At lunch today, I saw a woman, probably in her 50s, wearing a fitted black T-shirt that said, in sparkly letters, “BOTOX”. Srsly. I couldn’t find any pictures of the design, but a commenter here says it’s a promo handed out to staff at plastic surgery clinics.

Comic-Con has completely sold out. Hmm, let me rephrase that. There are no more memberships available for this year’s Comic-Con International in San Diego.

Spam Karma has gone GPL — After years of support Dr. Dave has decided to stop maintaining his spam plugin and turn it over to the open-source community. The project is now on Google Code. Update 2015: And now it’s on GitHub.

I went by the Spectrum for lunch, and the line to get into the Apple Store for the new iPhone was still stretched past several storefronts into the nearest courtyard, right up to the fountain by the carousel — even though they’d launched that morning. Actually, I had several co-workers who were late today because they went down at opening for the launch.

From what I hear it was fairly chaotic, at least in the morning. Apple’s new policy of making you activate the phone in the store was causing delays, especially factoring in the fact that iTunes’ servers got swamped. That would explain why the line was still so long several hours after opening.

Usability note: One of said co-workers got tripped up trying to sync music to his new phone, because the default is to not synchronize music, and the “Sync only checked songs” box looked close enough to being the right option that he didn’t dig deeper.

Bart Allen as the FlashI’ve just launched SpeedForce.org, a companion blog to the website, Flash: Those Who Ride the Lightning.

Since I started adding news items to the front page of Ride the Lightning, it’s started to get a bit crowded. I thought about converting it to a Delicious feed, but then I realized it really ought to be a blog. There hasn’t been a major Flash-focused blog out there since Crimson Lightning shut down, so I figured I’d step in and fill the gap. And I could use the domain I picked up last year!

I’ll be posting Flash-related news there, including a weekly round-up of Flash comics, as well as articles that might not fit into the existing site structure, and (eventually) reviews as well. Some stuff that I would have posted here will end up on the new site. Certainly Flash news, but I may start shifting more comics-related commentary over there as well.

I’ll be refining the look and features over the next couple of weeks, and cross-linking it more into Ride the Lightning. I might keep the current theme with a few tweaks, or I might try to match Ride the Lightning, or I might build something else entirely.

So please, check it out and let me know what you think! I’m open to suggestions as to content, design, etc. And of course bug reports.

Yesterday the Los Angeles Times ran an article about the fact that, in response to soaring gas prices, smaller cars are outselling light trucks (which include SUVs, pickups, and minivans) in the US for the first time since 1996. Last night I was going through old magazines that we’d just tossed in a bag before moving. I found the September 2006 issue of Westways (the California Auto Club’s magazine), with a cover story about the new breed of small cars, wondering when the market would shift in response to the high prices. Now there’s timing.

On a related note, 9 months of driving a Prius has given me a somewhat different perspective on “good” and “bad” mileage. When I see averages of 38–48 MPG over the course of a tank of gas, and can get up to 60 MPG on straight, flat stretches of freeway, advertisements touting 25–30 MPG just don’t sound that enticing.

Last month, eWeek reported that PayPal intends to block unsafe browsersfrom accessing their site. They’ve focused on phishing detection and support for Extended Validation SSL Certificates. So what are these features, and why does PayPal think they’re critical? And just which browsers are they likely to block?

Phishing protection has an obvious appeal for a site whose accounts are one of the biggest phishing targets on the web.  Opera 9.1 and up, Firefox 2, and Internet Explorer 7 check the websites they visit against lists of known fraudulent sites. These browsers will warn the users before they accidentally type their credentials into a bogus log-in form. While this makes no difference when a user is already on PayPal’s site, it does mean the user is less likely to get his or her password stolen, and thieves are less likely to carry out fraudulent transactions with the account.

Extended Validation or EV certificates are like normal SSL certificates: they encrypt your web activity to prevent eavesdropping. What makes them different is that EV certificates require the issuer to verify the site owner more thoroughly. Browsers with EV support will display an indication that the site has been verified, usually by turning part or all of the address bar green. This is intended to give the user greater confidence that the site is legit. EV certificates are currently supported by IE7 and development versions of Opera 9.50 and Firefox 3. (You can preview a version of Opera with EV support by downloading Opera 9.50 beta 2.)

(It’s worth noting that Opera 9.50 beta 2 is stricter about verifying EV certificates, and will not show PayPal with a green bar because it loads images and scripts from another site. More recent preview releases will, like IE7 and Firefox 3, be satisfied if the main page is EV and the resources are all protected by regular SSL.)

So which browsers might get turned away at the gate?

In a follow-up story, PayPal clarified that they have absolutely no intention of blocking current versions of any browsers, and that they would only block obsolete browsers on outdated or unsupported operating systems. So an Opera 9 user on Windows XP isn’t likely to get shut out of PayPal anytime soon. But a Windows 98 user might have cause for concern.

Browser detection is extremely tricky to get right, requiring frequent adjustments. It looks like PayPal intends to take the minimalist approach: Assume most browsers are capable of handling what you send them, and only block the problematic ones.

(Originally posted at Opera Watch as a follow-up to Blocking IE6)

Sorry for the lack of updates this past week. I was just way too busy prepping for our move this weekend.

A couple of interesting news bits I noticed when I got into work this morning:

It looks like I’ve been lucky with installing Windows XP Service Pack 3. I’ve had no problems with the one machine I installed it on. According to Information Week, a lot of people are having serious problems with SP3, including BSOD on AMD-based systems.

Also, NetCraft has a screenshot of a PayPal page with both the green bar of an Extended Validation (EV) SSL certificate and a cross-site scripting (XSS) vulnerability. It’s a step or two beyond the standard lock icon, but there are still limits to what an EV cert can tell you. Unfortunately PayPal and others are really trying to drum “green bar = safe” into people’s heads.

»All pages site-wide with this tag