Nature or Nurture?

July 26th, 2008


30 is the new 20

July 14th, 2008

Michael and I

My 30th birthday was one to remember, for sure. I wanted to thank everyone for coming and share some thoughts about it all.

First, Jaime is amazing — she put this all together and… wow. Just, wow. <3

Second, I realized that I didn’t give any sort of speech or say anything monumental to everyone there. I was sort of speechless and made a point to move from table to table, so didn’t really give a speech or anything.

But I thought about this a bit afterwards, and if given another chance, I probably would have said something like:

You’re only as good as the people who support you. When you stumble, they help you pick yourself up. When you succeed, you succeed together. I’ve had the luxury of friends who tell you the truth even if they know it hurts. I’ve been lucky enough to have the loyalty and love of my friends (real friends, not Facebook friends), and as I get older I value them more and more. You’ve made my first 30 years amazing, and I’m guessing life will continue to be one hell of a ride.

Cheesy, but true. Anyway, here are some of my favorite moments:

  • The confused blonde greeter who had no idea what was going on and almost blew Jaime’s cover
  • Imagining Jaime beating that person up right there near the front door
  • Following Jaime and this other girl to the basement of the Lucia, wondering where the hell we were going
  • Walking into a room filled with most of my closest friends
  • My balloons were cool
  • Great food — drunken noodles, red curry and some steak stuff. Yum!
  • Getting back the same tube of Preparation-H I gave Chris for his 30th
  • Reading all the signatures on my basketball
  • Riding with Cameron, Jaime and Erin trying to find a parking space
  • Fun times at the Marathon Taverna
  • Playing pool and watching Cameron sing along with Journey (with fist-pumping)
  • Dancing with Cameron
  • Mario Kart with Jon
  • Hugging Jaime once I had processed all of it
  • Feeling like the luckiest guy on earth

Finally, about birthdays — and many of you know this about me — I’m not generally a huge fan. Mainly because I don’t think it’s super fun to have people kiss your ass on your birthday if they don’t care about you the rest of the year.

This was different, of course — it was a time to stop and appreciate relationships, and I can roll with that. This meant a lot to me — just seeing everybody there made me think about all the things we’ve done together and how crazy life has been. It was just really special, and I was totally blown away. I’ll never forget it.

And even though there’s so much I can’t even fit it all into my head, it’s really just a start. We’ve got more memories to make and more things to do. So I guess the ending to this blog post is: To be continued… :)

Firefox Keeps You Safe In Ways Other Browsers Don’t

June 20th, 2008

You might know about some of the more glamorous Firefox 3 security features, but behind the scenes Firefox is protecting you from malicious extensions and plugins through its blocklisting service.

Depicted below is a diagram of how Firefox talks to its blocklist service. This is how it works:

  1. Every day Firefox downloads an XML document from our blocklist service.
  2. This tells Firefox if there are any malicious plugins or extensions out there.
  3. If Firefox detects any of these items on your system, it disables them so you can surf the web safely.

Flow chart for Firefox's blocklist service

What is remarkable about this is that it covers you from things Mozilla doesn’t even release. One of the things I’ve always been proud of is Mozilla’s dedication to its users, and I think this is a good illustration of how we’re finding ways to make the web better and safer. We don’t just care about Firefox, we care about you — and if you are put in a bad position because of poor security in a third-party plugin, we will be there to cover for you — on our dime.

Extension blocklisting has been available since Firefox 2, and we’ve used it in the past to blocklist extensions that cause major crashes or have security problems. Plugin blocklisting is new in Firefox 3, and this is a pretty big feature given recent security news involving plugins.

All major plugins have had arbitrary code execution issues at some point. Plugins like Quicktime or Flash have had some popular cases where hackers could execute code on your system just by having you load a corrupted Flash object or Quicktime movie. Usually vendors are pretty good about updating once these exploits are disclosed, but with Firefox 3 we’ve added plugin blocklisting so we can protect you if vendors aren’t quick enough to respond or don’t provide an easy way for you to upgrade.

Screenshot of a blocklisted item.

Mozilla doesn’t want to leave you out in the cold, and Firefox’s blocklist service is another tool we can use to look out for you.

It’s important to use this tool responsibly so we have discussed a policy for quite some time. The blocklist policy is in our public wiki, and we welcome any questions about it. Any time we consider blocklisting, we contact the vendor or author of the add-on in question to encourage a quick update and let them know we are considering blocklisting. Decisions to blocklist are made by committee to make sure we are not using this service incorrectly or blocklisting things prematurely without just cause.

To show you what the XML document looks like, here is an example of what we are currently serving:

<?xml version="1.0"?>
<blocklist xmlns="http://www.mozilla.org/2006/addons-blocklist">
  <emitems>
    <emitem id="fdm_ffext@freedownloadmanager.org">
      <versionrange minVersion="1.0" maxVersion="1.3.1">
        <targetapplication id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}">
           <versionrange minVersion="3.0a1" maxVersion="*"/>
        </targetapplication>
      </versionrange>
    </emitem>
  </emitems>
  <pluginitems>
    <pluginitem>
      <match name="name" exp="Yahoo Application State Plugin"/>
      <match name="description" exp="Yahoo Application State Plugin"/>
      <match name="filename" exp="npYState.dll"/>
    </pluginitem>
  </pluginitems>
</blocklist>

What this does:

  • Tells firefox to blocklist the Free Download Manager extension, versions 1.0 thru 1.3.1 for Firefox 3.0a1 and higher.
  • Tells firefox to blocklist the Yahoo Application State plugin, for all Firefox versions loading npYState.dll.

Information about the blocklist is always found on mozilla.com’s blocklist info page. To learn more about the service itself, feel free to read more about its specifications.

Overall, the blocklist service is another way Firefox is watching out for you, and even though it doesn’t get much press coverage, it’s a remarkable thing and speaks volumes about how serious we are about keeping Firefox users safe — even from stuff that wasn’t Mozilla’s fault.