Saturday, May 30, 2009
Bounce over to the YouTube Slam Dunk channel to view the six finalists' videos and cast your vote for the best. Voting ends Monday, June 8th and the winner will be announced shortly thereafter.
Friday, May 29, 2009
Below is a graph from Google Trends showing search volume for both videos. (Gorilla in Red, Eyebrows in Blue) While Eyebrows has not yet reached the viral impact that the Cadbury Gorilla had in 2007,Eyebrows does have 5 Million views so far, and more and more parodies and remixes are showing up every week.
Gorilla continues to live on through remixes, as Cadbury slides over and lets the consumers steer the brand for a little while. Here are a few Gorilla remixes from fans featuring The Fray, Nirvana, Cameo's Word Up and Radiohead, as well as a remix with Total Eclipse of the Heart! and Wilson Phillips!
It's great to see CPG brands pushing fun and highly entertaining content, not to mention allowing the consumers to share their own creativity back with the world. Does it sell more chocolate? Staying top of mind and allowing others to build on to a super creative and entertaining video must have a positive branding effect.
Posted By Rich Godwin, Manager of Sales CPG West
Virginia voters - want to know what your next governor is going to do about traffic, taxes, or schools? You have just two more days to ask -- through YouTube or Google Moderator.
Google and YouTube teamed up with the Politico and ABC 7/WJLA-TV to launch a digital interview series for Virginia's Democratic gubernatorial primary. All three candidates -- Terry McAuliffe, Creigh Deeds, and Brian Moran -- have agreed to participate.
Make sure to tune in June 3 at 8 p.m. ET on ABC 7/WJLA-TV to hear the candidates answer questions direct from voters like this:
In its new incarnation, the UN's YouTube channel is particularly focused on providing timely content. Today, to mark the International Day of Peacekeepers, they released this video to highlight the fact that in 2008, 130 peacekeepers lost their lives in the line of duty -- the highest one-year total in the UN's history. They've also uploaded this piece, which takes a deeper dive into the unique challenges that female agents of peace face.
The UN is also uploading some unexpected videos to their channel. Sure, you can still find statements from Secretary General Ban Ki Moon and information about the latest UN endeavor to save lives. But you can also discover archival footage of Che Guevera speaking on the UN floor in 1964 or immerse yourself in this retrospective of sci-fi classic Battlestar Galactica:
So take a few minutes to peruse the UN's updated channel -- you may find information you were looking for, or stumble across a great video you didn't think you'd find.
YouTube Nonprofits & Activism
To begin at the beginning, Freenet divides all files into 32KB blocks (called CHKs), which are each fetched and decrypted separately. Then we have a layer of redundancy, and various complexities surrounding putting files together and putting in-Freenet websites together, which makes up the client layer. Before the db4o branch, uploads were persistent, but downloads were restarted from scratch after every restart, pulling huge numbers of blocks from the datastore (on-disk cache). Worse, memory usage was rather large if you had any significant number of downloads on the queue.
The db4o project puts the client layer (persistent downloads and uploads) into a database (db4o). I had initially hoped that this would be a relatively quick project, which shows how much I knew about databases then! We decided to use db4o in a fairly low-level way, specifically to minimize memory usage. We had heard from testimonials that some embedded applications had done this, but unfortunately this is not really the way that db4o is usually used, which caused some complications. Overall, the project took one developer most of a year, the final diff was over 46K lines of code covering 320 files, and went well beyond its original remit, solving many long-standing problems in the process. New architecture was required for optimal performance, including using Bloom filters to identify blocks we are interested in, a queue of database jobs, major refactoring in many areas of the client layer, a new system for handling temporary files, etc.
The effort was well worth it. Our client layer overall has vastly improved and Freenet now
- starts up quickly
- resumes work on downloads and uploads almost instantly on startup
- can have an almost unlimited number of downloads and uploads
- doesn't need the user to worry about or configure the maximum memory usage
- doesn't go into limbo with constant 100% CPU usage desperately trying to scrounge a few more bytes
- can insert DVD-sized files and huge websites (or git/hg repositories) on relatively low end systems
- uses fewer file handles
This project would not have happened without support from Google's Open Source Programs Office. It will be one of the most important changes in version 0.8 of Freenet when it is released later this year, and current work includes Bloom filter sharing, a new feature that should greatly improve performance both for popular and rare content. Google is also funding that project, watch this space!
By Matthew Toseland, Freenet Core Developer
With Friend Connect, your visitors can join your site using credentials they've already created with Google, Yahoo, AOL, and others, and link in the people they know on services like Google Talk, Plaxo, Twitter, and more. There's also a gallery of gadgets where you can choose from features like commenting, ratings and reviews, and the social bar to add to your site. Just like AdSense, you can simply copy and paste a few snippets of code to add these features to your site. Or, if you want to do some deeper integrations, you can use the Friend Connect APIs.
Watch this video to learn more about Friend Connect:
We're constantly adding more social gadgets, such as the event gadget, the Polls gadget, and the Get Answers gadget. To learn more about Friend Connect and other Google products helping to make the web -- and your site -- more social, check out the Social Web Blog.
Posted by Mendel Chuang - Google Friend Connect Team
If you're out and about, you can call GOOG-411 and get local information about businesses. Now we've made it even easier to orient yourself without a map in front of you: call GOOG-411, ask for 'details', and in addition to the address and phone number of the business, we'll also point you to the nearest street intersection or adjacent streets.
You can try it now: call 1-800-466-4411, look up 'Google in New York', ask us for more 'details', and we'll tell you that our Chelsea office is 'near the intersection with West 16th Street'. Unless you're a seasoned New Yorker, this might very well save you from walking up or down a few blocks.
The nearby intersections are available for most businesses in the US and Canada. They are derived automatically by an algorithm written on 20% time by Googlers in New York and London. Tell us other ways you would want to use this new feature -- we hope to expand it to other products soon!
Posted by Vincent Vanhoucke, Research Scientist and Arnaud Sahuguet, Geo Product Manager
As the world becomes more and more connected, a cyberattack on any nation's critical infrastructure -- its telecommunications system, electrical grid, and banking network -- could pose as serious a threat to its security as an attack carried out by a bomber or conventional forces.
With that in mind, today the Obama Administration announced the creation of a cybersecurity director and released the findings of its 60-day cyberspace policy review, offering recommendations on steps the United States government, working with the private sector, should take to guard critical networks from harmful attacks.
Strong partnerships and open lines of communication between government and the private sector will be the key to protecting critical networks. As the report explains, the "public and private sectors' interests are intertwined" when it comes to cybersecurity. Government agencies are in a unique position to help companies identify attackers' targets and methods of operation, while companies can share expertise and best practices for guarding private networks and protecting the privacy of user data.
We support the Administration's goal to make the Internet safer and more secure, and we look forward to continuing our work with policymakers, software developers, security experts, and our users to help do just that.
Thursday, May 28, 2009
Posted by Austin Rachlin, Inside AdWords crew
There are five basic classes:
google.wspl.Statement - A parametrizable SQL statement class
google.wspl.Transaction - Used to execute one or more Statements with ACID properties
google.wspl.Database - A connection to the backing database, also provides transaction support
google.wspl.DatabaseFactory - Creates the appropriate HTML5 or Gears database implementation
Also included in the distribution is a simple note-taking application with a persistent database cache built using the WSPL library. This application (along with Gmail mobile for iPhone and Android-powered devices) is an example of the cache pattern for building offline web applications. In the cache pattern, we insert a browser-local cache into the web application to break the synchronous link between user actions in the browser and server-generated responses. Instead, as shown below, we have two data flows. First, entirely local to the device, contents flow from the cache to the UI while changes made by the user update the cache. In the second flow, the cache asynchronously forwards user changes to the web server and receives updates in response.
By using this architectural pattern, a web application can made tolerant of a flaky (or even absent) network connection!
We'll be available at the Developer Sandbox at Google I/O to discuss the cache pattern, HTML5 development and the WSPL library. Check it out! If you have questions or comments, please visit our discussion list.
By Robert Kroeger, Software Engineer - Mobile Team
There are several different elements, including ones for Calendar, News, and Maps. But the one that may be of most interest to the readers of the Social Web Blog is the Conversation element. This element, powered by Google Friend Connect, lets your visitors post comments restricted to just your site or participate in a global conversation based on a topic of interest.
A global conversation takes place on several web sites simultaneously and will have a "Global conversation" label underneath the title. When visitors post to a global conversation on a specific topic, such as mandolins (as shown in the image below), the post not only shows up on the site where they posted it, but it also on any site that chooses to embed a Conversation element on mandolins, now or in the future. So now your visitors can talk about mandolins with others interested in the same topic, no matter what site they're on.
Because the Conversation element is powered by Friend Connect, visitors will be able to leave a comment by signing in with their existing Google, Yahoo, AOL, or OpenID account. Their photos will appear next to their comments and others will be able to learn more about them by viewing their profiles. And if they see comments in a foreign language, they can use the translate feature to view those comments in their own language.
You can choose from a number of predetermined topics such as cooking, movies, photography, and travel, or be creative and come up with a topic of your own. If you see a Conversation gadget you like on another site, simply click the "Embed this" link to get the code to paste it onto your own site.
We know that there are many topics you're interested in conversing about, and we're looking forward to seeing numerous global conversations ensue.
Posted by Cassie Doll, Software Engineer, Google Friend Connect
If you're a 3D enthusiast, then you'll probably enjoy the latest addition to the Google Earth Gallery: 3D Buildings. This new category provides a number of self-running tours on various themes. The tours showcase some fascinating 3D buildings (along with bridges and statues and other structures) around the world, most of which were built by our passionate Google SketchUp users who model buildings for Google Earth. Whether your interest is castles, bridges, museums, baseball stadiums or skyscrapers, I think you'll find a self-guided tour that is of interest to you.
The tours were developed by geo-modelers Adam and Jordan, both of whom are 3D experts who really know their way around Google Earth.
To play a tour, simply click on the "Open in Google Earth" link to download the KML file. Then click the "Start tour here" link in the "Places" panel in Google Earth (download the latest version of Google Earth). Make sure the "3D Buildings" layer is checked in the "Layers" panel. The tour will pause at each location to ensure the 3D building is fully loaded. Click the play button to continue the tour. Enjoy!
Posted by Bruce Polderman, Sr. Business Product Manager
By Leslie Hawthorn, Open Source Team
Google Analytics makes use of the same network of secure and reliable data centers used to power Google.com, making downtime an extremely rare occurrence. We have a large team focused exclusively on keeping your data safe and accessible, and benefit from multiple redundancies in our infrastructure around the globe (this makes us fast as well).
We even rely on Google Analytics for our own mission-critical products such as AdWords, which see huge volumes of traffic every day. If you're still having doubts, we'd encourage you to talk to some users and ask them how their experience has been with uptime.
MYTH 2: Google Analytics is basic and doesn't have any "advanced" features or metrics
Ack, this one is a tough one to swallow! A more frequent complaint is actually that Google Analytics has too much data. The product includes over 90 standard reports with more than 125 metrics and dimensions covering everything from visits to internal site search queries.
Custom reports and user-defined variables allow you to create your own metrics and reports where the standard ones don't meet your needs. With Pivoting, Advanced Segmentation, Secondary Dimensions, Event Tracking and the ability to share customizations, Google Analytics reports are more powerful than ever.
Google Analytics may look "basic," on the surface, but it can do a lot more than you think! If you have complex needs try talking to a Google Analytics Authorized Consultant or diving into the documentation on the Google Code Site.
More Info (Feature List, Custom Reports, Advanced Segmentation, Analytics API)
MYTH 3: Google Analytics only supports third-party cookies
False! Google Analytics has always used first-party, not third-party cookies. First-party cookies are important because they allow Google Analytics to track repeat visitors, so you can see which keyword, referring site, etc is responsible for bringing buyers even when it takes multiple visits for them to convert.
MYTH 4: Google Analytics is not really accurate
If you've spent time doing web analytics work, you'll know the sinking feeling that comes when two sets of numbers don't match. If you're experiencing a data discrepancy, don't panic. There are many others in the same boat.
For tips on how to sensibly approach data reconciliation, check out this post by Avinash Kaushik, Google's Analytics Evangelist, or this whitepaper on accuracy in Google Analytics. You can also talk to an expert.
More Info (Web Analytics Data Reconciliation Checklist, Whitepaper)
MYTH 5: It's not possible to export your data from Google Analytics
Not true! You have two options for exporting data. Use the "export" button at the top of each report to export the current view in PDF or XML (up to 500 rows). Or, use the new Analytics Export API to extract large amounts of data in any format you like. Also, if you want to share data with a colleague, you can schedule reports to be delivered directly to their email inbox, or even send regular updates to your own email address.
More Info (How to Export your Data, Analytics API)
You have three options for data sharing in Google Analytics. You can change these options at any time from inside your Analytics account.
- do not share your data
- share your data with Google to improve its products
- share your data anonymously for benchmarking
No matter which option you choose, your data is protected by several layers of defense:
- Dedicated security and infrastructure teams
- Multiple redundancies to prevent data loss
- Network redundancies to keep data accessible
- Advanced security, firewalling and routing to keep data secure
- Restricted access and principle of least privilege for personnel
If you're still concerned, Google also offers a software product called Urchin (www.urchin.com) that you can run locally.
Contrar! We flipped the model. Instead of providing an expensive analytics product with a one-size-fits-all professional services plan, we provide a free product and let you purchase the professional services that fit your needs.
There are several ways to get support: email support, help forums, the help center, and a network of Authorized Consultants. Authorized Consultants speak your language, accept your currency and often share your timezone. More than 80 companies across the globe provide a full range of installation and analysis support for Google Analytics. Some examples of things they can help you with are:
- Validate and troubleshoot your installation
- Integrate your analytics data with other data sources or CRM
- Optimize your marketing efforts
- Train your staff on how to use Analytics
- Respond to support tickets, phone calls and provide on-site consulting
More Info (Google Analytics Authorized Consultants)
MYTH 8: Google Analytics does not support A/B or multivariate testing and isn't well-integrated with other tools
Google offers a full range of marketing products including a free testing tool called Google Website Optimizer. You can use it to test different page elements and find out which ones yield the highest conversion rate and ROI. You can also use Google Analytics in conjunction with Website Optimizer to create an optimization plan for your site.
Google Analytics is also integrated with many of Google's other business products including AdWords, AdSense, and AdPlanner. It is also widely supported by third party tools ranging from content management systems, to email suites, to call center applications. In addition, you'll find many products that are complementary to Google Analytics including DoubleClick, TVAds, Webmaster Tools, Google Trends, Insights for Search, Feedburner, and more.
More Info (Google Website Optimizer, GWO Blog)
MYTH 9: You can't segment data in Google Analytics
In the fall of 2008, Google Analytics released three new Enterprise Features: Advanced Segmentation, Custom Reports and Motion Charts. Advanced Segmentation lets you segment visits by dozens of metrics and dimensions such as geographic location, time on site, referral site and much much more. You can create segments on the fly and apply them to virtually all the standard reports in Google Analytics as well as custom reports.
More Info (In Depth Look at Advanced Segments, Video)
Getting a return from your Analytics data does take an investment. The most important investment to start with is making sure you or someone at your organization has the expertise and time to put your data to use. If at that point you still feel you need to pay more for a more complicated tool, that's OK, but remember that every dollar you spend on a tool takes away from money you could be spending on actually getting results, i.e. hiring or contracting a talented analyst (see the 90/10 Rule).
The question sometimes comes up, "if Google Analytics is free, what's in it for Google?" Google benefits from Google Analytics in two ways. First, if webmasters build better sites, it helps us connect searchers with the information they need faster. Second, if advertisers use Google Analytics, they are able to see their advertising ROI, which helps us demonstrate the value of Google AdWords. Both aspects have helped create a strong business case for Google Analytics over the years.
Google Analytics is getting more powerful with each new update, and you may be surprised by what it can do. Find out more by attending an Analytics Seminar for Success or talking to an Authorized Consultant in your area. If you're an AdWords advertiser, you can also speak with your Customer Service Representative.
More Info (90/10 Rule, Google Analytics Authorized Consultants, Seminars for Success)
That's it for the top 10 myths. Still not convinced? Leave a comment and let us know!
Posted by Sebastian Tonkin, Google Analytics Team
For more information and for sample applications, see the documentation.
We've set up a discussion group to collect feedback. So, help me out, fellow geeks! Try out this API and let me know what you think and share any cool gadgets you write.
Moishe Lettvin, Software Engineer
As always, Jens came up with the answer: communication. He pointed out that two of the most spectacular successes in digital communication, email and instant messaging, were originally designed in the '60s to imitate analog formats — email mimicked snail mail, and IM mimicked phone calls. Since then, so many different forms of communication had been invented — blogs, wikis, collaborative documents, etc. — and computers and networks had dramatically improved. So Jens proposed a new communications model that presumed all these advances as a starting point, and I was immediately sold. (Jens insists it took him hours to convince me, but I like my version better.)
We had a blast the next couple years turning Where 2's prototype mapping site into Google Maps. But finally we decided it was time to leave the Maps team and turn Jens' new idea into a project, which we codenamed "Walkabout." We started with a set of tough questions:
- Why do we have to live with divides between different types of communication — email versus chat, or conversations versus documents?
- Could a single communications model span all or most of the systems in use on the web today, in one smooth continuum? How simple could we make it?
- What if we tried designing a communications system that took advantage of computers' current abilities, rather than imitating non-electronic forms?
A "wave" is equal parts conversation and document, where people can communicate and work together with richly formatted text, photos, videos, maps, and more.
Here's how it works: In Google Wave you create a wave and add people to it. Everyone on your wave can use richly formatted text, photos, gadgets, and even feeds from other sources on the web. They can insert a reply or edit the wave directly. It's concurrent rich-text editing, where you see on your screen nearly instantly what your fellow collaborators are typing in your wave. That means Google Wave is just as well suited for quick messages as for persistent content — it allows for both collaboration and communication. You can also use "playback" to rewind the wave and see how it evolved.
As with Android, Google Chrome, and many other Google efforts, we plan to make the code open source as a way to encourage the developer community to get involved. Google Wave is very open and extensible, and we're inviting developers to add all kinds of cool stuff before our public launch. Google Wave has three layers: the product, the platform, and the protocol:
- The Google Wave product (available as a developer preview) is the web application people will use to access and edit waves. It's an HTML 5 app, built on Google Web Toolkit. It includes a rich text editor and other functions like desktop drag-and-drop (which, for example, lets you drag a set of photos right into a wave).
- Google Wave can also be considered a platform with a rich set of open APIs that allow developers to embed waves in other web services, and to build new extensions that work inside waves.
- The Google Wave protocol is the underlying format for storing and the means of sharing waves, and includes the "live" concurrency control, which allows edits to be reflected instantly across users and services. The protocol is designed for open federation, such that anyone's Wave services can interoperate with each other and with the Google Wave service. To encourage adoption of the protocol, we intend to open source the code behind Google Wave.
If you're a developer and you'd like to roll up your sleeves and start working on Google Wave with us, you can read more on the Google Wave Developer blog about the Google Wave APIs, and check out the Google Code blog to learn more about the Google Wave Federation Protocol.
If you'd like to be notified when we launch Google Wave as a public product, you can sign up at http://wave.google.com/. We don't have a specific timeframe for public release, but we're planning to continue working on Google Wave for a number of months more as a developer preview. We're excited to see what feedback we get from our early tinkerers, and we'll undoubtedly make lots of changes to the Google Wave product, platform, and protocol as we go.
We look forward to seeing what you come up with!
Posted by Lars Rasmussen, Software Engineering Manager
Wednesday, May 27, 2009
Posted by Amanda Kelly, Inside AdWords crew
Of course, my spreadsheet of choice is the kind I can access from anywhere and share in real time – in Google Docs. So, some would say that even when it makes no sense, I try to do things in a spreadsheet (case in point – my poker simulator – why'd I do that?) But there are some things I never thought possible, like sending an email or reading my calendar.
That's why we're excited to announce a limited test of a new feature which lets people add customization and automation to Google Apps, starting with spreadsheets in Google Docs. We call this feature Google Apps Script.
Check out the Google Apps Script overview, below, and watch our example of sending email from Google Spreadsheets.
As Google Apps Script is in limited test, we see it as a puppy who's still in training. In fact, just this week, he learned to fetch (URL content) and speak (translate to other languages). But we think he's ready now for some time outside his yard.
So we're inviting a limited number of Google Apps domains – about a thousand organizations – to start playing with Google Apps Script and giving us feedback so we can quickly understand which tricks would be the most beneficial to learn next.
If you're like me and like to stretch spreadsheets to their limit, and don't mind working with early release features, you can get involved in Google Apps Script now by applying to join this limited test phase.
Posted by Jonathan Rochelle, Product Manager, Google Docs
Get timely updates on new features in Google Apps by subscribing to our RSS feed or email alerts.
So what's new?
* Particularly great answers can now be marked as a "Best Answer,” so users with a similar problem can find the solution quickly and easily.
* The new Help Forum keeps track of user reputation. You can immediately tell which posters are YouTube employees, top contributors, seasoned posters, or new posters. As users make positive contributions to the Forum, their reputation will increase, and so will their capabilities.
* Other benefits of the new Help Forum include the ability for you to link to Help Center content, blogs, websites, YouTube videos, and images in your posts.
What about the content from the old Help Forum?
The content from the Google Help Groups will not disappear, but we are closing the Help Groups from additional new posts. You can post all your questions and answers in the new Google Help Forum. Don't worry -- you'll still be able to search and read previously posted Google Help Groups content through the Help Center.
Definitely stop by the new Help Forum, give us feedback on what you like or don't like, and make yourself at home...
See you soon!
The YouTube Team
My fellow engineers and I wanted to give a peek into some of the challenges we face and how we're trying to make search even better. We created a series of short videos so you could hear straight from the engineers. Here's mine, where I talk about a change to spell suggestions.
Some of the videos may talk about things you are already familiar with and some may be new. Either way, we hope that you enjoy hearing these stories, and do stay tuned for more!
Posted by Patrick Riley, Software Engineer
To address these growing needs, last year we introduced the Google Visualization API, a powerful API that enables anyone to build apps and display data from Google spreadsheets, as well as enabling visualization in the cloud from any data source connected to the web.
Companies can create and use reporting applications from the Google Visualization Gallery that can be integrated anywhere on the web. The gallery offers dozens of visualizations, from pivot tables and heat graphs to the celebrated motion charts and timelines.
We have also opened up the gallery so that any developer can include their new innovative visualizations and make them available to others. To facilitate multiple data sources, we have published an Open Wire protocol that specifies how to make any data source ready for use by the Visualization API. And we recently announced the Google Secure Data Connector (SDC), which enables to keep the data sources behind a company firewall, while serving visualizations and other apps in the cloud.
All of these abilities bring us closer towards Open Visualization in the cloud, and today we take one more big step in this direction. We believe that these enhancements will facilitate innovative and more accessible visualizations of business information, helping enterprises communicate with information in ever-better ways.
Posted by Nir Bar-Lev, Head of Analytics, EMEA, and Yossi Matias, Head of Israel Engineering Center
It’s been just over a year since our affiliate business became part of Google. To say a lot has happened seems obvious but I am proud of what our team has accomplished. To name just a few of the achievements: a new brand & UI, numerous platform enhancements, fantastic client and employee satisfaction in the midst of integration and many, many, new customers. Google Affiliate Network is fully integrated operationally within Google. We had an exciting year, but I am even more excited about where we are going.
Our focus remains the same, drive exceptional customer satisfaction through affiliate channel growth; however, being part of Google brings a mindset in how to best achieve our goals. A culture focused on the user and the tenet that ads must be high quality now permeates the Google Affiliate team.
Our goals are clear as we invest in our Platform, integrate our Network and continue to refine and evolve the Practice of Affiliate Marketing. To this end, we recently launched an “opportunities center” in the platform allowing advertisers to more easily identify underperforming relationships. This capability generates growth by improving optimization. We currently are beta testing data feed integration with Google Base which will drive growth with improved category taxonomy and data validation, as well as an improved user experience for advertisers who will only have to send one feed to Google. Publishers benefit from a higher quality data feed. The integration with Google Base is also an example where integration with other Google products and systems enables our Affiliate engineers to focus on affiliate innovation, while the engineers supporting Base will drive that product forward. Our team and our users benefit in many ways from Google’s scale and engineering excellence.
Google brings a focus on making decisions based on facts and data, rather than intuition. Our Practice embraced this focus, and has conducted more than 20 structured optimization projects this past quarter, resulting in measurable lift in program performance. These are just a few of our accomplishments to date, and the possibilities and ideas endless.
There is a lot of hard work ahead. I am sure we will make mistakes and things won’t go as fast as we want. But know that we are 100% committed to our customers’ satisfaction and to bringing unprecedented innovation to affiliate marketing. Our collective futures are very bright.
Thank you for your business and continued support.
Head of Google Affiliate Network
Our API blog keeps developers in-the-know on the latest happenings in the YouTube API world, and this page on YouTube gives a comprehensive overview of where to start, how to build custom players for your site, widgets to play with, instructional videos, developer forums, and more. On May 27-28, many avid developers will convene in San Francisco for the Google I/O developer conference to learn from each other and share best practices.
While all those tech-heads are getting together, we wanted to start a new series in this blog that shows you the best of the fruits of their labor. For example, take the upload. Sure, you can go to YouTube and click the yellow "upload" button on the homepage. But there are actually many ways for a video to go from point A (your recording device) to B (YouTube), all made possible by creative use of APIs:
* Android 1.5 sports a one-click upload process which happens in the background so you can do other things while the video is being uploaded. Learn more about it in this Google Mobile blog post.
* iMovie has one-step publishing to YouTube. Apple has details here.
* Qik automatically updates your live stream to YouTube once the stream is completed. Go to the Qik site here for more info.
* Eye.Fi offers an SD (Secure Digital) card that you can insert into your digitial camera enabling you to upload videos wirelessly from the camera to YouTube. Read a product review from the Washington Post here.
* Flip is an ultra-portable digital camcorder with software that makes it easy to upload recorded videos to YouTube. The camera plugs directly into your computer's USB port.
Then there are some pretty cool slideshow apps, which make it easy to turn photos into videos:
* Animoto heralds itself "the end of the slideshow."
* One True Media "perfectly mixes" your life for family and friends.
* Aquasoft sells slideshow creation software.
And games. You probably already know about SPORE's Creature Creator app, which blew up on YouTube last summer. Turns out, there are other games making good use of YouTube's API:
* PixelJunk Eden fans can capture video of game recordings and upload directly to YouTube. More info in our API blog here.
* GoldenTee gives you the option to upload to your YouTube account if you make a great shot. There's a wireless connection inside each game, meaning that if you're in an arcade or bar without an Internet connection you can still upload videos worthy of bragging rights.
What YouTube apps have you seen that made you drool with excitement? Tell us about them in the comments below and we may include them in a future blog post here or in the API blog.
The YouTube Team
We'll be back with more news as the conference progresses. In the meantime, you can follow updates on the @googleio Twitter stream; videos of all sessions will be available on code.google.com shortly after they conclude.
Posted by Emily Wood, Google Blog team
I want to share some examples that might help build understanding of the problem and motives behind hacking and spamming, and also offer some online resources to help organizations avoid these problems as much as they can.
If we look at [site:.edu free ringtones], we will see a lot of examples of different educational institutions being exploited by hackers for their high traffic and well-known names. For aspammer , acquiring links from a high-traffic site can artificially give their sites more worth and manipulate search results in their favor.
An example we often see is hackers using an exploit in a sites database (SQL Injection) or in sites that have unchecked areas for user input (XSS). A way to look for this is to run the site: query mentioned above (site:.edu free ringtones) and take look at the URLs of the sites that show up. If you see some trailing parameter like [/?p=ringtones], then your site is most likely hacked. Here are some steps you can take to prevent your site from getting hacked:
- One way to avoid SQL injection hacking is to escape all dangerous characters from input fields, with "dangerous characters" being those that can access and change the database behind your site.
- For both SQL injection and XSS hacking, creating a layer between the user input data and your back-end systems creates a space where you can check inputs and make sure that a user is not entering malicious code.
- Another potential exploit can occur if the root or any subdirectory of your site uses an open source CMS like Joomla or WordPress. In this situation, it is really important to make sure the CMS software is updated with every new release to make sure you are using the most secure version.
For more on hacking, check out this Google Webmaster Central Blog post: http://googlewebmastercentral.blogspot.com/2009/02/best-practices-against-hacking.html.
Forums can also be points of access for hackers and spammers. Does your site have a forum? If so, do a quick site search on your forum section [site:example.com/forum/]. Do you see anything fishy in the snippets, like "freeringtones"? If your forum is not about ringtones , this may very well be a case of comment spam. Any sort of platform where users can freely post their own comments, including hyperlinks, is a target for comment spam – especially if your website ranks high in the search results. The main reasoning behind comment spam is aspammer wants to get as many people as possible to visit their site and spend money there. The spammer can post several links on forums, guestbooks, etc., pointing to their own site, to help artificially boost their ranking in search results. Here are some precautions you can take:
- Every time a user wants to add a profile or comment on the forum, require them to complete a CAPTCHA. This creates an obstacle for automated software to generate profiles and comments.
- Add spammy keywords like "free ringtones" and "online casino" to a blacklist to block comments like this from showing up.
- Install a plug-in that automatically detects and blocks spam posted to the forum. Akismet is an example of this.
For more on comment spam, check out this Google Webmaster Central Blog post: http://googlewebmastercentral.blogspot.com/2008/09/keeping-comment-spam-off-your-site-and.html.
Staying aware of the latest spam and hacking trends, regularly monitoring the activity on your site, and being vigilant about updating your applications and plug-ins are key to keeping your website safe fromspammers and hackers. We've provided some Google resources here:
Webmaster Central Blog (http://googlewebmastercentral.blogspot.com/) – Search for blog posts written by Googlers about how to secure your site.
Webmaster Central Channel on YouTube (http://www.youtube.com/googlewebmasterhelp) – See video tutorials on all things webmasters.
Webmaster Help Center (http://google.com/support/webmasters/) – Find help articles on various webmaster concerns, including what to do if your site has been hacked.
Webmaster Help Forum (http://www.google.com/support/forum/p/Webmasters) – Chat with your fellow webmasters about past and present experiences with being spammed or hacked, and get a variety of perspectives on how to protect your site.
Webmaster Tools (http://www.google.com/webmasters/tools/) – If you're not already registered, this is a great way to monitor how your site looks on Google. You can see what kind of sites are linking to you, and the top queries users type in to get to your site.
In addition to the links provided above, it's also a good idea to seek out more knowledge that is specific to your web server, applications, and plug-ins.
Posted by Adi Goradia and Charlene Perez, Search Quality Team