Simon Willison’s Weblog

Google GMail E-mail Hijack Technique. Apparently Gmail has a CSRF vulnerability that lets malicious sites add new filters to your filter list—meaning an attacker could add a rule that forwards all messages to them without your knowledge.

# 27th September 2007, 10:29 am / gmail, security, google, csrf, vulnerability

Firefox 3 Antiphishing Sends Your URLs To Google. Stories like this crop up every now and then, but no one ever seems to mention that the Google Toolbar has been doing this since it was released (more than five years ago) provided you have PageRank display turned on.

# 25th September 2007, 11:04 pm / pagerank, google, privacy, firefox, mozilla, firefox3, toolbars, google-toolbar

Google To “Out Open” Facebook On November 5. “Google will announce a new set of APIs on November 5 that will allow developers to leverage Google’s social graph data. They’ll start with Orkut and iGoogle (Google’s personalized home page), and expand from there to include Gmail, Google Talk and other Google services over time.”

# 21st September 2007, 11:23 pm / socialgraph, google, igoogle, orkut, google-talk, gmail, openid, michael-arrington, techcrunch

Google Maps API gets clickable polylines and polygons. Interesting explanation of how they optimised calculating the distance to the nearest point on a polyline.

# 8th September 2007, 12:58 pm / polygons, polylines, algorithms, google, googelmaps, javascript

XFML (via) Throwing the new home for the XFML specification some Google juice; the domain name got nabbed by a squatter.

# 30th August 2007, 10:27 pm / xfml, information-architecture, peter-van-dijck, google

Ganeti (via) New from Google (developed in the Zurich office): virtual server management tool designed to “facilitate cluster management”, built on top of Xen.

# 30th August 2007, 9:51 pm / google, virtualisation, xen, ganeti

Google Web Toolkit: Towards a better web. Good overview of why GWT exists, but I take exception to the title: requiring JavaScript to even display something does not make the web “better”.

# 29th August 2007, 8:21 pm / javascript, google, gwt

An update on Google Video feedback. Google are now offering a real refund to everyone who bought a video, and are letting people keep the Google Checkout credit as well. Purchased videos will keep working for six months.

# 21st August 2007, 7:54 am / google-video, google, dontbeevil

Brighton geek venues. Nat’s latest project: a neat Google Maps mashup listing venues for geek events in Brighton, managed using Google MyMaps to edit a KML file.

# 16th August 2007, 1:38 am / natalie-downe, google-maps, mymaps, googlemymaps, google, kml, mashup, brighton, geek

Microformats in Google Maps (via) No doubt thanks to the influence of Kevin Marks.

# 31st July 2007, 11:36 pm / microformats, google-maps, jeremy-keith, kevinmarks, google

tesseract-ocr. Open source OCR, sponsored by Google. I just sat in on a talk on this at OSCON and the complexity of the problem is pretty incredible.

# 26th July 2007, 8:23 pm / ocr, tesseract, google, oscon, oscon07

YouTube Scalability Talk. Kyle Cordes’ notes on a Google Tech Talk on scaling YouTube by Cuong Do.

# 14th July 2007, 10:26 pm / youtube, scaling, kylecordes, google, googletechtalk, cuongdo

Google Translate (beta). Google’s beta translator based on statistical analysis of things like the United Nations corpus. I have no idea how long this has been available; it isn’t linked from their homepage.

# 3rd July 2007, 4:43 pm / google, translation, languages, internationalisation, i18n

Google Health Advertising Blog: My opinion and Google’s (via) A follow up to the post I linked to earlier.

# 1st July 2007, 9:22 pm / google, google-health, health, sicko

Does negative press make you Sicko? (via) Google’s Health Advertising Blog encourages the healthcare industry to buy ads against Sicko as part of an “issue management campaign” to help “educate” the public. Creepy.

# 30th June 2007, 6 pm / healthcare, google, creepy, sicko

My Google Tech Talk on OpenID. I gave this extended and improved version of my “Implications of OpenID” talk at Google on Monday. Fast turnaround on the video!

# 28th June 2007, 8 am / speaking, openid, google, techtalk, google-video

google-diff-match-patch (via) Robust algorithms to perform the operations required for synchronizing plain text, in Java, JavaScript and Python.

# 9th June 2007, 6:15 pm / neil-fraser, google, open-source, diff, java, javascript, python

Semi-synchronous replication for MySQL (via) Google’s patch for MySQL which enables more reliable master-slave replication (a transaction isn’t committed until at least one slave has replicated the data).

# 5th June 2007, 10:07 pm / mysql, google, open-source, philippearson, replication, masterslave

Google Gears DB Abstractions. Here come the ORMs.

# 4th June 2007, 8:54 am / javascript, google, google-gears, db, orm

Cross Domain Frame Communication with Fragment Identifiers. Google are using this crazy iframe/fragment trick for their new Mapplets API.

# 31st May 2007, 2:15 pm / google-maps, google, hack, javascript, iframes

Apollo will include Google Gears technology. Looks like Google really worked on the partnerships for this one.

# 31st May 2007, 8:30 am / google-gears, offline, javascript, apollo, google

Dojo Offline on Google Gears. “The great news is that the Dojo crew were in the loop wrt this project, and Brad has ported Dojo Offline to use Google Gears as the base platform.”

# 31st May 2007, 8:28 am / brad-neuberg, dojo, google-gears, dojooffline, offline, javascript, google

RSS Bling goes Offline with Google Gears. Google Gears is Google’s new offline JavaScript framework. Dion Almaer (a Google employee) has a nice example of code using Google Gears on Ajaxian.

# 31st May 2007, 8:27 am / google-gears, google, ajaxian, javascript, offline, dion-almaer

The Google Maps Street View team? They’re posing outside the Googleplex so I’m guessing this is the team that built it.

# 30th May 2007, 12:29 pm / streetview, google, google-maps, easteregg, googleplex

Howto: Google Maps Street View outside US. Add “&gl=us” at the end of the URL to avoid the evil geo IP restriction and play with Google’s latest toy.

# 30th May 2007, 7:40 am / google-maps, google, streetview, geoip

Top XSS exploits by PageRank. Yahoo!, MSN, Google, YouTube, MySpace, FaceBook all feature.

# 29th May 2007, 10:07 pm / yahoo, msn, google, youtube, facebook, xss, pagerank, security

Google Image Search does faces (via) The undocumented imgtype=face parameter. Kind of creepy.

# 28th May 2007, 8:08 pm / google, imagesearch

The Oxford Guide free WiFi plotted on Google Maps. The guide offers a geocoded Atom feed which can be directly plotted on a Google Map.

# 26th May 2007, 9:55 am / google, google-maps, theoxfordguide, oxford, wifi