I don't write about my work at Mozilla on this blog as I have another blog (with comments that work) where I post all of my Mozilla-related information. However, this recent article with Mozila CEO, John Lilly, Forget Facebook. The Web's platform is Firefox by Matt Asay is a great overview of why I love working at Mozilla and why it's such an exciting time to be working on the web.
Recently in Mozilla Category
For the next 24 hours+, you'll find me over at Mozilla 24.com
Wow. Very nice day for StumbleUpon. I hope they remember that they got popular on the platform that is Mozilla and Firefox.
If you're running Firefox 1.5, this is the last update. Please upgrade to Firefox 2.0 if you have not done so already.
Very interesting job for the right person.
GigaOM has arranged to have a site for free invites into the Joost beta. If you haven't tried out Joost, please give it a go. You'll probably be surprised to hear that the technology that Joost is built on is the same platform that Firefox and Thunderbird are built on.
Here's a bunch of links to posts about offline storage in Firefox.
Firefox 3 To Support Offline Apps
Bluish Coder: Offline Zimbra with Firefox
Well, I'm Back: Offline Web Applications
Mark Finkle’s Weblog � Firefox 3 - Offline App Demo
* * * * * * *
"Firefox is just a browser." Very funny: xkcd - Perspective
(I am still preparing for posts on my China trip, but I wanted to first address the issue of monoculture as it is very relevant now.)
What would you say if I told you that there was a nation that was at the forefront of technology, an early adopter of ecommerce, leading the world in 3G mobile adoption, in wireless broadband, in wired broadband adoption, as well as in citizen-driven media. Sounds like an amazing place, right? Technology utopia?
Wrong.
This nation is also a unique monoculture where 99.9% of all the computer users are on Microsoft Windows. This nation is a place where Apple Macintosh users cannot bank online, make any purchases online, or interact with any of the nation's e-government sites online. In fact, Linux users, Mozilla Firefox users and Opera users are also banned from any of these types of transactions because all encrypted communications online in this nation must be done with Active X controls.
Where is this nation?
South Korea.
UPDATE: photo of Korean Hangul keyword search visualization seen at Naver's lobby.
I traveled to South Korea last fall to learn more about the South Korean Internet market and came away disappointed and frankly stunned.
I met with leading businesses in the search market, the music download market, the games market and all reported the same situation- a monoculture of users using MS Windows. The S. Korean market is in a unique situation where decisions made long ago have created a consumer monoculture which is having unintended repercussions that are affecting anyone with a computer in South Korea. It is a fascinating story because it is true.
The history goes back to 1998, when the 128 bit SSL protocol was still not finalized (it was finalized by the IETF as RFC 2246 in Jan. '99.) South Korean legislation did not allow 40 bit encryption for online transactions (and Bill Clinton did not allow for the export of 128 bit encryption until December 1999) and the demand for 128 bit encryption was so great that the South Korean government funded (via the Korean Information Security Agency) a block cipher called SEED. SEED is, of course, used nowhere else except South Korea, because every other nation waited for the 128 bit SSL protocol to be finalized (and exported from the US) and have standardized on that.
In the early years of SEED, users downloaded the SEED plugin to their IE or Netscape browsers, either an Active X control or a NSplugin, which was then tied to a certificate issued by a Korean government certificate authority. (Can you see where this is going?) When Netscape lost the browser war, the NSplugin fell out of use and for years, S. Korean users have only had an Active X control with the SEED cipher to do their online banking or commerce or government.
So we end up in 2007, 9 years after SEED was created for Korean users, and one legacy of the fall of Netscape is that Korean computer/Internet users only have an Active X control to do any encrypted communication online. So in late 2006, a group of Korean computer/Internet users, Citizens Action Network at Open Web Korea, having documented the problem with accessibility of sites via anything other than Microsoft IE, have decided to sue the Korean government.
It gets worse.
Remember how Active X controls were and continue to be a significant vector of viruses and malware because Microsoft originally architected Active X to run by default instead of with a user action? Maliciously programmed websites would be able to automatically install software on users' computers just by visiting a web page in IE 6. In IE 7 and in Vista, Microsoft has re-architected Active X controls in such a way to make them "more safe" by requiring a user action for the control to run. This is obviously impacting every web site and company that uses active X controls on their websites, which include just about every website in Korea that handles any kind of secure transaction. Every online bank, every governmental agency, every ecommerce site. Without enough time to re-architect Korean websites, 3 S. Korean governmental ministries, the Ministry of Information and Communication, the Ministry of Government Administration and Home Affairs, and the Financial Supervisory Service, warned S. Korean users that upgrading to Vista would disable the user from making any secure transaction online. Can you imagine spending thousands of dollars on a new machine (because the requirements of Vista generally require new hardware) and a new OS from Redmond only to be locked out of any secure transaction online? It's Kafkaesque.
To add insult to injury, the monopolist who absolutely controls the Korean market for computers won't delay the launch of Vista to alllow for Korean websites to re-code their sites. "We've been testing Vista with banks and other service providers since September, but we encountered more delays than we expected. We plan to release the product as scheduled."
Absolutely incredible.
A related problem is that KISA and Microsoft announce "plans to work together to improve computer security awareness" or "mark anniversary of cooperation with renewed pledge" when in fact the situation in 2007 is no better than it was in 2003 when KISA decided to "work with Microsoft." I can't tell who is the fox and which is the hen house, but either way, the two should not be near each other.
Another part of the Korea story that I cannot comprehend are articles about Linux in Korea. The Korean Army considering Linux. Kwangju City as "Linux City." If the Korean Army or Kwangju city cannot do any encrypted communications because their operating system of choice does not work with Active X controls, I'm not sure if this is hype or confusion.
To get the most depth and perspective on this topic, from the people in Korea who are suing the government, it's best to read the documents at Open Web Korea.
This issue with the launch of Vista and IE 7 and the work of thousands and thousands of web programmers in Korea who are feverishly working to reprogram their sites to work with Microsoft's new standards - do they realize that their efforts only bring them back to square 0 - there's no more heterogeneity in the Korean Internet market post-Vista than pre. The problem for Korean websites wasn't competition from MSN Korea, it was their sole dependence on infrastructure from Microsoft.
Korea will only get beyond this problem by 1) applying Korean laws on open standards to the certificate authorities, 2) reassigning new certificates which work with open web standards to all Koreans, 3) reprogramming all Korean websites to support 128 bit SSL which will allow for a heterogeneous marketplace of operating systems and web browsers. This is a herculean task and thus Korea stays hostage to Redmond.
Fascinating history. Unintended consequences and de-facto monopolies create costs too high to calculate and must be borne without question.
If you enjoyed this article, please take a moment to digg it :)
RELATED READING: the seminal report "CyberInsecurity: The Cost of Monopoly," and the related eWeek piece profiling Dan Geer, "IT Wrestles with Microsoft Monoculture Myopia" which goes over this same topic from a different but related perspective.
Via Anil Dash.
Looks interesting.
In a nutshell, I'm exploring ways for you to use your network of trusted friends to determine what's good, bad, and dangerous on the internet. Outfoxed does this by adding functionality to the Firefox web browser.
I will write about China but not yet.
I've been catching up on my blogs and whatnot since coming back to reliable Internet connectivity in Tokyo.
I'm going to lump a bunch of links together with comments. If folks like this format better, I may continue this but I like being able to have comments around particular links. We'll see...
---
Brian Krebs of the Washington Post had an article "Internet Explorer Unsafe for 284 Days in 2006" up last December highlighting the fact that Firefox is patched more quickly than IE and that IE was critically unpatched for the majority of 2006. He's released his data sets today.
---
Who patches better: Microsoft or Mozilla?
Mozilla's chief of security, Window Snyder, is interviewed at Techtarget. It's a decent overview of how Mozilla is different vs. Microsoft (we're clearly very different.)
---
Arai has a new helmet out for those of us with "long oval" skulls.
I'm a "long oval" so I hope they make one in my size.
---
We're doing monthly Foxkeh wallpapers with or without calendars. (Foxkeh is the mascot for Mozilla Japan.)
The January Foxkeh calendar is ready for download and we should have the February ones up soon.
---
“Economic impact of open source software on innovation and the competitiveness of the Information and Communication Technologies (ICT) sector in the EU”
300 page survey of open source software which says Firefox is the most popular OSS they surveyed (among many other findings.)
---
Paul surveys the new KDDI AU phones that are coming out this spring.
Glad I waited.
---
Declining internet music downloads in Japan?
Andreas has crunched the numbers and his conclusion is that Japanese music downloads to PC are declining but downloads to mobile are rising. He's got his data sets from the RIAJ online too.
---
Fukumimi reports that Rakuten finally embraces web services.
楽天 「楽天市場」のAPIを公開「楽天ウェブサービス」β版の提供を開始
---
A few new items in the Mozilla Store:
Firefox Performance Fleece
and the perennial favorite
Firefox Ogio Messenger Bag (I've seen this one in person and it's very cool. I'm getting one for myself and a few friends.)
---
Mixi releases Mixi Mobile statistics
Fukumimi parses the recent PR from Mixi around their mobile statistics.
---
