More MySQL tips

Nice list of yet more MySQL tips here courtesy of Fabulous Entertainment (entertaining indeed!) who cites a talk on Google Video by Jay Pipes which I must look at...

Scrolling and the page fold: data!

Nice data illustrating users' scrolling behaviour from ClickTale on their blog. It helps to dispel the myth that users don't scroll (but Nielsen himself reported this in his 1997 Changes in Web Usability Since 1994). I love the histograms -- it's great to see data (plus they look like meteorological Talagrand diagrams, aka rank histograms, which I used to work on!) Interesting... plus the software uses JavaScript (it's client-side after all).

Firefox grunges RSS feed display

Just trying to adapt an RSS feed with an XSLT stylesheet: Works fine in IE6 :-) but lo! Firefox ignores the XSLT and renders the feed itself :-(

Seems I'm not the only one (but at least a year behind the rest!): Bugzilla #338621 includes the following suggestion (and a lot of discussion!)

The emerging workaround for this problem (which isn't new to us, since we're using the same heuristic that IE7 betas have been using for months) is to put in a comment ranting about the evils of sniffing web content and overriding the desires of web developers which is long enough to move "<rss" or "<feed" out of the first 512 bytes, since that's all we sniff.

There's no way we can tell the difference between XSLT intended to style a feed into something that's not a feed, like yours, and XSLT intended to just keep people with earlier browsers from having to look at raw XML, so I think this is WONTFIX. With more than 99% of the feeds with stylesheets just trying to do what we're doing, but without the knowledge of what aggregators the user actually uses and without the chrome privileges to subscribe them, not using our transformation on feeds that have a stylesheet would just make for a worse and less consistent experience for our users.

BTW, pasting that text into a comment in the XSLT after the XML prolog works ;-)

I'm going to @mediaAjax

There are times when I love working in the University sector: we benefit from flexible attitudes to working and CPD (sometimes! Depends on management, budgets etc.)

Today I got my ticket for @media Ajax November 19th — 20th, 2007 at The Church House Conference Centre, in Westminster, London SW1P 3NZ, UK.]: The @media Ajax conference brings together some of the leading figures in the field to explain how to best exploit this "magic", from concept and design through to the underlying code. — sounds great! … now just gotta get my classes covered on those days!

The student journey

Maybe not a typical student in HE (we hope they reach the "enlightenment" stage before the 1st year!) and unlikely to be from the UK, but a good story detailing the journey from a compulsory-education-slacker to an empowered, independent learner. Hopefully inspiring stuff for other students: http://rateyourstudents.blogspot.com/2007/05/graduate.html

I recently received a mail via Facebook from a former student who graduated a while ago and has since started to work at the BBC ... it's nice to hear that we made a difference (eventually?!) and/or that they're getting on well :-)

@media 2007

London's @media 2007 was last week. Good content as ever, oddly the venue had no public WiFi (as usual!) Emotional "goodbyes" from Molly Holzschlag and Joe Clark at the start and end, respectively, bumped-up the emotion (I'll miss their talks: they've both had an influence on my web development educational practices.)

I particularly liked it when the "Hot Topics" panel (chaired and hopefully podcasted & transcribed by Jeremy Keith) aired my question about the relevance of higher education to web dev. careers versus "self education", which seems to be the most common. An ex-university audience-member said that courses responded too slowly and were taught by arrogant, uninterested lecturers to reflect current practices! Happily a chap from Salford, IIRC, jumped-up to say that not all lecturers were disinterested in standards-based education — it was why he was there — but that he believed he was probably alone. I was sorry not to be brave enough to leap up and shout "You're not alone!" & then missed him as he left ... ah well, perhaps he'll appear on the attendees list at microformats.org??

Added: A useful set of summaries and links from AlastairC & technorati atmedia2007 tags...

Facebook

OK, so I'm late for the Facebook party but, in the words of Monty Python, I'm 37 ... I'm not old! ;-)

Most amusing thing so far (other than: where do people find the time?) is the following found on the YOU KNOW YOU'VE BEEN IN UNIVERSITY TOO LONG WHEN... group:

BEFORE I CAME TO UNIVERSITY, I WISH I HAD KNOWN...

That Psychology is really Biology, that Biology is really Chemistry, that Chemistry is really Physics and that Physics is really Maths.

;-) how true: A-levels don't prepare you for that!

MySQL configuration for security

fuþark started an interesting discussion on the possibilities of a MySQL worm ... not wanting to get embroiled in the technicalities I was struck by the sense of his suggestions for administrators securing their installations and so I've reproduced them here for future reference:

1. It's obvious but probably still has to be stressed again: Disable all default accounts on any installation immediately (yes, even if those default accounts wouldn't allow for a remote connection) and follow the next rules even if you just set up a test account (yes, even if your server is currently not connected to the Internet). You never know what your server might be used for in the future and what you then might to forget to adjust.
2. Use strong passwords for any account.
3. Preferably also use stronger user names for your administrative accounts, root and admin are probably the first ones to be tried.
4. Disable network access to MySQL completely if you don't need it (add skip-networking to your my.cnf file).
5. Use the host feature of the MySQL GRANTs system to restrict any account to the source addresses it really needs.
6. Never allow an administrative account (with the SUPER privilege or write access to the mysql system database) to be connected to from any remote host (%).
7. If your MySQL port has to be open to the Internet, always use a firewall that restricts access to it by source addresses.

(http://www.futhark.ch/mysql/150.html)

Climate of fear?

The BBC's report of a "bat box" being investigated by bomb squad was not a case of mistaken identity (it looked like a bomb!) but fear-induced over-sensitivity (terrorists want to blow-up the UK ... it might be a bomb!)

Oddly, something similar's happening where I work: several people have commented to me recently (post-Virginia Tech. and UK knife attacks) that it's only a matter of time before a member of staff is seriously injured. Is that an exaggerated concern? We have seen an apparent rise in aggressive behaviour by students but will it escalate to the point where weapons are involved or permanent harm is done? I hope not — we have administrative staff in vulnerable positions (evidence: most student-facing office redesigns incorporate mechanisms to keep students physically separate from staff. How long 'til we have glass screens and speakerphones?) and lecturers in solo offices (like me) seem most vulnerable to attack.

Personally I don't feel under threat,. Perhaps I'm just naïve, but I can't envisage one of our students pre-meditatedly attacking me over a failing grade or harsh feedback. However maybe we do need better/more/some! training in dealing with stressful situations: impulse attacks are less to be feared if you can defuse the situation.

I hope we don't end up with metal-detectors: whilst you might feel safe being assured that students aren't carrying weapons, a person who might have been willing to pull a knife in a difficult situation is just as likely to grab a stapler, letter-opener, etc ... blimey, a pen can be an effective weapon and we want students to have them!

MySQL and Flickr

...an excellent example of using MySQL and a distributed DB strategy (not a DDBMS) by Flickr ... wish I'd seen it a month ago!