<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>:Ben Metcalfe Blog &#187; Thoughts and Rants</title>
	<atom:link href="http://benmetcalfe.com/blog/category/industry/thoughtsandrants/feed/" rel="self" type="application/rss+xml" />
	<link>http://benmetcalfe.com/blog</link>
	<description>The Virtual Investor</description>
	<lastBuildDate>Wed, 04 Aug 2010 22:24:51 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Maybe Zappos wasn&#8217;t the amazing shiny business bundle of joy it was made out to be?</title>
		<link>http://benmetcalfe.com/blog/2010/06/maybe-zappos-wasnt-the-amazing-shiny-business-bundle-of-joy-it-was-made-out-to-be/</link>
		<comments>http://benmetcalfe.com/blog/2010/06/maybe-zappos-wasnt-the-amazing-shiny-business-bundle-of-joy-it-was-made-out-to-be/#comments</comments>
		<pubDate>Mon, 07 Jun 2010 09:37:55 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[Thoughts and Rants]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=1152</guid>
		<description><![CDATA[I&#8217;ve always found Zappos&#8217; exuberant approach to customer service and employee perks somewhat peculiar. Masterminded by its CEO, Tony Hsieh, I&#8217;ve seen him speak several times on the subject and read countless stories in the media and blogosphere on how amazing it all is. Don&#8217;t get me wrong, it&#8217;s great that you can call them [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve always found Zappos&#8217; exuberant approach to customer service and employee perks somewhat peculiar.  Masterminded by its CEO, Tony Hsieh, I&#8217;ve seen him speak several times on the subject and read countless stories in the media and blogosphere on how amazing it all is.</p>
<p>Don&#8217;t get me wrong, it&#8217;s great that <a href="http://www.businessweek.com/smallbiz/content/may2009/sb20090512_831040.htm">you can call them up and order a pizza</a> and every employee gets to decorate their cubes.</p>
<p>But I&#8217;ve never been convinced it <em>really</em> converts into increased profits in a mainstream, volume-orientated, retail vertical selling commodity products like shoes.</p>
<p>As much as I want to believe in it all, we&#8217;ve never seen the hard numbers on sales because Zappos has always remained a private company. Yes, they revealed they did $1bn in sales in 2008 but that doesn&#8217;t mean anything &#8211; that could be against $1.2bn in costs at which point they&#8217;d be operating at a loss.  And I don&#8217;t see the point of cheerleading an established company that has never turned a profit.</p>
<p>So it was interesting to <a href="http://www.inc.com/magazine/20100601/why-i-sold-zappos.html">read a somewhat bitter-sounding Tony Hsieh reveal some insight to Inc. Magainze</a> on the operations of his company and why he sold to Amazon.</p>
<p>The two juicy nuggets I found interesting:</p>
<p><strong>1) Even with $1bn in sales, Zappos was trading on a $100m line of credit</strong></p>
<blockquote><p>By 2008 we were doing more than $1 billion in gross merchandise sales annually<br />
&#8230;<br />
At the time, Zappos relied on a revolving line of credit of $100 million to buy inventory. But our lending agreements required us to hit projected revenue and profitability targets each month. If we missed our numbers even by a small amount, the banks had the right to walk away from the loans, creating a possible cash-flow crisis that might theoretically bankrupt us. In early 2009, there weren&#8217;t a lot of banks eager to give out $100 million to a business in our situation.</p></blockquote>
<p>In other words it doesn&#8217;t appear Zappos was even making $100m/year profit on that $1bn/year in sales (a rather poor 10%) &#8211; if it was, presumably it would pay off the debt that was leaving it in such a precarious position.  Given that Zappos has never competed with other retailers on price, and thus been able to maintain healthy margins, one has to wonder whether all that amazing customer service and employee benefits have been proven overly expensive?</p>
<p><strong>2) Zappos&#8217; Board had no confidence in his corporate culture methodology and just wanted to exit</strong></p>
<blockquote><p>Although I&#8217;d [Tony Hsieh] financed much of Zappos myself during its early days, we&#8217;d eventually raised tens of millions of dollars from outside investors, including $48 million from Sequoia Capital, a Silicon Valley venture capital firm. As with all VCs, Sequoia expected a substantial return on its investment &#8212; most likely through an IPO. It might have been happy to wait a few more years if the economy had been thriving, but the recession and the credit crisis had put Zappos &#8212; and our investors &#8212; in a very precarious position.<br />
&#8230;<br />
Some board members had always viewed our company culture as a pet project &#8212; &#8220;Tony&#8217;s social experiments,&#8221; they called it. I disagreed. I believe that getting the culture right is the most important thing a company can do. But the board took the conventional view &#8212; namely, that a business should focus on profitability first and then use the profits to do nice things for its employees. The board&#8217;s attitude was that my &#8220;social experiments&#8221; might make for good PR but that they didn&#8217;t move the overall business forward. The board wanted me, or whoever was CEO, to spend less time on worrying about employee happiness and more time selling shoes.</p></blockquote>
<p>Despite controlling the common stock, Tony was at risk of being ousted as CEO at any time and replaced with someone more traditional.  In other words it appears he sold out to Amazon not because it was a match made in heaven but really just to eject the board and keep his position safe.  And Jeff Bezos had the check waiting.</p>
<p><strong>Conclusions</strong></p>
<p>I don&#8217;t have any firm conclusions right now as I&#8217;m still digesting the rest of the article (an excerpt from his book) but it&#8217;s pretty frank and telling.  I&#8217;m actually very surprised Tony has given such a revealing account given he is still the CEO.</p>
<p>But I do think this indicates a friction between the much lauded Zappos corporate culture and the realities of establishing a profitable business &#8211; specifically that Zappos failed to prove it.</p>
<p>While everyone working at Zappos was able to pick up a solid pay check while working in nice conditions and customers could call up the helpline and talk about whatever they wanted, it appears that Zappos hasn&#8217;t become the business success many have drunk the kool-aid over.</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2010/06/maybe-zappos-wasnt-the-amazing-shiny-business-bundle-of-joy-it-was-made-out-to-be/feed/</wfw:commentRss>
		<slash:comments>20</slash:comments>
		</item>
		<item>
		<title>Geeks On A Plane Behind A Firewall</title>
		<link>http://benmetcalfe.com/blog/2010/05/geek-on-a-plane-behind-a-firewall/</link>
		<comments>http://benmetcalfe.com/blog/2010/05/geek-on-a-plane-behind-a-firewall/#comments</comments>
		<pubDate>Mon, 24 May 2010 03:04:28 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[Thoughts and Rants]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=1104</guid>
		<description><![CDATA[From the blog posts and photos coming out of China, it looks like everyone on the Geeks on a Plane trip to China is having a great time. Friend + GOAP organizer Dave McClure, along with few others, even got to meet Secretary Clinton who happened to be visiting Shagahi at the same time: However, [...]]]></description>
			<content:encoded><![CDATA[<p>From the <a href="http://geeksonaplane.com/geeksonaplane-2010-shanghai/">blog posts and photos</a> coming out of China, it looks like everyone on the Geeks on a Plane trip to China is having a great time.  Friend + GOAP organizer <a href="http://500hats.typepad.com/">Dave McClure</a>, along with few others, even got to meet Secretary Clinton who happened to be visiting Shagahi at the same time:</p>
<p><a href="http://www.flickr.com/photos/hardaway/4633384487/"><img src="http://farm5.static.flickr.com/4060/4633384487_be8ef46e09_m_d.jpg" alt="" /></a></p>
<p>However, some of the email conversations I&#8217;ve been on with members of delegation have included their surprise at the sites that they are unable to access due to the <a href="http://en.wikipedia.org/wiki/Internet_censorship_in_the_People's_Republic_of_China">censorship of Internet connectivity</a> there (aka <a href="http://en.wikipedia.org/wiki/Golden_Shield_Project">the Great Firewall of China</a>).</p>
<p>Apparently <a href="http://www.twitter.com">Twitter</a>, <a href="http://www.facebook.com">Facebook</a>, email posting to <a href="http://www.posterous.com">Posterous</a> and even <a href="http://en.wikipedia.org/wiki/Internet_censorship_in_the_People's_Republic_of_China">Louis Gray&#8217;s blog</a> are blocked.  But don&#8217;t worry, <a href="http://scobleizer.com/">Scoble&#8217;s</a> isn&#8217;t anymore.</p>
<p>Joking aside, many worthwhile and important sites, such as <a href="http://www.bbc.co.uk/news">BBC News</a> <em>(disclosure: I am a former long-term employee)</em> remain blocked and unavailable to the population of China.</p>
<p>It is for this reason that I personally would have been uncomfortable about visiting China in a business capacity, and certainly on a high-profile organized industry trip like GOAP (which I was invited to attend but turned down for other reasons).</p>
<p>As it happens, I&#8217;ve visited China, but simply for leisure to &#8216;see for myself&#8217;, especially to explore the nature of the censorship, regime and the way of life there.</p>
<p>This is not an attack on my friend Dave and I support the increase of industry ties with other countries.</p>
<p><strong>However I hope that the GOAP trip of Internet entrepreneurs is not perceived to be a legitimization or acceptance of the regime&#8217;s censored internet access.  Nor should we forget the still recent <a href="http://googleblog.blogspot.com/2010/01/new-approach-to-china.html">attacks on Google and other western-operated internet assets</a> that <a href="http://www.guardian.co.uk/technology/2010/jan/13/china-google-hacking-attack-us">appear to be state-sponsored</a>.</strong>  It is also worth remembering that China does not welcome foreign companies and startups to operate out of China without domestic co-ownership.</p>
<p>At a time when <a href="http://googleblog.blogspot.com/2010/03/new-approach-to-china-update.html">Google is clearing out its offices in China</a> and refusing to cooperate with China&#8217;s censorship demands, the lack of any acknowledgment <em>(and perhaps even condemnation)</em> of these issues by GOAP is definitely disappointing.</p>
<p>As I said, this is not an attack on Dave or anyone else attending.  And I also understand that while they are physically in China it may not be the best time to express these opinions.</p>
<p>But before the chapter is closed on the GOAP:China expedition, I certainly hope that some recognition of these issues are made &#8211; perhaps even some suggestions on what we can all do, as Internet entrepreneurs and professionals, to place pressure for change.  For freedom from censorship, freedom from attack and freedom to operate a wholly-owned entity in the local market.</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2010/05/geek-on-a-plane-behind-a-firewall/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Thoughts on BankSimple</title>
		<link>http://benmetcalfe.com/blog/2010/05/thoughts-on-banksimple/</link>
		<comments>http://benmetcalfe.com/blog/2010/05/thoughts-on-banksimple/#comments</comments>
		<pubDate>Tue, 18 May 2010 09:16:23 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[Thoughts and Rants]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=1092</guid>
		<description><![CDATA[Rod Begbie&#8217;s post on BankSimple resonated with me a lot this evening: Reading the &#8216;about’ page of banksimple, the new online bank that Alex Payne has left Twitter to work on, I felt sad. A simpler bank that is easy to use. A bank that treats you with respect. No extraneous features. No hidden fees. [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://groovymother.com/2010/may/18/just-imagine/">Rod Begbie&#8217;s post on BankSimple</a> resonated with me a lot this evening:</p>
<blockquote><p>Reading <a href="http://banksimple.net/about/" title="About | banksimple">the &#8216;about’ page of banksimple</a>, the new online bank that <a href="http://al3x.net/2010/05/17/something-new.html" title="Alex Payne — Something New">Alex Payne has left Twitter to work on</a>, I felt sad.</p>
<ul>
<li>A simpler bank that is easy to use.</li>
<li>A bank that treats you with respect.</li>
<li>No extraneous features.</li>
<li>No hidden fees.</li>
</ul>
<p>I already have that. I feel sorry for the people who don’t.</p>
<p>&#8230;</p>
<p>Seriously folks, if your bank is a bunch of dicks, look around for a local credit union.</p></blockquote>
<p>Twitter API creator Al3x Payne is quitting Twitter to be a co-founder, which is why it is getting all the attention today &#8211; but I simply don&#8217;t get what they are trying to do.</p>
<p>Let&#8217;s look at this again:</p>
<ul>
<li>No extraneous features.</li>
<li>No hidden fees.</li>
</ul>
<p>Notice they didn&#8217;t say &#8216;no extraneous fees&#8217;, which is where I think some bloggers have got confused or caught up in the hyperbole.</p>
<p>My own bank, Citibank, doesn&#8217;t have any hidden fees that I have experienced.  Ok, if I used my overdraft or bounced a check they probably would but I&#8217;m not in that position financially.  Plus, surely BankSimple will have to have <strong>some kind</strong> of fees for overdrafts (or else not offer them at all) as they represent risk and will be abused if they are truely &#8216;free&#8217;.  Why bother to keep any money in your account if you can run on the overdraft all the time?</p>
<p>Citibank makes things pretty clear: my personal account is free if I keep more than $1200 across the checking and saving accounts, and my business account is free if I keep more than $5000 in there.  Which I do in both, so no big deal.  And, well, simple <img src='http://benmetcalfe.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>BankSimple has got to make money somewhere and so even if those fees ain&#8217;t &#8216;hidden&#8217; no one is saying there aren&#8217;t going to be any fees <em>at all</em>.  Perhaps it will be a $10/month charge or just a clearly advertised (ie not hidden) withdrawl fee.</p>
<p>The point is <strong>&#8216;No hidden fees&#8217; doesn&#8217;t mean &#8216;no fees&#8217;.</strong></p>
<p>And back to Citibank&#8230; well guess what? They <strong>do</strong> have lots of extraneous features!  Like being able to convert an out-going international wire transfer into a check made out in the local currency that is delivered to the recipient in the local mail <em>(great when I need to send money back home but don&#8217;t want my mum to have to deal with wire receiving fees)</em>.  Or advanced bill pay features that give me a really fine control over my payments.  Or deposit checks in any Citi ATM across the world.  I kinda like those features and would be disappointed if I couldn&#8217;t do some of the really helpful, time saving and money saving things I can do with my account.</p>
<p>So I don&#8217;t really get what BankSimple is trying to do.  A cut down, wishy-washy bank account that probably won&#8217;t have the features or convenience that most normal people want to see but will no doubt get caught up in bureaucracy both regulatory-wise from the SEC and also from it&#8217;s rivals who will no doubt make things difficult if they perceive BankSimple to be threat.</p>
<p>I notice the other founders are described as having experience performing technology consulting in the banking sector but it still seems like a bunch of startup people trying to create a 37 Signals-style bank rather than a serious banking contender that I would want to put my money in.  Maybe I&#8217;ve not fully drunk the koolaid, but for some things I would rather go big/mainstream/known-quantity rather than small/startup/experimental.  Cars, insurance and banking all come to mind.</p>
<p>Perhaps someone can tell me why BankSimple is a good idea &#8211; because from where I am sitting it doesn&#8217;t seem like a promising business, let alone one I would conclude vesting in early-stage Twitter stock for.</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2010/05/thoughts-on-banksimple/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Twitter and the need for a developer exit strategy</title>
		<link>http://benmetcalfe.com/blog/2010/04/twitter-and-the-need-for-a-developer-exit-strategy/</link>
		<comments>http://benmetcalfe.com/blog/2010/04/twitter-and-the-need-for-a-developer-exit-strategy/#comments</comments>
		<pubDate>Fri, 09 Apr 2010 20:25:08 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[Thoughts and Rants]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=1076</guid>
		<description><![CDATA[Today&#8217;s announcement of an official BlackBerry client for Twitter is interesting for a number of reasons. The app itself is actually the one that RIM have been building in house for sometime. If you look at a BlackBerry you will see that apps like Google Talk, AOL Messenger, Yahoo Messenger are all written by BlackBerry [...]]]></description>
			<content:encoded><![CDATA[<p>Today&#8217;s <a href="http://mobile.blog.twitter.com/2010/04/official-twitter-for-blackberry-app-now.html">announcement of an official BlackBerry client for Twitter</a> is interesting for a number of reasons.  The app itself is actually the one that RIM have been building in house for sometime.  If you look at a BlackBerry you will see that apps like Google Talk, AOL Messenger, Yahoo Messenger are all written by BlackBerry manufacturer RIM, but distributed as &#8216;the official BlackBerry client&#8217; by those companies.  Clearly, this is RIM&#8217;s modus operandi and they like to be in bed with the service they are building for.</p>
<p>I therefore wonder if Twitter didn&#8217;t actively go out and look to make an official app, but instead RIM propositioned this to them as the way they build these apps and Twitter decided it was worth making the move.</p>
<p>However, what is significant is I wonder if this development will encourage them to now create &#8216;official apps&#8217; in other areas, especially on niche or emerging devices and platforms.  <a href="http://www.avc.com/a_vc/2010/04/the-twitter-platform.html">Fred Wilson&#8217;s blog post</a>, while he is now playing down it&#8217;s significance, seems to suggest this.</p>
<p><strong>Twitter needs create the platform exit strategy for developers</strong></p>
<p>If you want to start &#8216;filling the gaps&#8217; in your proposition yourself, you need to create a way for developers to remain loyal and focus their interests elsewhere in your ecosystem.</p>
<p>Let&#8217;s look at Facebook.  They used their platform to add value to their proposition and fuel the rate of growth.  When they met the inflection point where that was no longer necessary they regained control slowly restricting the app&#8217;s ability to communicate with the user and relegated the apps to a separate tab that no one would ever click on.</p>
<p>To pre-empt the frustration this might cause they very astutely created Facebook Connect  &#8211; which enabled developers to continue to work on the opportunities of the Facebook platform but away from Facebook itself <em>(which is what Facebook wanted)</em>.  In many ways, this was an exit strategy for developers who had invested time and experience in the platform.</p>
<p>If Twitter begin to effectively close up the opportunities in the platform by creating &#8216;official apps&#8217; across the board, or &#8216;plugging the holes&#8217; themselves then they too need to create the exit strategy for developers else they will get pissed.</p>
<p><a href="http://www.avc.com/a_vc/2010/04/the-twitter-platform.html">Fred Wilson suggest</a>s developers look at social gaming, enterprise, discovery, and analytics.  Those are great ideas, but Twitter will need to do certain things and release certain APIs to create these &#8216;exit strategies&#8217; to encourage developer focus away from clients and into those areas.</p>
<p>Here are some of my thoughts on what Twitter needs to do to make these ideas viable and valuable for developers:</p>
<p><strong>Social gaming</strong><br />
<a href="http://www.playspymaster.com">Spymaster</a> showed us that <a href="http://techcrunch.com/2009/05/29/spy-vs-spy-the-spymaster-backlash-begins-and-twitter-needs-to-fix-it/">social gaming is too noisy on Twitter</a>, at least as it exists is today</p>
<ul>
<li>Twitter need to create a filter or similar mechanism to allow social gaming to exist so users can participate without fearing they are creating noise for the followers.  I actually think makes this the toughest one to solve.</li>
</ul>
<p><strong>Enterprise</strong><br />
Twitter is already building product in this area and that will concern developers.</p>
<ul>
<li>Twitter needs to be more transparent with what it is and isn&#8217;t doing in this space so developers can feel safe investing their time building apps Twitter isn&#8217;t going to compete with.</li>
<li>An official solutions marketplace and preferred consultant network, while stodgy, would help startups connect with enterprise</li>
</ul>
<p><strong>Discovery</strong><br />
Rate limiting is still hurting this area, despite fire-hose/garden-hose being available. Discovery typically needs volumes of data.</p>
<ul>
<li>Remove rate limiting for certified discovery apps</li>
<li>Increase who can get the true fire-hose as it doesn&#8217;t appear to be open to anyone</li>
<li>Create a Twitter Query Language (TQL?) to allow new types of data interrogation to occur that doesn&#8217;t require the user to maintain a mirror of the twitter status database.</li>
</ul>
<p><strong>Analytics</strong><br />
Twitter is also working on projects in this space, which again will understandably concern developers. It also has the issue of (potentially) needing volumes of data like Discovery.</p>
<ul>
<li>Twitter should be transparent with their roadmap here too</li>
<li>Release more API&#8217;s around user metadata, such as rankings and other computable values from the master DB</li>
<li>Removing rate limits, creation of a TQL would help massively here too</li>
</ul>
<p>What it comes down to is that developers have created mainly presentation-layer focused apps because the API set available to them has encouraged this.  If eyeballs and page views are related to monetization, then I can understand why Twitter might be wanting to reign in what is going on this space.</p>
<p>However, before it can urge developers to go build in different spaces, in different parts of it&#8217;s value chain, Twitter needs to lay the foundations for this to occur.  Creating these new APIs and being more transparent with its own roadmaps in the Enterprise, Discovery and Analytics spaces are all very necessary.</p>
<p>Friend and Seesmic founder Loic Le Meur <a href="http://www.loiclemeur.com/english/2010/04/of-course-were-hole-fillers-and-why-no-one-should-depend-on-only-one-platform.html">has some wise perspectives on this</a>.</p>
<p>(Disclosure: I am a shareholder in <a href="http://www.seesmic.com">Seesmic</a> and <a href="http://www.nutshellmail.com">NutShellMail</a>, both of which are primarily focused in this space)</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2010/04/twitter-and-the-need-for-a-developer-exit-strategy/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>User aqusition: easy-come should be easy-go</title>
		<link>http://benmetcalfe.com/blog/2009/10/user-aqusition-easy-come-should-be-easy-go/</link>
		<comments>http://benmetcalfe.com/blog/2009/10/user-aqusition-easy-come-should-be-easy-go/#comments</comments>
		<pubDate>Tue, 20 Oct 2009 07:45:27 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[Thoughts and Rants]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=980</guid>
		<description><![CDATA[Metric-orientated user acquisition is definitely the hot topic of the moment here in the Valley (along with &#8220;frictionless customer conversion&#8221; as my rad friend Ethan Bloch of Flowtown would say) But as we optimize funneleing and conversion for user acquisition within our startups, how many of us have a solid user relinquish process for those [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://500hats.typepad.com/500blogs/2009/02/startup-metrics-for-pirates-aarrr-fowamiami-feb-2009.html">Metric-orientated user acquisition</a> is definitely the hot topic of the moment here in the Valley (along with <em>&#8220;frictionless customer conversion&#8221;</em> as my rad friend <a href="http://twitter.com/ebloch">Ethan Bloch</a> of <a href="http://flowtown.com/">Flowtown</a> would say) </p>
<p><a href="http://www.flickr.com/photos/imagezen/52431885/"><img src="http://farm1.static.flickr.com/33/52431885_72e3a41427_m.jpg" alt="Exit door" /></a></p>
<p>But as we optimize <a id="aptureLink_W0lqLz9c6y" href="http://en.wikipedia.org/wiki/Sales%20tunnel">funneleing</a> and conversion for user <em>acquisition</em> within our startups, how many of us have a solid user <em>relinquish</em> process for those users who might want to leave?</p>
<p>As a technologist and generally curious geek, I like to check out most new start-ups that are launched.  In fact it&#8217;s kinda my job to, and to that end I probably create at least two or three new accounts somewhere a day.</p>
<p>I visit, I sign up, I create an account (&#8220;just username, password and email address!&#8221;).  But that&#8217;s the beginning of a probably well-oiled slippery slope.  My interest is piqued, I upload my photo, fill out the profile data, connect my Facebook, etc, etc&#8230;</p>
<p>But what if I&#8217;m now done?  <em>&#8220;Nah, not interest in what you are doing&#8221;</em>. Or even more importantly <em>&#8220;Er, um!.. I&#8217;m put off by this weird thing you&#8217;re doing in your site. I don&#8217;t like it so I&#8217;m outta here&#8221;</em>.</p>
<p>How many sites actually let me delete my account and leave?</p>
<p>Or conversely, how many sites have stubs of my personal data sitting on their servers because there is no easy way for me to remove it &#8211; despite being clear I no longer wish to use their service?</p>
<p>Now, I don&#8217;t consider myself some crazy privacy whack.  I just think it&#8217;s pretty reasonable to suggest that if I really have absolutely no interesting in using your service at all then I would like to know that you will completely remove my data and forget about me.  Data <s>Portability</s> &#8216;Removability&#8217;, if you will <img src='http://benmetcalfe.com/blog/wp-includes/images/smilies/icon_razz.gif' alt=':P' class='wp-smiley' /> </p>
<p><strong>Two examples from the real-world&#8230;</strong></p>
<p>Earlier today I decided to delete my <a href="http://www.tangler.com">Tangler</a> account (nothing personal to Tangler, I just don&#8217;t use it and it sends me a digest email every week that is just spam to me).  I logged in but found no &#8220;delete this account&#8221;, <a href="http://twitter.com/dotBen/status/5002393596">so I twittered my frustration</a>.  Later on <a href="http://twitter.com/dekrazee1/status/5004797750">Rai from Tangler @replied to me</a> to say that this could only be done via email.</p>
<p>That seems like a FAIL to me.</p>
<p>On the other hand I had a similar-but-positive-outcomed experience with <a href="http://www.getdropbox.com">Dropbox</a> last week.  Having unshared all of my computers from my account I still had 2gig of orphaned personal files in my storage account that were proving difficult to remove.  Bug or user-error I wasn&#8217;t sure, but I decided I just wanted to nix my account and start again.</p>
<p>To DropBox&#8217;s credit had a &#8220;delete this account&#8221; option, accompanied by very clear warnings that it was an irreversible decision.  They even had a data-capture form to give me the option of explaining my reasons for leaving/deleting my account &#8211; which someone personally followed up with me when I mentioned I was having file deletion issues.</p>
<p>Top marks on responsibility, implementation best practice and most optimized reason-for-leaving collection mechanism (alluded to in #5 in this <a href="http://blog.asmartbear.com/more-sales-customer-feedback.html">great blog post on customer feedback</a>)</p>
<p>And that&#8217;s all this really as to be: a &#8220;delete my account&#8221; button at the bottom of your settings/account profile page, a confirmation box and perhaps some way for the user to explain why they want out.  On the back-end, a quick purge of that user&#8217;s record and perhaps a separate archived audit log so that if a backup is restored deleted accounts can be consolidated.</p>
<p><strong>A user relinquish strategy is good for your business</strong></p>
<p>Good user relinquish practice is not only the fair thing to do for your users but it makes sense for business.</p>
<p>What value is there in holding all of this information about users that no longer wish to use your service?  Depending on the nature of the service you may even be provisioning resource for these ghost users &#8211; resource that you will never see a return on.  And VC&#8217;s/boards don&#8217;t want to see exaggerated raw account numbers, they (should) want to know monthly uniques, return visitors, etc.</p>
<p>And if we get into a %age game, removing users from the database who have totally left the service will actually increase the %age of your userbase that returned in the last month! <img src='http://benmetcalfe.com/blog/wp-includes/images/smilies/icon_razz.gif' alt=':P' class='wp-smiley' /> </p>
<p>There may also be boring <a id="aptureLink_F6Yh14uyyx" href="http://en.wikipedia.org/wiki/Data%20Protection%20Act%201998#Data_protection_principles">data-storage compliance issues</a>, especially if you trade physically in Europe.</p>
<p>So, that leaves the question: what is your user relinquish strategy?</p>
<p>[photo CC Image Zen]</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2009/10/user-aqusition-easy-come-should-be-easy-go/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>My GMail password scares me with its power!</title>
		<link>http://benmetcalfe.com/blog/2009/10/my-gmail-password-scares-me-with-its-power/</link>
		<comments>http://benmetcalfe.com/blog/2009/10/my-gmail-password-scares-me-with-its-power/#comments</comments>
		<pubDate>Wed, 07 Oct 2009 08:15:49 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[Thoughts and Rants]]></category>
		<category><![CDATA[Tools]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=974</guid>
		<description><![CDATA[Google&#8217;s GMail blog has some &#8220;handy&#8221; advice on how pick a good password to project your email account. Don&#8217;t use dictionary words, use mixed case, your eldest kid&#8217;s name is a bad choice, etc etc. Yeah that&#8217;s great. But the much bigger security issue I fear is that my GMail username &#038; password is also [...]]]></description>
			<content:encoded><![CDATA[<p>Google&#8217;s GMail blog <a href="http://gmailblog.blogspot.com/2009/10/choosing-smart-password.html">has some &#8220;handy&#8221; advice</a> on how pick a good password to project your email account.</p>
<p>Don&#8217;t use dictionary words, use mixed case, your eldest kid&#8217;s name is a bad choice, etc etc.  Yeah that&#8217;s great.</p>
<p>But the much bigger security issue I fear is that my GMail username &#038; password is also the same username &#038; password for:</p>
<ul>
<li>My calendar (Google Calendar)</li>
<li>My confidential documents (Google Docs)</li>
<li>My credit card (Google Checkout)</li>
<li>My website&#8217;s analytics (Google Analytics)</li>
<li>My RSS feed admin (Feedburner)</li>
<li>My phone number, voicemail, IM&#8217;s (Google Voice + GTalk)</li>
<li>Some experimental projects (App Engine)</li>
<li>My photos and videos (Picassa and YouTube)</li>
<li>+ more (<a href="https://www.google.com/accounts/ManageAccount">see your list of Google services you use</a>)</li>
</ul>
<p>Given the legitimate places you need to put your username and password in order to access your email (ie your email client, which might be sending it <a id="aptureLink_uxwqtLkni4" href="http://en.wikipedia.org/wiki/Cleartext">in the clear</a> each time it fetches mail), is it too much to rely on it&#8217;s security and integrity for all these other ancillary Google Services?</p>
<p>I am a strong believer that you shouldn&#8217;t give your Google username and password to ANYONE for this reason.  It pains me to have to give it to <a href="http://www.rim.com/">RIM</a> but it&#8217;s the only way they can push email to my Blackberry.</p>
<p><strong>Security through segregation</strong></p>
<p>It&#8217;s really about time Google separated GMail, and perhaps GTalk, authentication from the rest of their properties.  At the very least I&#8217;d like to see the ability to create a separate password for IMAP/POP access that I can enter into my email client and give to RIM that doesn&#8217;t give access to the rest of my Google Account.</p>
<p>However, as Google becomes an ever more vital and relied-upon part of our online workflow <em>(see how many services I use, above)</em>, I wonder whether there would be value in offering an optional <a id="aptureLink_flf0x7IfjV" href="http://en.wikipedia.org/wiki/SecurID">RSA-style keyfob</a> to help protect access &#8211; perhaps for a $20-$50/year fee.  I know I would pay, and that <a href="https://www.paypal.com/securitykey">PayPal have been offering a product like this</a> for some time at $5 a fob.</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2009/10/my-gmail-password-scares-me-with-its-power/feed/</wfw:commentRss>
		<slash:comments>24</slash:comments>
		</item>
		<item>
		<title>WOW it&#8217;s expensive to use Freshbooks and Harvest at scale</title>
		<link>http://benmetcalfe.com/blog/2009/10/wow-its-expensive-to-use-freshbooks-and-harvest-at-scale/</link>
		<comments>http://benmetcalfe.com/blog/2009/10/wow-its-expensive-to-use-freshbooks-and-harvest-at-scale/#comments</comments>
		<pubDate>Sat, 03 Oct 2009 00:40:02 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[Swordfish Corp]]></category>
		<category><![CDATA[Thoughts and Rants]]></category>
		<category><![CDATA[Tools]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=965</guid>
		<description><![CDATA[I don&#8217;t subscribe to the &#8220;everything muse be free&#8221; meme that basically ignores the intrinsic value a product or service gives you. If a product or service provides me with a real value then I am happy to pay for it &#8211; either through purchase/subscription or from being monetized via ads/usage data etc. But I&#8217;m [...]]]></description>
			<content:encoded><![CDATA[<p>I don&#8217;t subscribe to the &#8220;everything muse be free&#8221; meme that basically ignores the intrinsic value a product or service gives you.  If a product or service provides me with a real value then I am happy to pay for it &#8211; either through purchase/subscription or from being monetized via ads/usage data etc.</p>
<p>But I&#8217;m surprised at just how expensive some of the darlings of the Web2.0 <a id="aptureLink_tTJkyAYE22" href="http://en.wikipedia.org/wiki/Software%20as%20a%20Service">SaaS</a> era work out to be when used at scale.</p>
<p>Like a crack dealer, giving you the first hit free, most of them offer a &#8220;free&#8221; plan that is clearly designed to be severely limited the moment things begin to work out for you and your business takes off.  There&#8217;s nothing new with this way of doing business, but have you seen just how much your hits costs once you get addicted?</p>
<p>Two examples that are particularly of mind are <a href="http://www.freshbooks.com">Freshbooks</a> and <a href="http://www.getharvest.com">Harvest</a>.  Both are great products; built by great people I have had the honor of meeting over the years.  </p>
<p>Time tracking service Harvest <a href="http://www.getharvest.com/pricing">starts out at $12/month ($144/year)</a> for a single user but at <a href="http://swordfi.sh">Swordfish Corp</a> there are now three of us, requiring the 5 user plan @ $40/month ($480/year).  Not much change short of $500 seems pretty expensive for a year of time tracking.</p>
<p>Invoicing service Freshbooks <a href="http://www.freshbooks.com/pricing.php">has a free and slightly limited option for individuals</a> but a company of three would need to use the 3-staff plan @ $39/month ($468/year) but I notice that once we take on a fourth person we would need to skip to the 10-staff plan @ a jaw-dropping $89/month ($1068/year).</p>
<p>When researching these plans, I&#8217;m also considering what my future business needs are.  With services like these, I want to pick providers who can scale with me as my business (hopefully) grows.</p>
<p>I should point out that one way of getting around this is to share accounts, but for time tracking this doesn&#8217;t work and for invoicing, everyone at Swordfish does their own invoicing on their client accounts.</p>
<p>Now, I&#8217;m not against paying for these kinds of services in general.  Between myself (personally) and Swordfish, I have paid subscriptions to <a href="http://www.nolapro.com/">NolaPro</a> (Hosted accounts package), <a href="http://www.shoeboxed.com">Shoeboxed</a> (receipt and business card data entry) and <a href="http://www.flickr.com/photos/dotben/">Flickr</a>.</p>
<p>And I&#8217;m not saying that it&#8217;s not worth $480 a year to the company for good time tracking.  I&#8217;m just saying I&#8217;m not sure a service like Harvest is offering me $480 of value a year <strong>over and above</strong> using a simple Google Spreadsheet created in 20 minutes, for free, and shared within the company.</p>
<p>I&#8217;m a fan of the <a id="aptureLink_vIB7CTDmFc" href="http://en.wikipedia.org/wiki/Freemium">Freemium</a> model, but if it&#8217;s going to work the numbers can&#8217;t exponentially increase as your usage increases &#8211; it&#8217;s not fair <em>(a form of bait-&#038;-switch from the free accounts)</em> and it&#8217;s also not reflective of the true cost of SasS where the cost should exponentially flatten out at scale.</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2009/10/wow-its-expensive-to-use-freshbooks-and-harvest-at-scale/feed/</wfw:commentRss>
		<slash:comments>10</slash:comments>
		</item>
		<item>
		<title>Changes to BBC News Website reduces choice for users outside UK</title>
		<link>http://benmetcalfe.com/blog/2009/06/changes-to-bbc-news-website-reduces-choice-for-users-outside-uk/</link>
		<comments>http://benmetcalfe.com/blog/2009/06/changes-to-bbc-news-website-reduces-choice-for-users-outside-uk/#comments</comments>
		<pubDate>Mon, 15 Jun 2009 16:26:59 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[BBC News Website]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Thoughts and Rants]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=940</guid>
		<description><![CDATA[Like many of its counterparts, the BBC News Website maintains two distinct versions of it&#8217;s front page &#8211; a &#8216;domestic&#8217; orientated front page and an &#8216;international front page. The domestic front page contains a mixture of British and world-news orientated stories, whereas the international front page only includes British news if it&#8217;s of world-wide interest. [...]]]></description>
			<content:encoded><![CDATA[<p>Like many of its counterparts, the <a href="http://www.bbc.co.uk/news">BBC News Website</a> maintains two distinct versions of it&#8217;s front page &#8211; a &#8216;domestic&#8217; orientated front page and an &#8216;international front page.  The domestic front page contains a mixture of British and world-news orientated stories, whereas the international front page only includes British news if it&#8217;s of world-wide interest.</p>
<p>Any visitor to the site could select which version they wanted to receive.</p>
<p>Until last week, that is, when the BBC <a href="http://www.bbc.co.uk/blogs/theeditors/2009/06/change_to_international_pages.html">decided to start forcing it&#8217;s visitors to take the version intended for the territory from which they are visiting</a>.</p>
<p>As an <a id="aptureLink_gcnO9qukRm" href="http://en.wikipedia.org/wiki/Expatriate">ex-pat</a> living in <a id="aptureLink_4r30PfFn0Z" href="http://maps.google.com/maps?om=0&amp;iwloc=addr&amp;f=q&amp;ll=37.775196%2C-122.419204&amp;hl=en&amp;z=13&amp;ie=UTF8">San Francisco, California</a> that means I am now forced to take the international front page despite being very interested in British news (I&#8217;m a British citizen, tax payer, voter and still have interests in the UK).</p>
<p><img src="http://www.bbc.co.uk/blogs/theeditors/bbcnewswebsite_226.jpg" alt="BBC News Website screenshot" /></p>
<p>Those of you who know my background will also know that I spent six years working at the BBC, predominantly on the BBC News Website &#8211; in a <a id="aptureLink_T2Ve2OYhya" href="http://en.wikipedia.org/wiki/Software%20engineering">technical</a> and <a id="aptureLink_CFaMixH5wJ" href="http://en.wikipedia.org/wiki/Product%20development">product development</a> capacity.  I&#8217;m therefore doubly interested in this change, as I still feel very proud of the work that I contributed to at what is (in my opinion) the most upstanding source of news around.</p>
<p><strong>Disgusted of Tunbridge Wells, New Mexico</strong> (<a id="aptureLink_mhznQsxBlX" href="http://en.wikipedia.org/wiki/Disgusted%20of%20Tunbridge%20Wells">?</a>)</p>
<p>The changes have angered a lot of people, as you can well imagine.  <a href="http://www.bbc.co.uk/blogs/theeditors/2009/06/change_to_international_pages.html#comments">Check out the comments</a> on the BBC Editors blog post &#8211; which <a id="aptureLink_i7wKUwqImj" href="http://twitter.com/Steve_Herrmann">Steve Herrmann</a> <em>(Editor, BBC News Website)</em> <a href="http://www.bbc.co.uk/blogs/theeditors/2009/06/changes_to_international_pages.html">tries to address on another post</a>.</p>
<p>The heart of the matter is that the BBC News Website is serving three distinct <a id="aptureLink_cxsWGRcA1z" href="http://en.wikipedia.org/wiki/User%20story">user stories</a>:</p>
<ul>
<li>I am a UK user wanting to view British and International news</li>
<li>I am an International user wanting to view world news</li>
<li>I am an International user wanting to view British and International news</li>
</ul>
<p>Sadly, the changes made no longer allow for the last use case &#8211; which is a pretty vocal set of people.</p>
<p><strong>Technical challenges that have caused this change</strong></p>
<p>The BBC says it&#8217;s doing this for a number of reasons.  Serving video has become complicated &#8211; pages designed for a UK audience don&#8217;t play the video intended to accompany the page when viewed internationally as the BBC rarely has rights to show such video. The BBC is also now serving display and text-link ads to international users &#8211; it needs to maximize the efficiency of those ads and design pages layouts that accommodate them while at the same time running a domestic version of the site that contains no advertising whatsoever.  The BBC also points out that a section listing UK News is included on the international front page &#8211; although I would counter that it is included &#8216;below the fold&#8217; and doesn&#8217;t reflect the same editorial list as the Domestic Front Page.</p>
<p>While I understand and sympathize with the issues raised by the BBC I believe both are solvable very easily and am disappointed that this course of action has been taken.</p>
<p><strong>5uP3r W1z4rd H4XoR</strong></p>
<p>The great news is that due to the way the BBC News Website is built, you can still access the &#8220;UK Front Page&#8221; via a special hacked-up URL, which I have bundled into a convenient bit.ly url:</p>
<blockquote><h2><a href="http://bit.ly/ukbbcnews">http://bit.ly/ukbbcnews</a></h2>
</blockquote>
<p>I would suggest adding that to your bookmarks or updating your default start page with this url.</p>
<p><strong>UPDATE</strong>: Following on from demand, I&#8217;ve also created <a href="http://bit.ly/intbbcnews">http://bit.ly/intbbcnews</a> as a dedicated url to the international front page.</p>
<p>Below I have pasted an email I sent to Steve Herrmann, along with <a id="aptureLink_GxekRzVOzL" href="http://twitter.com/NicNewman">Nic Newman</a> <em>(Technology Controller, BBC Future Media: Journalism)</em>, <a id="aptureLink_SgFERBIsya" href="http://en.wikipedia.org/wiki/Pete%20Clifton">Pete Clifton</a> <em>(Head of Editorial Development, Multi-Media Journalism and former Head of BBC News Website) </em>and <a href="http://sambrook.typepad.com/">Richard Sambrook</a> <em>(Head of BBC World News)</em>:</p>
<blockquote><p>Hi Steve,</p>
<p>Just wanted to drop you a line to say that I&#8217;m really disappointed with the change to the site today. As you may know I&#8217;ve been living in San Francisco since leaving the BBC, so I&#8217;m an international-based user these days</p>
<p>Understanding the way the site is published I completely comprehend the point on your blog post that <em>&#8220;all the same content will be available as now so you&#8217;ll still be able to get both UK and international news wherever you are&#8221;</em> but that&#8217;s only true in so far as the stories themselves.</p>
<p>The specific editors decision as to what is most current and prominent across the domestic and international newscape for a British-focused audience &#8211; ie the UKFS Front Page &#8211; <strong>is no longer available to me</strong> (well it is at <a href="http://news.bbc.co.uk/nol/ukfs_news/hi/default.stm">http://news.bbc.co.uk/nol/ukfs_news/hi/default.stm</a> &#8211; but that&#8217;s only because I know the hidden urls of the system).</p>
<p>Today is a pretty international news-orientated day because of the Iranian elections, North Korea issues and Guantanamo Bay. However, I notice that a number of uk stories that appear high up in the UK homepage right now have no placing in the top 9 slots of the International Front Page at all.  The &#8220;News from UK&#8221; is way down below the fold, and requires scrolling to get to &#8211; it&#8217;s nothing more than an after-thought.</p>
<p>I guess I&#8217;m not communicating anything new that hasn&#8217;t already been voiced by others, other than to say that I&#8217;m really really disappointed &#8211; both has a user and as a former employee. I understand the technical issues you are dealing with around serving templates built for advertising to the international audience while maintaining non-advertising templates for UK users. And I understand the video issues as well, where rights are not available.</p>
<p>From a product development perspective there are three user stories the BBC News Website has always served:</p>
<ul>
<li>I am a UK user wanting to view British and International news</li>
<li>I am an International user wanting to view world news</li>
<li>I am an International user wanting to view British and International news</li>
</ul>
<p>By implementing the changes to have made today, you have effectively trashed that third use case. Or incorrectly assumed the last two are the same, which they are not.  It&#8217;s very sad and disappointing.</p>
<p>Let me know if I can brainstorm with you guys solutions that you could implement to help you get back to offering all three use-cases. I&#8217;m guessing that no one that works on the product development for the site actually uses it outside of the country, so let me know if I can be an advocate to that. </p>
<p>Best wishes,<br />
Ben</p></blockquote>
<p>Steve wrote to thank me for the email and promised to pass it on to the product development team.  I will update this page if/when I get any further replies.</p>
<p><strong>Update</strong>: Or, you could just check out the amazingly hilarious yet familiar looking <a href="http://newsarse.com/">NewsArse</a> instead.</p>
<p><em>Disclosures: I am a former BBC News Website employee and companies I have a financial interest in supply technology to BBC</em></p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2009/06/changes-to-bbc-news-website-reduces-choice-for-users-outside-uk/feed/</wfw:commentRss>
		<slash:comments>23</slash:comments>
		</item>
		<item>
		<title>Why you want to have crackers in your security team</title>
		<link>http://benmetcalfe.com/blog/2009/03/why-you-want-to-have-crackers-in-your-security-team/</link>
		<comments>http://benmetcalfe.com/blog/2009/03/why-you-want-to-have-crackers-in-your-security-team/#comments</comments>
		<pubDate>Fri, 06 Mar 2009 01:15:24 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[Thoughts and Rants]]></category>
		<category><![CDATA[cracking]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[jason calacanis]]></category>
		<category><![CDATA[john schiefer]]></category>
		<category><![CDATA[mahalo]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=916</guid>
		<description><![CDATA[A couple of thoughts on today&#8217;s news that Jason Calacanis employed John Schiefer, at Mahalo (or more accurately, that he didn&#8217;t fire him when he found out about his past). For those who don&#8217;t know, before he worked at Mahalo Schiefer got caught up in creating a botnet that was later used to raid people&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<p>A couple of thoughts on <a href="http://calacanis.com/2009/03/05/why-i-employed-a-felon/">today&#8217;s news</a> that <a id="aptureLink_MRn8bZlk3K" href="http://www.crunchbase.com/person/jason-calacanis">Jason Calacanis</a> employed John Schiefer, at Mahalo <em>(or more accurately, that he didn&#8217;t fire him when he found out about his past)</em>.  For those who don&#8217;t know, before he worked at Mahalo Schiefer got caught up in creating a <a id="aptureLink_qjXvR0bzif" href="http://en.wikipedia.org/wiki/Botnet">botnet</a> that was later used to raid people&#8217;s financial accounts.</p>
<p>I usually give Jason Calacanis a rough ride &#8211; the guy wants to be a &#8220;jock of the internet&#8221;, comes across as such and so the nerds are going to throw shit from the peanut gallery.  I don&#8217;t get what why that&#8217;s really a big surprise &#8211; I just get frustrated that I just become part of the spin as I feed into it.</p>
<p><strong>But</strong> on this one I actually congratulate Jason for having the courage and the integrity to make a decision based on the actual situation rather than bowing to &#8216;keeping a front&#8217; that would be more media and investor friendly.</p>
<p>As Jason points out in his blog post, many of us with powerful technical skills and understanding have at least experimented with putting those skills to less-savory uses.  We all have a past, even people like me who don&#8217;t work directly in any IT-security related areas of the industry.  But from what I can tell John was employed to work in a security-orientated position and those are the very people you <strong>want</strong> to have a past in this area &#8211; so they know their field of expertise inside or out.</p>
<p><strong>I&#8217;m not sure I&#8217;d hire any engineer or ops person to work in a security-related position who I knew didn&#8217;t have a history on the other side of the line</strong>.  Of course, I would want to know they are done with that part of their lives.</p>
<p>This is true for other areas in technology: If you&#8217;re building an online music store you&#8217;d hope that your product people download a lot of music illegally using bit torrent and kazzar (so that they are totally across the other options out there).  If you&#8217;re developing Windows OS for Microsoft, it would be a good idea to regularly use Apple and *nix operating systems to understand what&#8217;s out there.  This is a design pattern I don&#8217;t see anywhere near enough in business, and it&#8217;s the root to a lot of failures.</p>
<p>Back to the Schiefer story: some folks in the media, <a href="http://news.cnet.com/8301-17939_109-10189853-2.html">such as Rafe Needleman on Webware</a>,  have spun up a load of <a id="aptureLink_C3xeNHQRlZ" href="http://en.wikipedia.org/wiki/Fear%2C%20uncertainty%20and%20doubt">FUD</a> around whether Schiefer had access to personal information and the level of &#8216;supervision&#8217; he was given once Calacanis found out about his past.</p>
<p>What Rafe and others needs to consider is that <strong>all</strong> technical employees at a company have full and complete access to their customer&#8217;s data.  In fact they have the root and master accounts, so they don&#8217;t even need to know any cracking skills to gain access.  The fact Schiefer could crack doesn&#8217;t give him any greater access to this data.</p>
<p>Now, the argument could be raised that Schiefer&#8217;s history meant he shouldn&#8217;t be trusted.  But I ask you to consider what %age of Google, Facebook or any other tech company&#8217;s engineering team is made up by people who have dabbled in illegal technical activity?  The fact they may or may not have been caught shouldn&#8217;t reflect on whether you trust them more or less.  The bottom line is most people are not caught.  One of the biggest employers of engineers who have been caught committing cyber-related crimes are governments.</p>
<p>Further still, what about people with the same level of &#8216;master&#8217; access at companies you patronize who have committed other <a id="aptureLink_Vm9W145MqG" href="http://en.wikipedia.org/wiki/Moral%20turpitude">crimes of moral turpitude</a>?  This even follows through not only to engineers but non-tech staff too, even as far down as call center staff.</p>
<p>The bottom line is that all companies need to have measures in place to protect their customer&#8217;s data inside the firewall, as well as outside. And it varies as to how good a job they do.</p>
<p>But to take issue like this specifically because someone had a history of cracking shows a vast naivety of the business.  You want people who have this kind of history in your security team.</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2009/03/why-you-want-to-have-crackers-in-your-security-team/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Facebook&#8217;s &#8216;open&#8217; move into the data mining space</title>
		<link>http://benmetcalfe.com/blog/2009/03/facebooks-open-move-into-the-data-mining-space/</link>
		<comments>http://benmetcalfe.com/blog/2009/03/facebooks-open-move-into-the-data-mining-space/#comments</comments>
		<pubDate>Thu, 05 Mar 2009 01:32:30 +0000</pubDate>
		<dc:creator>Ben Metcalfe</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Thoughts and Rants]]></category>
		<category><![CDATA[analytics]]></category>
		<category><![CDATA[api]]></category>
		<category><![CDATA[data]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[mining]]></category>
		<category><![CDATA[platform]]></category>
		<category><![CDATA[social networks]]></category>

		<guid isPermaLink="false">http://benmetcalfe.com/blog/?p=908</guid>
		<description><![CDATA[It&#8217;s been interesting to read many people describe the recent Facebook announcements (including today&#8217;s) as &#8220;Facebook opening up&#8221;. While it is true, they are &#8211; and should be congratulated for it &#8211; there are greater reasons for them doing so than just for &#8216;pure alteruism&#8217; as some people have suggested. It seems pretty clear to [...]]]></description>
			<content:encoded><![CDATA[<p>It&#8217;s been interesting to <a href="http://radar.oreilly.com/2009/03/facebook-in-2010-no-longer-a-walled-garden.html">read many people describe</a> the recent Facebook announcements (including today&#8217;s) as &#8220;Facebook opening up&#8221;.  While it is true, they are &#8211; and should be congratulated for it &#8211; there are greater reasons for them doing so than just for &#8216;pure alteruism&#8217; as some people have suggested.</p>
<p>It seems pretty clear to me that Facebook&#8217;s business model is shifting towards one of <a id="aptureLink_l9lWEfF9Xd" href="http://en.wikipedia.org/wiki/Data%20mining">data mining</a> and analytics &#8211; where they are able to leverage the collective thinking of everyone contributing their &#8216;stuff&#8217; into the Facebook bucket.</p>
<p>Let&#8217;s take a quick look at the theme of Facebook&#8217;s recent announcements:</p>
<ul>
<li><strong>early Feb:</strong> Terms of Service changed to give FB perpetual right to keep all data you give them <em>(later repealed due to public outcry)</em></li>
<li><strong>Feb 19:</strong> Commenting on public pages with FB Connect </li>
<li><strong>Mar 4:</strong> New Publisher (twitter like) and Highlighter (ranking content) functionality, </li>
</ul>
<p><em>Let&#8217;s take a quick look at what those announcements gave us:</em></p>
<p>First off was the ToS changes &#8211; which for me was a clear indicator Facebook wanted to do more with the data it holds then just display it to your friends and use it to make recommendations on other content you might be interested in.  If Facebook is going to move into a data play then it needs to make sure it can retain all of that data despite what the user might want to do with their view of it.  It becomes tricky to have to remove arbitrary data from the cube because a user requests it, plus it devalues your model &#8211; and why would you want your model devalued?</p>
<p>OK, so they backed off with those sweeping changes, but only because of the fallout it created for the company.  At that point, they had still partially shown their hand.</p>
<p>In addition to the data Facebook keeps inside it&#8217;s database there is also the metadata that Facebook can gather about what&#8217;s going on <em>outside</em> it&#8217;s domain &#8211; and that&#8217;s where functionality like commenting on external pages, released at the Facebook garage come into play.  Putting Javascript calls on foreign pages also allows Facebook to match up visitors with a Facebook cookie and track their usage of that site even if they never interact with any Facebook powered functionality.</p>
<p>Today&#8217;s announcement of the Publisher functionality built on top of rudimentary twitter-like functionality with status requests that we&#8217;d begun to see with the Facebook comment boxes used during the Presidential Inauguration and more recently the live streaming of Demo 09.  Highlighter also further aids the recommendation and collaborative filtering of content by peers in order to work out what is currently most interesting and most engaged with.  Facebook call the subset that you can see of your friend&#8217;s output as your &#8220;social lens&#8221;. This is true, but at the macro level of the system, Facebook ends up with a complete lens of what everyone is filtering and sorting and ranking.</p>
<p><strong>So where is this all going?</strong></p>
<p>Facebook is moving into a new gear, encouraging constant flow of status updates and conscious thought <em>(publisher, status messages)</em>, creating deeper indicators of intent and interest <em>(highlighter, like functionality, etc)</em> and behavioral indicators <em>(integration with location based services such as brightkite, events, etc)</em>.</p>
<p>What this gives Facebook is the ability to gauge what is hot, popular and current in real time.  It also gives Facebook historical data to track changing interest and attention over time.  There are many uses for this data &#8211; including in the financial and trading sector, brand management, competitor analysis, real time consumer attention tracking.</p>
<p>Twitter is also doing this, but they have one dimension of data (text).  Facebook has many dimensions of data that can go into their <a id="aptureLink_NXhyGh1iTU" href="http://en.wikipedia.org/wiki/OLAP%20cube">cube</a>, and their sample size is much higher given their 175 million users vs Twitter&#8217;s 4-6 million.</p>
<p>I spent a lot of time working with MySpace last year, and one of the things that impressed me the most was their ability to monetize their pages with advertisements &#8211; ones that used a combination of technology (for user targeting) and business development (for high-yielding &#8216;take over pages&#8217;, sponsorships, promo tie ins, etc).  They&#8217;re probably the best in the business at it.</p>
<p>However advertising on it&#8217;s own is a Web2.0 business model, and while I don&#8217;t want to go so far as to say data mining is going to be the Web3.0 business model, I do think we&#8217;re going to see a greater use of it moving forward &#8211; with industries who can benefit from it becoming a lot more receptive and engaged with the process in the same way that the digital agencies became popular as advertising wanted to move into the online space.</p>
<p><strong>Risks for the ecosystem</strong></p>
<p>The benefit of being &#8216;open&#8217; and part of the ecosystem is that everyone gets to play and share and new 3rd party innovation and business can be created with it.  While this is true, those 3d party participants in that ecosystem need to be careful not to loose sight of their own ability for commercial success.  All of these announcements have included new ways to leverage the Facebook APIs to help users shovel more stuff into the Facebook Bucket.  Those &#8216;spades&#8217; must be clear how they will make money given that they will not have access to the data or ability to monetize it like Facebook will.</p>
<p>I&#8217;m not trying to be bearish on the Facebook API or platform &#8211; far from it.  I merely wish to offer a sense of perspective and to urge developers to consider carefully the business models of everyone within the stack they are participating in.  There is opportunity and success in here for everyone, but we must all be cognizant of where it lies and to what extent each level in the stack is able to capitalize upon it.</p>
]]></content:encoded>
			<wfw:commentRss>http://benmetcalfe.com/blog/2009/03/facebooks-open-move-into-the-data-mining-space/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
