Archive

Archive for January, 2016

Comics of the week #323

January 23rd, 2016 No comments

Every week we feature a set of comics created exclusively for WDD.

The content revolves around web design, blogging and funny situations that we encounter in our daily lives as designers.

These great cartoons are created by Jerry King, an award-winning cartoonist who’s one of the most published, prolific and versatile cartoonists in the world today.

So for a few moments, take a break from your daily routine, have a laugh and enjoy these funny cartoons.

Feel free to leave your comments and suggestions below as well as any related stories of your own…

Combo platter

A new wrinkle in creativity

Maybe a P.O. box

Can you relate to these situations? Please share your funny stories and comments below…

Easily Create Grids & Guides with Photoshop’s GuideGuide Extension – only $5!

Source

Categories: Designing, Others Tags:

WordPress Security: Turn Off the XML-RPC Interface

January 23rd, 2016 No comments
xml-rpc-filter

Since WordPress version 3.5, the XML-RPC interface is activated by default. That wouldn’t be too bad if WordPress weren’t the world’s most popular content management system. The interface does not only provide useful features but is also an important target for hackers. The invaders use the xmlrpc.php for their brute force attacks against WordPress more and more often, as attacking this interface is significantly more efficient and can be done with much less effort than other methods require.

This is Why the XML-RPC Interface Exists

Die xmlrpc.php

The interface is a useful tool for the management of content. It is used to allow you to manage the website and write articles using the desktop and smartphone apps. It also takes care of pingbacks. The Pingback API enables a type of “connection” between the blogs while, at the same time, it’s an interface used to manage WordPress using external programs. Not only the WordPress API, but also the Blogger API, the metaWeblog API, the Movable Type API, and the Pingback API are supported.

However, most users don’t need this interface, as they write their articles directly within WordPress. Also, the pingbacks of other blogs are not compulsively necessary.

Why the xmlrpc.php is a Security Risk

Password protected areas are an attractive target. The xmlrpc.php is one of them. As increasingly more bloggers protect the admin area of their websites, the attackers now focus on the management interface and let their brute force attacks target it. The issue is that attacks on the XML-RPC interface can be executed much more efficiently as it would be the case for attacks on the WordPress admin area.

With the fitting tool, one request to the interface can cover an incredible 500 passwords. The file allows attackers to find out combinations of usernames and passwords by function calls to wp.getUsersBlogs or wp.getComments. As soon as a hacker sends a username and a password, the xmlrpc.php will respond and inform whether the combination is correct or not.

This makes hacking a WordPress installation much more effective and promising. That turns the mostly unused interface into a severe security risk, and thus, it should be deactivated as soon as possible. Another, more general, advantage of turning it off is the increased website performance.

Deactivating the XML-RPC Interface

Since WordPress version 3.5, the XML-RPC interface is activated by default. Back then, it was very easy to deactivate it, while today, this is only possible via detours. But the detours are not too complicated. Overall, three steps are necessary to turn off the interface and to prevent it from being accessed.

Part One: Deactivating the Interface Using a Filter

The following code has to be pasted into the theme’s functions.php.

Clicking the Graphic Opens the GitHub Gist

The interface is now completely deactivated. However, it still appears in the website’s HTTP header.

Part 2: Deactivating the HTTP Header Entry

http-header

If it’s still displayed, it can still be accessed. While this might not be a security risk anymore, it can still have an impact on the website’s performance. That’s why the entry needs to be removed. This code snippet also needs to be put into the functions.php of your theme. Here, you can find the complete code with the filter from the first part included:

Clicking the Graphic Opens the GitHub Gist
Die XMLRPC-Schnittstelle abschalten und den HTTP-Header entfernen

Part 3: Blocking the xmlrpc.php Via .htaccess

As long as WordPress has access to the xmlrpc.php, hidden access to the file exist. This doesn’t help with the website’s performance, which is why the file should be blocked by the .htaccess file once more.

An Important Thing Before You Start: Please Create a Backup of the File Whenever You Alter .htaccess!

One mistake during the editing of the file can result in your website not working anymore. You should also keep in mind that, because of the dot in front of the file name, the .htaccess is treated as a system file on Mac OS X. This causes the file not to be displayed as soon as it is on the desktop. You can either use the terminal or a dashboard widget to find hidden files.

Paste the following entry into the .htaccess file in the WordPress Installation’s main index. The entry should be above of #Begin WordPress. The file can be opened and edited using a text editor like Notepad or TextEdit.

The Main Index of a WordPress Installation
hauptverzeichnis

Clicking the Graphic Opens the GitHub Gist
htaccess

Conclusion

These three little steps have made your WordPress significantly safer. An attack on the xmlrpc.php is now impossible, and even calls to this file are not answered anymore, which helps with the performance. However, you should be aware that WordPress doesn’t receive pingbacks anymore, and you also can’t manage your content in apps of any kind anymore. However, this should only be a small downer that doesn’t outweigh the security gain.

(dpe)

Categories: Others Tags:

Some Pretty Splendid SVG Links

January 23rd, 2016 No comments

I’m always running across wonderful SVG stuff. Demos, tutorials, tools, art… some of the best timeless resources end up in our SVG compendium. Some I think are best suited to posts like this!

Some of these are pretty new. Some of them are not, but I found them useful recently or are new-to-me.

SVG Calendar

CJ Gammon wrote about programmatically creating a calendar layout with SVG using Snap.svg.

See the Pen Calendar Generator by CJ Gammon (@cjgammon) on CodePen.

SVG Nest

BrooklyJS SVG Morphing Slides

SVG Summit Wrap Up Slides

http://slides.com/chriscoyier/svg-summit-2016

SVG newsletter


Some Pretty Splendid SVG Links is a post from CSS-Tricks

Categories: Designing, Others Tags:

Adobe Voice Now Comes To iPhone

January 22nd, 2016 No comments
adobe-voice

Adobe Voice is now available for all iOS devices, including iPhone and iPad, and you can download it from the App Store.

Adobe Voice is a popular tool that lets you create animated videos within minutes. You can select from a selection of images, add cinematic effects and soundtrack, and share your work easily with users.

The iPhone version of Adobe Voice, much like all other Adobe products, syncs online with your Adobe account, so that you can use your projects on any device, as long as you are logged in to your Adobe Voice account.

So far, Adobe Voice had been available for iPad, but not iPhone. With over 3.5 million downloads, the popularity of this app is no secret and as such, it is only natural that iPhone users too can now make full use of it.

You can find Adobe Voice in the App Store. You will need iOS version 8 at least, and it can be run on iPad, iPhone or even iPod Touch.

Alternatively, to learn more about it, visit the Adobe Voice homepage.

Have you given Adobe Voice a spin yet? Share your views in the comments below.

Read More at Adobe Voice Now Comes To iPhone

Categories: Designing, Others Tags:

Adobe Voice Now Comes To iPhone

January 22nd, 2016 No comments
adobe-voice

Adobe Voice is now available for all iOS devices, including iPhone and iPad, and you can download it from the App Store.

Adobe Voice is a popular tool that lets you create animated videos within minutes. You can select from a selection of images, add cinematic effects and soundtrack, and share your work easily with users.

The iPhone version of Adobe Voice, much like all other Adobe products, syncs online with your Adobe account, so that you can use your projects on any device, as long as you are logged in to your Adobe Voice account.

So far, Adobe Voice had been available for iPad, but not iPhone. With over 3.5 million downloads, the popularity of this app is no secret and as such, it is only natural that iPhone users too can now make full use of it.

You can find Adobe Voice in the App Store. You will need iOS version 8 at least, and it can be run on iPad, iPhone or even iPod Touch.

Alternatively, to learn more about it, visit the Adobe Voice homepage.

Have you given Adobe Voice a spin yet? Share your views in the comments below.

Read More at Adobe Voice Now Comes To iPhone

Categories: Designing, Others Tags:

Penguin Random House redesigns its UK sites

January 22nd, 2016 No comments

Penguin Random House UK has undergone the first major redesign of its online presence since two publishing giants merged in 2013. Aimed at reasserting its brand narratives in a marketplace dominated by online sellers such as Amazon, the new design focuses on developing a relationship with the company’s readership.

Designed by Brighton-based design consultancy Clearleft and developed by London-based Cognifide, PRH’s sites have been partitioned into a B2C consumer site, and a B2B corporate site.

Penguin Random House’s relaunched websites; for consumers (top) and for business (bottom).

Design Week reports that PRH carried out research via its ‘consumer insights panel’ with up to 3,000 customers, including 200 face-to-face conversations. This led them to conclude that the primary goal of readers visiting the site was “to get closer to the authors and characters they love.”

As a result of this insight, the new consumer site focuses heavily on quality content, with writer profiles of authors such as Nick Hornby, and F. Scott Fitzgerald; and interactive content, such as podcast interviews with the likes of Neil Gaiman, and Elvis Costello.

Both sites are, as you’d expect, fully responsive. And the mobile sizes in particular are an excellent example of how to organize a lot of content in a small viewport. However, whether due to mis-communication between different agencies, or due to a tight build time—reportedly just 12 weeks—there are a number of issues that seriously compromise the site’s UX.

One of the Penguin brand’s most distinct signifiers is the bright orange spine on its books, which has been deftly employed on the consumer site as a navigation bar — vertical on the left for large screens, horizontal at the top for smaller screens. It uses a hamburger menu, even on desktop, to give quick access to links; the saving grace (for those that hate hamburgers) being that the links that are obfuscated are largely surplus to requirements, the site’s primary navigation being inline links.

Unfortunately the navigation is not as intuitive as it could (or should) be. The Explore our world banner that greets you when you arrive on the site features a number of speech bubbles with labels such as “Reading lists”, “Meet our authors”, and “Q&As”, there is even a play video button; the lack of a conventional menu means that these labels look for all the world like links, but they are not.

Navigation continues to be an issue as you move deeper into the site. If for example you click the Find your next read link, the breadcrumb navigation (which transforms to a select input for mobile) reads Home > Articles > Find your next read, with the first two acting as links. However, if you navigate to a writer’s profile the breadcrumbs read Home > Authors, with only the former acting as a link. To return to the authors’ page and select a different writer’s profile, you must first return to the Home, and then navigate back to the Authors, and finally the author profile; or rely on the browser’s back button. It’s a small usability issue that really should have been picked up at the quality assurance stage, and suggests that the 12 week build may have been a shade too ambitious.

Breadcrumbs working correctly (left) and breadcrumbs only linking to the home page (right).

Further evidence of a rushed launch can be seen in the “Penguin LIVE” section of the home page. Clearly no one anticipated an event title as long as “Helen Dunmore: Emirates Airline Festival of Literature 2016” because while it works at desktop sizes, and it works on mobile, the line height breaks at some medium sizes, and at others the content in the box breaks altogether. It feels very much like the kind of error that crops up when there’s a mismatch between the anticipated content, and the actual content the client types into their shiny new CMS.

Content breaking down before a media query kicks in and resorts the screen for mobile-specific sizes.

Another issue is that the site’s responsive layout is not matched by much of the artwork. The banner advertising a podcast interview between Neil Gaiman and Richard E. Grant features a portrait of the author. On mobile it becomes a shot of slightly gothic wallpaper, but at certain tablet sizes it’s a shot of a disembodied ear. background-position is not an advanced concept these days — in fact top left is the default behaviour, so someone broke this on purpose; again, it seems that either the CMS has been built without the flexibility to handle multiple artwork alignments, or no one has trained the content producers how to use it.

Neil Gaiman (left), an ear (center), spooky gothic wallpaper (right).

For designers, one of the most interesting aspects of the redesign is being able to compare and contrast the B2C consumer site with the B2B corporate site. The latter has subtler branding, more subdued typography, and its tone is far more businesslike. It’s less flawed than the consumer site, principally because it’s less ambitious.

What’s most successful about the PRH relaunch sites, especially the consumer site, is that at no point do you feel like you are being sold anything. It’s structured to encourage exploration and discovery; it trusts that the books, from which the publisher makes its money, will sell themselves.

Sadly, the joy of immersion in some excellent content, is too often jarred by small oversights in the UI; oversights that realistically could be fixed in an afternoon.

Of course it’s impossible to draw conclusions about a site design process the history of which we’re not directly party to. We don’t know how cooperative (or otherwise) the client was, how high the budget was, exactly what was stipulated in the brief. If we recognize that Dribbble shots are particularly easy to produce, then conversely we have to acknowledge that real builds are tough. That said, this feels like a site that needed a fraction more attention to detail.

This is a site that book lovers can get lost in; just not necessarily in the way they would like.

Learn to Create an Entertaining, Interactive Quiz using AngularJS – only $19!

Source

Categories: Designing, Others Tags:

Rust 1.6 Has Been Released

January 22nd, 2016 No comments
rust-language

The latest release of Rust programming language is out, and developers can now upgrade to Rust 1.6

Rust is a popular systems programming language, and the latest version claims to focus on speed, stability and good performance.

Rust 1.6 is a stable release, and it comes with almost 1000 new patches. The standard library is now two-tiered: there is a small core library, libcore, and built on top of it is the standard full library, libstd. To help you understand the difference between the two, here is how the Rust blog defines it all:

libcore is completely platform agnostic, and requires only a handful of external symbols to be defined. Rust’s libstd builds on top of libcore, adding support for memory allocation, I/O, and concurrency. Applications using Rust in the embedded space, as well as those writing operating systems, often eschew libstd, using only libcore.

rust-2

Furthermore, Rust 1.6 also makes changes to many functions, and almost 30 methods are now fully stable.

You can follow Rust programming language on GitHub.

Are you a Rust developer? Share your views about the newest version in the comments below.

Read More at Rust 1.6 Has Been Released

Categories: Designing, Others Tags:

Rust 1.6 Has Been Released

January 22nd, 2016 No comments
rust-language

The latest release of Rust programming language is out, and developers can now upgrade to Rust 1.6

Rust is a popular systems programming language, and the latest version claims to focus on speed, stability and good performance.

Rust 1.6 is a stable release, and it comes with almost 1000 new patches. The standard library is now two-tiered: there is a small core library, libcore, and built on top of it is the standard full library, libstd. To help you understand the difference between the two, here is how the Rust blog defines it all:

libcore is completely platform agnostic, and requires only a handful of external symbols to be defined. Rust’s libstd builds on top of libcore, adding support for memory allocation, I/O, and concurrency. Applications using Rust in the embedded space, as well as those writing operating systems, often eschew libstd, using only libcore.

rust-2

Furthermore, Rust 1.6 also makes changes to many functions, and almost 30 methods are now fully stable.

You can follow Rust programming language on GitHub.

Are you a Rust developer? Share your views about the newest version in the comments below.

Read More at Rust 1.6 Has Been Released

Categories: Designing, Others Tags:

Annoying or Inspiring? Sound in Modern Webdesign (Best Practice)

January 22nd, 2016 No comments
Victoria Nine Website

You could think that background music in web design was totally out. We, the web designers and developers thought we had left behind this anachronistic way of attracting attention since the early stages of web design. But we were wrong. Sound, in the shape of effects or background music for particular areas of a website, is slowly gaining popularity again. Enough reason for us to grill this trend.

Sound Effects in Modern Webdesign – Simply Annoying?

Who doesn’t know this? You visit a website unsuspectingly, and suddenly it makes itself noticeable with a loud background noise. In many cases, there is also no button that allows you to quickly turn of off the sound. The reaction of most visitors is obvious: closing the browser tab with a quick click. The users simply forgo the visit to a website that might contain the exact information they’re searching for. All because the concept of the site didn’t fit.

Maybe the web developer has let the client influence him too much and wasn’t able to come out on top. Either way, the result remains the same. Potential visitors or even customers leave the website because they are annoyed by the background music. In many situtations, you can gain the impression that the music is not supposed to be supportive, but is rather implemented by technology loving nerds for the sole purpose of implementing it. Of course, no visitor will reward that. That brings up the question if it could work in a different way.

Multimedia Webdesign – the Challenge of the Future

The trend is definitely going towards multimedia web design. Everything started with the so-called hero images which completely take up the visible parts of the browser. However, this was too static and old school for many developers, as people have been working with full screen background images for a rather long time already. The only difference to hero images was that the entire screen was taken up, instead of only the visible area (Viewport).

Thus, the newest trend leans towards using background videos instead of hero images. Well-designed websites with background videos require significantly less text to convey their message. It’s only logical that there are not only services for free to use photos, but also for background videos.

Sound Effects and Background Music as Perfect Support for Multimedia Webdesign

Careful use of sound effects and even music could be a perfect support for modern web design. Working with supportive background videos would only be the first step. More and more developers will want to integrate multimedia elements into their websites.

The Integration of Sound Effects – a Logical Evolution

Interesting and carefully placed sound effects fit perfectly here. The website can inform the user that the interaction with the website worked by returning a sound effect. Clicking a call-to-action button or sending a form can be confirmed acoustically.

Of course, this acoustic support is nothing new. Computers’ operating systems and video games have been using these effects for a while now and with great success. How would it feel to empty the recycle bin on Windows and OS X without the famous, decent sound? How would it feel to play games like the famous Pac-Man without sound effects? Developers can learn a lot from the creators of operating systems and video games. It’s something to orientate oneself by and build on. The websites you design can only benefit from that.

Don’t Overdo. A Sound Effect is not an End in Itself

Especially websites that have to earn money, like online shops, for instance, can profit. But also business websites with call-to-action buttons would be a good place to integrate sound effects. With all the coolness of new features, you still have to make sure that you apply them carefully.

A Perfect Example of Interesting Sound Effects. Victoria Nine Webdesign and Development.

Sound in Webdesign Can Also be Very Inspiring

Using background music is easier said than done. Of course, implementing it can be done rather fast and simple. However, the music just won’t always fit. That’s why you should think about on which websites, or what type of websites, background music can be beneficial. There are many good examples where it would be entirely fitting. The website of New York City, for instance, could play Frank Sinatra’s “New York, New York”, even though this depends on personal taste and would require dealing with the licenses.

This way, you can find many websites where background music would be a beneficial addition.

Music Needs to Convey a Message and it Should be Easy to Turn Off

Background music should always convey a message or at least underline one. Then, it is less likely to be perceived as an annoyance, but rather as beneficial, as then, it serves a purpose. Apparently, not every visitor will recognize the purpose and above all, won’t want to hear it. In order to protect yourself from losing visitors, a volume control button that allows the user to mute the sounds should be placed in a prominent and clear area on the website.

The Visible, Well-Integrated Control Sound Element.
Die Kontrollelemente für den Ton der Website

Many visitors will prefer or, depending on the user’s location, might have to view it muted. However, supporting sound effects when clicking a button or something similar should remain even if muted, as they can contribute to a higher user friendliness.

The following websites are good examples of successful media integration. Enjoy exploring!

14 Examples of Brilliant Websites With Sound

1 – Google Ideas

Google-Ideas

2 – Amy Movie

Amy Movie

3 – John Iacoviello

MY-STATIC-SELF

4 – Fornasetti

Fornasetti

5 – Calvin Harris

Calvin Harris

6 – Hashima Island

Hashima-Island-A-Forgotten-World

7 – The Build Film

The Build Film

8 – Jakob de Boer

Jakob de Boer

9 – Janis Breslin

Janis Breslin

10 – Brightley Preflight Nerves

Preflight Nerves from We are Brightley

11 – Conoce Valencia de una forma diferente

Conoce Valencia

12 – Black Negative by Ralph Lauren

Black Negative by Ralph Lauren

13 – Jam with Chrome

JAM mit Chrome

14 – Dubfire

Dubfire Official Website

Categories: Others Tags:

Web Development Reading List #121: The Illusion Of Completeness, Client Hints, CSS Subgrids

January 22nd, 2016 No comments

Over the last two weeks, I had the chance to review about eighty job applications for a front-end position. The position requires strong JavaScript knowledge, but it also requires HTML and CSS. And here’s a thing: nearly no one could show off solid markup skills, not to talk about accessibility.

Pa11y, your new best friend when it comes to accessibility testing.

Although I only had the chance to review their personal websites or GitHub profiles and this might of course not be a full show-off of their knowledge, it assured my lately developed opinion on web developers. Many are not able to choose the right HTML elements, to explain why and how a clearfix works, or what ARIA roles are for, but they can use React and Angular. If you got some spare time over the next weeks, learn semantics and re-read the basics (or specs if you like the challenge) of HTML and CSS from time to time.

The post Web Development Reading List #121: The Illusion Of Completeness, Client Hints, CSS Subgrids appeared first on Smashing Magazine.

Categories: Others Tags: