Firefox Extension for Applied Social Networking 161
wanderingstan writes "Outfoxed is my masters thesis project about trust. (Nutshell overview) The extension uses a social network for personalized searching, phishing/spyware protection, file/process validation and more. It's related to del.icio.us, StumbleUpon, and those Kevin Bacon things, but goes a lot further. Mathematically, it's based on the network behavior of small world networks (pdf). Built with Javascript, Python, SQL, and XSLT. 366 testers so far, but we need the network to grow!"
did he say... (Score:5, Funny)
bo
Re:did he say... (Score:1)
I got it installed (Score:2)
Re:did he say... (Score:2, Funny)
bo
funny... (Score:2)
No, I never said that
Using social networks for personalization (Score:5, Insightful)
It's a cool idea, but I'm not sure how many people would bother to set this up, how often this will change the search results, whether the changes will focus your attention on the most relevant result for your search, and whether you can scale a system that accesses data on everyone in your social network on every web search.
Re:Using social networks for personalization (Score:5, Interesting)
Re:Using social networks for personalization (Score:2, Funny)
Re:Using social networks for personalization (Score:2)
Agreed. I installed "StumbleUpon" a few weeks ago. I still haven't used the tool. And, since will probably never find the time to use it, I should just un-install it.
The quality of the metadata in a network like this is directly correlated to how many people actually take the time to collect and submit data. Don't forget that there are always a few "bad apples" that will purposefully recommend bad links. Take spyware compan
Re:Using social networks for personalization (Score:4, Insightful)
But those spyware companies aren't in your circle of trust so it doesn't matter what they think about their websites.
Re:Using social networks for personalization (Score:4, Informative)
True. I would never expect a spyware company to lie their way into a trusted network. :)
Re:Using social networks for personalization (Score:2)
The extension shows you who rated various things. If there's a bad rating, stop trusting that person. If someone you trust has a bad habit of trusting untrustworthy people, stop trusting that person.
Re: (Score:2)
Re:Using social networks for personalization (Score:3, Insightful)
Exactly. Trust involves two aspects: competence, and compassion. Friends are often compassionate, but may not neccessarily be competant in the interests you have (ie, none of my "friends" are on in my basketball weekend group). Likewise, those guys in the b
Re:Using social networks for personalization (Score:1)
For example. I like classic rock. My friends may not like it. But someone else must also like classic rock. And if they like and dislike similar artists and songs we have a compatible match.
Re: (Score:2)
Re:Using social networks for personalization (Score:2)
Re:Using social networks for personalization (Score:3, Informative)
One important difference is that Outfoxed doesn't assume that the people feeding you metadata are friends-- that's one reason why I chose the more neutral word informer, which can be a person, organization (example [trustbase.org]), or even auto-generated list (examp [del.icio.us]
Re:Using social networks for personalization (Score:2)
Well, I just installed it and it looks pretty good. I can't get an informer account at the moment due to slashdotting, but I'll try again tomorrow.
One feature I immediately expected but didn't see was something along the lines of "If you like this site, check out
Good luck with the project!
jaaron
Re:Using social networks for personalization (Score:5, Interesting)
This system looks like a good way of implementing spyware/adware prevention and the like based on trust, but I don't think it will do so well for general browsing as you point out. There are plenty of people I would trust to help me stay away from spyware who I wouldn't want pointing me to web sites to read, mainly because I read vastly different things on the Internet from many of my friends. A system tha would work for this is something like Amazon's recommendation system. Without fail, Amazon emails me stuff that I'm actually interested in based on things I've bought from them. If something could use my web browsing history and compare it with that of others to suggest sites to read, that would be awesome. There are tons of privacy issues there, but putting those aside, I think such a system would be very effective.
One thing that might break such a system would be spammers. Spammers like to break anything that's good on the Internet with advertising, and this would be no exception. I think it would be hard to replicate a normal browsing history while inserting a few ad links, and submit those histories on a large enough scale to make those sites show up as results.
Anyway, I've gone off on a bit of a tangent. My point is that trust works well for many of the stated goals, but not so much for what I really want: all the good information on the Internet pumped straight into my brain.
Re:Using social networks for personalization (Score:3, Insightful)
Well, I have a certain amount in common with my friends - that's one of the reasons they became friends. They assumption that I will like everything they like may be flawed, but the counter assumption, that there is no commonality in taste, seems equally absurd.
On the one hand, you trust your friends, so things your friends clicked on might be interesting for you to know about. On the other
Re:Using social networks for personalization (Score:5, Funny)
Obviously, you've never had a friend relentlessly forward you email chain letters insisting "I know you hate these
Friends of friends are sometimes not friends (Score:3, Interesting)
That's been one of the little mysteries in my life. You know you have Friend A and Friend B, and you like them both a lot? Then one day you introduce A to B and realize they don't like each other...at all. Yet you still like A and you still like B.
Some part of your personality is responding to something each of those people has, yet clearly they are each appealing
Re:Friends of friends are sometimes not friends (Score:2)
Re:Friends of friends are sometimes not friends (Score:2)
Of course that could be just because I am pretty stubborn, so it makes getting my way harder if someone else is equally stubborn.
What? (Score:5, Funny)
Re:What? (Score:2)
You have to take the very little info you've been given, and run with it.
trust? (Score:1)
I'll show you what I know about trust by not installing your spyware extension!
Kidding aside, sounds like an interesting project. Even though I won't be taking part, I wish you the best of luck with it...
not trusting trusted people (Score:5, Funny)
Re:not trusting trusted people (Score:1)
Re:not trusting trusted people (Score:2, Funny)
This is probably why mac's only have one mouse button. Bet they'd have done away with the keyboard too if they could get away with it.
Papers on similar work (Score:5, Informative)
The Solar Trust Model
Michael Clifford, Charles Lavine, Matt Bishop
http://www.acsac.org/1998/abstracts/fri-a-1030-cl
Networking in The Solar Trust Model: Determining Optimal Trust Paths in a Decentralized Trust Network
http://www.acsac.org/2002/papers/9.pdf [acsac.org]
kevin bacon things (Score:5, Funny)
Re:kevin bacon things (Score:1)
more links please (Score:5, Funny)
Re:more links please (Score:1)
Sh3rl0ck H0lm3s says: (Score:2)
"Elementary, my dear Watsonbot."
Good idea in theory (Score:5, Interesting)
Sadly, too, the concept of Monkey Sphere comes in, too...
http://www.pointlesswasteoftime.com/monkeysphere.
Though it will start small, it will eventually become just too big, if it survives... it will become just another random maze of links for people to click through at 3am when they should be coding for a project due at midnight the next day.
===
Sorry to be a drag, just being realistic
Added... (Score:2)
If you friends have poor taste and strangers don't, how do you find the strangers who won't try to screw you over?
===
Perhaps I am being less realistic and more pessimistic, maybe I'll just wait and see how this sort of thing plays out
Re:Good idea in theory (Score:1)
In that case, they have 45 hours to complete the project, in which case.... click away!!!
Re:Good idea in theory (Score:2)
Re:Good idea in theory (Score:2)
It's not like the social bookmark sites, where you wander around stranger's bookmarks when the site notices that you have similiar tastes. You have to manually place all of your friends/family/trusted people into the program, and it gives you little reports for every site you visit. Heck, I don't think it even lets you share bookmarks, though if it does that isn't the main features.
Re:Good idea in theory (Score:2)
I agree with some of the other posters in that my friends have terrible taste
Identity evasion (Score:4, Interesting)
For recommendations against, it's very hard to make this work, because it's hard to make the shit stick; every time the global reputation of a particular identity takes a dive, it's easy to shift to another one which has no recommendations either way.
Creating hard-to-evade IDs is a very hard problem.
Re:Identity evasion (Score:2)
Re:Identity evasion (Score:2)
Why do you put "single persons" down like that?
When I'm in the process of making a buying decision I'm looking for these "single-person"-reviews in particular. I found most of these review published on private homepages or blogs much more helpful than most of the stuff I find on "professional" review-
User != Others (Score:4, Insightful)
My bottom line is this: Look at your best friends computer. Do they have the same extensions that you do? Do they even run Firefox? The network can only be as expansive as the people that decide to jump on board.
Mod site up (Score:2)
"MOD THAT SITE UP!"
sql go boom (Score:5, Interesting)
For example, every process run by a computer should have a chain that looks something like this:
wuauclt.exe [executed by] Windows Update [installed by] Windows OS [installed by] User [trusted by] Root User
matlabserver.exe [executed by] MatLab Application [installed by] User [trusted by] Root User
And similarly, every file should also have a chain:
desktopicon.ico [created by] FireFox Application [installed by] User [trusted by] Root User
mydocument.doc [created by] MS Word Application [installed by] Root User
Ideally, management of trust should be done at the lowest levels of computation: in the operating system or even in the microprocessor itself. This limits the ability of malicious software from disrupting the chain of trust back to the user. Outfoxed, because it is just an extension, has many vulnerabilities. Primary is the vulnerability of the locally stored trust database.
The next step would be to have trust storage implemented as a continuously running process that could be queried by other applications. [Note 22/03: The new version does this, using HTTP for queries.] So the browser, email client, and word processor could all draw trust information from the same source.
The best solution would be to have this process integrated into the operating system itself, so that the OS could also take advantage of the trust information by only running trusted applications. Trust managed at this level, combined with a good security methodology, would give us the ultimate trustworthy environment.
Re:sql go boom (Score:3, Insightful)
IMHO, you are reaching for a capabilities-based model [eros-os.org], which works out at least somewhat better in practice, though it is an open question of whether it works well enough to use. (Link leads to a group trying to build an OS on the idea, and I know it hasn't been completely smooth sailing, but I am not intimately familiar with the project.)
That should give you a springboard for further investi
Re:sql go boom (Score:3, Interesting)
A trusts B
B trusts C
does not imply A trusts C
Re:sql go boom (Score:3, Insightful)
Spyware Program [installed by] Spyware Installer [executed by]] KaZaA Installer [trusted by] User [trusted by] Root User
or
Spyware Program [executed by] ActiveX component [executed by] Internet Explorer [trusted by] Windows [trusted by] Root User
Which is exactly what's already happening.
While it would certainly be nice to have this kind of info so you can trace back where files and processes came from, it wouldn't stop malicious programs in the slightest.
Re:sql go boom (Score:2)
Re:sql go boom (Score:2)
In particular are you suggesting owners be able to know any and all keys on their own computer? Owners able to access anything they wish on their own computer? Owners able to do anything they wish on their own computer? Owners able to modify anything they wish on their own computer? Owners able to modify or defeat any "security" system on their own computer?
Re:sql go boom (Score:2, Interesting)
On the other hand, the real difference is that the Palladium concept insists on you, the user, to trust an omnipotent outside third party in determining what is trustworthy and what isn't.
Re:sql go boom (Score:2)
I could be mistaken, but no, I do not believe the poster was proposing "the same thing".
In particular I saw no suggestion in his post that the owner of the computer (root user) be FORBIDDEN to know his own master key to his own computer. I saw no suggestion in his post that the owner of the computer be FORBIDDEN to be able to use his master key to do whatever he wants on his own computer.
If he *was* implying tho
Grow at slashdot rate? (Score:1)
Don't wish for more than you can chew!
Warning: mysql_connect(): User wanderin_drpl2 has already more than 'max_user_connections' active connections in
Maybe this is a FASQ, but (Score:3, Interesting)
"Green Tennis Shoes are the best! Come see my kewl site about Green Tennis Shoes [blogspot.com]!"
And you're taken to some guy's blog. Is there a rating system, and if so, how well does it work?Re:Maybe this is a FASQ, but (Score:2, Informative)
Re:Maybe this is a FASQ, but (Score:2)
Two things ... (Score:1)
It doesn't seem to work in OSX
I got "outfoxed_mddb_server is not compiled for your OS please start it now
when firefox restarted after installing the plugin.
Its been trying to create the database for 10 min now
Re:Two things ... (Score:3, Informative)
Windows XP:
Download outfoxed_beta_0.2.90d.xpi
(Where are the Linux and Mac versions?) [getoutfoxed.com]
And from that page seeing as the site is flakey...
2005-06-18 Note: Udo has compiled Mac and Linux versions. We need to wrap it up into an installation package though...so hopefully next week. Register to be notified by email when it's ready.
max_user_connections (Score:3, Funny)
No, apparently you don't:
Warning: mysql_connect(): User wanderin_drpl2 has already more than 'max_user_connections' active connections in
Social networks cannot save us from dumb friends (Score:2, Insightful)
Re:Social networks cannot save us from dumb friend (Score:2, Interesting)
-Schiller
Nice article on BBC [bbc.co.uk] (via [slashdot.org]) about how most users don't even know the words for threats on the internet.
Same thought, trust friends with spyware? (Score:2)
who are you going to trust? (Score:4, Interesting)
The example in the "nutshell example [getoutfoxed.com]" seems like a good enough idea, but I'm curious, what's to ensure that the results stay good as the connections increase? In this example, it very quickly gets to a friend-of-a-friend-of-a-friend status. It seems that for each hop you take away from the most trusted people in your social network, good advice gets exponentially harder to find.
For example, if you asked your brother--who just had his bathroom redone--for a recommendation on a good plumber, you might expect some good advice. But how much credence are you going to give the advice of your brother's co-worker's nephew's best friend?
Re:who are you going to trust? (Score:4, Insightful)
Re:who are you going to trust? (Score:2, Interesting)
Let's get cracking! (Score:1, Troll)
Re:Let's get cracking! (Score:2)
Wrong audience. (Score:2)
Objections (Score:3, Interesting)
The problem with this is that "goodness" is somewhat subjective. If you ever use amazon, you know that pretty much everything has at least few marks against it. If you want a network to be big enoguh to come up on searches, chances are that you're going to have a wide variety of opinions
Alternate Ask Slashdot Story (Score:2, Funny)
This category is otherwise known as "Ask Slashdot... to do your work."
Online communities (Score:1)
The only one I use is denmark-centric [lunarstorm.dk] (let's see if the site dies ^_^), mostly because it's the only one that's available and makes just a little coherrent sense for danes. Not that there's anything wrong with their gay design, it's just... Idw
Here's the thing about personalization (Score:1, Interesting)
But I did not enjoy working on such a product. It convinced me back then that I don't like the nature of the web, which is fairly centralized relative to the internet itself. For example, I much preferre
Hmm funny thing but.... (Score:2)
Direct Download Links (Score:1)
Mirror [getoutfoxed.com]
Interesting (Score:5, Interesting)
I think a hybrid approach between a social network and Amazon recommendations would be ideal. Based on bookmarks and preferences that you post to the server, an algorithm could reccomend other uses with similar tastes. I could then agree or disagree (on a 10 point scale) with the recommendation. That user would then enter my network, and I could browse other users in their network. You would be able to see their rating by other users. Additional ratings would refine the algorithm's ability to find new "friends" You would be notified when someone made you their "friend" so you could check them out and decide whether or not to reciprocate.
Re:Interesting (Score:1)
Not only would that mean massive load for the centralised server, but it would raise privacy issues.
You guys don't get it (Score:1)
More bandwidth on the way (Score:2, Informative)
Re:More bandwidth on the way (Score:2)
I'm registerd and I await the Linux version in a few weeks!
You don't want Trust.... We want Experts (Score:4, Interesting)
For example, I trust my parents, but I would never trust them to make decisions about computers. But if it came to building a building, I'd trust my father a bit more as he is an architect and his field is related to the construction of buildings. But I would never trust my mom regarding that. Now if the issue was the development and educational patterns of children in a bi-lingual situation, I would trust my mom, but I would never trust my father. He isn't a highly trained educator, he is an architect.
This type of trust network is good, but really is just an extension of the database that AOL has had for their buddy lists on AIM for years.
What is really needed is a way to rate peoples expertise in areas. If this can be done, a whole new dynamic internet could be formed.
Just one example of this would be to filter Wiki articles based on the level of expertise that author has in the subject.
Another example would be to filter all the recommendations you see on amazon. Wow, an English professor at Oxford recommends I read this book about the development of the symbolic languages, perhaps I should pay attention. -OR- Wow, this Policy Wonk who works for this special interest wants me to trust his opinions about the enviroment. Nope!
So to restate it, we need an Expert Network, on top of our Trust Network. And the trust networks are already in place. Just use any IM network, and apply a trust value to that connection. Now getting the Expert Network established, that's another problem. Perhaps tying a connection between each user and a DMOZ catagory. Or something along those lines.
Ted Tschopp
Re:You don't want Trust.... We want Experts (Score:2, Interesting)
You're might trust sources in only specific areas. The shot at this, IMHO, is tagging ( which I wrote about here [getoutfoxed.com])
Re:You don't want Trust.... We want Experts (Score:2)
In general: What you are doing is integrating
sucessesfull solutions. Focus on new solutions.
Specifically now, the problem with tagging is that you are drawing a relationship between you and a friend, and it's based on trust/affinity. You trust your friends views of Auto Repair and not on politics. But agreeing/affinity/trust is not the same thing as experience or level of ability. Just becuase you disagree with someone doesn't mean that they are not an expe
Re:You don't want Trust.... We want Experts (Score:2)
Re:You don't want Trust.... We want Experts (Score:2)
I agree with you, I don't think the problem is an easy problem. Take for example this idea. Osama Bin Ladin says person X is an expert in flying planes, or better yet, person X is an expert in Civil Engineering (his degree is in Engineering if I remeber correctly.) Now is person X an expert in those areas? Do you let him into your 100
doesn't work on macs (Score:2)
Social Engineering (Score:3, Funny)
The possibilities started flowing through my brain at a rapid pace. I envisioned a 'pretend to be a technician' wizard ('Do you know the name of the contractor which the target company uses for technical support?' 'Do technicians wear overalls to service calls?'), perhaps a research assistant, a disguise toolbar (a la Sims 2), maybe a letterhead forging wizard...
This story is probably one of the biggest letdowns in the entire term of my Slashdot patronage.
Should work against spam, too. (Score:1)
I called it Prioritaire.
http://killingmusic.com/blog/index.php?p=4 [killingmusic.com]
Trust is not binary. (Score:2)
Gain IS spyware (Score:2)
Re:I wish there was a Firefox extension for... (Score:5, Funny)
Re:I wish there was a Firefox extension for... (Score:3, Funny)
bo
+2 ... you'll go blind (Score:2)
Re:I wish there was a Firefox extension for... (Score:2, Informative)
http://greasemonkey.mozdev.org/ [mozdev.org]
Re:What the heck?!?! (Score:1)
Re:Only Windows... (Score:1)
Haven't you heard? Linus moved to the US a few years back - unless he moved back, it'll probably never be Finnish.
Re:Only Windows... (Score:2, Informative)
There was just some trouble getting pyana to link correctly in Python.