July 1, 2007

iPhone design trade-offs

There is plenty to like about iPhone - and we all already know about that. And there are some obvious challenges (i.e., slow network, lack of physical keyboard, no OTA syncing of calendar & contacts). But a lot of important, yet more subtle challenges have not yet been reported widely yet. These are largely due to trade-offs given the lack of not only the keyboard, but also D-Pad, Home and Back buttons, and soft keys that are so common on just about every other phone. So, how does this impact usability? Let's take a look by comparing to some other comparable devices for a variety of tasks.

  • Make a call to a contact:
    • BlackBerry 8800 (~2 secs): Start typing from the home screen, scroll down to filtered item and press action. I have 992 contacts. I can get to just about anyone in 4 or 5 keys, a scroll, and a click. Windows Mobile is also about the same as this, but it responds a lot more slowly.
    • iPhone (~4 secs): Press Phone. Press Contacts. Press the first letter of the last name on the right side of the contacts. But since these letters are tiny, you usually have to drag up or down a few times to get to the right letter. Now flick up or down to visually search for the person you are looking for. Press the person. Press the # you want to call. iPhone is not only slow, but painfully distracting.
  • Look at photos:
    • iPod: Flipping through a lot of full-screen photos is unbelievably fast. As you spin the wheel, photos fly by. I can probably scan 20 per second. It is also physically easy and doesn't require much attention. Just fling you finger around the wheel. I can do this to look at tons of photos.
    • iPhone: Looking at photos on the iPhone is undeniably beautiful and pleasing - but to flip between full-screen photos requires a flick for each one. The fastest I could manager was about 4 per second, and that required a lot of finger movement. I wouldn't want to do this for more than about 20 photos.
  • Read text on the web: Much has been made of reading web pages on the iPhone. Everything that is advertised is true - but they forget to mention one thing. If your eyesight isn't terrific, you'll have to take advantage of the beautiful two-finger zooming-in feature - even after you've zoomed in to an article. But if you do that, then you'll have to horizontally scroll back and forth to read each line. This is an unimaginably bad experience. In other mobile browses, content is laid out vertically. They certainly have their own problems, but once you get to reading an article, you can set the font size, and just press the space bar or down arrow to scroll down one page at a time. On the iPhone, if you can't read the natural size, you are just going to have a really lousy experience.
  • Things to do: Part of the fun of computing is that there is just so much darned stuff to do - from little flash games, to java downloads, to rich apps that you pay to download. And the wonder of "widgets" is that the public makes them, so there are lots of options to choose among (i.e., see what's coming soon from ZenZui). But with the iPhone's closed platform, no Flash and no Java - you're pretty much stuck with what Apple gives you. Sure you can watch a few YouTube videos. But there are about half dozen I know of and actually searched for - whoops, those weren't available. They nicely give you a bunch of Web bookmarks to all kinds of sites – so I visited some kids sites with my 8 year old daughter. Whoops, all the ones she cares about use Flash, and they don't work. So I can read on the Web, and do iTunesy stuff. Don't get me wrong, that's pretty great - but not great enough. For the iPhone to be truly great, they have to open the platform.
  • Finding an email: Amazingly enough, there is no way to search for email.
  • Finding some music: Amazingly enough, there is no way to search for music. Hierarchies and tags are great - but sometimes you know what you are looking for, and the fastest and cognitively easiest way to get it is just to type a unique word in the title. Oh well, you're out of luck.

Now if it weren't for the fact that Apple has Spotlight on the desktop, I might think they hadn't learned about search yet. Instead, it's almost as if Apple has tacitly agreed that typing on the iPhone really is so bad that they don't want to frustrate users by having them search for stuff. Or maybe they really want you to think of this as an entertainment device, so efficiency shouldn't be that important - and the act of forced browsing will help you discover stuff you didn't know you had on your device. Or maybe they just didn't get to that yet, and we'll see it in an update before long. Cross your fingers.

June 25, 2007

Plaxo Makes Me Scared

Web services that offload the burdon of tedious repetitive tasks offer a wonderful promise. And things like having to update your address book every time any one of your contacts changes something just seems like one of those things that the modern Web ought to solve. And in fact, it does. Plaxo offloads this burdon to each individual to maintain their own contact information – rather than the hundreds of individuals that know that person.

Seems like a good thing, right? Well, almost – except for the details:

  • It puts the burdon of maintaining your understanding of someone else's address on that other person. Plaxo sends me a reminder email to "check" if I've updated my information every now and then – even if I never change anything, and even if I don't use Plaxo. This looks like a convenience feature for you, but I see it as actually being Plaxo's excuse to send advertising to everyone in your address book at your request with your credibility and (literally) your face. Do you really want to be supporting their advertising?
  • Plaxo says they will maintain great privacy of my contact information, but should I believe that? From their privacy policy, "Plaxo will not sell, exchange, or otherwise share Your Information with third parties, unless required by law or in accordance with your instructions." In other words, because you want to maintain a personal database of information about me, the government now has instant access to all of my personal information immediately.
  • If Plaxo's servers get broken into, all of my contact information is available to the world.
  • You should be aware that Plaxo explicitly maintains the right to spam you. From their privacy policy, they maintain the right: "To provide you with information about Plaxo products, services, news and events through the Software, the Site or e-mail;"
  • Plaxo can change their policy at any time – and instantly start selling all of everyone's information at will. If they are sold, for example, there is no reason to expect that a buyer wouldn't do so if it was profitable.

Plaxo is not unique – there are lots of places that centralize personal information (think Google). But this one worries more than others because they focus on personal information, and the relationship between individuals, and have an explicit business model and policy of actively and repeatedly soliciting non-customers. They also are unique in shifting the burdon from the user of information to someone else – without their permission.

January 3, 2007

In defense of Challenge-Response spam detection systems

Like a lot of people, I get a lot of spam. And in the past months, it has gotten a lot worse. On average, I get well over 1,000 spam a day, and that is after spamassassin has already processed it and deleted what it detects without me ever even seeing that. Of those that get through, Outlook puts most in the Junk E-email folder, leaving me about 100 a day to delete - intermixed with my 50 or so legitimate emails a day.

In terms of actual time lost, it is not great. Maybe 2 seconds per email to delete or 2*100=~3 minutes plus a couple of minutes to look through the junked email to salvage good ones (of which I typically find about 1 per day) for a total of maybe 5 minutes a day.

But in terms of mind share and detraction, this is huge. It means that I am continuously distracted all day long by the dregs of society - pornography, rampant commercialism, and fraud. This is the worst kind of distraction, not only taking my mind away from my flow of concentration, but doing so in a way that I do my best to avoid in every other aspect of my life, and that I would not even consider letting my 7 year old daughter have access to.

So, after giving up on all the standard solutions to spam, I signed up for SpamArrest, a commercial "challenge-response" spam detection system. This works by requiring everyone that wants to send you email to first follow a link to a website and prove they are human by reading a word in a warped image and typing it (i.e., a CAPTCHA). The reason this approach works is that:
  • Each sender only has to do this once for me. The system remembers that person for the future.
  • I can preload the system with all of my contacts and anyone I've sent email to in the past so that everyone I already communicate with won't have to validate themselves, and won't know I am using this system.
  • New people that send me email have to use this system once, and legitmate senders are usually willing to go through this step.
  • I can authenticate senders unlikely to do this (like various large e-commerce sites).
  • I can let email lists through by setting them up indivdually.
  • Spammers that send me email are almost never willing to go through this step, and so I never see their email. The reason that spammers aren't willing to do that is because they are computer software and can't, or because they are human and don't want to spend the time. In fact, most spam is sent by "spambots" which are other people's computers hijacked for the sole purpose of sending spam. This email is sent with forged email return addresses, so they never even receive the request for validation.

So, if this is such a panacea, why isn't everyone using it? Well for one thing, you have to pay for it (about $3/month). But lots of people think this approach is a bad idea in principle, and have been arguing against it. However, while I agree that it does have problems, it is better than any current alternative, and I'm not going to wait around suffering while I wait for better solutions. So, let me respond to one complaint about challenge-response systems. I'll summarize the complaints and respond here.

Concern #1. Spammers will forge mail to me with someone else's return address thus sending my challenge to the poor forgee's email box.

Looking at the actual spam I receive, the vast, vast majority has false return addresses. And of the legitimate ones, most of those very likely come from spambots running on machines that have been infected. The owner of those machines have a lot more serious problems than deleting my challenge to them. In fact, it may tip them off to the fact that they are infected. And of the few third party legitimate emailers who get my unwanted challenges, I apologize. But that is still a tiny, tiny fraction of the total spam in the world. I'll gladly stop when there are better solutions. And I won't get mad if I occasionally get unwanted challenges from others (which I do, and which is a tiny, tiny minority of the total spam I receive).

Concern #2. If a challenge-response person emails me, then both our systems will challenge each other, generating even more email traffic.

So what. We each accept each other's challenges and we're done. We only have to do this once per person. And again, this one-time extra 2 emails is so tiny in the wide world of spam, that it is a totally irrelevant argument.

Concern #3. Challenge-response systems are easy to defeat since all someone has to do is forge the From address as someone that I already trust.

This is the easiest to respond to. Yes, in theory this is true, but in practice, spammers don't know who I trust. And in the past 4 days, I have received 4,491 emails of which 165 have been classified as good. Of those, about 30 were spam, but all of those spam were sent through mailing lists that I trust, not from forged From addresses. This does bring up a legitimate problem which is that popular mailing lists may become targetted as spoofed return addresses. But again, in practice, this has not happened yet. So I'm not going to avoid using a system because it theoretically might not work at some point in the future.

The bottom line is that challenge-response systems are not perfect, and probably won't work as well if everyone uses them. But for now, they work much, much better than anything else short of a human spam deleter (now there's a good business opportunity!). And if they stop working better than alternatives, then I'll switch to whatever works better.

December 5, 2006

Kojo Nnamdi "Computer Guy" answers questions

I had the pleasure of being a "Computer Guy" on WAMU's Kojo Nnamdi show along with Allison Druin and John Gilroy. We got to answer a number of email questions on the air, but here are some other ones with my answers.

It is of course, good to see answers, but I do this also to point out the sorry state of affairs of the computer industry as this is just way too many problems for every day computer users to have.



How do I print a listing of the files in a directory?

Alternatively, you can still do it from the command line with the following steps. Run the command shell by pressing Windows-R, and entering "cmd" in the popup dialog and click ok. Change to the directory you want to list with the "cd" command (i.e., do something like "cd c:\video"). List the directory and send the output to a text file with the command "dir > listing.txt". This runs the "dir" command and sends the output to the specified text file. Then go back to Windows Explorer, open the newly created "listing.txt" file in notepad or Word or any other text editing program and print from there.

Subject: question for the Computer Guys

I have Verizon DSL service. When I open Internet Explorer to my home page washingtonpost.com, I get all of these popup boxes saying "Runtime Error." The boxes contain information such as "Object Expected" or "Null Object." and asks if I want to want to debug. Three questions - what causes Runtime Errors? Does debugging fill your computer with spyware? And why is only IE affected by such errors?

If this happens occasionally, it could be due to a temporary problem with the website in question. But if it happens frequently, then it is probably due to some broken plugin for Internet Explorer. That is, you may have installed some software that modified Internet Explorer and did so in a bad way. For IE 7, try Tools->Manage Add-ons->Enable or Disable add-ons, and try disabling stuff. If you are using IE6, try updating to IE7 with Microsoft Update.


Subject: Vista

Hi Guys!

I am one of the few people left on the planet who is still running Windows ME, and have been looking forward to getting a new computer when Vista comes out. Should I buy it right away, or wait to see how it performs?

Thanks,

In general, unless you enjoy living on the "bleeding edge", and the excitement and inevitable problems that go along with it, I recommend waiting a few months after any major technical product is launched. In this case, it probably means waiting until after SP1 (Service Pack 1) comes out to fix the first round of bugs, probably late spring.

Subject: wireless internet security

My home wireless router indicates that I have "security-enabled wireless network (WPA). What's the difference between WPA and WEP wireless security? Is one better/stronger? Is it safe to buy and bank on-line with WPA? Thanks.

WPA is the newer one, and I recommend it over WEP whenever you have the chance.

Subject: Shared Outlook Contact and Calendar Files

Hi, I've paid for a Dell server to be set up running Microsoft Small Business Server software for my small, home-based business. Despite many calls (and lots of paid invoices), cannot share either Contacts or Calendar files from within Outlook. They tried to set up a separate outlook folder, but the server won't default to it, they say, unless we wipe the server and I pay to set the whole thing up all over again. Any advice on how to get these programs to share over a small network of 2-3 desktops, please?

Many thanks,

I'm afraid I don't know how to help you here - but it sounds like whoever you paid to set up the system for you did not do their job properly. If you've tried to get them finish the job and can't get them to do so, then don't pay them and pay someone else to start over. If you already have paid them, then ask for your money back. If they won't, then you've learned a hard lesson about not paying for services before they are completed. Sorry.

Subject: Computer Guys Question

I got a virus on my desktop PC. It was cleaned out but in the process it lost its IP address and now I cant get onto the internet without that, is there a way to restore it? Thanks

I'd start by turning off your cable modem and computer and any other hardware and then turning it all on again (starting with the modem and router and powering up your computer last). If you still can't get it to work, try calling your internet service provider.

Subject: computer guys question

Is there a side-by-side comparison of processors available ... a chart, etc? How do AMD, Pentium HT, and dual processors stack-up? What direction do I go with my next purchase keeping Vista in mind, and knowing that I am now doing more photo and home video work.

There are loads of comparisons out there, but I'm not familiar with any one that I can suggest. Try googling "processor comparison" to get started.

Subject: Transfer audio tape cassette music to PC

Is there an easy way to transfer my old audio tapes to my Windows XP PC so I can hear my music on CD's?

David Pogue discussed this very issue recently, so I suggest reading his description.

Subject: older computers and external hard drives

Help! We have a 6-year old Sony Vaio PC, 60 GB, Pentium 4 processor. We use it for basic applications like word processing, Internet surfing and email. Since we began storing picture and music files the computer has slowed dramatically and now constantly tells us it has no room left on the C drive. I say we need to just buy a new computer so that we can store and manipulate all our digital images and music. Thrifty Hubby says we just need to buy an external hard drive and move our picture and music files there. Please help advise! Our happy marriage may depend on it!

You are both right (how's that for marriage counseling). Buying a new hard drive probably will delay the inevitable, and improve the situation. But using a 6 year old computer for today's pictures and music probably just isn't up to the task. I sure hope you are backing up those valuable pictures and music. Every day. Automatically.

Subject: Firefox

I switched to Firefox because of a corrupted IE6, that wouldn't even start. Tried any number of fixes, including the oxymoronic "Microsoft Help". Downloaded IE7 but the problem lives on. I love Firefox, however now I can't get Windows updates, because surprise, surprise, Updates
will only download thru Internet Explorer. Am I missing a tool feature or preference in Firefox, that will allow a it to talk to Microsoft?

This sounds bad. Your only solution may be to reinstall Windows (and then reinstall your applications). You can do so without affecting your personal data. But definitely back up first to be safe.