitive and ego-stroking achievements galore...

Become the Reddit's all-time karma gainer. We'd classify this under repetition, except that Reddit's karma system actually requires users to submit quality content. If you're just spamming the site with a bunch of useless links, your karma will be buried into oblivion.


Chances of it actually happening: Not without some work. If you're unemployed or working for a news wire service you might have a shot. Otherwise, you probably won't be able to keep up with some of the folks on top who are submitting more than a dozen quality news links each and have been every day for years.


Repetition.
Getting these requires countless grinding or tireless participation

Acquire Elite status on Yelp.com. Becoming a Yelp Elite isn't an exact science. According to the Yelp Elite info page, people are picked out based on a number of qualities, ranging from writing style to how much content they're adding to the site. That being said, it doesn't happen overnight. For some it takes months of countless reviews.

Chances of it actually happening: Pretty good as long as you're willing to invest yourself in the site and participate. The payoff is invites to private parties, and a snazzy looking profile badge. In the case of Yelp's latest shindig, Elite members got to get into the party an hour earlier than everyone else.

Reach your Gmail in-box size limit. Google is currently giving everyone a little over 6GB of storage, but it wasn't always like that. Google broke ground by giving people 1GB free along with a little counter that would add more and more storage as time passed. Throughout the years they've tweaked the speed of the counter along with total storage. The service is now at six times the original storage capacity.



Chances of it actually happening. Depends on use. It's happened before, and it can happen again. While most home users will be fine--if you're trading around a lot of media files that max out that 20MB attachment limit, that space can eventually fill up. To those who have crossed the sacred threshold and fear deleting old messages, Google offers a paid storage expansion option to push the account up to 400 GB at a mere $500 a year.

Egosphere cred.
These are the nerdiest achievements of the bunch, and will make you feel important 2.0


Make the Twitterholic 100. The Twitterholic listing is based purely on followers on the popular microblogging service Twitter. These are people who are following your tweets, not the number of friends you have, or how many times you've updated your status.


Chances of it actually happening. If you're a male or female blogger with lots of fans, or a large Web news service, it's in the bag. Otherwise you probably need to know at least 1,000 people with Twitter accounts who want to pay attention to what you're saying. Currently No. 100 has a little over 1,100 followers with the No. 1 garnering nearly ten times that.

Get publicly slammed by Dave Winer. If you don't know who Dave Winer is, he probably doesn't know who you are either. Winer, who helped create the Web standards for podcasting, blogging and RSS is well known for writing or saying snarky things ranging from people to products.


Chances of it actually happening: Slim. If you've built a popular Web app or retail product with some usability flaws, the damage might already have been done. He could also simply disagree with your opinion.


Make the front page of Valleywag. Silicon Valley's self-proclaimed gossip rag is a blog at heart, and that means getting on it requires garnering the interest of its editors. Getting a mention on Valleywag holds more than some freebie potential traffic. You can become a hallowed member of its Facebook group "I got slammed by Valleywag."


Chances of it actually happening: Decent. Getting on the front page of Valleywag is no easy task but if you leave your cell phone unattended at a bar, are attractive, or and are dating one of Google's founders, you're a shoo-in.

Convert Firefox into a text-only browser

By Dennis O'Reilly

Last week I described how to use a simple Javascript to determine the age of a Web page. The only problem: if the page has any dynamic elements that update automatically when the page loads (and these days most Web pages do), the script shows the current time and date.

For pages without auto-update content, type javascript:alert(document.lastModified) into the address bar and press Enter to see a window pop-up with the date and time of the page's last update. I'm still looking for a way to find out how recently specific content on a Web page was updated.

As I was looking for such a method, I stumbled upon a great Firefox add-in from Chris Pedericks called the Web Developer Toolbar (download). As the name implies, the free toolbar is intended to help Web designers test their pages, but it can also be used to show only the text of Web pages, which often makes them easier to read--and to print out.

After you download the toolbar, click Options and check Persist Features. Next, click CSS*Disable Styles*All Styles. Now click Images*Disable Image*All Images. Lastly, click Disable*Disable JavaScript*All JavaScript. You'll see only the page's text, and perhaps a couple of broken-image place markers. Be warned, however, that the results are rarely pretty.

In addition to making the pages easier to print, the text-only versions are also much easier to scan for specific information. (Note that you can retain much of the page's original formatting--minus images--by keeping CSS enabled.)

Tomorrow: Put Microsoft Word's styles to good use.

Google's privacy faux pas with Reader

By Elinor Mills

In its attempts to add social elements to products, is Google pulling a Facebook?

Google Reader has allowed people to share items they are interested in with others since 2006 with hyperlinks, clips on blogs and storing them on a public page that you had to know the URL for to see.

Last week, Google tweaked Google Reader so that your shared items are automatically made available to your Google Talk contacts.

But, as anyone who uses instant messaging knows, not all of your IM contacts are friends. Many are acquaintances or people you barely know and with whom you may not want to share a reading list.

Recently, Facebook was forced to modify its new Beacon ad targeting service that notifies friends in your network when you buy things on sites of Facebook partners. Facebook made that an opt-in feature, however, after consumer groups and Facebook members complained the service violated people's privacy.

Google, too, has been crucified in the blogosphere over its Google Reader change, with bloggers saying the Google Talk contact sharing feature should be opt in, not opt out.

To calm the masses, Google posted an item on the Google Reader Blog that explains the company's reasoning behind the change and tells how to clear the shared-items list and how to tag items to share with a limited number of people.

"We'd hoped that making it easier to share with the people you chat with often would be useful and interesting, but we underestimated the number of users who were using the Share button to send stories to a limited number of people," the blog says.

Danny Sullivan, editor of the Search Engine Land blog, writes: "Frankly, a better solution would be to dump the friends sharing feature until it comes back in a new form, where you specifically and deliberately create a list of contacts that you do want to share material with."

DNA dating site predicts chemical romance

By Elsa Wenzel

The first dating service to use lab-based genetic profiling launched online last week. Scientific Match promises to pair up people who will be physically attracted to each other because their DNA is different.

Well-matched couples will like each others' natural scents, have more fun in bed, and bear healthier children than those who are genetically similar, the company claims.

The service, available only in the Boston area, charges $1,995 for a year-long subscription.

"I strongly believe this will dominate the future of dating services," said founder Eric Holzle, a mechanical engineer.

Members swab their cheeks and send in saliva samples. A lab spends two weeks analyzing the immune system genes, and then the company matches individuals with genetic profiles that are unalike.

"We look at six specific genetic reference points on DNA, and none of those six can match to make a match," Holzle explained.

He was inspired by a well-known "sweaty T-shirt" study of a dozen years ago, in which biologists found that women liked the smell of dirty shirts worn by men who were immunologically dissimilar to themselves.

As with other online dating sites, Scientific Match's users can fill out written profiles and upload photographs. Genetic details are not displayed, except to indicate a match. The service runs criminal background checks to exclude anyone who has committed crimes involving violence or identity theft.

Scientific Match is open to straight and gay people. However, women taking the birth control pill are turned away because some studies show they are more attracted to men with similar immune system genes.

The success or failure of the service can't be measured, however, with only a handful of customers so far. Although Holzle doesn't guarantee finding one's true love, he insists that people paired by Scientific Match will at least smell appealing to each other.

The romantic role played by scent is well-documented in poetry and science. Perfumers even add synthetic versions of pheromones, suspected aphrodisiacs found naturally in the body, to fragrances that include Paris Hilton's eponymous perfume.

But the ability to bottle attraction or to predict it through genetic profiling remains unproven by science.

Scientific Match sounds more like pseudoscience to Dean Hamer, the molecular biologist and author credited with discovering "gay genes."

"That sounds like a complete and utter rip-off that preys on people's lack of knowledge of causation and correlation," he said, adding that people could wrongly write off a potentially great mate due to genetic discrimination. "Why don't they just smell their underarms?"

Nevertheless, entrepreneurs are sure to try to capitalize on advances in genomics and biotechnology to reshape the landscape of high-tech matchmaking. The field is wide open. For instance, nobody has tried to set up couples based upon genes that have been linked to promiscuity or libido strength.

And Googling a date's full genetic code could be on the distant horizon. The cost of sequencing someone's DNA has dropped to the low six figures.

The latest online services to incorporate genetic testing include startup 23andMe, Ancestry.com, and the Genographic Project, which sell swab-and-send testing kits for uncovering the deep roots of a family tree.

YouMail manages mobile voice mail like e-mail

Jessica Dolcourt
I'll come right out and say it. The biggest problem with my first experience with YouMail may have been my own human error, or bad timing. The biggest problem with my second experience is a controversial capability I tackle later on in the review--so keep reading!

In my original review of the voice mail system that lets you manage voice messages online, I said YouMail had a lot of potential, but wasn't delivering on its promise of catching my voice mail messages. It could be that I skipped a beat, and missed punching the crucial star (*) key when entering YouMail's phone number into the Motorola Razr V3 handset I tested with. Or, offers YouMail's PR representative Derek Brookmeyer, I may have actually done this as the signal cut out, in which case YouMail would not have completed my voice mail forwarding, and Verizon would not have warned me the action was unsuccessful.

So now, the complete review:

YouMail's concept fits snugly into the intersection of two meta trends--personalized greetings (such as Vringo) and online mobile management (such as Dashwire). However, since you program YouMail to take over native voice mail duties, it involves a lengthier time investment up front.

YouMail users receive notification of new voice messages from both text and e-mail (you can disable that if e-mails start building up.) Checking voice mail on your mobile phone reroutes you to YouMail's service, which plays your message, and which gives you options to reply, save, delete, or skip messages, or change your individualized greeting for the caller.

Clicking the e-mail notification opens a new YouMail.com window and plays the voice message. On YouMail.com, voice messages are indeed handled like e-mail, with the regular functions to save, trash, flag, and sort messages. Replying to a message sends the caller either a text or an e-mail wrapped in YouMail's branding, your choice. Users are also able to record customized greetings for select callers, a really unique surprise for a buddy. Or a nasty one, depending on the message you leave. I'm imaging high school break-ups via YouMail: "If you're wondering why I'm not picking up the phone, it's because we're over!"
In addition to YouMail getting interactive with a hands-on approach to voice mail management, it also goes Web 2.0. with a few publishing tools. This is, perhaps, a little too chic for comfort. Users who enable message sharing can choose to broadcast voice mails they receive by e-mailing the message, linking to it, embedding the WAV or MP3 file onto a Web page, or publishing it to Digg, Del.icio.us, Furl, or Spurl with a single click.

While YouMail's privacy statement promises to shield your e-mail address and phone number, it says nothing about walling off your voice content. In fact, YouMail stands behind sharing, explaining to me in a PR conversation that there's little difference between YouMail's message broadcasting capabilities and the tape recording taken of Alec Baldwin's incriminating voice message left on his daughter's cell phone. If I had let that PR call go through to voice mail, I could have embedded it here.

The comparison doesn't inspire much confidence, and it's YouMail's biggest flaw. As much as I'd love receiving a sweet or funny voice note directed to me when I call a friend, I cringe at the thought that any message I leave them could be so swiftly distributed. Of course, with a few tools, anyone is capable of digitizing a voice message that anybody else leaves, but the fact that callers have no choice in the really simple publication of their voice message could, at the very least fuel some individual embarrassment, and at the most, fuel an ugly debate about digital voice rights. For now, as with e-mail messages, letters, and other forms of private communication-gone-public, it comes down to a users' judiciousness and sensitivity.

Apart from that, YouMail's free voice mail management is a well-integrated solution for making more out of mobile messages. Verizon, AT&T, and T-Mobile subscribers can most easily try YouMail for themselves by following directions online. Have your phone ready. Sprint subscribers have to ask a customer service representative to implement the voice mail forwarding to YouMail's central number. Do this only if you have minutes to spare.

How do you like YouMail? Tell us your take on the service in the comments below.

Firefox churns to version 2.0.0.11

By Stephen Shankland

Mozilla on Friday released the third update to Firefox this month, version 2.0.0.11, to fix a stability problem in the previous version.

"We strongly recommend that all Firefox users upgrade to this latest release," a post on the Firefox developer blog said.

The open-source Web browser update arrived swiftly after version 2.0.0.8, released October 18, version 2.0.0.9 from November 1, and version 2.0.0.10 from November 26. Which explains why I'm getting a lot of software update messages from my Web browser.

Version 2.0.0.10 broke a feature that lets images be displayed with special effects such as rotated pictures and image reflections, according to Mozilla's bug-tracking site. The problem was fixed within a day and distributed within five, but not before some whose sites were affected by the bug had voiced frustration.

"Customers are complaining because their Firefox automatically updated to 2.0.0.10 and now they can no longer order photo prints in our shop. I think this is a very serious problem and I hope it will be fixed immediately in a 2.0.0.11 update," a post by Klaus Reimer said.

In an indirect response, Firefox coder Nick Thomas pointed to mailing lists that people can use to test their sites with imminent new Firefox versions. Thomas also said that the five-day turnaround is "the fastest turnaround between Firefox releases to date."

As long as the Mozilla coders are stamping out bugs, one that's annoyed me has become more prominent of late because it shows up when I install a Firefox update.

When I restore my Firefox browser sessions upon rebooting my computer, it's impossible to get rid of the "You've been updated to the latest version of Firefox" page. Even if I close that tab, it comes back later, so I have to start with a clean browsing slate to make it go away. It's not a stability or security problem, but it's not a credit to what is a notably influential project.

Mozilla released the first beta version of Firefox 3, called Gran Paradiso, less than two weeks ago. The second Firefox 3 beta should be done in "late December" if all goes well, according to another Mozilla developer blog post Friday.

Better Gmail gets even better

By Seth Rosenblatt

If you're tired of waiting for Google to make some much-needed improvements to Gmail, Better Gmail has been adding useful functionality to the e-mail client since earlier this year. An update earlier this month finally gave Gmail what users have been clamoring for: integration with Google Reader.

Written by Lifehacker editor Gina Trapani, the extension is basically a collection of her favorite Greasemonkey scripts. It does more than just slap your feeds onto the bottom of your in-box, though. It adds a Collapse/Expand Gmail link to the top-left nav, just under the Compose link. This hides your e-mail and pulls the Reader up to the top, and swtiches to Expand when the in-box is hidden. It also adds a control panel to central left nav for managing your feeds, a neat work-around so that you can collapse the Reader's built-in navigation. The Reader pane is collapsible, too, so you can hide the perpetual distraction of feeds from the perpetual distraction of e-mail.

King.com launching new revenue-sharing games site

By Josh Lowensohn
King.com is launching its new user-generated casual games site, MyGame.com. The service combines some of the professionally made casual games offered on King.com alongside user-generated titles and those made by users with a Web-based game creation tool. Game creators who publish on MyGame.com can opt-in to a revenue-sharing program, which pays off ad clicks. The service is also promoting an advanced payment scheme similar to recording industry contracts that pays in advance to popular titles.

I had a go with MyGame's game creator yesterday, and had a good time with the three titles that are currently available for editing. Users can upload a picture either off their hard drive, or by using their Webcams. MyGame will do its best to map your face, as well as give you a quick and dirty cropping tool to fine-tune. You can then test the game to make any last-minute adjustments to your face.

Once done, users (even unregistered ones) get quick-sharing links, along with embed codes to put their creation on a blog or Web site, which I've done below. Users who decide to register with the service are given some extra power tools, like a stats manager, high-score list, and guest book.

I'm looking forward to seeing some of MyGame's future game offerings, along with some of the user-submitted content, although between Kongregate's recent inclusion of badges, and that oh-so-addicting McDonald's Flash game, MyGame must compete for my unfortunate lack of attention span.

Teach English in your spare time with TalkBean

By Rafe Needleman
At a conference today about South Korean tech companies, I got a demo of TalkBean, a marketplace that connects people who want to learn English with those who can teach it.

I'll get the snarky bit out of the way up front: The site needs to take its own lessons. Marketing slogans like, "TalkBean will do our best to provide you with diverse culture and profitable experiences," and error messages such as "You need to put number for this section," seem out of place on a site that's trying to help its customers play in the global job market for English speakers.

That said, the economics of such a matchmaking service are interesting. Eighty percent of all Koreans are "English Learners," the company says, while 6.8 million "Native English Speaker are unemployed in USA." Obviously only a small subset of those are qualified to teach English (I can see an amusing Saturday Night Live sketch emerging here), but why not hook up learners and teachers?

Working in TalkBean's favor is its technology. The site connects students to teachers via voice, video, and text chat, and there's a screen-sharing window for exercises (text or drawing) where tutors can mark up a student's work. There's a nice scheduling system. Also, TalkBean has an arrangement with Korea's government bank so learners can easily pay for their lessons online, even though the money is going to overseas contractors.

Working against TalkBean is a lack of guidance for teachers. There are no prebuilt lesson plans and there's no guidance for pricing. Tutors can charge between 5 cents and 10 dollars a minute (TalkBean collects a commission of 27 percent). What should you charge if you want to try this service out? Good question, although the pitch I heard said that some of the 500 teachers already online were making $300 a day when they worked, so do the math. Also, the beta site is painfully slow.

Skype, and other services such as Ether, also offer marketplaces for voice and video consulting. TalkBean's focus is good, though. While the site needs to mature quite a bit, it looks like a marketplace with a strong base of both buyers and sellers.

Haute Secure pledges safe-surfing toolbar for IE

By Robert Vamosi

A new security company, Haute Secure, is offering a free beta version of its safe surfing toolbar for Internet Explorer that blocks malware from downloading onto your desktop. Firefox support is expected soon. Entering an already crowded field, the Haute Secure toolbar hopes to distinguish itself by taking the best of Exploit Prevention Labs Linkscanner Pro and McAfee SiteAdvisor, and then adds additional layers of protection. If they can pull it off with the final release, Haute Secure could be a must-have add-on for both Internet Explorer and Firefox.

The Haute Secure toolbar hooks into 70 processes running on your Windows XP or Windows Vista machine. Forty of these are related to browsers (in the initial release, Internet Explorer). The remaining hooks will be used for specific applications such as Microsoft Office PowerPoint and Adobe Acrobat.

Unlike McAfee SiteAdvisor, which tends to block an infected site entirely, Haute Secure allows access to the page after stripping out the malicious elements. And unlike SiteAdvisor, Haute Secure doesn't use a database, but analyzes each page on the fly, similar to the approach used by Linkscanner Pro.

And like Linkscanner Pro, the Haute Secure toolbar is also able to block specific elements of a page that are deemed malicious, allowing you to view the page safely. Haute Secure also uses phishing reports from Stopbadware.org, and can warn you of fraudulent sites, although in initial testing Linkscanner Pro blocked more phishing sites than did Haute Secure on our test machine.

In addition to proactive scanning, the Haute Secure toolbar also uses white and black lists to block known bad sites. Haute Secure was founded in 2006 by former Microsoft security engineers.

Slow, but very pretty searching with SearchCrystal

By Josh Lowensohn
A new alternative search engine that caught my eye this morning is SearchCrystal, a very experimental-looking tool that combines multiple search engines in a rich visual design. Each search engine gets its own color code, and results that show up in a large circle. When an item is listed on more than one search engine, it's given its own geometric shape showing which engines picked it up, along with lines that link up identical results. The goal is to give you a visualized results page that lets you compare a few engines at a time without having to scroll down one large list.

The results are split up into five different areas--one for each search engine. These engines vary by what you're searching for, be it photos, videos, news, or blog postings. In the case of blogs, SearchCrystal will pull results from Sphere, Bloglines, Google Blog search, Technorati, and BlogPulse. There's also a mode to just view Wikipedia articles. Each string shows the top 10 results in order, with the ones closer to the middle of the sphere being more important. The end result makes it look similar to a dartboard.

The one real hurdle with SearchCrystal is that it's slow. Most searches took about ten seconds a pop, with the longest taking just over 20 seconds. This is just simply too long for a casual search. Likewise, it has a learning curve--you're probably going to stare at the swarm of results the first time you try it out before knowing what you're supposed to do. While not difficult to pick up, I can see someone like my mom not knowing where to start.

As usual, there's a Facebook app for SearchCrystal. You can also e-mail it, or embed it in a blog or site with the query of your choice, which I've done after the break.

Latest Firefox 2.0.0.5 update fixes nine flaws

Mozilla patched nine vulnerabilities including the Firefox portion of the Internet Explorer-Firefox flaw identified last week. That flaw occurs when IE passes malformed URLs from IE to another application such as another browser. Mozilla wrote, "this fix only prevents Firefox and Thunderbird from accepting bad data." And it stated in boldface, "this patch does not fix the vulnerability in Internet Explorer."

This security update also addresses known issues involving browser crashes, privilege escalation, and cross-site scripting vulnerability. Current users of Firefox 2.0.0.4 or earlier will be automatically prompted to install the new version starting today. You can learn more about the update or download a fresh copy of Firefox 2.0.0.5 at this site or Mozilla site.

Firefox and IE together brew up security trouble

by Dawn Kawamoto
That's the latest update from security researchers who initially laid the blame on Microsoft's Internet Explorer for the latest zero-day exploit that also can afflict those using the Firefox Web browser.

Users could face a "highly critical" risk if they have both IE and Firefox version 2.0, or later, loaded on their computer. The trouble begins when browsing a malicious site while using IE and it registers a "firefoxurl://" URI (uniform resource identifier) handler, which allows the browser to interact with specific resources on the Web. As a result, users may find their systems remotely compromised.

Earlier Tuesday, security researcher Thor Larholm, who discovered the IE flaw, and security research giant Symantec put much of the blame on IE, while Secunia's Thomas Kristensen, chief technology officer, attributed the problem to Firefox versions 2.0 or later.

"It's a little bit of both," said Oliver Friedrichs, director of Symantec's Security Response Center. "You have two very complex applications that are not playing well together and leading to a security issue. The components themselves are secure as stand-alone products but not together."

"Firefox is the current attack vector, but Internet Explorer is to blame for not escaping...characters when passing on the input to the command line," said Larholm, in response to a reader's comments. "I agree that Firefox could have registered its URL handler with pure DDE (dynamic data exchange, the protocol for information exchange) instead and thereby have avoided the possibility of a command-line argument injection, but IE should still be able to safely launch external applications."

Friedrichs noted that while Firefox, which released version 2 in October, has gained in popularity, most Firefox users will also have IE loaded on their computers, since it comes with the Windows operating system.

The number of people who may be at risk could be substantial, he added.

Meanwhile, Kristensen of Secunia said: "A new URI handler was registered on Windows systems to allow Web sites to force launching Firefox if the 'firefoxurl://' URI was called, like ftp://, http://, or similar would call other applications."

But because of the way the URI handler was registered by Firefox, it causes any parameter--which activates a program to perform a particular task--to be passed from Microsoft's Internet Explorer, or another application, to Firefox, when firefoxurl:// is activated.

An attacker may use "chrome" context--the interface elements of a browser that create the frame around its page displays--to inject code on a user's system that would be executed within Firefox, Kristensen said.

"Registering the URI handler must be done with care, since Windows does not have any proper way of knowing what kind of input potentially could be dangerous for an application," said Kristensen. "For example, how should Windows know that the string 'chrome' could be dangerous for Firefox."

Other than avoiding malicious Web sites, system administrators could unregister, or remove, the "Firefox URL" URI handler, as well as change the way Firefox accepts the chrome input, Kristensen said.

With GreenBorder, Google gets deeper into Net security

Google's purchase of GreenBorder Technologies--a browser virtualization software company that creates a sandboxed environment for your existing Firefox or Internet Explorer browse--follows on the heels of Google announcing a blog from its nascent antimalware team. With rumors of a possible forthcoming antivirus acquisition, the Mountain View search giant has jumped into the Internet security business feet first.

Nerves must be raw at traditional security vendors Symantec and McAfee. Last year Microsoft announced its own security suite, Microsoft Windows Live Onecare, and proceeded to capture a lion's share of sales in the Internet security suite space. Now Google is arming itself with online security products, possibly providing these tools for free. Unlike Microsoft, Google's drive is more focused. Where Microsoft is providing tools to defragment your hard drive and backup files in addition to their firewall and antivirus choices, Google appears to be protecting their main asset: online businesses.

In a paper, "The Ghost in the Browser" (in PDF), Google's antimalware researchers looked at several billion Web sites. They studied a subgroup of 12 million web sites, within which they found 1 million engaging in drive-by downloads of malicious code. Overall that's only 0.1 percent (less than 1 percent) of all the Web sites, but any one bad experience on the Internet is enough to threaten Google's long-term usefulness. By purchasing software technology that protects the end-user from malicious code, Google is ensuring that most people enjoy an event-free experience while surfing the Internet.