Mobiles, Shakespeare, Politics, Usability, Security.

Responsible Disclosure - XSS Flaw at

Lets Save Money XSS

Another day, another bug! is a "money saving" site. It offers discounts on a wide range of products and services, and is financed through affiliate marketing. My Trade Union, Prospect, has just launched a white-labelled "Members' Rewards" based on LetsSaveMoney - that's how I came across this bug. It's a depressingly familiar story - do a search which includes some HTML and watch… Read more »

Locating Objects Around The House

BLE Key Finder

It's always interesting to read over older Sci-Fi books and see what they got right about their future. I was re-reading Cory Doctorow's excellent "Makers" recently, when I came across this passage: Now the place was *spotless* -- and what's more, it was *minimalist*. The floor was not only clean, it was visible. Lining the walls were translucent white plastic tubs stacked to the… Read more »

Reverse Engineering the BMW i3 API

BMW API Details-fs8

I'm really enjoying driving the BMW i3. I'd love to have it tweet its driving efficiency, or upload its location to my server, or let me turn on its air-conditioning when the temperature gets too warm - there are a hundred interesting things to do with the car's data. The official app has some of these features - but is slow, ugly, and a… Read more »

Wildcard Email Domains and New TLDs

Spelling mistakes in email addresses

Nominet has, after much prevaricating, launched its latest money grubbing venture plan to revolutionise the UK Internet industry. Rather than having fusty old or businesses can go straight for - Mind = BLOWN! There are, of course, some obvious downsides to this plan. It's always been the case that people could register misspellings of domains and snaffle up all the email… Read more »

YHDO Security Camera Review

NetCam Camera

The good folk at THZY-UK have sent me a gadget to review - the YHDO Security Camera with Night Vision. I'm comparing this to other cameras I've reviewed in the past - including Y-Cam and Sercomm models. The first thing to note is that this is one of the cheaper cameras on the market. At around £40, it's a third of the price of… Read more »

Would You Use Your Company's Product If You Weren't An Employee?

One of the questions we frequently get asked at work is "would you recommend the company's products and services to your friends and family?" It's a question which I've been asked in just about every company I've joined - and it's getting increasingly harder for me to answer. Obviously, if you work in a B2B company making industrial blast furnaces, it's unlikely you're going… Read more »

Why isn't your Intranet public facing?

In every company I've worked for, the Intranet has been where good ideas are sent to die. Outdated org charts, canteen menus which are updated sporadically, attempts to write an FAQ for the antiquated expenses system, and a maze of links dedicated to the Byzantine HR process. One thing I've never seen was information which could in any sense be considered confidential. Don't get… Read more »

SoundCloud Spammers On Twitter


Regular readers will know that I take a keen interest in Twitter spam. It seems the more popular a network gets, the greater the propensity for spam. A shame, but it seems to be the way of the world. Recently, one of my Tweets which mentioned SoundCloud was retweeted in rapid succession by a variety of accounts. Take a look at the mugshots below… Read more »

The MTV Problem With Product Managment

Principle Skinner contemplates the world - "Am I out of touch? No, it's the userbase that's wrong!"

There's a meme which makes its way around the 'net whenever a popular service makes a significant change. I've seen this said about Reddit, imgur, Twitter, Facebook, Xbox, Spotify, FourSquare - and just about every other modern product. It imagines a Product Manager thoughtfully contemplating the future direction of their service. In the 1990s, I was a teenager and my parents gave in to… Read more »

Liberate Your YouTube Videos

Google Takeout

If you've been following this blog, you'll know that Google unjustly shut down my YouTube channel. They've now reinstated it - but I can no longer trust them as custodians of my data. So, here's a quick tutorial on how to download all your videos - and metadata - from YouTube. The Official Way Google offers a "takeout" service which will allow you to… Read more »