Missing Folders

As we have moved from our own mail server to Google Apps for Education, everyone’s Outlook Express configuration was automatically changed to access the new server. Some people have reported problems accessing their email with Outlook Express using the new system. This short screencast shows the most common problem we’ve seen so far, along with instructions for fixing it.

If that’s too hard to read, there’s also a larger version available.

One Device to Rule them All

I can’t say that I’m an early adopter when it comes to mobile devices. I was reluctant to carry a pager when it was first offered, because there were times when I felt that it was good to be out of reach. I was similarly reticent about a cell phone, especially because it was being offered by my employer. While it was great to have from a convenience perspective, I could also expect to receive plenty of calls “inviting” me to work on problems outside my normal work hours.

Photo credit: louisvolant on FlickrIn truth, the problem hasn’t really been that bad. Once we got the ground rules set (no, I am not your personal on-call tech support), there really haven’t been that many annoying calls after hours. And most of the calls I do get have been fairly important.

Still, I’ve continued to buck the trend of increased mobile capacity. Some would joke that my cell phone still had a rotary dial. It was capable of sending and receiving text messages, but I never used it for that. It had a camera, but there was no convenient way to get the pictures off. I used it for phone calls, and that was it.

So why, after all this time, was I excited about upgrading to a smart phone? We’ve finally reached the point of device convergence. I can now carry around this thing called an HTC Evo. It replaces my cell phone. But it also replaces my mp3 player. With its 8 GB SD card, it has just as much storage space as my iRiver Clix, and I don’t have to carry another device. Plus, when I’m ready, I can upgrade it to 32 GB. It also replaces my PDA. Until about a year ago, I was using a Palm LifeDrive, a huge, slow device that gave me calendar and email access along with a few games and memos. All of that is now in the Evo. While the camera in the Evo isn’t nearly as good as my DSLR, it can keep pace with the point-and-shoot 8-megapixel camera that used to live in my laptop bag, and it also now takes the place of the Flip camera I used to carry around to do short video clips.

It hasn’t replaced my navigation system, but that’s only because I have an in-dash nav with an 8″ touch screen built into the dashboard of my car. If I were using a Garmin or a TomTom for navigation, I’d probably be leaving it behind at this point. It also hasn’t quite replaced the laptop, though I do find myself reaching for the phone to quickly check email, Twitter, and Facebook instead of waiting for the computer to boot.

I don’t have an ebook reader. But I do have some ebook apps for my phone. I don’t know yet if this is going to be good enough. I do know that it’s easier to read a book on the phone than it was to read one on my Palm, or even on the eee PC. But the jury’s definitely still out, and I have a lot of concerns about ebooks that aren’t related to any particular device.

So what’s that? Five devices replaced by one, along with the functionality to partially replace two or three others. That’s pretty significant. I don’t have to carry a bag full of devices around with me anymore. I don’t have to have a half dozen different chargers and interface cables and accessories. It’s all in one device.

There are down-sides, of course. I always shy away from those printer/scanner/fax/copier/coffee maker devices, because they never seem to do any of their various functions very well. In this case, the phone itself is not quite as easy to use as the old flip phone. And the camera is a little harder to use than the old Canon point-and-shoot. But the old phone didn’t pull my contacts directly from my Google account. And the old camera couldn’t scan barcodes and look them up online. In all, it’s a pretty good trade-off. I’m very impressed.

There are two things, so far, that I don’t like about the HTC Evo. The first is that the battery life sucks. With heavy use, it won’t make it through the day. Once the newness wears off, and I’m not using it all the time, I don’t think this will be much of an issue. But just in case, we’ve ordered an extra four batteries and two chargers (total cost, $33). See, unlike some companies, HTC lets you replace the battery. This should provide ample battery life in those situations where we need to go multiple days or periods of intense use without a full charge.

The other thing I’m not happy with is the wifi antenna. At least, I think it’s the antenna. Sitting on my front porch, I couldn’t even SEE my wireless network with the phone. This is in a location where the laptops don’t have any trouble at all. At work, too, where we’re flooded with wifi, it could barely make a connection. I’m hoping this can be fixed (and will be fixed) with a software update. Many people have complained about this, and it is quite annoying. Still, though, with the great G3 coverage, I haven’t missed the wifi that much.

Android is incredible. I’m very impressed by this operating system designed for mobile devices, and I’m convinced that anything running Windows, even a mobile version of Windows, just isn’t going to cut it. I get a similar feeling with the iPhone UI, though I haven’t really used it enough to make informed comments about it. I do really like the openness of Android. I can attach the phone to my computer, and it shows up as a drive. Try that with your iPhone. The apps marketplace is also more open, with no one saying that developers have to use a particular development platform, and no overbearing company taking a cut of each app sale. While I’m optimistic about the WebOS stuff that HP just purchased Palm to get, I think Android devices have a real future in the mobile market.

It’s still new. I still don’t know what the long term effects of this device will be. But I’m excited about it, and optimistic about it. That’s going to take a while to wear off.

An Offer we Can’t Refuse

In 2005, we decided to bring email in-house. Prior to that, our email was handled by our ITC, a consortium of school districts that provides many technology services like student records, fiscal services, library automation, and Internet access to its member schools. But they were ill-equipped at the time to handle email. Accounts and settings were confusing and inconsistent, there was no usable webmail system, and with a POP-only service, mobility was a problem.

Photo Credit: deltaMike on FlickrWhen we were talking about setting up our own system, our network consultant commented, “you know, you’re going to need another person to manage this.” I knew. But I also knew I wasn’t going to get another person. We’d just have to make it work with the resources we had. It’s just email. It’s been around for 30 years. How hard could it be?

Five years later, we have a much better answer to that question. Email falls somewhere between oxygen and water on the basic needs hierarchy of a school. If there’s a problem with the mail server, it rarely takes more than a couple minutes before everyone knows it. If an email outage lasts longer than a few minutes, the incoming messages really start to pile up, and it can take days for the server to catch up.  Scanning for viruses and spam takes a lot of processing resources, and we had to move those functions onto a different server to keep them from overloading the mail server. With more than 90% of incoming messages being classified as spam, we’re sorting through a lot of chaff to get to the few kernels of wheat.

The biggest headache, though, comes from traffic spikes. A well-meaning staff member might send a 10 MB attachment to 500 users, for example. That’s 5 GB of data that has to be processed. Or, sometimes we’ll be flooded by hundreds of connections from spammers performing dictionary attacks against our domain. “No, you don’t have an account called ‘aaa@bbhcsd.org’? Well, then, how about ‘aaB@bbhcsd.org’?” Invariably, these types of things lead to service slowdowns and interruptions, annoyed users, and grumpy tech staff.

This spring, it became clear that something needs to be done. It’s doubtful that we’d be able to get through another year without significant upgrades to our email infrastructure. The growth in email volume alone, which has quadrupled to 20,000 messages a day since we switched to our own server, means we need to replace our mail server. And with that, we need faster, more robust solutions for anti-spam and anti-virus scanning, email archiving, and backups. To add to all of this, we really need to start providing email accounts to students, so they can collaborate with one another using tools like Google Docs. To provide email accounts to all 5-12th graders, we’d be increasing the number of accounts we’re managing five-fold. I don’t have the resources — either hardware or human — to do that.

Wait.

Google.

What was that about Google?

Google Apps and the Google Apps logo are registered trademarks of Google, Inc.Google will handle our email for us. For free. Through the Google Apps for Education program, they’ll give us as many accounts as we want. We can have 7 gb of email storage space per user. Since I’m looking at about 3500 users, that’s more than 25 TB of data storage, just for email. Plus, we get Google’s spam and virus filtering technologies (which are among the best I’ve seen). Our webmail client (which is currently the functional but none-too-sexy Squirrelmail) becomes Gmail. If we want to (and we do), we can even enable IMAP access, so our staff members can continue to use the same email program they’ve used all along. So from their perspective, very little has to change. And with the API tools, creating and managing accounts can all be tied into our existing user management tools.

If only they did email archiving.

Our first thought was to continue to archive email ourselves. After all, how hard can it be? Basically, we’re talking about saving a copy of every email message. The archive goes on its own server, separated from the rest of the network, over in a dark corner of the data center. It quietly saves all of the data, just waiting for us to need it.

But that means that all email must flow through the archive. So the workflow would look something like this:

  1. A staff member composes an email and sends it to another staff member.
  2. The message goes to Google, because that’s where the sender’s account is.
  3. The message gets forwarded to the archive server, so it can be logged as sent mail.
  4. The message is sent out by our local server.
  5. The message goes to Google, because that’s where the recipient’s account is.
  6. A copy of the message gets forwarded to the archive server, so it can be logged as received mail.
  7. The message is delivered to the recipient’s inbox.
  8. The recipient’s computer connects to Google to retrieve the message from the inbox.

So that message goes across our Internet connection five times. Plus, we have to maintain our own server to archive it. And, we have to have our own server to send out email, effectively funneling all of our mail through our own mail server. Additionally, we have to have backups of all of this. And there’s no guarantee that all incoming email would be archived. In the event of a problem with our server, the message would still get delivered to the recipient’s Google account, even though it hasn’t been archived yet.

Enter Postini. Google will do the archiving for us. This service isn’t free, but considering the benefits, it’s worth the money. The email’s not bouncing around from server to server. It’s being archived off-site. They’ll keep each message for up to ten years (we only require five). And I don’t have to have any mail servers. Sign me up.

There have been few technology “no-brainer” decisions. I remember finding out in 1996 that we could get Internet access from our cable company at 5 mbps for $5 less per month than a dialup account and dedicated phone line. That was a no-brainer. I also remember finding out in 2005 that we could transfer our home phone number to a cell phone for $5 per month instead of the $20 we were paying, and get free long distance. That was a no-brainer.

This is another one of those situations.

What’s the Password?

I can’t remember when I started using passwords. In college, I had email and mainframe accounts that had passwords, but I don’t think they were new to me then. I certainly had a pin for my ATM card by that point. And I’m pretty sure I used voicemail passwords in high school. And before that, even as far back as fifth grade, we had locker combinations, which are very much like passwords.

Photo Credit: Formal Fallacy @ Dublin on FlickrThese days, of course, I have lots of passwords. I have different passwords for each of my seven email accounts. Then, there are all the online services, online banking and credit card sites, blogs, social networking tools, and a host of other places where I need to prove my identity by typing in a password. They’ve become so commonplace that we take them for granted. Even our elementary students have passwords, and most of them don’t have any trouble remembering them. They’re a very convenient way to prove who we are.

But the convenience comes with a price. If someone has my password, he or she can become me online. If my computer is set to remember my email password and someone else uses that computer, they can read my email and send email from me. If a student standing over my shoulder picks up my password by watching me type it in, he can then log in to my network account and access my files. If my Paypal password is easy to guess, anyone can access that account and make purchases on my behalf.

When talking about passwords, I’m reminded of the adage that passwords are like underwear:

  • change them often
  • don’t share them with friends
  • the longer, the better
  • don’t leave them out where people can see them.

Last week, we had an incident where an impostor accessed several of our staff members’ accounts. They were able to read email, delete files, and generally wreak havoc with these accounts. It’s still unclear whether the passwords were compromised by a student seeing them typed, or by someone who happened to guess well. But there was a common thread: all of the passwords involved were fairly weak. One was a four digit number. Another was the staff member’s last name. I sent an email to all staff strongly encouraging them to change their passwords immediately. I also referenced a Lifehacker article by John Pozadzides on weak passwords. It was amazing how many of our staff members’ passwords could be compromised in a matter of minutes.

Many of them took my message to heart, and have changed their passwords to something a bit more secure. If you haven’t changed yours yet, here are a few tips for improving your password:

  • Don’t use your name, or the names of your spouse, children, or pets. Those are just too easy to guess.
  • Stay away from words that can be found in the dictionary. It’s pretty easy to do a “dictionary attack,” where hackers try all of the words and word combinations to try to get your password.
  • Mix upper- and lower-case. For the average password, changing some letters to upper-case will make the password 200 times harder to crack.
  • Use all of the characters. There are 102 keys on your keyboard, but only 26 letters. It’s okay to use punctuation, numbers, and even spaces in passwords. Throwing in some of these characters will make your password another 100 times harder to guess.
  • Use different passwords for different things. Our student records system uses different usernames and passwords from our network and email systems. In this case, that was very good. Whoever got access to these teachers’ accounts couldn’t access grades or attendance information.
  • Protect your email. Your email password is probably the most important one. Why? What happens when you go to an online site and you click the “I forgot my password” link? They email you a link that you can click on to reset your password. If someone has your email password, they can reset your passwords for many of the online services you use. So your Facebook / Twitter / Youtube / Flickr accounts might be in jeopardy if your email password is compromised.
  • Change your passwords. Certainly not every day. Probably not even every month. But once in a while, change your password. This is especially true if you school IT person just strongly suggested that you do so (hint, hint).

Despite their shortcomings, passwords are still the most convenient way of proving our identity. We just need to take a little care in making sure we get as much security out of them as we can.

It’s About the Social

A few years ago, our superintendent scheduled an administrative meeting to discuss potential changes to our health care package. The fifteen-minute meeting was scheduled for late afternoon. There wasn’t a lot of doubt before the meeting that there would be very little “discussion.” The “potential” changes meant that the superintendent was recommending to the board of education that administrators pay a greater portion of their health insurance costs. It was “potential” because the board could have said, “oh, no, that’s all right. We’ll continue to pay those costs for our administrators because we value the team and we think they’re worth every penny.” That didn’t happen. The superintendent wasn’t looking for our input. He didn’t really want to hear about our opinions, or to debate the relative merits of taking or not taking this action. This was a meeting to let us know that this was going to happen. And that’s exactly how it went. Afterward, we weren’t very happy about the effective pay cut, but no one complained about not being able to voice our opinions.

More recently, I’ve been involved with two or three organizations that have felt the need to “take advantage of social networking.” We need to leverage the power of social networking tools to build a community of support around our cause. We can get people to care about the important work we’re doing by posting updates on Twitter, starting a Facebook group, uploading YouTube videos and generally having an online-everywhere presence.

I’m sure that’s what Justin Hamilton and Sandra Abrevaya had in mind when they set up the “official twitter account for Department of Education Press Secretaries.” It was also undoubtedly the goal when the US Department of Education starting using Twitter to report an hour-by-hour account of what Secretary Duncan is doing with the unfortunately named @usedgov account. But despite having more than 15,000 followers and 450 updates since setting up the account last year, the DOE has only managed to find two people worth following. Those are the Center for Faith-Based and Neighborhood Partnerships at the Department of Education and Federal Ed Resources, also at the Department of Education. That’s right. They only follow themselves.

When they talk about leveraging social networks, what they really mean is that they no longer have to issue press releases to the news agencies, and hope that the newspapers and nightly news reports contain favorable stories based on those press releases. Now, they can issue the press releases directly to the public. They can control the spin. They can lead the “conversation” in a way that shows them in the best possible light.

But they forgot that, in the online world, “conversation” is not in quotes. So when Bud Hunt, a very well-respected teacher, blogger, podcaster, and member of the online educational community, used the social network that the Department of Education is embracing to ask a simple question, they didn’t know what to do. Here’s what he wanted to know:

I continue to ask of everyone I can speak with in Washington and in Congressional and government offices alike: What is the rationale for eliminating funding for the National Writing Project? It is a simple question, or it seems to be. But I can’t get anyone to answer it beyond broad strokes of “local and state redundancy” and “no significant impact” on students. Since I don’t understand how a national network can exist at the local or state level, and I have evidence to the contrary on impact on students and teachers, I’ll keep asking. It just doesn’t make sense.

In the old world, when you had a question like this, you would write a letter to the Department of Education and ask. Or, maybe you would call them. Leave a message. Someone will get back to you. If no one responds, you might get upset. Maybe you write a letter to the editor of your local newspaper. Maybe you write to your congressperson. But there’s no real recourse.

But in Bud’s case, he used the social network to ask the question. That means that the question was asked in a public forum. A lot of people pay attention to what Bud says. So when he asked, they perked up. “Hey, yeah, what about that?” They anxiously waited for the response, and saw… nothing. So they asked Bud. “Hey, Bud, what did the DOE have to say about your question? That was a good question.” So when the DOE didn’t respond, it hurt them a lot more than just not calling him back in the old days.

Other people started jumping on the bandwagon. Zac Chase posted about the NWP. So did Chris Lehmann. Karl Fisch reposted Zac’s post. Suddenly the community was alive. And everyone was looking at the DOE Press Secretary’s office, waiting for a response. But the response still hasn’t come.

I think they just didn’t get the fact that when you start a conversation, you have to listen more than you talk. If you’re really going to leverage social media tools, you have to participate in the conversation.

The best explanation of this that I’ve seen comes from Marta Kagan’s What is Social Media? She does a great job of explaining all of this, and I highly recommend viewing it (or the somewhat less appropriate original version) if you’re thinking of trying to leverage social media for your cause/organization/government agency.