<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for Refaktor blog</title>
	<atom:link href="http://www.refaktor.si/blog/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.refaktor.si/blog</link>
	<description>Haps and mishaps of yet anothe web company</description>
	<lastBuildDate>Tue, 15 Dec 2009 10:27:27 +0100</lastBuildDate>
	
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>Comment on Kratek prikaz Čebelce.biz by super</title>
		<link>http://www.refaktor.si/blog/2009/07/kratek-prikaz-cebelcebiz/comment-page-1/#comment-941</link>
		<dc:creator>super</dc:creator>
		<pubDate>Tue, 15 Dec 2009 10:27:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=50#comment-941</guid>
		<description>Čebelca je odlična</description>
		<content:encoded><![CDATA[<p>Čebelca je odlična</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Security and priorities! by Janko in a Jar &#187; Blog Archive &#187; New REFAKTOR blogpost: Security and priorities!</title>
		<link>http://www.refaktor.si/blog/2009/10/security-and-priorities/comment-page-1/#comment-940</link>
		<dc:creator>Janko in a Jar &#187; Blog Archive &#187; New REFAKTOR blogpost: Security and priorities!</dc:creator>
		<pubDate>Mon, 19 Oct 2009 06:13:53 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=71#comment-940</guid>
		<description>[...] Security and priorities! &#187;   Read and let read :) [...]</description>
		<content:encoded><![CDATA[<p>[...] Security and priorities! &raquo;   Read and let read <img src='http://www.refaktor.si/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Usability 101: Give ME MY data! by Janko</title>
		<link>http://www.refaktor.si/blog/2009/07/usability-101-give-me-my-data/comment-page-1/#comment-177</link>
		<dc:creator>Janko</dc:creator>
		<pubDate>Wed, 29 Jul 2009 22:36:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=58#comment-177</guid>
		<description>gasper_k:
Hm.. your story that is hard to disagree with slowly transports me from &quot;I like this&quot; to &quot;5% solved is of no use&quot; to &quot;The only option is stellar backup by the service itself and forget the emails to users&quot; :)

In the same way I dismissed the &quot;here is your data / download it&quot; and &quot;install smart client that will backup your data nicely&quot; you dismissed emails with opt-in. I see now things might not be so smooth as I thought. 

But, I still have one option, I will try this and see what users of real app say... will they care about it at all, will it cause more confusion than it will be worth, etc.. experimenting is always fun.

Alex: 
The first part of your scentence is what I was aiming for. The point of this is NOT that the service doesn&#039;t need to take care of backups any more. It&#039;s more that the user also has the data.

Your 3 points are good, I will try some combination of them and see how it goes. For all of you that mention API , I think API access to your data is very good and more basic feature than the &quot;emails for backup&quot; .. it&#039;s not only usable for backup but also in integration of your app with the outside world.</description>
		<content:encoded><![CDATA[<p>gasper_k:<br />
Hm.. your story that is hard to disagree with slowly transports me from &#8220;I like this&#8221; to &#8220;5% solved is of no use&#8221; to &#8220;The only option is stellar backup by the service itself and forget the emails to users&#8221; <img src='http://www.refaktor.si/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>In the same way I dismissed the &#8220;here is your data / download it&#8221; and &#8220;install smart client that will backup your data nicely&#8221; you dismissed emails with opt-in. I see now things might not be so smooth as I thought. </p>
<p>But, I still have one option, I will try this and see what users of real app say&#8230; will they care about it at all, will it cause more confusion than it will be worth, etc.. experimenting is always fun.</p>
<p>Alex:<br />
The first part of your scentence is what I was aiming for. The point of this is NOT that the service doesn&#8217;t need to take care of backups any more. It&#8217;s more that the user also has the data.</p>
<p>Your 3 points are good, I will try some combination of them and see how it goes. For all of you that mention API , I think API access to your data is very good and more basic feature than the &#8220;emails for backup&#8221; .. it&#8217;s not only usable for backup but also in integration of your app with the outside world.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Usability 101: Give ME MY data! by Janko</title>
		<link>http://www.refaktor.si/blog/2009/07/usability-101-give-me-my-data/comment-page-1/#comment-176</link>
		<dc:creator>Janko</dc:creator>
		<pubDate>Wed, 29 Jul 2009 22:02:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=58#comment-176</guid>
		<description>BruceA:

Yes your idea is the middle ground. It gives the data and options to users that want them. This is a good and not problematic solution I think. 

My proposal was a bit more extreme in trying to make sure users won&#039;t loose their data (even the ones that won&#039;t care or know how to set up ther backuping. ), but by the same reasons it&#039;s also more problematic (which can be seen by your comments).

CaptainOBackup:

Yes, I know decent sites should have good old centralized backup solution. But as you can see not all sites are as decent when it comes to real problems, or their backuped systems fail and user is simply notified that their data is &quot;no more&quot;. 

This idea with emails doesn&#039;t mean that you don&#039;t need to have backups. It means that the each user ALSO HAS the HIS data on his disc. 

I have some client that I made portal for, the hosting provides daily backup, but every now and then she asks me to manually download backup data of her mysql database and send it to her. When I send it to her she is relieved because she is holding the data now, she can bake it on a CD or whatever, it&#039;s there..

Ted Z: 
This is good third option, a little more progressive than &quot;you can download your data&quot;. It would be especially handy or the only option if there was in size that would make problems to regular emails also.

Chetan:
That was my mistake,... we have no plain passwords stored on server yes. I also haven&#039;t concretely looked at how exactly we would encrypt data. Does anyone see any problems in hashed (&amp; salted) passwords being the key for encryption?

Links were proposed to me by Zemanta plugin, I agree I wouldn&#039;t have to click the password keyword to make a link to wikipedia ,.. My fault :)</description>
		<content:encoded><![CDATA[<p>BruceA:</p>
<p>Yes your idea is the middle ground. It gives the data and options to users that want them. This is a good and not problematic solution I think. </p>
<p>My proposal was a bit more extreme in trying to make sure users won&#8217;t loose their data (even the ones that won&#8217;t care or know how to set up ther backuping. ), but by the same reasons it&#8217;s also more problematic (which can be seen by your comments).</p>
<p>CaptainOBackup:</p>
<p>Yes, I know decent sites should have good old centralized backup solution. But as you can see not all sites are as decent when it comes to real problems, or their backuped systems fail and user is simply notified that their data is &#8220;no more&#8221;. </p>
<p>This idea with emails doesn&#8217;t mean that you don&#8217;t need to have backups. It means that the each user ALSO HAS the HIS data on his disc. </p>
<p>I have some client that I made portal for, the hosting provides daily backup, but every now and then she asks me to manually download backup data of her mysql database and send it to her. When I send it to her she is relieved because she is holding the data now, she can bake it on a CD or whatever, it&#8217;s there..</p>
<p>Ted Z:<br />
This is good third option, a little more progressive than &#8220;you can download your data&#8221;. It would be especially handy or the only option if there was in size that would make problems to regular emails also.</p>
<p>Chetan:<br />
That was my mistake,&#8230; we have no plain passwords stored on server yes. I also haven&#8217;t concretely looked at how exactly we would encrypt data. Does anyone see any problems in hashed (&#038; salted) passwords being the key for encryption?</p>
<p>Links were proposed to me by Zemanta plugin, I agree I wouldn&#8217;t have to click the password keyword to make a link to wikipedia ,.. My fault <img src='http://www.refaktor.si/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Usability 101: Give ME MY data! by Janko</title>
		<link>http://www.refaktor.si/blog/2009/07/usability-101-give-me-my-data/comment-page-1/#comment-174</link>
		<dc:creator>Janko</dc:creator>
		<pubDate>Wed, 29 Jul 2009 21:41:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=58#comment-174</guid>
		<description>Thanks all for very interesting replies! I will try to answer below.

About &quot;why email&quot; vs the other solutions..
I agree email is not the ideal medium for this. But it&#039;s sadly sort of the only one with such properties. 

A) On one end you have option where you offer users links to download their data. Nice, totally  unobtrusive.. BUT.. I don&#039;t even back-up my important files on local disc until it&#039;s too late. Do you think people would &quot;back-down&quot; data from their bookamrking services on regular basis? 
B) On the other end you have a smart client that silently makes backups for them in the background, and also does conversion between formats, etc... So user just says at any point. I want my data in CSV and get&#039;s it. BUT do you think anyone would install a native application to use a online browser based service. That &quot;no download or install&quot; is the key accessibility point why web-services are so popular.

Android:

I agree with you a lot. And I also agree email used like this has concrete flaws, as I tried to explain above I proposed to use it in this because I see no other real option. Google &quot;exporting&quot; to natural formats/protocols like you mention pop3 / iCal is really good approach. I wasn&#039;t even aware of it.

I agree that for tech savy people good api-s that allow you to make your own little solutions are very good. But this only covers smaller amount of internet users. Otherwise I also fully agree with your reasons :)</description>
		<content:encoded><![CDATA[<p>Thanks all for very interesting replies! I will try to answer below.</p>
<p>About &#8220;why email&#8221; vs the other solutions..<br />
I agree email is not the ideal medium for this. But it&#8217;s sadly sort of the only one with such properties. </p>
<p>A) On one end you have option where you offer users links to download their data. Nice, totally  unobtrusive.. BUT.. I don&#8217;t even back-up my important files on local disc until it&#8217;s too late. Do you think people would &#8220;back-down&#8221; data from their bookamrking services on regular basis?<br />
B) On the other end you have a smart client that silently makes backups for them in the background, and also does conversion between formats, etc&#8230; So user just says at any point. I want my data in CSV and get&#8217;s it. BUT do you think anyone would install a native application to use a online browser based service. That &#8220;no download or install&#8221; is the key accessibility point why web-services are so popular.</p>
<p>Android:</p>
<p>I agree with you a lot. And I also agree email used like this has concrete flaws, as I tried to explain above I proposed to use it in this because I see no other real option. Google &#8220;exporting&#8221; to natural formats/protocols like you mention pop3 / iCal is really good approach. I wasn&#8217;t even aware of it.</p>
<p>I agree that for tech savy people good api-s that allow you to make your own little solutions are very good. But this only covers smaller amount of internet users. Otherwise I also fully agree with your reasons <img src='http://www.refaktor.si/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Usability 101: Give ME MY data! by Alex</title>
		<link>http://www.refaktor.si/blog/2009/07/usability-101-give-me-my-data/comment-page-1/#comment-173</link>
		<dc:creator>Alex</dc:creator>
		<pubDate>Wed, 29 Jul 2009 20:46:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=58#comment-173</guid>
		<description>Putting users in control of their data is excellent practice, but making them responsible for keeping track of the data they gave you probably won&#039;t go over too well.  I&#039;d give it a 3-step approach:
1)  Have an API that exposes all the data they&#039;d want to back up.  Write a client app for importing that data to a user&#039;s desktop, and expose the API-  That way if your users have specific needs for that data, they can back it up themselves in a way that&#039;s consistent with their systems.

2) Allow the email thing *as an option*, but make it opt-in, and not the only method for pulling their data out of your webservice.  As mentioned above, email for file storage is weaksauce.

2)  Automatic offsite backup.  Amazon S3,  some webserver farm in a neighboring state/country, something like that.  If your server crashes, it might be their fault they didn&#039;t use the backup options, but it&#039;s still your fault that their mistake cost them all that data.</description>
		<content:encoded><![CDATA[<p>Putting users in control of their data is excellent practice, but making them responsible for keeping track of the data they gave you probably won&#8217;t go over too well.  I&#8217;d give it a 3-step approach:<br />
1)  Have an API that exposes all the data they&#8217;d want to back up.  Write a client app for importing that data to a user&#8217;s desktop, and expose the API-  That way if your users have specific needs for that data, they can back it up themselves in a way that&#8217;s consistent with their systems.</p>
<p>2) Allow the email thing *as an option*, but make it opt-in, and not the only method for pulling their data out of your webservice.  As mentioned above, email for file storage is weaksauce.</p>
<p>2)  Automatic offsite backup.  Amazon S3,  some webserver farm in a neighboring state/country, something like that.  If your server crashes, it might be their fault they didn&#8217;t use the backup options, but it&#8217;s still your fault that their mistake cost them all that data.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Usability 101: Give ME MY data! by gasper_k</title>
		<link>http://www.refaktor.si/blog/2009/07/usability-101-give-me-my-data/comment-page-1/#comment-172</link>
		<dc:creator>gasper_k</dc:creator>
		<pubDate>Wed, 29 Jul 2009 19:52:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=58#comment-172</guid>
		<description>I like the idea, but it should be made opt-in, and off by default, for reasons explained in the comments above. The thing is, even if you provide your users with an export option, or opt-in e-mail backup, the vast majority of the users will not use these features. If your site crashes, it doesn&#039;t make any difference if 5% of the users have backed up their data.

Also, opt-in and regular exports are extra work, which people just won&#039;t do. Even if it&#039;s a single click away, it&#039;s still one click too many. So you have to find a way to either force your users to make backups (yuck), notify your users to make backups (nicer, but won&#039;t do, and it&#039;s still annoying), or provide a good backup yourself, possibly off-site. The third solution is the only good solution for cases like these, and of course the hardest to provide.

I quite like Ted&#039;s idea; you back it up somewhere online, and only provide a link to that backup. This approach has a few problems (privacy of the backup, safety of &lt;em&gt;that&lt;/em&gt; data, spamming with backup notifications), but it&#039;s a very good start.</description>
		<content:encoded><![CDATA[<p>I like the idea, but it should be made opt-in, and off by default, for reasons explained in the comments above. The thing is, even if you provide your users with an export option, or opt-in e-mail backup, the vast majority of the users will not use these features. If your site crashes, it doesn&#8217;t make any difference if 5% of the users have backed up their data.</p>
<p>Also, opt-in and regular exports are extra work, which people just won&#8217;t do. Even if it&#8217;s a single click away, it&#8217;s still one click too many. So you have to find a way to either force your users to make backups (yuck), notify your users to make backups (nicer, but won&#8217;t do, and it&#8217;s still annoying), or provide a good backup yourself, possibly off-site. The third solution is the only good solution for cases like these, and of course the hardest to provide.</p>
<p>I quite like Ted&#8217;s idea; you back it up somewhere online, and only provide a link to that backup. This approach has a few problems (privacy of the backup, safety of <em>that</em> data, spamming with backup notifications), but it&#8217;s a very good start.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Usability 101: Give ME MY data! by Chetan</title>
		<link>http://www.refaktor.si/blog/2009/07/usability-101-give-me-my-data/comment-page-1/#comment-171</link>
		<dc:creator>Chetan</dc:creator>
		<pubDate>Wed, 29 Jul 2009 17:54:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=58#comment-171</guid>
		<description>&lt;cite&gt;The data dumps will also be encrypted with user’s passwords in this case.&lt;/cite&gt;

Does it mean you will be storing users&#039; passwords in plain-text? BAD bad idea...

Also, what&#039;s up with all the links to Wikipedia? Seriously, how many internet users need to look up the term &#039;Password&#039;? :)</description>
		<content:encoded><![CDATA[<p><cite>The data dumps will also be encrypted with user’s passwords in this case.</cite></p>
<p>Does it mean you will be storing users&#8217; passwords in plain-text? BAD bad idea&#8230;</p>
<p>Also, what&#8217;s up with all the links to Wikipedia? Seriously, how many internet users need to look up the term &#8216;Password&#8217;? <img src='http://www.refaktor.si/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Usability 101: Give ME MY data! by Ted Z</title>
		<link>http://www.refaktor.si/blog/2009/07/usability-101-give-me-my-data/comment-page-1/#comment-168</link>
		<dc:creator>Ted Z</dc:creator>
		<pubDate>Wed, 29 Jul 2009 15:49:20 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=58#comment-168</guid>
		<description>Store the encrypted backup in Amazon S3 storage, it&#039;s perfect for
medium-to-large files you don&#039;t expect to change in any way once
written.  Then send the user a notice the backup is available with the
S3 URL.</description>
		<content:encoded><![CDATA[<p>Store the encrypted backup in Amazon S3 storage, it&#8217;s perfect for<br />
medium-to-large files you don&#8217;t expect to change in any way once<br />
written.  Then send the user a notice the backup is available with the<br />
S3 URL.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Usability 101: Give ME MY data! by CaptainOBackup</title>
		<link>http://www.refaktor.si/blog/2009/07/usability-101-give-me-my-data/comment-page-1/#comment-167</link>
		<dc:creator>CaptainOBackup</dc:creator>
		<pubDate>Wed, 29 Jul 2009 13:48:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.refaktor.si/blog/?p=58#comment-167</guid>
		<description>Any half decent website owner plans a backup policy and routine.

If you are taking proper backup of user data on your site, you don&#039;t need to burden users with &quot;backing up&quot; their own data, which in essence - sending their data email - would be.

Also, sending their data zipped via email, could also lead into obscure privacy issues.</description>
		<content:encoded><![CDATA[<p>Any half decent website owner plans a backup policy and routine.</p>
<p>If you are taking proper backup of user data on your site, you don&#8217;t need to burden users with &#8220;backing up&#8221; their own data, which in essence &#8211; sending their data email &#8211; would be.</p>
<p>Also, sending their data zipped via email, could also lead into obscure privacy issues.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
