Simon Willison’s Weblog

Subscribe
Atom feed

Quotations

Filters: Sorted by date

When I write a new book [...] I plan to throw away something like the first 30 or so pages. And, because I know I'm going to do it, it doesn't worry me. I no longer have writer's block.

Dave Thomas

# 24th March 2007, 3:05 pm / dave-thomas, writing

A binary compatible wire call is still a binary compatible wire call, no matter how much XML you put on it.

Bill de hÓra

# 23rd March 2007, 12:56 am / xml, bill-de-hora

The best reason to always build out APIs for your product is that it makes it easier for the rest of the world to extend your product or service rather than start competitors.

Dick Costolo

# 16th March 2007, 10:41 am / apis, dick-costolo, feedburner

On any given Web page, users will either click something that appears to take them closer to the fulfillment of their goal, or click the Back button on their Web browser.

Mark Hurst

# 7th March 2007, 1:58 pm / viawilson, mark-hurst, usability

[...] I'm a fan of the virtual machine future. We should treat our operating system like a roll of paper towels. If you get something on it you don't like, you ball it up and throw it away, and rip off a new, fresh one.

Jeff Atwood

# 2nd March 2007, 10:21 am / virtualization, jeff-atwood

Despite it being a best practice, currently only a handful of OpenID Consumer sites support the association of multiple OpenID identifiers to a single "account". This is important to create redundancy to make the loss of an identifier less catastrophic.

Martin Atkins

# 28th February 2007, 9:56 pm / bestpractice, martin-atkins, openid

I don't do test driven development. I do stupidity driven testing... I wait until I do something stupid, and then write tests to avoid doing it again.

Titus Brown

# 25th February 2007, 2:44 pm / tdd, titusbrown, testing, pycon

The upshot is that HTTP does not have everything that REST indicates should be present, and there is the additional problem that while HTTP is the first, and best, implementation of REST, the two are not the same and yet are often confused.

Joe Gregorio

# 17th February 2007, 5 pm / joe-gregorio, http, rest

OpenID is particularly appealing to OLPC, because it can be used to perpetuate passwordless access even on sites that normally require authentication [...] With an OpenID provider service running on the school server (or other trusted servers), logins to OpenID-enabled sites will simply succeed transparently, because the child's machine has been authenticated in the background

Ivan Krstić

# 17th February 2007, 12:42 am / openid, olpc

We don't yet accept OpenID identities within our products as a relying party, but we're actively working on it. That roll-out is likely to be gradual.

John Panzer, AOL

# 15th February 2007, 11:33 am / john-panzer, aol, openid

The bright side: web spam is an evolutionary force that pushes relevance innovations such as trustrank forward. Spam created the market opportunity for Google, when Altavista succumbed in 97-98. Search startups should be praying to the spam gods for a second opportunity.

Rick Skrenta

# 15th February 2007, 11:15 am / spam, google, startups, search-engines

Please, fanboys, don't send me dumb notes averring that Apple's failure to police this use of its mark will lead to the end of its ability to stop manufacturers from producing rival MP3 players and calling them iPods. That's a fairy tale that trademark lawyers tell their kids when they want to reassure them that they'll have a healthy college fund.

Cory Doctorow

# 12th February 2007, 2:05 pm / copyright, boingboing, cory-doctorow, apple

Yahoo!'s new Pipes service is a milestone in the history of the internet. It's a service that generalizes the idea of the mashup, providing a drag and drop editor that allows you to connect internet data sources, process them, and redirect the output.

Tim O'Reilly

# 8th February 2007, 8:08 am / pipes, tim-oreilly

If the big four music companies would license Apple their music without the requirement that it be protected with a DRM, we would switch to selling only DRM-free music on our iTunes store.

Steve Jobs

# 7th February 2007, 2:26 am / steve-jobs, drm, apple

There's an unfortunate side-effect to altogether eliminating the sub-domain name from your site URLs [...] Every cookie you may want to set for that site will automatically "bleed" down to all sub-domain-based websites you might want to add later.

Már Örlygsson

# 6th February 2007, 12:01 am / urls, cookies

As ICD head analyst Walter Dickweed put it: "Releasing a new kernel on Superbowl Sunday means that the important 'pasty white nerd' constituency finally has something to do while the rest of the country sits comatose in front of their 65" plasma screens".

Linus Torvalds

# 4th February 2007, 10:33 pm / linux, funny, linus-torvalds, superbowl

If you found a hole in software that millions of people use, and is very high profile, you can sell that to the highest bidder for perhaps one or two million dollars.

Jacques Erasmus

# 4th February 2007, 7:06 pm / bbcnews, hacking, security, blackmarket, exploits

Nowadays, security guys break the Mac every single day. Every single day, they come out with a total exploit, your machine can be taken over totally. I dare anybody to do that once a month on the Windows machine.

Bill Gates

# 2nd February 2007, 6:01 pm / bill-gates, windows, macos

At some point in the past rolling out an application to 300,000 people was the pinnacle of engineering excellence. Today it means you passed your second round of funding and can move out of your parents garage.

Joe Gregorio

# 1st February 2007, 11 am / scaling, joe-gregorio

Flickr users are marked as such in the Yahoo user database. What this means is that the account is permanently protected from deletion, even if you cancel your SBC-Yahoo DSL and even if you never check your Yahoo Mail (if you elect to have one). Both free and pro accounts are protected. And your Yahoo signon name will not be displayed anywhere on Flickr -- your existing Flickr username will stay the same.

crawl on MeFi

# 31st January 2007, 10:27 pm / flickr, yahoo, metafilter

Two hosts are considered equivalent if both host names can be resolved into the same IP addresses [...] Note: The defined behavior for equals is known to be inconsistent with virtual hosting in HTTP.

java.net.URL documentation

# 31st January 2007, 9:13 pm / funny, horrifying, java

It's still a privacy concern. If, for example, I work at and post from Microsoft all day and my identicon is that of the MS Proxy Server then I would be able to identify other mefi users who are my co-workers because our identicons would match.

vacapinta

# 29th January 2007, 4:12 am / identicons, privacy

Web Services based on SOAP and WSDL are "Web" in name only. In fact, they are a hostile overlay of the Web based on traditional enterprise middleware architectural styles that has fallen far short of expectations over the past decade.

Nick Gall, VP Gartner

# 27th January 2007, 1:55 pm / gartner, web-services, soap, wsdl

We're the largest domain registrar in the world, and my view is, for $8.95 its not okay for somebody to come and use our services to harm other people.

GoDaddy spokesperson

# 26th January 2007, 10:20 am / godaddy, dns

The basic concept here is given the ongoing dramatic drop in the price of bandwidth and hardware, they cost very little. I looked at the bandwidth bill for Wikipedia, for instance, and it is actually substantially lower in the last year than the year before, despite traffic growing by a factor of 4.

Jimmy Wales

# 25th January 2007, 2:02 am / jimmywales, bandwidth, mooreslaw, wikipedia

Which is the real explanation of where the name XMLHTTP comes from- the thing is mostly about HTTP and doesn't have any specific tie to XML other than that was the easiest excuse for shipping it so I needed to cram XML into the name (plus- XML was the hot technology at the time and it seemed like some good marketing for the component).

Alex Hopmann

# 24th January 2007, 8:48 pm / ajax, xmlhttprequest, marketing, xml

We have a unique opportunity with phishing and OpenID. OpenID can make the possibility for bad things to happen from phishing that much worse. However, having an OpenID means you create a more intimate relationship with your OpenID provider. You go there everyday. You will more likely know when something is wrong.

Scott Kveton

# 24th January 2007, 3:02 pm / scott-kveton, openid, phishing

You need to lay out the user interface components visually, by hand, with total control over where they go. Automated LayoutManagers don't cut it. A corollary of this is that you can't move a UI layout from one platform to another and have the computer make everything fit. Computers don't lay out interfaces by themselves any better than they can translate French to English by themselves.

Jens Alfke

# 22nd January 2007, 9:41 pm / usability

The way you make users understand your program model is with metaphors. When you make things look, feel, and most importantly, behave like things in the real world, users are more likely to figure out how to use the program, and the app will be easier to use. When you try to combine two very dramatically different real-world items (email and appointments) into the same kind of thing in the user interface, usability suffers because there’s no longer a real-world metaphor that applies.

Joel Spolsky

# 22nd January 2007, 9:26 pm / usability, metaphors, joel-spolsky

I can also sum things up for you even more succinctly:

  • users are task oriented, driving to complete the goal the
    quickest way possible
  • users pay more attention to the content area than the browser chrome
  • users don't understand how easy it is to spoof a website

Mike Beltzner

# 19th January 2007, 5:33 pm / openid, phishing