Veracode Blog Goes Live

Yes, Veracode is one of my companies and, no, I’m not above peddling its blog to anyone who cares. More importantly, there are lots of people who should really care about what Christien Rioux, Chris Wysopal and Chris Eng have to say because the guys are old-time, real-world-tested security gurus (BTW, not everyone at Veracode is named Chris):

  • Anyone who believes that there is inherent security risk in software, which is the result of poor security architecture/design + poor implementation + poor deployment/operation.
  • Anyone who believes that building taller and wider security perimeters doesn’t fundamentally address that problem.
  • Anyone who believes security is not an afterthought but an integral part of the software development lifecycle (SDLC).
  • Anyone who believes the the problem of securing software is very complex, without a silver bullet solution.
  • Anyone who cares about managing the risk associated with procuring and operating software.

I can’t be more open at this time because the company is slowly emerging out of stealth right now. To know more about Veracode, check out the company at the RSA Conference in a few weeks. Stop by the booth and go see Chris Wysopal’s talk.

Posted in startups | Tagged , | Leave a comment

Bob Metcalfe on Internet Video

Beet.TV caught up with my partner Bob Metcalfe and did a nice interview on the evolution of the Internet to the video Internet. Bob makes three key points:

  • The Internet has been getting richer since the days of uppercase ASCII
  • As communication becomes richer it replaces transportation
  • As the pipes and infrastructure improve, the Long Tail demand can be satisfied.

Link to Ethernet Inventor Says Transformation to Internet Video is Here – Google Video

Posted in Digital Media | Tagged , , , | 1 Comment

Second Life Numbers: Mystery Revealed

Some of you have probably followed the debate in the blogosphere about virtual community usage and growth. Very recently, Clay Shirky and David Kirkpatrick had a somewhat tense exchange over the credibility of some Second Life numbers. David talked to CEO Philip Rosedale and got some hard data. The numbers look good but I wonder what the month-to-month growth variability is.

1,525,670 unique people have logged into SL at least once. This is considering distinct email/payment info as distinct people, rather than IP addresses. [He is checking the unique IP address numbers but suspects they will be comparable.]…So in comparing that to the overall signup number, the difference is created by two sources: alt accounts (cases where one person has multiple accounts), and cases where the person signed up but has never logged in (possibly because of firewall or computer problems).

252,284 people have logged in more than 30 days after their account creation date.

While the percent of registrants still active after 30 days has, predictably, declined a lot since early 2004 when it exceeded 45%, it remains a substantial 15%. Of those 254,000 who registered in October, 39,575 still were active after 30 days. The absolute number of those still returning after 30 days grew 23% for October registrants over those who registered in September.

It is hard for me not to be impressed with any service whose active new users are growing 23% a month.

Source: The Browser: Truth and rumors from the tech world

Posted in Digital Media, startups, virtual worlds, Web 2.0 | Tagged , , , , , | Leave a comment

More on E-Commerce 2.0

 From Jeremy Liew’s 2007 predictions.

Ecommerce 2.0 arrives. Google’s search revenues continue to grow at 70-80% growth rates. Yet the public ecommerce companiesrevenues are growing at “only” 25-30% at best. But almost every Google click is going to an online transaction somewhere – people still aren’t using search advertising for branding purposes. So what is filling the gap? Some of it is the multichannel retailers coming on strong, Walmart, OfficeMax, etc. But a lot of it is from the next generation of ecommerce companies, still private but doing revenues in the $10s and sometimes $100s of millions that have quietly been growing at 50-100% per year through the last few dark years. Companies like Zappos, Art.com, Mercantila, Netshops, CSN Stores, Backcountry, Bodybuilding.com, Toolking, US Auto Parts and dozens more have grown up, mostly away from Silicon Valley, and many without the need for venture capital. Those that have taken investments have often been at scale and profitable when they do. Watch this space as the next generation of ecommerce sites ride people’s growing willingness to buy online, use search to acquire new customers and focus on verticals rather than trying to be an all encompassing department store.

Source: Lightspeed Venture Partners Blog

Tagged | Leave a comment

The Attention Battle

Many virtual worlds, from Club Penguin to Second Life, combine the best of social networking and immersive gaming to create a great user experience. One of the most interesting aspects of the result is that it requires focus (a fact, which can even be used for pain management using a VR environment).

The experience requires relatively undivided attention and is synchronous (participants need to be logged in at the same time). This is radically different from current forms of social networking. The typical teen is a member of 3-5 social networks and in an evening session has many browser windows and IM sessions going at the same time. This type of asynchronous multi-tasking would lead to a pretty terrible experience in a virtual world or an immersive game.

Like with MMOs, this dynamic is likely to lead to users being active members of far fewer virtual worlds. This battle for users’ attention tends to push more towards hits than the existing model, which, given the proliferation of vertical social networking sites and social infrastructure, is starting to approximate a Long Tail distribution. This has some significant implications about the economics of this market segment.

Social networking experiments requiring synchronicity, e.g., Dodgeball, have met with little success. It is therefore interesting to imagine the extent to which virtual worlds can scale from a usage standpoint without adding significant asynchronous capabilities, e.g., strategy-driven avatars, mobile-controlled avatars and others, which would allow a user to stay connected to the virtual world w/o consuming as much user cycles as being logged into the world would require. Some of the most relevant lessons are, alas, not culturally portable (Cyworld, for example, whose success if the US is not going to be a slam dunk).

Certainly an interesting space to watch closely.

Posted in Mobile, startups, VC, Venture Capital, virtual worlds | Tagged , , , , , , , | Leave a comment

SnowWorld: VR Against Pain

My wife sent me a cool link yesterday to a VR pain control project at the Human Interface Technology Lab at Washington University. HIT is testing SnowWorld at the Harborview Burn Center as a way to manage pain during some tough procedures.

 

That’s a great use of VR and another sign that virtual worlds, be they VR-based (goggles and feedback sensors) or just rendered on monitors such as Second Life are here to stay.

The reason why VR works as a pain management tool is that it requires a lot of attention, i.e., it takes brain processing cycles away from processing the pain stimuli. That’s cool. It’s also the reason why, once sucked in, people operating in virtual worlds or highly immersive games often find themselves consumed by the experience.

Posted in virtual worlds | Tagged | 1 Comment

Climate Change and Tech Booms

I got a Michael Chrichton book for Christmas. As I was poking around his web site, I happened upon a recent speech by the author titled Fear, Complexity, & Environmental Management in the 21st Century. Chrichton had rattled many feathers with State of Fear (I found the book a fun read but the message in it was mostly lacking). This speech seems to be the evolution of his thinking. The main points are:

  1. The environment is a complex system.
  2. It’s difficult to predict long-term trends in complex systems. Large scale violent events have been common in the world forever.Spreading doomsday fears doesn’t help the situation. Often the doomsayers don’t have good data or are in the game for political or financially-motivated reasons.
  3. The environmentalist movement should stop thinking simplistically about the world and start treating the problem as one of complex systems management.
  4. We need to stop the cycle of fear.

It’s hard to argue with these high-level messages but I do think Chrichton misses two important points about self-regulating complex systems such as the environment, financial markets, etc. First, every such system has a certain rate at which it can respond to change. Financial markets can respond very quickly. Ecosystems respond much more slowly, many orders of magnitude more slowly if we are talking about genetic changes. Second, the feedback & response mechanisms the self-regulating systems have evolved are naturally dependent on the types of events they have experienced in the past.

When you put these two together, it’s easy to see how certain type of shocks may significantly impact or perhaps break even the best self-regulating system either because the system is unprepared to respond to the type of shock it has received and/or because its response cycle simply takes too long.

I know nothing about environmental management but I have had some experience with complex system management. Years ago I did research on soft AI (nowadays called soft computing). Soft computing is often applied to complex systems, which lack agreed-upon formal models defining their operation. Many of the soft computing sub-disciplines such as neural networks, neuro-fuzzy systems or evolutionary computing employ a learning model for creating a solution to a problem.

Let’s consider a really simple example of a neural network that takes the height of an individual as input and produces that individual’s weight as output. If the neural network is trained on data from Chinese peasants, it likely won’t do a good job predicting the weight of Nordic individuals (because it won’t have had inputs in that height range) or Samoans (because of the different body types for the same height).

Well, by the same argument, it is not clear how natural or man-made systems would respond to stimuli they have not previously experienced or ones whose cumulative effect is so significant that it overpowers the speed with which the system can adapt.

In the case of the environment, an examples would be is a large meteoric impact or a nuclear holocaust. More relevant examples are ozone layer depletion, CO2 increase, etc. The key issue is less whether the magnitude of the change is catastrophic and more whether the response required to prevent a significant undesirable deviation from the status quo (delivered through a combination of Nature, governments, the private sector and individuals) can be quick & effective.

In the case of financial markets, examples include new financial instruments or trading strategies. Insider trading is one example. It used to be perfectly legal to trade on private information. Not anymore, because we realized that allowing it would compromise the very structure of the self-regulating market system, which is based on the assumption of (nearly) perfect information.

In the case of the technology industry, the coming of the Internet is a good example. The magnitude of the change and the speed with which it came about took the rest of the hi-tech industry by surprise. It could not respond fast-enough. As a result, the very landscape of the industry changed significantly.

Many in the industry thought that Web services will bring about the same type of radical industry change. It didn’t happen. The existing ecosystem was able to absorb the shock by co-opting the new technology in their existing product lines and adjusting sales and marketing messages accordingly.

So, in a funny turnabout, Chrichton’s speech made me think about tech booms and how one can shock industries past the breaking point in order to introduce truly revolutionary change.

Posted in startups | Tagged | Leave a comment

Being Early in Mobile

Some friends reading this blog have asked me why am I posting so much about mobile these days and when did I first get interested in the space. The answer to the first question has to do with my work on 8th Ring. The answer to the second question is “just about a decade ago.”

Huh? What would an online platform guy do with mobile a decade ago? It’s a little known fact that Allaire’s ColdFusion was not only the first web application server but the first mobile-enabled one. In the fall of 1996, JJ Allaire and I coded like crazy one weekend and added WAP and draft HDML (it was called that before it became WML) support to ColdFusion 2.0 Beta Something just in time to demo database-driven mobile applications built in a couple of hours at the Internet World show that year. The apps were delivered through the UnwiredPlanet/phone.com platform on those horribly huge AT&T phones. They were as easy to build as any web app at the time–you generated the markup dynamically, the server handled all state management and all you had to do was tell ColdFusion that the response content type was WAP/HDML. We took care of everything else.

Jeremy Allaire still has the phone on which we did the demos and we did a little photo shoot recently for the sake of posterity.

That’s being early in mobile…

Posted in Mobile | Tagged | 2 Comments

Found vs. Engineered

I’m a guest at a Boston Harbor Angels meeting this morning. Listening to a nanomaterials company present, I’m struck with the realization that most of the materials we use in everyday life were found–things humans discovered in nature–as opposed to engineered.

There are two big exceptions to this: alloys (mixtures of found materials) and plastics. Therefore, a simple way to look at the promise of nanotech is to think about the way alloys and plastics have changed our lives.

I can’t help but remember The Graduate.

Mr. McGuire: I want to say one word to you. Just one word.
Benjamin: Yes, sir.
Mr. McGuire: Are you listening?
Benjamin: Yes, I am.
Mr. McGuire: Plastics.

Tagged | 1 Comment

Old Tech Dies Hard

“Your name is in the MySpace code,” said Bill Clogston, chief architect at 8th Ring, to me on Monday. Since I’ve in no way been involved with MySpace’s design or architecture, it took me a bit to figure out that it’s probably something related to AJAX using WDDX, a pre-cursor to Web services that Allaire open-sourced in 1998. True enough, Bill had found wddx.js.

///////////////////////////////////////////////////////////////////////////
//
// Filename: wddx.js
//
// Authors: Simeon Simeonov (simeons@allaire.com)
// Nate Weiss (nweiss@icesinc.com)
//
// Last Modified: February 2, 2001
//
///////////////////////////////////////////////////////////////////////////

WDDX was probably the first XML-based approach for doing AJAX that got broad distribution (a dozen or so languages/platforms). Kudos should go to Nate Weiss who managed the WDDX open-source community and contributed a lot to the JS integration. MySpace was originally built on ColdFusion, which explains the tendency to use of WDDX.

Posted in MySpace, Web 2.0 | Tagged , | Leave a comment