Bookmark Post
Sphinn Post
 
RSS Feed
Atom XML Feed
XMLRSS

Beanstalk's SEO News Blog

At Beanstalk Search Engine Optimization we know that knowledge is power. That's the reason we started this SEO blog. We know that the better informed our visitors are, the better the decisions they will make for their websites and their online businesses. We hope you enjoy your stay and find the SEO news contained within this blog useful.

Friday, March 12, 2010

What is the point of using social media? (for businesses)

(this seems to be reading more like an article than a blog so I likely won't publish this here and will revamp it in an article)


Jumping right to the point one of the first reasons for any business to make use of social media is because it's where online consumers are at. Youtube, Facebook, Twitter, and many other social websites have managed to eat up the majority of web users attention span. If you want to reach those potential customers on the internet then you should be in their playground so to speak.

The amount of users on these sites has increased exponentially in the last few years and the amount of time those users spend on these sites has generally increased as well. When you consider statistics like this: http://www.insidefacebook.com/2009/06/02/total-us-time-spent-on-facebook-up-700-in-the-last-year/ you can see you'd be missing the point if you didn't use social media in some form.

So what is social media and how do you use it?

In terms of the technical world a simplified definition would be that social media refers to websites and web communities that allow their users to engage interactively on a given site. Some are very simple like Twitter and offer minimal means of communication yet users who love these websites find ways to make the most of the limited capabilities provided.




 

Friday, March 05, 2010

Google docs invitation share scare. A curious security oversight?

Recently we've been looking into using google docs to remove some of the headache of read only and lock file issues that are a frequent occurrence on network drive shares. While Google Docs is for the most part quite promising we ran into an interesting and somewhat frightening snag that we've since reported to Google. As with any service this large there are bound to be some oversights that turn up only in widespread use. I've been unable to find if this issue has already been posted elsewhere. So here's what we found.

Security scenario:

A user creates a new Google docs document,
then sends an invitation to share this document with several email addresses via the share option,
the email containing a link to the shared document invitation is received via company email,
recipient clicks the link in the email within their mail client,

next typically you're either prompted to log in to google docs and accept or reject the invitation to view the document, or if you're already logged into your Gmail account it takes you straight to the accept or reject invitation screen.

You press accept and view the document.

Stop and think about that... the invitation was sent to a company email address, not a Gmail address. Shouldn't that invitation be only for that email address? Or at least limited to the set of emails that were invited when the bulk invite was sent out?

Yet if I can get a hold of that link and put it in a browser you can log into say your personal Gmail account and get access to the same document. What we found in testing was that anyone who got a hold of the link could log into their Gmail account and still view the document.

With the amount of schools and businesses already migrated over to Google docs I'm surprised this hasn't been resolved yet.

How big a deal is this? It really depends what's in the document you're sharing however anyone who can sniff out that link and sign up for a Gmail account can gain access to the document.

Whether by sniffing your network traffic packets , sniffing your mail server or mail relays, snooping via compromised machine or email account, email being forwarded to an insecure or unintended address, or a shady client even being able to take a quick photo of your screen while the URL is in view - so long as they can get that doc share invitation link and type it in their browser they can now access it via any Google docs or Gmail account they have access to even though the invite may have only been intended for joe@joesplace.com


Current workarounds:

Only send share invitations to other Gmail accounts. Google docs to Gmail communication should stay on internal Googles internal network and never go out on the web. Post the link only in secured locations.

Or instead of sending out share invitations send an email with a URL straight to the Google docs URL for the document. The user clicking the link will first have to log in to their Gmail/Google docs then will have to request access to that document before they can view it. This can be approved or denied at your discretion.


Possible Solutions?

If Google were to allow users to encrypt their email via PGP or some other means before sending the link could not be sniffed in plain text.

However the above does not really address the simpler underlying security issue that an invitation to share a document should (unless otherwise stated in bold red) only be usable by the address the invitation was sent to.


It may seem convenient that if someone sends a Google docs invite to your @business.com account you can click on the link and sign in with your personal Gmail since you don't have Google docs tied to your @business address however that means that it's convenient for anyone else to do so too if they can find a way to capture that link.


Yes - often these invitations are read only however imagine the bounty of company and school documents that could be quite harmful in the wrong hands - read only or not. Personal and proprietary data, exam questions, you name it. If a business has migrated to Google docs it's all there if you can sleuth out the link.

Note: Another solution has been brought to our attention from the Google help forums:


Use Share->See who has access... Go to the Advanced permissions tab and untick both Allow editors to invite others to edit or view and Allow invitations to be forwarded , then click Save&Close.
se Share->See who has access... and on the People with access tab make sure the general setting is Sign-in is required to view this item. Again click Save&Close.


A quick test of these settings seems to plug the hole. However the scare remains that the default settings are quite insecure and few Google docs users are likely to be aware of the security implications of those settings.


Labels: , ,

 

Monday, March 01, 2010

Just A Day For Awards !

For those of you who don't know - we're a Canadian company and as such, well - let's just say that yesterday was a good day. :) For anyone out there who's had a big brother who just seems to be better at almost everything and looks be be about to take the one thing you're best at and even invented - well, you'll know what I mean. :)

As the Olympics closed and I personally beamed at all the Gold Canada took home (or I guess "kept home" would be the correct way of saying it) I was surprised with some additional awards.

This morning when I walked into work and checked my emails I discovered that Beanstalk has been awards top 10 in the following categories by Top SEO's:
  • Search Engine Optimization
  • Link Building
  • Content Creation
  • SEO Training
Thanks to everyone for making the past 2 days so very awards filled. :)

Labels:

 

Friday, February 26, 2010

Get Great Publicity !!!

As many of you may know - I'm doing a Webinar tomorrow at 12 EST on Longtail SEO for Ecommerce sites. To keep people interested I'm giving away great prizes, may of which have been donated. The prizes include but are not limited to an Aser netbook and 2 pro memberships from SEOmoz.

If you have some great prizes to add please feel free to contact me at dave@beanstalkseo.com before 10am PST tomorrow (Saturday) and I'll add you to the list of prizes going out. You'll get mentioned in the webinar and get some mentions from our blog here on Monday as well as from the Webinar website.

For more information about the Webinar or to register just head to http://www.newlifeevent.com/. Prizes should appeal to geeks, business people and/or SEO's. Free hosting for a year, electronics, etc. are great examples.

Thanks !!!

Dave

Labels: ,

 

Thursday, February 25, 2010

Webinar, Privacy & Google

Well, it's been a long time since my last blog post. I apologize for this and will be working hard to try to be more active in the social world of the web. As you know - in this industry things move pretty fast and while I definitely can't recap the last couple weeks, I can start anew with the recent going's on - some interesting news going forward and an update on Google. First - let's talk about what's going on right now:

Today on Webcology (my radio show) Jim Hedger and I discussed privacy including an Italian's court's assertion that Google executive are responsible for the material uploaded to YouTube (yikes), an interview with the Ontario privacy commissioner, and a lengthy discussion on what should and shouldn't be private (and who's responsibility is it anyways - is Facebook REALLY responsible for your privacy or should YOU take a second to think about what you're adding to a social network (key word - social) and understand that once you add it - it's no longer private information). It was a great show and is the first in a series of interviews and information on privacy issues and concerns.

Yahoo! & Bing are finally sitting in a tree. :) The deal has been approved and Bing will soon (hopefully by the end of 2010) be feeding Yahoo! organic results and Yahoo! paid search will power Bing paid results (they hope by Q4 of 2010 but in my humble opinion it's more likely in Q1 of 2011). Can I hear a - FINALLY !

Acer Aspire One AO532H-2676 Intel Atom N450 1GB 160GB 10.1IN WSVGA Windows 7 Starter Netbook RedAnd for those of you who are as geeky as I am - there's a great webinar series this weekend. 30 webinars in one weekend on a wide array of topics. it's going to be a wild ride with tons of great info and PRIZES. With reps from the major engines and great presenters such as Shawna Fennell, Stoney deGeyter, Jennifer Laycock and many many more (including your truly on Saturday at 12PM) you just know it's going to be great. Hope to see you there and good luck winning one of the many great prized from netbooks to $5000 design packages. So get your Twitter account loaded, step in front of your favorite browser and buckle up. To register go to http://www.newlifeevent.com/.

Labels: , , , ,

 

Wednesday, February 03, 2010

A Sad Day For Blogger Users But Good For Beanstalk

I love Google. Before I head into my latest rant I wanted to get that out of the way as this is two posts in a row that involve me complaining about something Google is doing. Perhaps the flaw is in the way I viewed Google - as more than just a marketing company. I suppose that this means I wasn't really paying attention when the quarterly reports came out. :)

First, let's setup the situation ...

The year is 2004 and I've just registered the domain beanstalk-inc.com. I like sharing information and I like adding content to our site and so as soon as the site was fully operational and our core 100-or-so pages of content ere built I worked to get a blog started with the first post appearing on March 24 of 2005 (about the AskJeeves purchase). :) When I was choosing the blog system to use the choice was pretty obvious to me. The logic went something like,
  • I want Google to crawl my blog
  • Google owns Blogger
  • Google creates the Blogger code
  • Google will thus always be able to crawl Blogger blogs
  • I think I'll go with Blogger
I wanted to content on our site so I chose Blogger and went with their FTP option. I chose Blogger because of the FTP option. I have setup clients in Blogger because it's run by Google and has an FTP options. Google has just announced that they will be discontinuing their FTP option. Insert expletive here.

Now, I can see their reasoning. By their count, only 0.5% of the Blogger blogs are uploaded via FTP and are responsible for a disproportionate amount of support resources HOWEVER I would counter with two point.

About 75% of all the blogs are spam and I'd bet that the ones hosted on actual domains are more likely to be legit. I may be wrong but I'd bet not. But still - if we assume that we are still left with only 2% of legit Blogger sites being uploaded via FTP. So what does that mean in numbers? I don't have access to the most current data but let's say - thousand upon thousands of users will feel the inconvenience and now I have to go back and appolgoize for recommending to my clients that they use Blogger and further - find a solution.

Now - I do like their sub-domain solution (they'll host blog.beanstalk-inc.com but let's be honest - it's still going to cost me to go this route via lost links to existing posts and the lost weight that seems to affect 301'd links (though I'm not sure why but it does appear to happen).

At any rate - that's my rant and stay tuned, once I figure out what we're going to do and test it - I'll blog about the results so if you too are caught in this mess - hopefully we'll be able to give you a solid solution. :)

And good luck. :)

And now on to the good news ...

Beanstalk has once again made the grade to be included in TopSEO's best of the best winning awards in the following areas:
  • Optimization
  • Content Creation
  • Link Building
  • Training
  • PPC Management
A big thanks for TopSEOs and to our clients. :)

Labels: , ,

 

Friday, January 29, 2010

Google's Keywords Tool & Personalization

I've got two topics to cover today - Google's keyword tool and Google's personalized results. Let's start with their keyword tool ...

Google's Keyword Tool (and my problems with it)

Today I'm not going to focus on the common question, "Is the data accurate?" It's a good question but one which is likely, "Yes if you know how to read it." It includes the search network so i you read it as "number of searches on Google.com" you're wrong but if you read it as "accessing Google's search results" you're right. Nonetheless, that isn't what I'm going to cover today - my issue today is what they're displaying and what they're not.

When one uses Google's keyword tool one expects that the resulting data shouldn't be tainted by Google's personal bias towards products and/or services. But alas - it appears that either the results are biased or people's search patterns are very different than what I would expect them to be and given that I've been working as an SEO for ten years - it's doubtful that the search patterns are THAT different. Here's an example of what I'm referring to so you can run your searches on this tool understanding that you might not see an accurate view of the world around you.

Top 20 results reported for "iphone developer" (I've trimmed some of the columns to make it fit this page):

Keywords related to term(s) entered
Keywords - Monthly
iphone developer - 74,000

Additional keywords to consider
Keywords - Monthly
developer - 3,350,000
resume developer - 40,500
programmer developer - 33,100
j2ee developer - 14,800
cv developer - 14,800
resumes developer - 4,400
technical developer - 4,400
developer engineer - 3,600
consultant developer - 2,900
unix developer - 2,400
developer experience - 1,600
ipone developer - 73
aple developer - 46
aplle developer - 36

Really? One of their top phrases is ipone developer and the are no additional searches at all that include the keywords iphone and developer? Oh wait - if I search "iphone app developer" it shows 3,600 estimated monthly searches so why didn't it appear in the above search?

Now let's look at the results for "android developer". In this case we don't even have to look at the "Additional keywords to consider" - there are plenty of results. They are:

android developer - 12,100
android development - 12,100
android developers - 3,600
android application development - 2,400
android developer challenge - 2,400
guide to android development - 1,900
android developer phone - 1,600
the busy coder's guide to android development - 1,600
professional android application development - 1,300
google android development - 480
android developer g1 - 390
android development phone - 390
android software development - 390
android game development - 320
android development download - 260
development for android - 260
android developer challenge ii - 210
android developer forum - 210
android developer forum - 210
android mobile development - 210

And the list goes on from there. Wow - the android sure is popular compared to the iPhone. ;)

Another "curiosity" here is that the numbers noted above are broad match. If we go to Exact for "iphone developer" the number drops from 74,000 to 14,800. So there definitely are other searches in there - they're just not being displayed. Hmmmmmmm.

I'll leave the reasoning there for others to work out.

Now onto Personalization ...

As many of you have noticed, Google is tracking you with cookies and providing personalized results - even when you're not logged in. I've got to commend Google on this one. From a user standpoint it's another slam dunk in that they're providing a better search experience however from and SEO's standpoint - it's a nightmare as we're always searching and augmenting our results and so we often don't see what other do. To avoid this you can block cookies from Google but you'll have issues with Google services such as Blogger and every their keywords tool.

I got an interesting email from the developers of a Firefox extension called Google Camo that stops personalized results but seems to allow other cookies so Google's various services work. I'm using it right now and the machine is working great so thanks to the developers. You can read more about it and download the add on at http://www.iexposure.com/googlecamo.

Happy searching. :)

Labels: , ,

 

Valid XHTML 1.0! Valid CSS!
Copyright© 2004-2010
Beanstalk Search Engine Optimization, Inc.
All rights reserved.