• Will the Real Information Architect Please Stand Up? – SlideShare
  Fun preso explaining IA. Sounds similar to what we’re thinking of as functional design @ Jive.
  (categories: information architecture presentation ia )

• Shaq on Twitter
  No really.
  (categories: shaquillerashaunoneal twitter shaq )

• Values of n Blog: A fork in the road
  Stikkit and I Want Sandy go offline, Rael goes to twitter.
  (categories: twitter raeldornfest stikkit iwantsandy email )

• vonnegutSTYLE – How to Write With Style
  1. Find a subject you care about, 2. Do not ramble, though, 3. Keep it simple, 4. Have guts to cut, 5. Sound like yourself, 6. Say what you mean,
  (categories: writing style language vonnegut )

• Data Management, Facebook-style | 20bits
  Fascinating presentation by a former Facebook employee
  (categories: scaling scalability performance facebook hadoop cassandra )

• SVNSearch: Subversion
  Nice looking subversion repository browser, I really like the activity infographics: muted but informative.
  (categories: visualization svn subversion development )

• Who has the oil?
  Wicked infographic that shows countries based on how big their oil reserves are.
  (categories: via:jonudell maps oil infographic visualization infoviz )

• thoughtwax’s mihalycsikszentmihalyi Bookmarks on Delicious
  Forgive me for bookmarking a bookmark. Quote: "Sony’s first mission statement: To establish a place of work where engineers can feel the joy of technological innovation, be aware of their mission to society, and work to their heart’s content."
  (categories: business missionstatement sony innovation )

I’ve got to write all this out hoping that it’ll bring some clarity to what I’m seeing, here’s the stage:

• Tomcat 6.0.16 changed the way that cookies are sent from the server to the browser IF the cookie value contained any of the following characters: “()<>@,;:\\\”[]?={} \t”, the change being that if you attempt to set a cookie while inside an application deployed in Tomcat 6.0.16, the cookie value would get wrapped in double quotes and the cookie version would get set to 1. All fine and dandy.
• Except that as part of the fix, someone decided that the path part of the cookie should also get wrapped in double quotes and IE6 and IE7 don’t like that, in fact they’ll ignore cookies where the value of the path attribute is quoted, which led to this bug getting filed and fixed as part of the 6.0.17 release.

At least they thought it was fixed, here’s what I’m seeing: if you set a cookie that contains any of the above mentioned characters (let’s say that hypothetically you’re using the TokenBasedRememberMeServices class, itself part of Acegi, that sets a cookie whose value is the Base64 encoded representation of your username, an expiration time and another string, long story short the value ends up looking something like this: YWFyb246MTIyODI0ODEwMjk5NjoyOGM5ODc4YzExOGZiOGZjZTBkZDE0ZTA1ZWRhZTM3Nw==) then Tomcat will end up wrapping the cookie value in quotes, will set the Version to 1 and … well, did you know that when you set the version of a cookie to 1 that the cookie looks different? Here’s Tomcat setting the cookie pre-6.0.16:

Set-Cookie: yankeessuck=YWFyb246MTIyODI0ODEwMjk5NjoyOGM5ODc4YzExOGZiOGZjZTBkZDE0ZTA1ZWRhZTM3Nw==; Expires=Thu, 19-Nov-2009 02:29:29 GMT;

and here’s the same cookie being set in 6.0.18:

Set-Cookie: yankeessuck="YWFyb246MTIyODI0ODEwMjk5NjoyOGM5ODc4YzExOGZiOGZjZTBkZDE0ZTA1ZWRhZTM3Nw=="; Version=1; Max-Age=31536000;

See the three changes? The cookie value is quoted, the version attribute was added and … hey, look at that, the expires attribute turned into the max-age attribute. I guess that’s cool right? I mean all browsers should support RFC-2109 (which was published in 1997 and then superseded by RFC-2965), right? Well, it looks like (and this is where I’m hoping someone will prove me wrong) neither IE6, nor IE7, nor Safari honor the max-age attribute which means, drum roll please, you can’t set a persistent cookie on IE6, IE7 or Safari via Tomcat 6.0.18 that contains any of the above mentioned characters. Someone PLEASE prove me wrong.

If I’m right (and this Citrix KB doc seems to back up the IE6 / IE7 behavior I’m seeing), anyone that has deployed an Acegi-based Java web application that uses the default TokenBasedRememberMeServices on the latest version of Tomcat is 100% screwed. I’m not sure who to blame more: IE for being the lamest browser ever (although Safari doesn’t seem to like Max-Age either) or Tomcat for changing (in a pretty big way) the way they publish cookies in a point release.

For more on RFC-2109 and RFC-2965, check out this blog post.

• 32. Facebook for Spies – TIME’s Best Inventions of 2008 – TIME
  Huh, I wonder why they’d call it A-Space.
  (categories: clearspace spies! facebook timemagazine inventions )

• CS193P – iPhone Application Programming @ Stanford
  Continuing ed online class @ Stanford on the iPhone.
  (categories: iphone stanford tutorials programming osx mobile )