man standing

jQuery Demystified

August 31st, 2011 § 0

Guiding slides for the hour-long presentation on ‘What is jQuery’ that I’ve been giving to backend teams.

Thor 2005

July 9th, 2011 § 0

JSConf 2011

May 4th, 2011 § 0

wagonIt’s a fun thing to be at the fore­front of a lan­guage/tech­no­logy re­volu­tion. I’m al­ways a little amazed at how the JavaS­cript I began cod­ing ten years ago has turned in to one of the corner­stones of my ca­reer. MBAs and years on con­sensus build­ing are one thing, but it’s this lan­guage that truly brings my design work to life, from its pro­to­typ­ing stages to its full pro­duc­tion de­ploy­ment. And while I’ve forged deep­er and deep­er un­der its hood, JavaS­cript has im­plic­ated it­self fur­ther and fur­ther in mod­ern de­vel­op­ment prac­tices. JSConf 2011 brought most of the thought lead­ers re­spons­ible for this im­plic­a­tion to­geth­er for two days in Port­land, OR, in­duc­ted oth­ers in to the circle, and hummed throughout with young, fresh, en­ergy and ideas de­voted to the stand­ards lan­guage mak­ing today’s web hop. Notes on the sum­mit:

Get (Vertical) Rhythm

March 28th, 2011 § 0

The grid-based design be­hind much of today’s web was re­vealed to me a few years back as I was serving as in-house Tech­nic­al Lead for a ma­jor cor­por­ate re­design. My team worked with de­sign­ers from an ex­tern­al agency, and as their comps star­ted com­ing across the wire it was quickly clear that visu­al com­pon­ents were be­ing aligned to a four-column grid. Every­one liked the or­der and or­gan­iz­a­tion af­forded by the grid. When it came time to turn comps in­to code we went with the 960.gs css frame­work and to this day, design and de­vel­op­ment of new solu­tions takes place with­in the con­text of the grid.

Kootenays

March 6th, 2011 § 0

Matt in Koot' fluff

Venn and the Art of Overlap Maximization

February 9th, 2011 § 0

Venn diagram

A couple of years back I half-yawned my way through a UX­Week break­out ses­sion on di­git­al strategy led by Hen­ning Fisc­her from Ad­apt­ive Path. Root cause ana­lys­is fea­tured. The group also went through a couple of mock spend­ing ex­er­cises. Then I re­mem­ber a Venn Dia­gram that had me say­ing, “I have to re­mem­ber this,” be­fore I skipped out early for some San Fran Chinese.

McNamara, 12-31-2010

January 7th, 2011 § 1

5333729243_f516b3b244_b-web

Rear-wheel drive from Denver to Vail in surprise 12-30 storm.
5:45am 12-31 de­par­ture for 9:00am 0-de­gree As­pen trail­head.
REM, Dylan, Jimmy Vaughn, Son Volt, Tokyo Po­lice.
21 ski­ers, 4.5 hours, 2,000 feet…
16 beds, 2 days, 42 ski boots.
East Coast Rockies time zone.
Sparklers and down coats.
Eu­k­er, Pigs, Celebrity, Comet, Jenga, Dice, Hearts…
Laphroaig, Red Bull, Vodka, Egg­plant, Ba­con, Pine­apple Ex­press.
Skins, skis, snow.
Blisters, tape, and short on joe.
High­lands Bowl…
And a wrinkle in time.
Thanks y’all… and Happy 2011!

A Form

November 25th, 2010 § 0

form elementsAl­most all ap­plicatons we in­ter­act with on the web are form driv­en. User-sup­plied data in; sys­tem con­clu­sion out. To be sure, a dec­ade plus of ex­per­i­en­ce and in­nov­a­tion has seen UX im­prove by leaps and bounds. But we’re still build­ing forms, and to that end I al­ways en­joy re-vis­it­ing the ba­sic ques­tion of how to build them well. Here’s the es­sence of a re­cent stab.

CSRF Protection via X-Browser jQuery Ajax Hijack

October 28th, 2010 § 0

Cross-Site Re­quest For­ger­ies (CSRF) ex­ploit the trust that a site has with­in a user’s browser. By in­du­cing clicks on links to sites where users are sus­pec­ted to be au­then­tic­ated, per­pet­rat­ors can ex­ecute trans­ac­tions un­der the um­brella of a user’s cur­rent ses­sion. Re­quir­ing newly gen­er­ated para­met­er val­ues with each new POST or GET is one way for pro­gram­mers to pro­tect against CSRF. But while im­ple­ment­ing this re­quire­ment in page-driv­en ap­plic­a­tions is fairly straight-for­ward, ajaxi­fied apps make things more com­plic­ated. The fol­low­ing ap­proach lets us ab­stract the com­plic­a­tions out of our day-to-day so we can code both cur­rently and se­curely.

In Response to Ryan Carson

September 13th, 2010 § 2

trinityA yank in the UK who runs a four-days-per-week web agency, has up­wards of 26k Twit­ter fol­low­ers, and hangs (at least vir­tu­ally) with oth­er big names like Veen, Heil­man, and Snook, it seems Ry­an Car­son gets his work and is pas­sion­ate about bring­ing it to oth­ers. He also re­cently caused a stir with a tweet and ac­com­pa­ny­ing blog post in which he pos­ited that "UX Pro­fes­sion­al is a bull­shit job title" and that only two people – a web de­sign­er and a web de­veloper – were needed to cre­ate a web site or app. I think UX Pros have their place. The piece I honed in on, however, was the single de­veloper con­ten­tion. Web site? Sure. But are we reas­on­ably ex­pect­ing de­velopers to build mod­ern and per­form­ant web apps end to end right when new devices and web stand­ards are adding fur­ther (al­beit ex­cit­ing) com­plex­ity to the task? I don’t know…