Friday, October 12, 2012

[Gd] Fridaygram: history online, diamond planet, tooth decay

| More

Google Developers Blog: Fridaygram: history online, diamond planet, tooth decay

Author Photo
By Scott Knaster, Google Developers Blog Editor

We’ve posted before on Fridaygram about the Google Cultural Institute, which helps get historical material out of boxes and museums and onto the web for everyone to see. This week, the Institute added some really cool new exhibitions online that take you inside major historical events, such as color photos and personal memories of D-Day, the story of anti-Apartheid activist Steve Biko, and the 1953 Coronation of Queen Elizabeth II. These exhibitions features amazing photos, videos, and documents, and make great use of the web.



The planet 55 Cancri e is not receiving explorers or tourists at this time (as far as we know), but that might change once word gets out that some of the planet is made of diamond. 55 Cancri e orbits very closely around its star, completing a full circuit in just 18 hours. This close orbit raises the surface temperature to a balmy 2,100 degrees Celsius, so maybe hold off on those diamond-mining travel plans after all.

Finally, here’s a story to convince you that your dad and your mummy were right: brush and floss your teeth!


After a long week of writing code, and before a long weekend of writing code, take a pause to enjoy Fridaygram, which generally has nothing to do with writing code. And as a bonus for those who have read this far, here’s a tip on how to win a Nobel Prize: eat chocolate (and then brush).
URL: http://googledevelopers.blogspot.com/2012/10/fridaygram-history-online-diamond.html

Thursday, October 11, 2012

[Gd] Stable Channel Update for Chrome OS

| More

Chrome Releases: Stable Channel Update for Chrome OS

The Stable channel has been updated to 21.0.1880.92 (Platform version: 2268.211.0) for Chrome OS Chromebooks (Acer AC700, Samsung Series 5, Samsung  Series 5 550 and Cr-48), and Samsung Chromebox Series 3. Machines will be receiving updates over the next several days.

This build contains security and stability fixes.

Some highlights of these changes are:

  • [154983][154987] Critical CVE-2012-5112: SVG use-after-free and IPC arbitrary file write.

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue’ under the wrench menu.

Danielle Drew & Josafat Garcia
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/10/stable-channel-update-for-chrome-os.html

[Gd] Beta Update for Chrome OS

| More

Chrome Releases: Beta Update for Chrome OS



The Beta channel has been updated to 23.0.1271.30 (Platform versions: 2913.73.0 on Samsung Chromebook Series 5 550, Samsung Chromebook Series 5, Samsung Chromebox Series 3, Acer AC700, and Cr-48). This build contains a number of stability and performance improvements. 

If you find new issues, please let us know by visiting our help site or filing a bug. Interested in switching channels? Find out how. You can submit feedback using ‘Report an issue’ under the wrench menu.

Ben Henry and Josafat Garcia
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/10/beta-update-for-chrome-os_11.html

Wednesday, October 10, 2012

[Gd] GDG DevFests harness the power of community

| More

Google Developers Blog: GDG DevFests harness the power of community

Author PictureBy Phoebe Peronto, Developer Marketing

The global reach of GDG DevFest season continues in this third update. The season kicked off with DevFest Manila in early August, and since then, the community has organized 30 events all over the world. We’re only part way through the season, with many great events still to come. Powered by local Google Developer Groups, this past weekend saw 9 more events. From real-time updates directly from event attendees, to app demos, to memorable moments, here are the latest updates in DevFest-ing:

DevFest Santa Fe | Host: GDG Santa Fe
“Muy bueno el evento! Me gustaría que estas actividades se realicen más seguido, ya que generan relaciones profesionales y académicas muy fructíferas. Saludos!” -- Andrés Testi, DevFest Santa Fe attendee

“Gran evento +Matias Molinas y +Santa Fe GTUG. Felicitaciones por compartir el talento con toda la comunidad de desarrolladores!" -- Nicolas Bortolotti, DevFest Santa Fe attendee

DevFest Ninja | Host: GDG Buenos Aires
Catch up on all things DevFest Ninja with real-time updates from attendees on the GDG Buenos Aires group site.

DevFest Kuala Lumpur | Host: GDG Kuala Lumpur
GDG Kuala Lumpur utilized Google+ in the planning of their event, encouraging attendees to add speakers to their circles to get the most up-to-date information throughout the day (list of speakers).

DevFest Mumbai | Host: GDG Mumbai
It was a full house at GDG DevFest Mumbai--check out the full photo gallery on Google+.







DevFest Pune | Host: GDG Pune
Photos from the event are all viewable here, including sessions, speakers, and registration.





DevFest Bandung (BDG) | Host: GDG Bandung
“Thanks to everyone for attending and for being part of our first-ever GDG DevFest held in Bandung [...]  The event was attended by around 140 people from different backgrounds, including experienced developers, designers, students, lecturers, and newbie programmers.” -- GDG BDG [read full recap here]






DevFest Kathmandu | Host: GDG Kathmandu
“On October 6th 2012, GDG Kathmandu organized one of the best events since its March 2011 founding. Within the first 3 days of announcing the event, we already had 200 committed participants.  A session conducted as a Hangout On Air by Android Developer Advocate Anirudh Dewani was an entirely new experience for Google Developers here in Kathmandu. It was a grand experience of GDG Kathmandu and DevFest Kathmandu was huge success.” -- GDG Kathmandu

DevFest Mbale | Host: GDG Mbale
“GDG DevFest Mbale was the first Devfest to be held in Uganda and the biggest event with technical content held in Mbale with 120 total attendees. The code lab, conducted by James Muranga from GDG Kampala, was the most memorable moment for participants. He introduced Google App Engine, and followed with a code lab that saw attendees getting up to speed developing web apps that run on Google’s platforms. James also demoed an app, Mafuta Go, that he and a team of 4 developed working out from OutBox Hub. It was very inspiring to developers and students alike to see an idea like James’ team’s materialize.” -- Nsubuga Hassan, GDG DevFest Organizer






DevFest Yarmouk University | Host: GDG Yarmouk University


“Best Event Ever”


What’s up next?
Berlin | October 13
Chlef | October 15
Brazza | October 19
Firenze | October, 19
Zurich | October 20
Mountain View | October 20
Nebrodi | October 20
Thiès | October 20 [tentative]

DevFest isn’t close to over – we’re still going strong! Events are being held all over the world until November 11, and getting involved is a simple 3-step process: find your nearest GDG, attend an event, and join the community. Visit devfest.info for specific event details and session updates.



Phoebe Peronto is an Associate Product Marketing Manager on the Developer Marketing team here at Google. She’s a foodie who has a penchant for traveling, politics, and running. Oh, and of course...Go Cal Bears!

Posted by Scott Knaster, Editor
URL: http://googledevelopers.blogspot.com/2012/10/gdg-devfests-harness-power-of-community.html

[Gd] Chrome OS Management Console Update

| More

Chrome Releases: Chrome OS Management Console Update


The Chrome OS settings in the administrator control panel has been updated. This update brings new features including:
Known issues are available here. Enterprise customers can report an issue by contacting support.

Lawrence Lui
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/10/chrome-os-management-console-update.html

[Gd] Beta Channel Update

| More

Chrome Releases: Beta Channel Update

The Beta channel has been updated to 23.0.1271.26 for Windows, Mac, Linux, and ChromeFrame.  

This build fixes a known top crash. 

A complete log of what changed can be found in the svn revision log.  If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel? Find out how.

Karen Grunberg
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/10/beta-channel-update_10.html

[Gd] mod_pagespeed is now out of beta

| More

Chromium Blog: mod_pagespeed is now out of beta

If you are as obsessed with the speed of your web pages as we are, then you may have heard of mod_pagespeed, an Apache module that automatically optimizes your web pages for performance. Since we introduced mod_pagespeed in 2010, we’ve been focused on improving its functionality, to help developers increase the performance of their web pages. Today, after 18 releases, mod_pagespeed is now officially out of beta.



More than 120,000 sites are already using mod_pagespeed to take advantage of the latest performance optimization techniques. To learn more about mod_pagespeed and how to incorporate it in your site, watch our recent Google Developers Live session or visit the mod_pagespeed developer documentation site.

Posted by Ilya Grigorik, Developer Advocate
URL: http://blog.chromium.org/2012/10/modpagespeed-is-now-out-of-beta.html

[Gd] Make the web faster with mod_pagespeed, now out of Beta

| More

Google Developers Blog: Make the web faster with mod_pagespeed, now out of Beta

Ilya
Joshua
By Joshua Marantz and Ilya Grigorik, Google PageSpeed Team

Cross-posted with Google Webmaster Central Blog and other Google blogs

If your page is on the web, speed matters. For developers and webmasters, making your page faster shouldn’t be a hassle, which is why we introduced mod_pagespeed in 2010. Since then the development team has been working to improve the functionality, quality and performance of this open-source Apache module that automatically optimizes web pages and their resources. Now, after almost two years and eighteen releases, we are announcing that we are taking off the Beta label.

We’re committed to working with the open-source community to continue evolving mod_pagespeed, including more, better and smarter optimizations and support for other web servers. Over 120,000 sites are already using mod_pagespeed to improve the performance of their web pages using the latest techniques and trends in optimization. The product is used worldwide by individual sites, and is also offered by hosting providers, such as DreamHost, Go Daddy and content delivery networks like EdgeCast. With the move out of beta we hope that even more sites will soon benefit from the web performance improvements offered through mod_pagespeed.

mod_pagespeed is a key part of our goal to help make the web faster for everyone. Users prefer faster sites and we have seen that faster pages lead to higher user engagement, conversions, and retention. In fact, page speed is one of the signals in search ranking and ad quality scores. Besides evangelizing for speed, we offer tools and technologies to help measure, quantify, and improve performance, such as Site Speed Reports in Google Analytics, PageSpeed Insights, and PageSpeed Optimization products. In fact, both mod_pagespeed and PageSpeed Service are based on our open-source PageSpeed Optimization Libraries project, and are important ways in which we help websites take advantage of the latest performance best practices.



To learn more about mod_pagespeed and how to incorporate it in your site, watch our recent Google Developers Live session or visit the mod_pagespeed product page.


Joshua Marantz is the technical lead for mod_pagespeed. Ilya Grigorik is the Developer Advocate for Make the Web Fast.

Posted by Scott Knaster, Editor
URL: http://googledevelopers.blogspot.com/2012/10/make-web-faster-with-modpagespeed-now.html

[Gd] Make the web faster with mod_pagespeed, now out of Beta

| More

Official Google Webmaster Central Blog: Make the web faster with mod_pagespeed, now out of Beta



If your page is on the web, speed matters. For developers and webmasters, making your page faster shouldn’t be a hassle, which is why we introduced mod_pagespeed in 2010. Since then the development team has been working to improve the functionality, quality and performance of this open-source Apache module that automatically optimizes web pages and their resources. Now, after almost two years and eighteen releases, we are announcing that we are taking off the Beta label.

We’re committed to working with the open-source community to continue evolving mod_pagespeed, including more, better and smarter optimizations and support for other web servers. Over 120,000 sites are already using mod_pagespeed to improve the performance of their web pages using the latest techniques and trends in optimization. The product is used worldwide by individual sites, and is also offered by hosting providers, such as DreamHost, Go Daddy and content delivery networks like EdgeCast. With the move out of beta we hope that even more sites will soon benefit from the web performance improvements offered through mod_pagespeed.

mod_pagespeed is a key part of our goal to help make the web faster for everyone. Users prefer faster sites and we have seen that faster pages lead to higher user engagement, conversions, and retention. In fact, page speed is one of the signals in search ranking and ad quality scores. Besides evangelizing for speed, we offer tools and technologies to help measure, quantify, and improve performance, such as Site Speed Reports in Google Analytics, PageSpeed Insights, and PageSpeed Optimization products. In fact, both mod_pagespeed and PageSpeed Service are based on our open-source PageSpeed Optimization Libraries project, and are important ways in which we help websites take advantage of the latest performance best practices.



To learn more about mod_pagespeed and how to incorporate it in your site, watch our recent Google Developers Live session or visit the mod_pagespeed product page.


Posted by Joshua Marantz and Ilya Grigorik, Google PageSpeed Team
URL: http://googlewebmastercentral.blogspot.com/2012/10/make-web-faster-with-modpagespeed-now.html

[Gd] Pwnium 2: results and wrap-up

| More

Chromium Blog: Pwnium 2: results and wrap-up

As part of our ongoing effort to reward exceptional vulnerability research in the security community, we hosted the Pwnium 2 competition at Hack in the Box 2012 in Kuala Lumpur yesterday.

We’re happy to confirm that we received a valid exploit from returning pwner, Pinkie Pie. This pwn relies on a WebKit Scalable Vector Graphics (SVG) compromise to exploit the renderer process and a second bug in the IPC layer to escape the Chrome sandbox. Since this exploit depends entirely on bugs within Chrome to achieve code execution, it qualifies for our highest award level as a “full Chrome exploit,” a $60,000 prize and free Chromebook.

One of Chrome’s most effective security defenses is our fast response time and ability to update users with critical patches, quickly. These bugs were no exception. We started analyzing the exploit as soon as it was submitted, and in fewer than 10 hours after Pwnium 2 concluded we were updating users with a freshly patched version of Chrome.

We’d like to thank Pinkie Pie for his hard work in assembling another great Pwnium submission. We’ll post an in-depth look at the bugs used and subsequent mitigations once other platforms have been patched.

Posted by Chris Evans, Software Engineer
URL: http://blog.chromium.org/2012/10/pwnium-2-results-and-wrap-up_10.html

[Gd] Stable Channel Update

| More

Chrome Releases: Stable Channel Update

The Stable channel has been updated to 22.0.1229.94 for Windows, Mac, and Linux.  This release contains fixes for the security issue listed below.

Security fixes and rewards:

Congratulations to Pinkie Pie, returning to the fray with another beautiful piece of work!

We’re delighted at the success of Pwnium 2, and anticipate additional hardening and future improvements to Chrome as a result of the competition.

  • [$60,000][154983][154987] Critical CVE-2012-5112: SVG use-after-free and IPC arbitrary file write. Credit to Pinkie Pie.

Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix.

Full details about what's in this release are available in the SVN revision log. Found a bug? Report it! On a different channel, but want to join us on the Beta train? The Chromium wiki has you covered.

Jason Kersey
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/10/stable-channel-update_6105.html

Tuesday, October 9, 2012

[Gd] Pwnium 2 begins

| More

Chromium Blog: Pwnium 2 begins

Security is one of Chrome’s core principles, and we work closely with the security community to continually make the web safer for users. In that spirit, we're hosting Pwnium 2 at Hack in the Box 2012 in Kuala Lumpur this week.

Participants will be able to demonstrate their pwns against Chrome at 9 a.m. Wednesday local time (1 a.m. GMT for folks keeping track). We’ll be actively analyzing any submissions we receive, and will announce successful exploits and prizes during our talk at 5 p.m, Thursday (9 a.m. GMT) on the evolution of Chrome’s vulnerability rewards program.

Stay tuned!

Posted by Chris Evans, Software Engineer
URL: http://blog.chromium.org/2012/10/pwnium-2-begins.html

[Gd] Dev Channel Update

| More

Chrome Releases: Dev Channel Update

The Dev channel has been updated to 24.0.1290.1 for Windows, Mac, Linux, and Chrome Frame.  This build contains following updates:

All

  • Fixed issue where clearing browse data never completes with PPAPI flash plugin disabled. [Issue: 144874]
  • Fixed issue in disabling sync for default apps. [Issue: 152582]
  • Fixed crashes 154167, 153902, 152622.

Known Issues
  • Issue 154663: On Windows 8, if Chrome is set to use Windows 8 mode, it might launch in Windows 8 mode when trying to uninstall (and therefore fail to uninstall). Workaround: make another browser default (in Control Panel -> Default Programs) and then uninstall Chrome.

Full details about what changes are in this build are available in the SVN revision log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug.

Dharani Govindan
Google Chrome
URL: http://googlechromereleases.blogspot.com/2012/10/dev-channel-update_9.html

[Gd] Streak brings CRM to the inbox with Google Cloud Platform

| More

Google Developers Blog: Streak brings CRM to the inbox with Google Cloud Platform

Author PhotoBy Aleem Mawani, Co-Founder of Streak

Cross-posted with the Google App Engine Blog

This guest post was written by Aleem Mawani, Co-Founder of Streak, a startup alum of Y Combinator, a Silicon Valley incubator. Streak is a CRM tool built into Gmail. In this post, Aleem shares his experience building and scaling their product using Google Cloud Platform.

Everyone relies on email to get work done – yet most people use separate applications from their email to help them with various business processes. Streak fixes this problem by letting you do sales, hiring, fundraising, bug tracking, product development, deal flow, project management and almost any other business process right inside Gmail. In this post, I want to illustrate how we have used Google Cloud Platform to build Streak quickly, scalably and with the ability to deeply analyze our data.



We use several Google technologies on the backend of Streak:

  • BigQuery to analyze our logs and power dashboards.

Our core learning is that you should use the best tool for the job. No one technology will be able to solve all your data storage and access needs. Instead, for each type of functionality, you should use a different service. In our case, we aggressively mirror our data in all the services mentioned above. For example, although the source of truth for our user data is in the App Engine Datastore, we mirror that data in the App Engine Search API so that we can provide full text search, Gmail style, to our users. We also mirror that same data in BigQuery so that we can power internal dashboards.

System Architecture




App Engine - We use App Engine for Java primarily to serve our application to the browser and mobile clients in addition to serving our API. App Engine is the source of truth for all our data, so we aggressively cache using Memcache. We also use Objectify to simplify access to the Datastore, which I highly recommend.

Google Cloud Storage - We mirror all of our Datastore data as well as all our log data in Cloud Storage, which acts as a conduit to other Google cloud services. It lets us archive the data as well as push it to BigQuery and the Prediction API.

BigQuery - Pushing the data into BigQuery allows us to run non-realtime queries that can help generate useful business metrics and slice user data to better understand how our product is getting used. Not only can we run complex queries over our Datastore data but also over all of our log data. This is incredibly powerful for analyzing the request patterns to App Engine. We can answer questions like:

  • Which requests cost us the most money?
  • What is the average response time for every URL on our site over the last 3 days?

BigQuery helps us monitor error rates in our application. We process all of our log data with debug statements, as well as something called an “error type” for any request that fails. If it’s a known error, we'll log something sensible, and we log the exception type if we haven’t seen it before. This is beneficial because we built a dashboard that queries BigQuery for the most recent errors in the last hour grouped by error type. Whenever we do a release, we can monitor error rates in the application really easily.



A Streak dashboard powered by BigQuery showing current usage statistics
In order to move the data into Cloud Storage from the Datastore and LogService, we developed an open source library called Mache. It’s a drop-in library that can be configured to automatically push data into BigQuery via Cloud Storage. The data can come from the Datastore or from LogService and is very configurable - feel free to contribute and give us feedback on it!

Google Cloud Platform also makes our application better for our users. We take advantage of the App Engine Search API and again mirror our data there. Users can then query their Streak data using the familiar Gmail full text search syntax, for example, “before:yesterday name:Foo”. Since we also push our data to the Prediction API, we can help users throughout our app by making smart suggestions. In Streak, we train models based on which emails users have categorized into different projects. Then, when users get a new email, we can suggest the most likely box that the email belongs to.

One issue that arises is how to keep all these mirrored data sets in sync. It works differently for each service based on the architecture of the service. Here’s a simple breakdown:




Having these technologies easily available to us has been a huge help for Streak. It makes our products better and helps us understand our users. Streak’s user base grew 30% every week for 4 consecutive months after launch, and we couldn’t have scaled this easily without Google Cloud Platform. To read more details on why Cloud Platform makes sense for our business, check out our case study and our post on the Google Enterprise blog.


Aleem Mawani is the co-founder of Streak.com, a CRM tool built into Gmail. Previously, Aleem worked on Google Drive and various ads products at Google. He has a degree from the University of Waterloo in Software engineering and an MBA from Harvard University.

Posted by Scott Knaster, Editor
URL: http://googledevelopers.blogspot.com/2012/10/streak-brings-crm-to-inbox-with-google.html

[Gd] Streak brings CRM to the inbox with Google Cloud Platform

| More

Google App Engine Blog: Streak brings CRM to the inbox with Google Cloud Platform



Cross-posted with the Google Developers Blog



Today’s guest blogger is Aleem Mawani, co-founder of Streak, a startup alum of Y Combinator, a Silicon Valley incubator.  Streak is a CRM tool built into Gmail.  Aleem shares his experience building and scaling their product using Google Cloud Platform.



Everyone relies on email to get work done – yet most people use separate applications from their email to help them with various business processes. Streak fixes this problem by letting you do sales, hiring, fundraising, bug tracking, product development, deal flow, project management and almost any other business process right inside Gmail.  In this post, I want to illustrate how we have used Google Cloud Platform to build Streak quickly, scalably and with the ability to deeply analyze our data.












We use several Google technologies on the backend of Streak:







  • BigQuery to analyze our logs and power dashboards







Our core learning is that you should use the best tool for the job. No one technology will be able to solve all your data storage and access needs. Instead, for each type of functionality, you should use a different service. In our case, we aggressively mirror our data in all the services mentioned above. For example, although the source of truth for our user data is in the App Engine Datastore, we mirror that data in the App Engine Search API so that we can provide full text search, Gmail style, to our users. We also mirror that same data in BigQuery so that we can power internal dashboards.



System Architecture













App Engine - We use App Engine for Java primarily to serve our application to the browser and mobile clients in addition to serving our API. App Engine is the source of truth for all our data, so we aggressively cache using Memcache. We also use Objectify to simplify access to the Datastore, which I highly recommend.



Google Cloud Storage - We mirror all of our Datastore data as well as all our log data in Cloud Storage, which acts as a conduit to other Google cloud services. It lets us archive the data as well as push it to BigQuery and the Prediction API.



BigQuery - Pushing the data into BigQuery allows us to run non-realtime queries that can help generate useful business metrics and slice user data to better understand how our product is getting used. Not only can we run complex queries over our Datastore data but also over all of our log data. This is incredibly powerful for analyzing the request patterns to App Engine. We can answer questions like:



  • Which requests cost us the most money?

  • What is the average response time for every URL on our site over the last 3 days?




BigQuery helps us monitor error rates in our application.  We process all of our log data with debug statements, as well as something called an “error type” for any request that fails.  If it’s a known error, we'll log something sensible, and we log the exception type if we haven’t seen it before.  This is beneficial because we built a dashboard that queries BigQuery for the most recent errors in the last hour grouped by error type. Whenever we do a release, we can monitor error rates in the application really easily.







A Streak dashboard powered by BigQuery showing current usage statistics



In order to move the data into Cloud Storage from the Datastore and LogService, we developed an open source library called Mache. It’s a drop-in library that can be configured to automatically push data into BigQuery via Cloud Storage. The data can come from the Datastore or from LogService and is very configurable - feel free to contribute and give us feedback on it!



Google Cloud Platform also makes our application better for our users. We take advantage of the App Engine Search API and again mirror our data there. Users can then query their Streak data using the familiar Gmail full text search syntax, for example, “before:yesterday name:Foo”. Since we also push our data to the Prediction API, we can help users throughout our app by making smart suggestions. In Streak, we train models based on which emails users have categorized into different projects. Then, when users get a new email, we can suggest the most likely box that the email belongs to.



One issue that arises is how to keep all these mirrored data sets in sync. It works differently for each service based on the architecture of the service. Here’s a simple breakdown:








Having these technologies easily available to us has been a huge help for Streak. It makes our products better and helps us understand our users. Streak’s user base grew 30% every week for 4 consecutive months after launch, and we couldn’t have scaled this easily without Google Cloud Platform.  To read more details on why Cloud Platform makes sense for our business, check out our case study and our post on the Google Enterprise blog.



-Contributed by Aleem Mawani, co-founder of Streak
URL: http://googleappengine.blogspot.com/2012/10/streak-brings-crm-to-inbox-with-google.html