PlumberSurplus.com Ecommerce and Entrepreneurship Blog | About | Contact | PlumberSurplus.com Store

Vanessa’s Variety for the Week of August 8th, 2008

Posted on August 8, 2008 by Vanessa

The 2008 Summer Olympics started today; opening ceremonies have already taken place in China, but will not be available for viewing on T.V. in America until this evening.  Did you know that the Olympic Rings is the world’s most recognized symbol?

 

 

  • For those of you that are as excited about the Olympics as I am you can catch an estimated 2,000 hours of online footage via the NBC Olympics site.  If there is a particular event that you are looking to see that won’t be broadcast domestically, Leo Laporte, the “Tech Guy”,  will be giving out websites that are broadcasting events both legally and illegally on his radio show tomorrow.  To listen on demand visit this link
  • If you have followed our blog or speakers at conferences you have probably heard us talk about hiring “shining stars” or “analytical aces”, these are the top notch employees that help to grow the company and vigorously love their jobs.  We may have an advantage at this since one of our fearless leaders is a professor at a University and is able to give semester long interviews to students without them even knowing it, but what about the rest of eCommerce?  Harry Joiner, specializes in recruiting and filling online marketing executive slots, he says “If the candidate senses online is an afterthought [to the hiring company], then they are not going to work there. It’s essential the company sees ecommerce as a pie-enlarging value proposition, not just a pie-rearranging proposition. Because at the end of the day, “A” players want to go where they are going to matter.”  If you tend to agree with him, then I would suggest reading this interview with Joiner by Alan Rimm-Kaufman. 
  • Dan Kaminsky of IOActive Inc, a security consultant firm based in Seattle, discovered an internet security flaw that has the ability to affect emails.  According to the article when Kaminsky spoke at this week’s Black Hat Conference in Las Vegas, the room was packed and had people sitting on the floor to hear what he was going to reveal about the security hole.  Most vendors and many providers have fixed the issue, but some have not, which could leave some at risk.  According to Kaminsky “The industry has rallied like we've never seen the industry rally before”.  For those of you who aren’t so technical (myself included), some of our fellow blogger nerds provided some insight about the security risk:
    From Jordon: “It works kind of like a man in the middle attack, where the attacker can respond to a DNS request before the actual DNS server.  When DNS isn’t using port randomization it’s only responds on port 53 which it makes it easy to intercept the response because you know what port it is on.  If port randomization is enabled then the response can come back on any of over 65 thousand ports making it harder to respond on the correct port. 
    So you would think that the odds are over 1 in 65,000 to make the attack work, except the attacker can respond quicker than the DNS server, say like a hundred times.  So then the odds of getting a correct response becomes 1 in 650, which is much more reasonable.  Port randomization helps but doesn’t completely solve the problem.  So they had to fix some code and other stuff that I don’t completely understand yet.”
    From Zach: “Yea that sounds right, when I was reading about it last week several people said it had to do with some DNS configurations not randomizing correctly. Instead of the ports being random they might be linear or have some kind of predictable pattern so if you can figure that out then you know where to point the attacks.”
  • 38% of female blog writers make their online purchasing decisions based on information they have found in a blog according to a BlogHer/Compass Partners study.  This may be an untapped area for internet retailers as the study also shows that 35% of all women in the US participate in the “blogosphere”. 
  • Avinash Kaushik of Occam’s razor posted on using Google Trends for competitive analysis.  It’s a great post, but be sure you are prepared before you try to take on this task, Avinash explains “Doing competitive intelligence analysis without knowing enough context about your competitive space, your general ecosystem, is like going to play a football game naked. Won’t lead to a great outcome for you (even if you paid a ton of money for your players - tools :)).”  For those of you who feel you are prepared for the task the post is highly informative.
     
Digg It!StumbleUponTechnoratiDel.icio.us

The iPhone 3G Saved My Life

Posted on August 6, 2008 by Josh

So, usually I'm the guy who is doing his best to champion the cheaper technology solution. Even though the iPhone 3G is not the cheapest cell phone solution, I was so excited that this device was worth every penny and I had to share...

So, I’ve been using my new iPhone 3G for nearly 3 weeks now…I am a believer.  

I remember when I got my first, first-generation TiVo.  I tried to explain to friends, family, and colleagues why it was so amazing and invaluable. I got the standard response; mostly, “I don’t watch that much TV.” This is a terrible reason not to get a TiVo. You watch TV so much more efficiently and the experience of watching TV goes through a paradigm shift that makes one never desire to watch TV in any other way. This is how I feel about the new iPhone 3G. Not since TiVo has a piece of technology so enriched my life and fundamentally changed the way I do stuff.

So, it’s a phone…so what?!  

True. It is a phone. However, it also breaks whatever has tethered you to your phone, phonebook, map, photo album, radio, TV, clock, flashlight, newspaper, calendar, game console, …the list goes on.

What’s more, it isn’t just that the iPhone 3G does all of this, it’s that it does it in a way that changes the way you feel about what you’ve previously experienced with each of the features and tools.  It’s not only that I have everything in one place; it’s that the experience for each of the features is usually fluid, intuitive, and frankly somewhat sexy. Also, my experience of browsing over 3G has been very positive. One of the managing partners here at Gordian Project has a first-gen iPhone and told me before I got one that browsing certain sites on the web (such as flash based sites) isn't always practical on the iPhone. I have found this to be the case when on the Edge network, which boasts an experience like dial-up. However, 3G has been more like a low-end DSL connection. I have been very impressed.

How did you justify the cost?

True, the iPhone 3G costs a bit more money than the standard phone. Similarly, TiVo costs a bit more than someone just watching regular TV. But, the additional cost of the iPhone, like TiVo, is eclipsed by its tremendous value. Here are 10 reasons that the iPhone has so much value for me:  

  1. I didn’t have to buy an iPod. 
  2. I didn’t have to buy a TomTom
  3. I will save money by having SlickDeals.net notifications right at my fingertips.
  4. I didn’t have to buy a Light Saber.
  5. I don’t have to rush home or to the office if there is an online emergency; I can work remotely if needed.
  6. I can clear unread posts in Google Reader during my commute (I usually don’t drive in my carpool).
  7. I never waste time waiting in lines.
  8. Gen Y’ers won’t make fun of me anymore for my antiquated brick.
  9. Every time someone mentions something that sounds interesting, I don’t have to try to remember it or write it down…I can just look for that something.  
  10. I quit smoking (cold turkey) the moment I got an iPhone 3G.


 

The idea to quit smoking came to me when I was trying to convince my wife that I absolutely had to have the new iPhone. The fact that the iPhone may actually save my life is what sold her.

 
I probably wouldn’t do all that stuff with it… 
 
OK. So maybe you aren’t a “power user”. However, like TiVo, I can’t think of a single profile or demographic that wouldn’t be able to use the iPhone to improve their lives. Everywhere you go, you’re fully connected. If someone could figure out Flash on iPhone’s Safari and if AT&T would allow users to make the iPhone an access point, this device would be near perfect. Of all the technology I have consumed, the iPhone 3G is easily my favorite device so far.

 

Digg It!StumbleUponTechnoratiDel.icio.us

The Secret Society of Amazon Integration (Handshake Required)

Posted on July 24, 2008 by Matt

Like other online retailers, we have a presence on the Amazon Marketplace. Amazon has a great model that allows quality sellers to make their products available to millions of buyers. However, their integration model for Marketplace sellers is kind of like the Bejing Olympics; dirty and dirtier.

We began with a smaller offering of some of our most popular products, and gradually increased the offering (and sales) on Amazon. Recently we were offered the chance to become an Amazon Gold Seller, meaning among other things that we’d offer more products for sale on Amazon. More products listed on Amazon = more sales from Amazon. A good thing, to be sure; however, we were currently manually entering Amazon orders into our site, and this was about to flood our customer service department.

Never fear, IT would come to the rescue (I left the cape at home though). As we had successfully integrated with PayPal and Google Checkout over the past year, I was pretty confident that the Amazon integration would be pretty straight-forward. After all, we are talking about the world’s largest online retailer. Why, they probably had a team of monkeys on standby to help with my every need, sample code to do the work for me, and color coded, easy to follow documentation that would point me right where I needed to go. Heck, I may put this one on autopilot and go golfing with my son.

Golfing

So I began this integration the same way as always – looking for documentation online. Hmmm… that’s funny, I can’t seem to find what I’m looking for. No, that’s not it. No, I don’t want Amazon Web Services.

After a couple fruitless hours of searching, I finally just emailed our Amazon representative...

Matt: “Hi, can you email me the documentation to integrate with Amazon so we can process orders programmatically” 

Amazon: “Let’s schedule a call with your technical team and we can discuss the options.  We currently don’t have a formal document that describes this process.” 

Say what?!?!? The world’s largest online retailer and Marketplace to thousands of merchants doesn’t have documentation for integrating with them? Turns out no, they don’t. 

Some key paraphrases from that call and subsequent emails:

Matt: “Can you tell me how to access our orders?”

Amazon: “In order to download your orders, you have to use this tool (AMTU) that is open source. We wrote it, but we don’t support it at all. You have to download it from somewhere else”.

Matt: “I see online that you have a sandbox for testing this integration. Can you set me up with access to that?”

Amazon: “We no longer have a test environment. You have to test it live.”

Matt: “How can I push our order ID back into Amazon’s system?”

Amazon: “That option is not supported using flat file or manual fulfillment.” (The method they recommended we use)

 

So the bottom line is that if you are a merchant listing on Amazon, do not expect the level of information in integrating with Amazon that you may have become accustomed to elsewhere.

This story does have a mostly happy ending. In a matter of a couple of days, we were able to integrate with Amazon and import our Amazon orders into our order management solution, relieving a large burden from our awesome customer service team and freeing them up from data input to actually helping our customers.

If you are interested in more information regarding integrating with Amazon, PayPal, or Google Checkout, feel free to comment. I’m here to help!


Digg It!StumbleUponTechnoratiDel.icio.us

Google Docs Takes My Docs Hostage: A Lesson on Dependency

Posted on July 9, 2008 by Tim

I’m a huge fan of web applications.  Moreover, I’m a huge fan of Google’s web applications.  The less dependent we are on applications tethered to computers, operating systems, licenses, and updates, the better.   The more we can share, network and collaborate, the better.  And of course, the free-er, the better.

At the Gordian Project, we’ve been taking interesting steps recently in an effort to capitalize on the value associated with web applications, especially Google’s web applications.  One product that we continue to integrate more and more into our environment, is Google Docs and Spreadsheets.  Google Docs and Spreadsheets is a great web based application for small and medium sized business.

Google Docs is Great, Great, Great

The features and functionality of Google Docs are great: Create new documents, upload existing documents, familiar desktop feel, easy editing, sharing tools, choose who can edit or view files, everyone sees the most updated version of your file, a record of who added and deleted what and when, all you need is a web browser, secure online storage, save a copy to your computer to work on documents offline or distribute them as attachments, invite people to your documents, make changes together at the same time, sharing tools are integrated with your Gmail contact list, and, last but not least, the Coup de grâce… its free!

Great, great, great.  Google Docs is great.

This assumes, of course, that Google docs is up, working and isn’t holding my documents hostage.

If I can’t access Google Docs, then I can’t receive any of those great benefits.  Even worse, if I can’t get to any of the documents I’ve already created in Google Docs, then I can’t get any value out of those documents, until they release the hostages.  Although Google gives me the ability to save my documents offline, saving my documents offline as a defense to Google going down defeats most of the reasons one would use Google Docs in the first place.

Um, Google Docs is Down, No Longer Great 

Yesterday, Google Docs & Spreadsheets appeared to be down.  I needed to work on a document that I created in Google Docs and that my team was collaborating on.  I went to the Google Apps Start Page and clicked Google Docs & Spreadsheets under the Google Apps Links section. 

Here is a screenshot of the error I received:
 

 

Google Docs Error

 

Then, I went to the Google Docs home page, to try my luck there.

Here is a screenshot of the next error I received.

 

 Google Personalized Start Page Error

Hmmm.  That’s not good.  Now I can’t work on the project I started in Google Docs.  Neither can my team.  We don’t have the document saved on anyone’s system, since, again, that would defeat the purpose of using Google Docs in the first place.  Now that I’m stuck, frustrated, and wondering when Docs will be back up, I’m wishing I hadn’t used Google Docs at all for this project.

Now what? 

I know!  I’ll blog about the negative consequences associated with becoming dependent on free web applications supported by third party vendors.  Oh crap.  I usually write blogs in Google Docs so that I can receive all the benefits enumerated above.  Now I have to use Microsoft Word.  No collaboration!  No sharing!  No web browser access!  No secure online storage!  Well, at least Word isn’t down. 

A Dependency on Web Applications and the Cost Benefit Analysis

So what’s the lesson here?  Earlier, I ranted and raved about web applications by implying that the less dependent we are on non web based applications, the better.  However, today’s circumstances exemplified the other side of the coin.  The more dependent you become on third parties and web based applications, the more opportunity for failure you introduce, such as having documents taken hostage.  The more critical the area is that you outsource, the more painful the consequences are when they arise.  The free-er the product, the less support you’ll receive at all, let alone in an emergency.

 

  • What if your business utilizes Google Apps for email and Gmail goes down?
  • What if your eCommerce site uses Google Checkout as its payment method and Checkout goes down?
  • What if your Search Engine Marketing ROI is calculated based on data pulled from Google Analytics and Analytics goes down?
  • What if your videos are hosted on YouTube and YouTube goes down?

 

As sophisticated businesses continue to charge down the path of web applications, Software-as-a-service, cloud computing, outsourcing almost all features and functionality to third party vendors, and free everything (sans AdWords), we must understand the consequences associated our decisions every step of the way.  The Google Docs web application has a plethora of benefits that are absent from Microsoft Word.  For those reasons, I use Docs every chance I get.  However, the costs associated with the worst case scenario, when and if that scenario plays out, are high, very high (think disappearing documents, not just temporarily inaccessible).  As businesses charging forward, and making strategic decisions associated with the web and the future of our companies, a cost benefit analysis is critical every step of the way.  Every decision that introduces a benefit while introducing a dependency must be made with that dichotomy in mind: buy v. build, outsource v. inhouse, web application v. stand alone, SaaS v. hosted.  Google Docs isn't really free, it's costs are just difficult, if not impossible, to quantify.  However, if you understand that this cost exists, you know that the cost benefit analysis equation isn't one sided, which means your headed toward a good decision.

Hey, Google Docs is back up!  Web App Hostage Negotiators = 1, Google Docs = 0…

Now, I’m going to import this blog post to Google Docs, so that I can share it with a colleague, who can collaborate online using only a Web browser, edit it quickly at the same time, and make sure it’s stored securely online!!!  Hmmm, I’m having Déjà vu.

To give you an idea of where I currently am on the cost benefit analysis, I’m not going to back up the original before I import.  Let’s see if I regret my decision…
 

Digg It!StumbleUponTechnoratiDel.icio.us

Updated PCI Data Security Standards (DSS) Requirements

Posted on July 1, 2008 by Josh

Effective June 30, 2008, the PCI Security Standards Council (SSC) has mandated that merchants must comply with Requirement 6.6. You know the one. It's the final requirement listed in Requirement 6: Develop and Maintain Secure Systems and Applications. It says:

6.6 Ensure that all web-facing applications are protected against known attacks by applying either of the following methods:

  • Having all custom application code reviewed for common vulnerabilities by an organization that specializes in application security
  • Installing an application layer firewall in front of web-facing applications.
    • Note: This method is considered a best practice until June 30, 2008, after which it becomes a requirement.

Changes in eCommerce 

What does this mean for us in eCommerce? Well, it means that you have a decision to make about how to secure your web-facing applications. Do you perform a manual code review or install an application layer firewall? How about both? Both are considered best practices for eCommerce security at this point and the PCI DSS standard will only grow to become more stringent, more specific, and likely extend beyond minimal security standards. So you may as well start now. There are four options for application code review, as outlined by the PCI SSC:

  • Manual review of application source code
  • Proper use of automated source code analyzer (scanning) tools
  • Manual web application security vulnerability assessments
  • Proper use of automated web application security vulnerability assessment (scanning)

If you don't have control over your source, make sure you're working with software packages/vendors that meet the new requirements.

 

Increased Vulnerability 

That's not all! I also received an email from McAfee, our Approved Scanning Vendor (ASV), letting us know that also effective June 30, 2008, the PCI SSC is requiring ASVs to change from version 1 to version 2 of the Common Vulnerability Scoring System (CVSS). What does the change mean for you? Well, it changes the way certain vulnerabilities are scored. Consequently, some low priority vulnerabilities from version 1 will now be scored as higher risk vulnerabilities and could cause a failing PCI network scan score, resulting in non-compliance until you can fix the issue. They pointed out that the top 5 vulnerabilities, statistically, are as follows:

  • SSL Protocol Version 2 Detection -- Don't use SSLv2.
  • Weak Supported SSL Ciphers Suites -- Don't use ciphers < 128bit encryption.
  • Default Microsoft IIS Files and/or Frontpage Extensions Found -- Don't.
  • OpenSSL Multiple Vulnerabilities < 0.9.8d -- Don't use OpenSSL below 0.9.8d; it's got a number of serious vulnerabilities.
  • OpenSSL PKCS Padding RSA Signature Forgery Vulnerability -- Could allow an attacker to forge and RSA signature and pose as a trusted party.

You should work directly with your ASV if a vulnerability risk is uncovered. 

 

PCI Keeps us on our Toes 

Don't get comfortable once you've knocked these new requirements out. By October 2008, the PCI SSC will have released/required version 1.2 of the PCI DSS. The same 12 core requirements will apply. Supposedly, however, the newer version will "enhance the clarity of its technical requirements, offer improved flexibility..." (Thank God).

One last note: The PCI SSC website is www.pcisecuritystandards.org. Does anyone else think it's funny that when you visit http://pcisecuritystandards.org/ (sans "www"), that you get a security error? It's such an easy fix...
 
http://pcisecuritystandards.org/ security error

http://pcisecuritystandards.org/ security error

 

Digg It!StumbleUponTechnoratiDel.icio.us

PayPal Error on PayPal.com's Home Page: Page Not Found

Posted on June 16, 2008 by Tim

On the heels of Google Docs giving me a 404 Error that doesn't follow Google's own guidelines and Amazon going down to the tune of a $2.3 million, the largest alternative payment method provider couldn't just sit on the sidelines.  PayPal, not to be outdone by Google and Amazon, has now joined the ranks of mega sites dealing with recent errors and outages.

This last Wednesday, I went to PayPal's homepage, paypal.com, by typing the URL directly into my browser.  The page only partially loaded, showing lots of empty whitespace, noticeably absent formatting, and little navigation.  A big, almost empty, rectangle included two links in the lower left.  The first link read "Click here to retry".  The second link ironically read "Return to the homepage".  The title of the page read "Page Not Found - PayPal".  Several refreshes didn't clear up the issue.  Neither did clearing my cookies, cache and temporary files, restarting my browser, and retyping the URL.  Several minutes later, PayPal.com loaded fine.

Here is a screen shot of PayPal's home page give me the Page Not Found error.

 

Man, what's in the internet water and who will drink it next?

Digg It!StumbleUponTechnoratiDel.icio.us

Excel Plug-in: Merge Cell Wizard

Posted on June 12, 2008 by Elizabeth

As I am slowly working my way up to “Excel Guru” around the office, I have been asked formula questions and excel functions that I never even knew existed. I remember the sense of accomplishment I felt when I wrote my first nested if-then function (that worked), ran my first advanced filter and created my first macro, all without having to ask for help. I felt like I could do anything in excel! The day I learned how to create a macro that would run several advanced filters for me, at two keystrokes, I danced around the office!

One day my manager came to me with a large excel file. He had all of his fields separated out into highly specific, individual cells that spanned across many, many columns. He needed the data from several columns and rows to be combined and shown in one cell. So, I needed a way to merge together several cells. The standard Merge Cell Feature in excel is helpful, but limiting. I searched the internet for a few minutes before I found the Merge Cell Wizard. This feature allows you to merge cells row by row as well as column by column.  What is great about the Merge Cells Wizard is that you can specify what separator to use: comma, tab, return, etc.

Needless to say, I was thrilled that I was able to complete the task. Using this plug-in saved hours, if not days worth of work. You can get the plug-in for a fee through www.ablebits.com, or search for a free download that will offer a 30 day trial. If it is a tool that you will utilize often, it is worth every penny! 

 

Digg It!StumbleUponTechnoratiDel.icio.us

Google's 404 Error Page: Not Good, Not Effective, and Not Google Friendly (According to Google's Guidelines)

Posted on June 3, 2008 by Tim

Sometimes Google creates guidelines for webmasters that Google doesn't follow itself.  Let me elaborate.  Last night, I went to Google Docs and was pleasantly surprised with a 404 error.  It was only pleasant because it's nice to know that even Google can't always satisfy Google standards, so I'm in good company.

For our non-nerds, in general, a 404 error is what users receive when they attempt to access a non existent page on a website.  This can happen for several reasons: the user may have incorrectly typed a URL, the page may no longer exist because it has been deleted, the page may have been moved to another location, the page may have been renamed, the link they followed may be broken or outdated, or a URL redirect, such as a 301 or 302, may have problems.

Google's 404 Error Page

I triggered the error by typing in the URL www.google.com/docs which redirected to http://docs.google.com/.  By the way, don't worry mankind, one browser refresh lead me to a working Google Docs home page.  Earth's productivity as we know it will have to halt another day.

Here is a screen shot of Google's 404 error, as presented to me:




Now, although I was surprised to have seen a 404 error from Google at all, this isn't what really surprised me.  Even Google's army of data centers can't get it right all of the time.  Also, I don't know of any uptime guarantees that come with Google Docs or any of Google's free services for that matter.  Some of Google's paid products or services do offer uptime guarantees, such as Google Apps Premier Edition, which includes a 99.9% uptime guarantee for Gmail.

What really surprised me, what really "pleasantly" surprised me, was the 404 error's presentation.

The text on the error page was extraordinarily simple, stating "Not Found Error 404".  The text was black on a white background.  Similarly, the title tag read "Not Found".  Also, the Google Docs favicon appeared in the FireFox browser tab.

However, Google's 404 page was not customized to provide help to Google's users.  Now, a non helpful 404 page is no epiphany.  Plenty of sites have 404 error pages as unwelcoming and unhelpful as Google's and plenty of great, free custom 404 error page recommendations are out there just waiting to be implemented.

Based on Google's definition of a "good custom 404 page", Google does not have a good custom 404 page

The irony in this example is that Google Webmaster Help Center provides Guidelines for creating useful custom 404 pages which recommends that webmasters create a custom 404 page.  The guidelines state "If you have access to your server, we recommend that you create a custom 404 page. A good custom 404 page will help people find the information they're looking for, as well as providing other helpful content and encouraging them to explore your site further."
Google's 404 page didn't do any of these things.  It didn't help people find the information they were looking for (Google Docs), was not customized to provide other helpful content (no other content was provided) and did not encourage them to explore their site further (no exploration opportunities existed).

So, based on Google's definition of a "good custom 404 page", Google does not have a good custom 404 page.

Based on Google's definition of an "effective 404 page", Google does not have an effective 404 page

Google's guidelines go on to describe how to create an "effective 404 page".  The guidelines state:

"Because a 404 page can also be a standard HTML page, you can customize it any way you want. Here are some suggestions for creating an effective 404 page that can help keep visitors on your site and help them find the information they're looking for:"

Then, the guidelines provide a bulleted list of suggestions.  Let's see how well Google does, in implementing their suggestions:

  • Tell visitors clearly that the page they're looking for can't be found. Use language that is friendly and inviting.

Well, although the text doesn't say "what" isn't found, the page certainly presents the text "Not Found" loud and clear.  Obviously, the text "Not Found Error 404" is neither friendly nor inviting.

  • Make sure your 404 page uses the same look and feel (including navigation) as the rest of your site.

Google's 404 page doesn't use any look and feel, or navigation, let alone a look and feel that is the same as the rest of Google.

  • Consider adding links to your most popular articles or posts, as well as a link to your site's home page.

Google's 404 page doesn't contain any links to anywhere.

  • Think about providing a way for users to report a broken link.

Google's 404 page doesn't provide a way for users to report anything.

  • No matter how beautiful and useful your custom 404 page, you probably don't want it to appear in Google search results. In order to prevent 404 pages from being indexed by Google and other search engines, make sure that your webserver returns an actual 404 HTTP status code when a missing page is requested."

I didn't check the HTTP status code on Google's 404 page to see if Google's webserver returned an actual 404 or not.  Currently, it doesn't look like the 404 page appears in Google search results.

So, based on Google's definition of an "effective 404 page", Google does not have an effective 404 page.

Is Google a Google-friendly site?

What's really funny, is that Google's "Guidelines for creating useful custom 404 pages" are found under Googles' "Creating a Google-friendly site", which naturally begs the (very long) question:

If Google does not have a "good custom 404" page based on Google's definition of a good custom 404 page, and if Google does not have an "effective 404 page" based on Google's definition of an effective 404 page, which means that Google does not have a "useful custom 404 page" based on Google's "Guidelines for creating useful custom 404 page", and these guidelines are an element of "Creating a Google-friendly site" then...

Is Google a Google-friendly site?

 

Digg It!StumbleUponTechnoratiDel.icio.us

Vanessa’s Variety for the Week of May 16th, 2008

Posted on May 15, 2008 by Vanessa

Welcome to this week in eCommerce and Entrepreneurship.  Take a look cause the world of eCommerce is getting more interesting by the week.

  • Brainstorming for keywords can be tough especially if you or your search marketer has hit their own form of writers block.  Search Engine Journal put out a list of tools to help with keyword generation. 
  • “The Churchill Club of Silicon Valley just wrapped up one of its most anticipated events: the Annual Top Ten Tech Trends Debate. Five well-known and opinionated venture capitalists weighed in on what trends will take flight and what trends will fizzle out in the months ahead.” …more 
  • I am not a fan of the Dallas Mavericks nor am I really a fan of Mark Cuban, not for any particular reason other than the fact that I am a Laker fan.  As a fan of the competition, one tends to feel a little sour towards the Mavericks owner.  As you may know though, he is one of us, an ecommerce nerd.  This week he pondered about how to beat Google, and what he came up with may interest you. 
  • It is no secret that companies have discovered that employee health and well being cuts out on the amount of sick days used which cuts costs and increases productivity.  What about the employees that just plain play hooky?  Well a new technology has surfaced that can detect when an employee is lying over the phone.  From the article: “The technology means someone phoning in for a sickie will speak not to a sympathetic secretary but to a computer set up to check whether their voice is steady and reliable.” 
  • In response to New York tax laws, Overstock.com has cancelled all relationships with affiliates in New York.

Digg It!StumbleUponTechnoratiDel.icio.us

Cisco 7960 and Trixbox Problems in our VOIP Implementation

Posted on May 8, 2008 by Josh

If you didn't already read Challenges of an Internet Retailer’s VOIP Implementation, then you may want to take a quick glance at that post to catch up on our previous issues.

Our decision to use the Grandstream GXP-2000 phones for our VOIP users had been haunting us for some time when a friend of mine recently “donated” a spare Cisco 7960 and a few Polycom IP phones to use. I was naturally excited to plug in phones that I knew were renowned for quality and performance. Both phones were well documented in the TrixBox community and I fully expected to be up and running in minutes. So I gave the Polycom’s a whirl: plugged them in, checked the IP address, logged in to each phone through a web interface and updated all of the settings that I expected to make them work with our TrixBox (version 2.5) implementation. Easy. They worked well. Done.

Then, excited like a kid at Christmas, I jumped over to the Cisco 7960, plugged it in, checked the IP address, opened a browser… “cannot display the webpage”. Oh. OK. So Cisco doesn’t have a user friendly web interface for the 7960. No problem. So I dove into settings on the phone. Cisco makes a great product and from the granularity and variety of options, it’s clear that this phone can be customized to work well with our system. So I manually plugged away on settings using the phone’s dial pad and rebooted the phone. Now, the phone won’t register with the TrixBox host. Hmmm. Everything seems correct. Maybe I missed a period somewhere… nope. So I tried changing a few settings and rebooting… nope. So I tried changing settings a half dozen or so more times…nope. OK, going to the TrixBox forums. A search for 7960 yields 469 results. OK, no problem. So I dig away, reading through numerous setup walkthroughs.

Finally, I come across a forum where a user posts a setup question relating to the same issue that I am having. He posted on 12/22/2006. The first reply to his post is a “bumped” response that was posted on 3/24/2008 with a very simple solution.

Seriously? It took 15 months to find the solution? Wow.

So, I didn’t want anyone else to have to go through the trouble of digging, here’s what got my Cisco 7960 to work with my implementation of TrixBox:

 

  1. From the TrixBox command line, type “setup-cisco” 
  2. Open http://trixboxhostname/maint 
  3. In the Asterisk menu, select Endpoint Manager 
  4. Click Cisco phones then click Add Phone 
  5. Select the appropriate extension, phone type, and enter the phone’s MAC address 
  6. In the Asterisk menu, select Config Edit 
  7. Click /tftpboot then click SIPDefault.cnf 
  8. In the edit window, find:
    • # NAT/Firewall Traversal
      nat_enable: "0"
    • and change the “0” to “1” (This is the step I was missing)
  9. Manually configure your 7960 to point to your TrixBox host’s IP for tftpboot
  10. Reboot your 7960

 

Tada!  It should work.

 

Digg It!StumbleUponTechnoratiDel.icio.us