Some tips for safe web browsing in a post-Heartbleed internet

Over the past week, we have noticed many people (friends, family members, etc…) asking for general advice on things they can do to protect themselves from the recently revealed Heartbleed vulnerability. While a lot of the major work needs to be done by owners of individual websites, there are some more general security steps that you can take to minimize your risk. Most are not that difficult to set up, so you might as well go ahead and do them, especially now that security is probably fresh in your brain due to all the Heartbleed coverage.

If you use Chrome, install the Chromebleed extension.

This browser extension will give you an alert when you are on a secure site that appears to be vulnerable to the Heartbleed bug. The good news, as many websites have patched their servers, you should see very few alerts. If you do see an alert. Get off that website and come back later when they have had a chance to patch their servers.

Change passwords on sites that have given the all-clear

It’s a good idea to change your passwords, but only for websites that have given the all-clear that they are no longer vulnerable to the bug. If a site hasn’t patched their servers and you update your personal information, it doesn’t do much good.

Use a password manager like LastPass

It’s really hard (damn near impossible) to remember a unique password for every website you visit. Most people use a single password for many websites. A password manager shifts that burden out of your brain and into a piece of software, allowing you to remain secure while only remembering a single password.

Use two-factor authentication wherever possible

Two-factor authentication minimizes the risk of a password breach by forcing you to provide an extra piece of information  when you log in. Usually this is a rotating security code that you read from an app, or an access code that will be sent to you via text message when you attempt to log in to a website. They are not very difficult to set up, and the security benefits are pretty great. If you haven’t started using two factor authentication on websites that offer it, you really should think about it.

Many sites support two factor authentication. Here are links to set up two factor authentication for Google accountsFacebook (look for “login approvals”), Twitter (look for the “login verification” options), Github, and Evernote. A much larger list of sites can be found here.

Review the applications you are connected to on major social media sites

It’s likely that over the years you have built up many sites that have used a connection to one of your social media accounts. It’s easy to forget about the random website that you connected with your Facebook account two years ago. You should review these applications and revoke any services that you are no longer using.

Here are links to see the connected applications for your Facebook, Twitter, and Google accounts.


I’m about to start working remotely, and it’s sort of freaking me out

In about two weeks, I’m moving from Seattle, WA to Nashville, TN. This is awesome for a number of reasons. Nashville has less depressing winters, some great friends and family live there, there’s an NHL team, and I’m really excited to reacquaint myself with the city I grew up in. (That said, I am going to really miss Seattle. This place is amazing). There’s just one part that makes me a little nervous: Working remotely. It freaks me out. It shouldn’t, but it does. Kind of a lot. Several people at RescueTime work remotely, and they make it work just fine, but I’m still uneasy.

You see, I’ve worked remotely once before, and I was terrible at it. I mean, I still got my work done and all, but I fell into just about every conceivable work-from-home trap in the process. It was several years ago, and I was living in Boston, working for a small web design company in Anchorage, AK. The four hour time difference meant my work day didn’t start until noon (which is awesome), but it meant I was working until about nine (opposite of awesome). I didn’t have to keep those hours, but between everyone else being on Alaska time and me not being a morning person at all, it was an easy pattern to fall into. Finishing work so late each day sort of wrecked my motivation to go out and do anything afterwords, so often times I would just keep working. That’s a really bad habit to fall into, and led to some pretty bad workaholic tendencies (also not so great for my social life :\). I was working out of my house, so the isolation started to get to me. For days at a time, I found myself with literally zero reasons to put on pants. In a way, that sounds luxurious, but it stops being fun real quick. After a while, I figured out ways to get a little bit more balanced, but it never really got to a spot where I could say I actually enjoyed it all that much.

So you can see why getting back into a remote work situation would be unsettling. But I’ve got some reasons to be optimistic this time around.

I’m not the only one in my company working remotely

The last time I worked remotely, I was the only one in the company not in the main office, and that caused a huge disconnect. I felt guilty being the odd man out, like I was burdening everyone with my weird schedule and the fact that I couldn’t be there for meetings. At RescueTime, more than half the team works remotely, so I don’t feel that same pressure. It’s already a part of our culture. And the folks I work with have been doing this for years, so I don’t have to figure it out all on my own.

Technology is way, way better now

Before, the main options I had for interacting with my coworkers were phone calls, email, and FTP. Now I have all sorts of options to stay connected. We sync files through Dropbox, share code with Git, and share all sorts of random knowledge tidbits with Evernote and Google Drive. On a more social level, Google Hangouts makes it so we can see each others faces (and screens) whenever we need to. And we use HipChat for group chat, which has been surprisingly effective at making everyone feel a little less spread out across the country. On the time management front, RescueTime helps me steer clear of some of the really bad habits I’m prone to by keeping me aware of how my days are shaping up.

There are other options for not working strictly from home

I know that working from home drives me crazy after a short while, so I have to get out and find somewhere else to work. This time around, I have two things working in my favor. Coffee shops are a great option now that I’ve developed a fancy coffee addiction (thanks a lot, Seattle!), and Nashville has an abundance of coworking spaces that I can go to give myself some structure (as well as some physical distance from home, so I can draw the line when I’m done for the day). I’ve spent a few days at CoLab Nashville, which has been great, and there are several others that look really good. I have a lot of options.

Nashville-to-Seattle is way different than Boston-to-Anchorage

It’s not as hard to go back. Flying to Alaska was always a huge, expensive undertaking, no way around it. (To be fair, a huge, expensive undertaking that also involved moose, bears, Northern Lights, and a bunch of other completely magical stuff.) Seattle is still far away, but I’m only crossing two time zones, not four. (No direct flights though, so that’s sort of a bummer.) I’m not really sure how necessary going back will end up being. Going back to the first point, the other people working remotely give me some new options for face to face time. There are two RescueTimers in Atlanta, and that’s only a few hours’ drive.

Remote work is actually a thing people think about now

In the time since I last worked remotely, the conversation has gotten a lot more interesting and sophisticated. In addition to all the tools I listed above, there’s just a better understanding of what the tradeoffs and pitfalls are. A lot of people have put effort into figuring this stuff out, so there’s a better roadmap. It also helps that I have a pretty clear idea of some things that simply don’t work for me (living and working in the same space, all the time, for example). This time around it feels like there is a lot less that I’ll have to sort out by pure trial and error. I’m about halfway through reading Remote, by 37signals, and it’s a really nice rollup of the dos, don’ts, and current thinking about remote work.

So I think it’s all going to work out ok. Still, got any tips?

While I’m optimistic, I still know myself and know the traps I’m apt to fall into. Does anyone have any good tips or strategies for remote work? If so, leave them in the comments, I’d love to hear about them!


All work and no play (and no rest) makes me super unproductive

Last month, I spent some time digging around with two big personal datasets of mine – my RescueTime logs and the information about my physical activity and sleep that I’ve collected with my FitBit. After comparing over 8.5 million steps and 5,000 hours of my sleep with around 7,000 hours of my RescueTime data, I noticed that my physical activity seems to have a generally positive effect on how I spend my time on the computer. Or it’s the other way around, I’m not quite sure. But there definitely seems to be a link between the two.

Daily step count vs. meaningful work

steps-vs-coding

The first thing I looked at was the number of steps I’ve taken each day for the past two years. I compared it to the amount of time I spent on the computer, and what activities I was doing while on the computer. On days when I take more steps, I tend to spend a greater percentage of my time on the computer writing code. For me, software development is an activity that I feel is pretty meaningful, and I’d rather spend more time on it than, say, meetings or email. I’d also like to be more active, so it’s really great to see that days where I walk around more don’t seem to hurt my work productivity.

It’s not really clear to me which one of those things influences the other. Could be that more physical activity makes it somehow easier for me to focus? Or it might be the other way around. A solid day’s work makes it more likely that I’ll be motivated to get out and get some exercise.  Or, there could be some unknown factor that’s influencing both of them. It’s still interesting, nonetheless.

Also interesting, it seems like I shouldn’t get too crazy with it. On days when I get more than 12,000 steps in a day, the percentage of software development time goes back down.

Sleep vs. Time on the computer

sleep-vs-computer-time

I also found that I seem to be more focused on days when I get more sleep. Focus is a hard thing to measure, and this isn’t a perfect metric, but I looked at the amount of time I spend writing code (something I’d like to be doing more of) vs. the amount of time I spend on email (something I generally try to minimize). When I get less than six hours of sleep, things are pretty much even. As I get more sleep, the percentage of time in email goes down, and the time spend on software development goes up.

What does this mean?

The really cool bit about these observations is they suggest that it’s not only possible to balance good amounts of physical activity with a productive workday – they may actually reinforce each other. Another RescueTime user saw similar effects on his sleep last year. He summarized the results in this guest post.

To get these two datasets together, I used the RescueTime API and John McLaughlin’s fantastic FitBit-to-Google Docs script that I found on the Quantified Self website.

Have you ever found an interesting link like this between your physical activity and some other metric? I’d love to hear about it.


Confession: I completely missed Information Overload Awareness Day

Oh, man. The irony of what I’m about to say…

This past Monday was Information Overload Awareness Day, and I totally missed it because an email about it went unopened in my inbox.

Information Overload Day 2013 - October 21, 2013

I usually do a pretty good job of keeping email under control, but it’s really gotten away from me over the past few weeks. It’s downright sad how out-of-sync I feel when I have upwards of 100 unread emails in my inbox. I feel more and more scattered by the mental weight of those un-dealt-with messages as they pile up. “Am I missing something important? Probably? But do I have time to deal with it right now? Probably not, especially if it’s something really important.”  Once that cycle starts spinning, it just gets worse and worse.

Even though it seems ever-so-slightly corny to holiday-ize the concept, I’m really glad there’s a serious conversation going on about information overload. It’s one of those things that (increasingly) affects our days so much, yet it feels like so many people simply write it off as an unfortunate fact of life.

The Internet Overload Research Group (IORG) brings together a really interesting mix of smart folks that are focused on the effects of information overload and possible solutions to the problems it can create. IORG members Joshua Lyman and Jared Goralnick hosted a really interesting webinar on Monday (which I did not watch live, due to the email being stuck in the aforementioned purgatory of my dumb ol’ inbox). The recording is really worth checking out if you find this stuff interesting.

The webinar features a panel discussion with Dimitri Leonov from SaneBox and Shawn Carolan from Handle, two companies which take different approaches for helping people cope with information overload. There is also a really interesting presentation by Professor Sheizaf Rafaeli of Unviersity of Haifa in Israel. He questions if multitasking is really as evil as some people make it out to be, and makes a really good case for the fact that, sometimes, it’s actually something to strive for (which runs fairly counter to a prevalent meme in the information overload world that multitasking is the root of all evil).

It’s a long video (just under an hour), but really interesting if you’re curious about the current thinking around information overload and multitasking.


The knowledge worker’s dilemma

When you get down to it, ideas and problem-solving are the products of people who do knowledge work of any kind. Sure, they may be wrapped up in a more tangible deliverable (shipping code, delivering designs, meeting a word count, closing a deal, etc..), but the real value being passed along is in the ideas and inspiration that drove those outcomes. And those ideas can be huge. A great idea can be transformative, a breakthrough with far reaching impacts.

But innovation is unpredictable, and that’s slightly problematic. Process work, as opposed to knowledge work, is linear, and incremental. If you put in X hours, you can reasonably expect Y units of results. If you put in twice that amount, the results double. Knowledge work, on the other hand, is non-linear, and that makes the expected output a much fuzzier proposition. For example, the steps of building a motorcycle can be an incredibly fine-tuned and optimized process, with highly predictable results. But designing that same motorcycle doesn’t follow a repeatable formulaic process. (if it did, breakthrough innovations would be easy.)

You may work on a problem for days and not make a dent in it. Or you may spot the solution right away. The level of time devoted to solving a problem doesn’t necessarily correspond to the quality of the output. That’s not to say that creativity doesn’t involve process. It’s essential. But the output can’t be as easily predicted, and it’s difficult to point to anything that works universally.

So figuring out how to “do” knowledge work can be tricky. Here are three common traps that people fall into (I’ve suffered from all of them at different times)

The “I’m an idea guy!” trap

Just because solutions can’t be mapped to linear time input, and that some people appear to be able to pull amazing solutions out of thin air, it’s easy to fall into the line of thinking that effective solutions don’t require long slogs of effort. While it’s absolutely true that some of the best ideas come away from my desk, that doesn’t mean I can just sit back and relax until something amazing pops into my head. Even though it’s fun to think otherwise, Don Draper is just a fictional guy on a TV show, and Steve Jobs actually worked really freakin’ hard.

The workaholic trap

On the flip side, it’s possible to work on something too much and think my way into a trap that’s really difficult to get out of. Part of this may stem from confusing the feeling of “being busy” with “being productive”. If I’ve been hammering away for a week on a project and feel like I’m not getting anywhere, what’s the likelihood that I’ll make a breakthrough by forcing it and pushing through the weekend?

The procrastination trap

Oftentimes, I’ll put off work that needs to get done until the last minute, forcing myself to have a tight window for working. Parkinson’s law states “Work expands so as to fill the time available for its completion.”, so this actually seems like an efficient approach, but I’m not sure it’s really the best approach (both for my sanity and the quality of my work). There’s some psychology about why this actually works, but it sure is stressful. I also find deadlines tricky because they tend to give way to a lot of rationalization about “arbitrary deadlines vs. actual deadlines”, “this was an unrealistic timeline given this or that new information”, etc…

It’s difficult to figure out the right balance, and I doubt there’s a universal answer. How do you figure out what works the best for you? How do you “think” about thinking?


Some days, you’re just not going to get it done (and that’s ok)

Yesterday afternoon, I found myself staring blankly at my screen, occasionally pawing at my keyboard. I just couldn’t stay focused, no matter how hard I tried. I was nursing a migraine from the night before, but I had a bunch of things that needed to get done, and it was almost the weekend, so I kept telling myself I could get some rest soon enough.

But then I looked at my RescueTime stats…

Despite the fact I was making a really sincere effort, I was a solid 30% less productive than usual. I was trying to power through my headache, and I was failing miserably. The hard numbers opened my eyes to what should have been totally obvious in retrospect. I was just torturing myself for no reason. I wasn’t doing anyone a favor by being there in the first place, and the proof was staring me in the face.

Deciding when I’ve reached my limit is hard, especially when I’m not firing on all cylinders. For one thing, I’m just not that great at judging myself in a less-than-optimal state. But then there’s also this weird, very fuzzy guilt that I feel. Other people are here working, and I’m not in that bad a shape, so I should just suck it up, right?  Unless I’m dreadfully ill, something just feels sort of lazy to me about saying “Sorry everyone, I just really don’t feel like being here today.” Being able to put some numbers around it really helped to make a more rational decision.

Having a work ethic is fantastic, don’t get me wrong. But I think it’s way too easy for many people to fall into the trap of putting themselves second because it feels like an indulgence to take some downtime. As we move into an era where we can look at ourselves from a more objective, data-based perspective, hopefully we’ll see that the self-sacrifice often just isn’t worth it.


How social feedback loops are changing our workplace (for better and for worse)

iStock_000006441880XSmall

Reputation data, culled from social feedback loops, is playing an increasingly large role in our professional lives

In Cory Doctorow’s science fiction novel Down and Out in the Magic Kingdom, people don’t work for money. Currency, as we know it, has become obsolete as technology has created such abundance that the old models of scarcity fall apart. Instead, paychecks are replaced with a new currency called Whuffie. Whuffie is a measure of reputation, or esteem. It rises and falls based on a person’s actions. Be a jerk to someone on the bus, and your Whuffie falls. Help a little old lady cross the street, and your Whuffie rises. Write an amazing story, and your Whuffie shoots up exponentially as it’s enjoyed and shared by thousands of people. And there’s the tricky part. It’s not enough to just to be good, you have to also be recognized for being good. In fact, one of the major plot points is when a series of unfortunate events and a fit of rage cause the main character to lose all his Whuffie, effectively making him an outcast from society.

Ok, so that world may sound far fetched, and a post-scarcity economy probably isn’t coming along anytime soon. But the concept of Whuffie is starting to turn into a very real thing in our professional lives, and it’s only going to get more prevalent in the future.

One of the top ‘future-of-work’ trends predicted in the book The 2020 Workplace is that workers will be hired and promoted based upon “reputation capital”. This will be a combination of both the depth and quantity of an employee’s social and professional networks, as well as hundreds of smaller data points indicating the worker’s influence in those circles. This already makes sense today in sales or marketing positions, but in the future it will extend to all roles within an organization.

Social feedback loops in the workplace today

iStock_000017132931XSmallTwitter and Facebook have given customers of all businesses a vehicle for voicing opinions on interactions with employees.  This amplified message can make it easier for a worker to be recognized for her hard work and good service (unfortunately, it can also have some negative consequences as well).  But many services are going a step further and  formally baking their worker’s reputation directly into their business models.

Micro-outsourcing marketplace TaskRabbit matches workers with people willing to pay them for odd jobs. Workers are rated and reviewed at the end of each task and those rankings in turn affect the likelihood that a worker will get more work in the future. Your ability to put together an IKEA bookshelf is important, but it’s equally important that other people recognize you for it. Similarly, the private car dispatcher Uber uses rankings by customers as it’s indicator of driver quality and will deprioritize or let go drivers with low overall scores (which has caused some controversy).

It’s not just customer service jobs

Reputation capital is becoming important in other areas, beyond customer service. At a previous company of mine, one of the things recruiters looked at when hiring software engineers was their level of participation on GitHub. While it was never a requirement, having a presence and being a member of the community was a considered a huge plus. Doing a quick scan of software engineering jobs on various job boards suggests that this preference is becoming more widespread.

Examples of reputation mechanisms that employers are increasingly looking at.

Examples of reputation mechanisms that employers are increasingly looking at.

Other niche communities where reputation is starting to matter more and more to employers include StackOverflow for software engineers, Kaggle for data scientists, and Dribbble or Behance for designers.

The rise of corporate social networks

For people already employed by a company, internal social network tools like Yammer and Work.com have features that allow colleagues to recognize an employee for a job well done. All those individual data points accumulate on the worker’s profile in the form of badges. This helps top performers stand out, and lets others in the organization easily identify experts on specific topics.

Instead of managerial performance reviews, software company Valve uses a multifaceted peer ranking system to get a better idea of each employees contribution to the company. Evaluations from multiple co-workers are aggregated in a way that forms a comprehensive picture of how the worker is performing, in a way that may not be evident by solely concentrating on traditional productivity output metrics.

Where should the line be drawn?

Part of the reason that reputation is becoming a big factor in our workplaces is that it’s now so easy to access all this new information about people, their accomplishments, and their impact on others. Data-points that would have been impossible to compile ten years ago are now cheap and abundant, either as a byproduct of existing networks, or due to technological advances that make giving feedback a frictionless experience.

But access to all this new data raises a lot of questions, and it’s clear that employers and employees are still struggling to find the proper balance.

Uber was recently on the receiving end of protests by some of their drivers. Among their complaints was the fact that drivers were being algorithmically dropped out of Uber’s labor pool due to low customer rankings. In a thought-provoking reaction, Om Malik refers to the potential for “data darwinism“, as some workers inevitably won’t be able to keep up with the ever-shifting emphasis around reputation, data and feedback.

Here in Washington State, a bill is in the works that will make it illegal for employers to request passwords for an employees personal social network sites. Other similar employee protections are already in place in many states. I personally can’t imagine ever asking an employee for that information in the first place, but the fact that bills are being passed prohibiting it is proof that the lines of what reputation information is acceptable in the workplace haven’t been clearly defined yet. I expect issues like this will receive much more attention in the future, and employers will have to ask themselves some hard questions about where their ethical boundaries are.

A reputation-based workplace could be really great, though

Despite the growing pains of social feedback loops in the workplace, there’s a lot of potential. Imagine a world where you never worry about your upcoming performance review, because you’ve had a constant stream of feedback from your peers letting you know exactly how you’re doing at your job. Imagine that feedback being multi-directional and transparent, so you are able to rank your manager on their performance and see how they rank compared to other managers at your company (or at other companies, for that matter).

What needs to happen to get us there?

Social feedback loops in the workplace are still in their early, prototypical stages. There are a lot of kinks to be worked out.

Both managers and workers need to become more data-literate (or, systems need to get more human-literate)

reputation-transistionAll this data is overwhelming, and most people don’t have a good sense for what decisions to make based on it. This will cause problems until decision makers become more skilled in integrating data into their processes. Used correctly, it can be an extremely powerful tool that empowers workers and scales really well across large organizations. Used incorrectly, it can be the source of a lot of really bad knee-jerk reactions. There will need to be experts to guide people through how to incorporate all these new streams into their thinking.

The flip side of this is that the systems aggregating and presenting this data will need to build in safeguards to encourage good data-based decision making. Social feedback loops can be terribly messy and lack context, so systems have a challenge of setting the proper expectations of how they should be used.

Raw data is generally really bad at giving context, and as such fails to paint a complete picture of the situation. Part of the solution may be even more data, presented in a coherent way that tells a more complete story.  Take Uber’s five star rating system, for example. How would those ratings changed based on some data about the passengers giving them? Should a 1 star rating mean less if it was clear it came from a person who consistently gave 1 star ratings? What if it was determined that a driver was mostly picking people up from an area that statistically gave lower rankings than usual? What if it was clear that a driver who received low ratings was new to the area? That may mean that instead of grounds for dismissal, it becomes an opportunity for some relatively inexpensive training that would remedy the situation.

Workers will need to start considering the role of reputation in their careers.

For sales people, journalists, and a handful of other professions, this is nothing new. But for everyone else, the idea that it’s not how good you are at your job, but rather how recognized you for being good at your job will be a bit of an adjustment.

What do you think?

Are social feedback loops part of the future of the workplace? And is that a good or bad thing? Do all these new data streams represent a better way for being recognized for doing a good job? Or is it just a bunch of irrelevant noise, a distraction from the work people are supposed to be doing in the first place?

Further Reading

Wired: Welcome to the new reputation economy

GigaOm: Uber, Data Darwinism and the future of work

FastCoExist: The Future of Work: Quantified Employees, Pop-Up Workplaces, And More Telepresence

TED: Rachel Botsman: The currency of the new economy is trust

Follow RescueTime on Twitter or Facebook for more thoughts exploring what’s in store for our rapidly-evolving workplaces.