Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference Committees

2014-08-13 Thread Tom Johnson
Feb. 9-12. See you in Portland!

http://code4lib.org/conference/2015
On Aug 12, 2014 6:52 PM, Karen Coyle li...@kcoyle.net wrote:

 Hi, Tom. I guess we've got OSU as the place, but what are the dates? - kc

 On 8/12/14, 3:35 PM, Tom Johnson wrote:

 The 2015 Code4Lib annual conference may seem like a long way away, but
 it's
 already time for various volunteer committees to start work on the
 planning. As you know, the conference happens each year thanks to the work
 of the community at large; please take the time to sign up for confrence
 committees here:

 *http://wiki.code4lib.org/index.php/2015_Conference_Committees
 http://wiki.code4lib.org/index.php/2015_Conference_Committees*

 *We especially need people for the Keynote Speakers and Sponsorship
 committees.* These groups need to begin work ASAP and are short on
 membership.

 Thanks to everyone who has already signed up to help!

 --
 Tom Johnson
 on behalf of the C4L15 PDX Team


 --
 Karen Coyle
 kco...@kcoyle.net http://kcoyle.net
 m: +1-510-435-8234
 skype: kcoylenet/+1-510-984-3600



[CODE4LIB] Automated searching of Copac/Worldcat

2014-08-13 Thread Nicholas Brown
Apologies for cross posting

Dear collective wisdom,

I'm interested in using automation software such as Macro Express or iMacros to 
feed a list of ISBNs from a spreadsheet into Copac or Worldcat and output a 
list of those that return no matches in the results screen. The idea would be 
to create a tool that can quickly, although rather roughly, identify rare items 
in a collection (though obviously this would be limited to items with ISBNs or 
other unique identifiers). I can write a macro which will sequentially search 
either catalogue for a list of ISBNs but am struggling with how to have the 
macro identify items with no matches (I have a vague idea about searching the 
results screen for the text Sorry, there are no search results) and to 
compile them back into a spreadsheet.

I'd be keen to hear if anyone has attempted something similar, general advice, 
any potential pitfalls in the method outlined above or suggestions for a better 
way to achieve the same results. If something useful comes of it I'd be happy 
to share the results. 

Many thanks for your help,
Nick 

Nicholas Brown
Library and Information Manager
nbr...@iniva.org
+44 (0)20 7749  1125
www.iniva.org


Re: [CODE4LIB] Automated searching of Copac/Worldcat

2014-08-13 Thread Pikas, Christina K.
I think you'd want to use xISBN, too, right?

-Original Message-
From: Code for Libraries [mailto:CODE4LIB@listserv.nd.edu] On Behalf Of 
Nicholas Brown
Sent: Wednesday, August 13, 2014 6:21 AM
To: CODE4LIB@listserv.nd.edu
Subject: [CODE4LIB] Automated searching of Copac/Worldcat

Apologies for cross posting

Dear collective wisdom,

I'm interested in using automation software such as Macro Express or iMacros to 
feed a list of ISBNs from a spreadsheet into Copac or Worldcat and output a 
list of those that return no matches in the results screen. The idea would be 
to create a tool that can quickly, although rather roughly, identify rare items 
in a collection (though obviously this would be limited to items with ISBNs or 
other unique identifiers). I can write a macro which will sequentially search 
either catalogue for a list of ISBNs but am struggling with how to have the 
macro identify items with no matches (I have a vague idea about searching the 
results screen for the text Sorry, there are no search results) and to 
compile them back into a spreadsheet.

I'd be keen to hear if anyone has attempted something similar, general advice, 
any potential pitfalls in the method outlined above or suggestions for a better 
way to achieve the same results. If something useful comes of it I'd be happy 
to share the results. 

Many thanks for your help,
Nick 

Nicholas Brown
Library and Information Manager
nbr...@iniva.org
+44 (0)20 7749  1125
www.iniva.org


Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference Committees

2014-08-13 Thread sara amato
Quick question for those planning to attend Code4Lib 2015 -  Would the 
availability of childcare make a difference in your being able to attend?  If 
so I'll propose and lead a childcare committee (seeing as I'm almost local to 
it.) 


On Aug 12, 2014, at 3:35 PM, Tom Johnson wrote:

 The 2015 Code4Lib annual conference may seem like a long way away, but it's
 already time for various volunteer committees to start work on the
 planning. As you know, the conference happens each year thanks to the work
 of the community at large; please take the time to sign up for confrence
 committees here:
 
 *http://wiki.code4lib.org/index.php/2015_Conference_Committees
 http://wiki.code4lib.org/index.php/2015_Conference_Committees*
 
 *We especially need people for the Keynote Speakers and Sponsorship
 committees.* These groups need to begin work ASAP and are short on
 membership.
 
 Thanks to everyone who has already signed up to help!
 
 --
 Tom Johnson
 on behalf of the C4L15 PDX Team


Re: [CODE4LIB] Windows 7 Logon Screen Screensaver

2014-08-13 Thread Riesner, Giles W.
FWIW, our IT folks have customized the logon screen on our Public PCs so that 
while it still says to press Ctrl-Alt-Delete to login, above and below that is 
customized info: a welcome to the College and info on where to get guest passes 
if you're not part of the College community (Faculty  Staff, Retirees, 
Students, Alumni), etc. but it is a static screen. They do have an image or two 
incorporated into it as well.

If that's not what you're after, the ideas already presented about screensavers 
sound on the money to me.

Regards,

Giles W. Riesner, Jr., Lead Library Technician, Library Technology
Community College of Baltimore County
800 S. Rolling Road  Baltimore, MD 21228
gries...@ccbcmd.edu   1-443-840-2736



From: Code for Libraries [CODE4LIB@LISTSERV.ND.EDU] on behalf of Faust, Bradley 
[bfa...@bsu.edu]
Sent: Monday, August 11, 2014 5:19 PM
To: CODE4LIB@LISTSERV.ND.EDU
Subject: [CODE4LIB] Windows 7 Logon Screen Screensaver

This is a long shot, I believe, but members of this group have answers.

On our Windows XP Pro student use computers, we have a custom screensaver app 
that runs at the logon screen and displays graphics highlighting library 
services and programs.   As we migrate to Windows 7, new security introduced by 
Microsoft limits access to custom applications when the logon screen is 
displayed, and we haven't figured out how to push the screensaver to the 
machine.   For obvious reasons we need to move to Windows 7.

Does anyone have a solution that pushes a custom screensaver to the Windows 7 
logon screen?   Thanks.

Brad Faust
Ball State University Libraries\


Re: [CODE4LIB] Automated searching of Copac/Worldcat

2014-08-13 Thread Owen Stephens
The worksheets I circulated earlier in the week include examples of how to take 
a list of ISBNs from a spreadsheet/csv file and search on Worldcat (see the 
'Automated Love Examples' docs in http://bit.ly/automatedlovefolder)
What these examples don't do is include how to check the outcome of the search 
automatically are record that.

I think it would be relatively easy to add to the iMacros example to extract a 
hit count / no hits message and write this to a file using the iMacros SAVEAS 
command but I haven't tried this. For a 'no results' option you'd want to look 
for the presence/extract the contents of a div with id=div-results-none
For a results count you'd want to to look for the contents of a table within 
the div with class=resultsinfo

Alternatively you could look at the Selenium IDE extension for Firefox which is 
more complex but allows more sophisticated approach to checking and writing out 
information about text present/absent in web pages retrieved.

Hope that is of some help

Owen



Owen Stephens
Owen Stephens Consulting
Web: http://www.ostephens.com
Email: o...@ostephens.com
Telephone: 0121 288 6936

On 13 Aug 2014, at 11:20, Nicholas Brown nbr...@iniva.org wrote:

 Apologies for cross posting
 
 Dear collective wisdom,
 
 I'm interested in using automation software such as Macro Express or iMacros 
 to feed a list of ISBNs from a spreadsheet into Copac or Worldcat and output 
 a list of those that return no matches in the results screen. The idea would 
 be to create a tool that can quickly, although rather roughly, identify rare 
 items in a collection (though obviously this would be limited to items with 
 ISBNs or other unique identifiers). I can write a macro which will 
 sequentially search either catalogue for a list of ISBNs but am struggling 
 with how to have the macro identify items with no matches (I have a vague 
 idea about searching the results screen for the text Sorry, there are no 
 search results) and to compile them back into a spreadsheet.
 
 I'd be keen to hear if anyone has attempted something similar, general 
 advice, any potential pitfalls in the method outlined above or suggestions 
 for a better way to achieve the same results. If something useful comes of it 
 I'd be happy to share the results. 
 
 Many thanks for your help,
 Nick 
 
 Nicholas Brown
 Library and Information Manager
 nbr...@iniva.org
 +44 (0)20 7749  1125
 www.iniva.org


[CODE4LIB] Puppet Conference Free Tickets

2014-08-13 Thread Francis Kayiwa

Hey all,

Puppet Conference is offering 18 Free Tickets to underrepresented people 
in technology. Deadline for application is September 1st.


http://puppetlabs.com/blog/free-tickets-puppetconf-2014-minorities-tech

Please pass this to those you feel deserve it.

Cheers,
./fxk


[CODE4LIB] Archival File Storage

2014-08-13 Thread Will Martin
As with most libraries, we're accumulating an increasing number of 
digital holdings.  So far, our approach to storing these files consists 
of a haphazard cocktail of:


- A ContentDM site whose contents haven't been updated in three years
- live network storage in the form of shared drives
- a Drobo
- CDs and DVDs
- hard drives stored in static-proof bags, and
- ancient floppy disks whose contents remain a mystery that would surely 
scour the last vestiges of sanity from our minds if we had a 5 1/4 
drive to read them with.


In short it's a mess that has evolved organically over a long period of 
time.  I'm not entirely sure what to do about it, especially considering 
our budget for improving the situation is ... uh, zero.


At the very least, I'd like a better sense for what is considered a good 
approach to storing archival files.  Can anyone recommend any relevant 
best practices or standards documents?  Or just share what you use.


I'm familiar with the OAIS model for digital archiving, and it seems 
well thought-out, but highly abstract.  A more practical nuts-and-bolts 
guide would be helpful.


Thanks.

Will Martin

Web Services Librarian
University of North Dakota


Re: [CODE4LIB] Archival File Storage

2014-08-13 Thread Al Matthews
This is a live topic. Suggestions

http://e-records.chrisprom.com/recommendations/

http://www.metaarchive.org/GDDP


For our CONTENTdm to MetaArchive workflow we use Bagit, and we archive the
masters, not the site.

http://libraryofcongress.github.io/bagit-python/


Al

--
Al Matthews

Software Developer, Digital Services Unit
Atlanta University Center, Robert W. Woodruff Library
email: amatth...@auctr.edu; office: 1 404 978 2057





On 8/13/14, 12:40 PM, Will Martin w...@will-martin.net wrote:

As with most libraries, we're accumulating an increasing number of
digital holdings.  So far, our approach to storing these files consists
of a haphazard cocktail of:

- A ContentDM site whose contents haven't been updated in three years
- live network storage in the form of shared drives
- a Drobo
- CDs and DVDs
- hard drives stored in static-proof bags, and
- ancient floppy disks whose contents remain a mystery that would surely
scour the last vestiges of sanity from our minds if we had a 5 1/4
drive to read them with.

In short it's a mess that has evolved organically over a long period of
time.  I'm not entirely sure what to do about it, especially considering
our budget for improving the situation is ... uh, zero.

At the very least, I'd like a better sense for what is considered a good
approach to storing archival files.  Can anyone recommend any relevant
best practices or standards documents?  Or just share what you use.

I'm familiar with the OAIS model for digital archiving, and it seems
well thought-out, but highly abstract.  A more practical nuts-and-bolts
guide would be helpful.

Thanks.

Will Martin

Web Services Librarian
University of North Dakota


**
The contents of this email and any attachments are confidential.
They are intended for the named recipient(s) only.
If you have received this email in error please notify the system
manager or  the 
sender immediately and do not disclose the contents to anyone or
make copies.

** IronMail scanned this email for viruses, vandals and malicious
content. **
**


Re: [CODE4LIB] Archival File Storage

2014-08-13 Thread Roy Tennant
Perhaps these might be helpful?

You've Got to Walk Before You Can Run: First Steps for Managing
Born-Digital Content Received on Physical Media
http://www.oclc.org/content/dam/research/publications/library/2012/2012-06.pdf

Walk This Way: Detailed Steps for Transferring Born-Digital Content from
Media You Can Read In-house
http://oclc.org/content/dam/research/publications/library/2013/2013-02.pdf

Roy


On Wed, Aug 13, 2014 at 9:40 AM, Will Martin w...@will-martin.net wrote:

 As with most libraries, we're accumulating an increasing number of digital
 holdings.  So far, our approach to storing these files consists of a
 haphazard cocktail of:

 - A ContentDM site whose contents haven't been updated in three years
 - live network storage in the form of shared drives
 - a Drobo
 - CDs and DVDs
 - hard drives stored in static-proof bags, and
 - ancient floppy disks whose contents remain a mystery that would surely
 scour the last vestiges of sanity from our minds if we had a 5 1/4 drive
 to read them with.

 In short it's a mess that has evolved organically over a long period of
 time.  I'm not entirely sure what to do about it, especially considering
 our budget for improving the situation is ... uh, zero.

 At the very least, I'd like a better sense for what is considered a good
 approach to storing archival files.  Can anyone recommend any relevant best
 practices or standards documents?  Or just share what you use.

 I'm familiar with the OAIS model for digital archiving, and it seems well
 thought-out, but highly abstract.  A more practical nuts-and-bolts guide
 would be helpful.

 Thanks.

 Will Martin

 Web Services Librarian
 University of North Dakota



Re: [CODE4LIB] Archival File Storage

2014-08-13 Thread Robin Dean
Hi Will,

I recommend the NDSA's Levels of Digital Preservation for practical, 
incremental steps you can take to improve how you store and handle digital data.
http://digitalpreservation.gov/ndsa/activities/levels.html

First step: get the content off the medium and into your storage system (on 
networked disk that is backed up.)

Another important early step is to think about what you're saving, why you're 
saving it, and what value it has for people inside and outside your 
institution. Being able to talk about the scope and value of your digital files 
is a critical step in making a case for a digital archiving budget  $0!

Good luck,
Robin

-Original Message-
From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Will 
Martin
Sent: Wednesday, August 13, 2014 10:41 AM
To: CODE4LIB@LISTSERV.ND.EDU
Subject: [CODE4LIB] Archival File Storage

As with most libraries, we're accumulating an increasing number of digital 
holdings.  So far, our approach to storing these files consists of a haphazard 
cocktail of:

- A ContentDM site whose contents haven't been updated in three years
- live network storage in the form of shared drives
- a Drobo
- CDs and DVDs
- hard drives stored in static-proof bags, and
- ancient floppy disks whose contents remain a mystery that would surely scour 
the last vestiges of sanity from our minds if we had a 5 1/4 
drive to read them with.

In short it's a mess that has evolved organically over a long period of time.  
I'm not entirely sure what to do about it, especially considering our budget 
for improving the situation is ... uh, zero.

At the very least, I'd like a better sense for what is considered a good 
approach to storing archival files.  Can anyone recommend any relevant best 
practices or standards documents?  Or just share what you use.

I'm familiar with the OAIS model for digital archiving, and it seems well 
thought-out, but highly abstract.  A more practical nuts-and-bolts guide would 
be helpful.

Thanks.

Will Martin

Web Services Librarian
University of North Dakota


[CODE4LIB] C4L DC 2014 Thanks

2014-08-13 Thread Joshua Westgard
A big, public thank you is in order to Laura Wrubel, Dan Chudnov, and their 
whole team for organizing and running the C4L regional meeting in DC over the 
past two days, to GWU Libraries and DLF for hosting and sponsoring it, and to 
Andromeda Yelton and Jason Griffey for leading the workshops.  It was a huge 
success and a lot of productive fun, as I'm sure many others will agree! Thank 
you all!

Josh Westgard
UMD Libraries


Re: [CODE4LIB] C4L DC 2014 Thanks

2014-08-13 Thread Kevin Ford

I fully second Josh's comments.  A nice job and a big thanks!

--Kevin

On 08/13/2014 12:59 PM, Joshua Westgard wrote:

A big, public thank you is in order to Laura Wrubel, Dan Chudnov, and their 
whole team for organizing and running the C4L regional meeting in DC over the 
past two days, to GWU Libraries and DLF for hosting and sponsoring it, and to 
Andromeda Yelton and Jason Griffey for leading the workshops.  It was a huge 
success and a lot of productive fun, as I'm sure many others will agree! Thank 
you all!

Josh Westgard
UMD Libraries



Re: [CODE4LIB] Archival File Storage

2014-08-13 Thread Rachel Gravel
In addition to the OAIS model, the DCC Curation Lifecycle Model
http://www.dcc.ac.uk/resources/curation-lifecycle-model informs digital
preservation- it's less conceptual than OAIS and outlines the various steps
that are involved in the whole lifecycle of the digital object, including
storage.

I second the recommendation for Erway's You've got to walk before you can
run. Overwhelmed to action: digital preservation challenges at the
under-resourced institution
http://digitalpowrr.niu.edu/wp-content/uploads/2014/05/Overwhelmed-to-action.rinehart_prudhomme_huot_2014.pdf
might also be helpful if you are eventually interested in drumming up
organization support and resources. Otherwise, it's oft repeated that no
one storage/preservation strategy is best for all material types, so
this little
document http://www.dpworkshop.org/dpm-eng/terminology/strategies.html might
give you a better sense of some of the practical methods you can employ and
their relative effectiveness. There is growing interest in cloud services
http://blog.nationalarchives.gov.uk/blog/cloud-storage-archives-match-made-heaven/,
too.

*-*Rachel Gravel
Technical Services Librarian
Marlboro College


Re: [CODE4LIB] Creating a Linked Data Service

2014-08-13 Thread Michael Beccaria
Really helpful responses all. Moving forward with a plan that is much simpler 
than before. Thanks so much!

Mike Beccaria
Systems Librarian
Head of Digital Initiative
Paul Smith's College
518.327.6376
mbecca...@paulsmiths.edu
Become a friend of Paul Smith's Library on Facebook today!

-Original Message-
From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Dan 
Scott
Sent: Saturday, August 09, 2014 1:41 AM
To: CODE4LIB@LISTSERV.ND.EDU
Subject: Re: [CODE4LIB] Creating a Linked Data Service

On Wed, Aug 6, 2014 at 2:45 PM, Michael Beccaria mbecca...@paulsmiths.edu
wrote:

 I have recently had the opportunity to create a new library web page 
 and host it on my own servers. One of the elements of the new page 
 that I want to improve upon is providing live or near live information 
 on technology availability (10 of 12 laptops available, etc.). That 
 data resides on my ILS server and I thought it might be a good time to 
 upgrade the bubble gum and duct tape solution I now have to creating a 
 real linked data service that would provide that availability information to 
 the web server.

 The problem is there is a lot of overly complex and complicated 
 information out there on linked data and RDF and the semantic web etc.


Yes... this is where I was a year or two ago. Content negotiation / triple 
stores / ontologies / Turtle / n-quads / blah blah blah / head hits desk.


 and I'm looking for a simple guide to creating a very simple linked 
 data service with php or python or whatever. Does such a resource 
 exist? Any advice on where to start?


Adding to the barrage of suggestions, I would suggest a simple structured data 
approach:

a) Get your web page working first, clearly showing the availability of the
hardware: make the humans happy!
b) Enhance the markup of your web page to use microdata or RDFa to provide 
structured data around the web page content: make the machines happy!

Let's assume your web page lists hardware as follows:

h1Laptops/h1
ul
  liLaptop 1: available (circulation desk)/li
  liLaptop 2: loaned out/li
   ...
/ul

Assuming your hardware has the general attributes of type, location, 
name, and status, you could use microdata to mark this up like so:

h1Laptops/h1
ul
  li itemscope itemtype=http://example.org/laptop;span
itemprop=nameLaptop 1/span: span itemprop=statusavailable/span
(span itemprop=locationcirculation desk/span)/li
  li itemscope itemtype=http://example.org/laptop;span
itemprop=nameLaptop 2/span: span itemprop=statusloaned out/span/li
   ...
/ul

(We're using the itemtype attribute to specify the type of the object, using a 
made-up vocabulary... which is fine to start with).

Toss that into the structured data linter at http://linter.structured-data.org 
and you can see (roughly) what any microdata parser will spit out. That's 
already fairly useful to machines that would want to parse the page for their 
own purposes (mobile apps, or aggregators of all available library hardware 
across public and academic libraries in your area, or whatever). The advantage 
of using structured data is that you can later on decide to use div or 
table markup, and as long as you keep the itemscope/itemtype/itemprop 
properties generating the same output, any clients using microdata parsers are 
going to just keep on working... whereas screen-scraping approaches will 
generally crash and burn if you change the HTML out from underneath them.

For what it's worth, you're not serving up linked data at this point, because 
you're not really linking to anything, and you're not providing any identifiers 
to which others could link. You can add itemid attributes to satisfy the latter 
goal:

h1Laptops/h1
ul
  li itemscope itemtype=http://example.org/laptop;
itemid=#laptop1span itemprop=nameLaptop 1/span: span 
itemprop=statusavailable/span (span itemprop=locationcirculation 
desk/span)/li
  li itemscope itemtype=http://example.org/laptop; itemid=#laptop2span 
itemprop=nameLaptop 2/span: span itemprop=statusloaned out/span/li
   ...
/ul

I guess if you wanted to avoid this being a linked data silo, you could link 
out from the web page to the manufacturer's page to identify the make/model of 
each piece of hardware; but realistically that's probably not going to help 
anyone, so why bother?

Long story short, you can achieve a lot of linked data / semantic web goals by 
simply generating basic structured data without having to worry about content 
negotiation to serve up RDF/XML and JSON-LD and Turtle, setting up triple 
stores, or other such nonsense. You can use whatever technology you're using to 
generate your web pages (assuming they're dynamically
generated) to add in this structured data.

If you're interested, over the last year I've put together a couple of gentle 
self-guiding tutorials on using RDFa (fulfills roughly the same role as 
microdata) with schema.org (a general vocabulary of types and their 
properties). The shorter one is at 

[CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread Eric Hellman
It seems that Code4Lib hasn't discussed this., though the news is 2 weeks old. 
It seems that there are libraries using social share tools from AddThis, a 
company that has been using a technology called Canvas Fingerprinting to 
track users. 

In other words, it looks like libraries are giving away the user-privacy store.

For example, AddThis is used by my public library's Polaris catalog (BCCLS).

I'd be interested to learn how widespread this is.

Here's the article from ProPublica.
http://www.propublica.org/article/meet-the-online-tracking-device-that-is-virtually-impossible-to-block

And a follow-on discussion from Princeton CITP
https://freedom-to-tinker.com/blog/englehardt/the-hidden-perils-of-cookie-syncing/

The research article:
https://securehomes.esat.kuleuven.be/~gacar/persistent/the_web_never_forgets.pdf

Techdirt:
https://www.techdirt.com/articles/20140721/14523127960/tons-sites-including-whitehousegov-experiment-with-tracking-technology-that-is-difficult-to-block.shtml


Eric


Eric Hellman
President, Gluejar.Inc.
Founder, Unglue.it https://unglue.it/
http://go-to-hellman.blogspot.com/
twitter: @gluejar


Re: [CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread Karen Coyle
I think this would bother me more if I thought that there were a 
significant number of users who either do not use cookies at all, or who 
had some kind of effective cookie manager. I suspect that the actual 
number is very close to zero, in the .n range at best.*


I have a problem with libraries using social media at all, actually, 
since it has turned out to be such a privacy disaster. When I go to what 
I think of as a benign site (my local library, DPLA, EFF!) and see that 
they've got a FB page that gathers likes it just chills me. I realize 
that all of these organizations need to maintain a level of visibility, 
and Facebook or Tumblr or whatever is a way to do that. However, there 
is no use of social media that can be argued as being privacy-neutral. 
It's a dilemma, I know. But I hate to see libraries and others seemingly 
promoting its use.


As for web use, only Tor, and perhaps not even Tor, can give you 
something close to anonymity (except, perhaps, with the NSA). But it 
requires certain tech chops and an effort way beyond that of clearing 
out your cookies now and again, something that most people do not do.


kc
*ps - I had a great cookie manager for a while, but it's no longer 
around. Cookie control in browsers actually was easier a decade ago - 
they've obviously been discouraged from including that software. If 
anyone knows of a good cookie program or plugin, I'd like to hear about it.



On 8/13/14, 10:22 AM, Eric Hellman wrote:

It seems that Code4Lib hasn't discussed this., though the news is 2 weeks old. It seems that 
there are libraries using social share tools from AddThis, a company that has been using 
a technology called Canvas Fingerprinting to track users.

In other words, it looks like libraries are giving away the user-privacy store.

For example, AddThis is used by my public library's Polaris catalog (BCCLS).

I'd be interested to learn how widespread this is.

Here's the article from ProPublica.
http://www.propublica.org/article/meet-the-online-tracking-device-that-is-virtually-impossible-to-block

And a follow-on discussion from Princeton CITP
https://freedom-to-tinker.com/blog/englehardt/the-hidden-perils-of-cookie-syncing/

The research article:
https://securehomes.esat.kuleuven.be/~gacar/persistent/the_web_never_forgets.pdf

Techdirt:
https://www.techdirt.com/articles/20140721/14523127960/tons-sites-including-whitehousegov-experiment-with-tracking-technology-that-is-difficult-to-block.shtml


Eric


Eric Hellman
President, Gluejar.Inc.
Founder, Unglue.it https://unglue.it/
http://go-to-hellman.blogspot.com/
twitter: @gluejar


--
Karen Coyle
kco...@kcoyle.net http://kcoyle.net
m: +1-510-435-8234
skype: kcoylenet/+1-510-984-3600


Re: [CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread Gary McGath
On 8/13/14 1:22 PM, Eric Hellman wrote:
 It seems that Code4Lib hasn't discussed this., though the news is 2 weeks 
 old. It seems that there are libraries using social share tools from 
 AddThis, a company that has been using a technology called Canvas 
 Fingerprinting to track users. 
 
 In other words, it looks like libraries are giving away the user-privacy 
 store.
 
 For example, AddThis is used by my public library's Polaris catalog (BCCLS).
 
 I'd be interested to learn how widespread this is.

It's pretty widespread in general, but I don't know how many libraries
are using it, or why.

It's a concern regardless of absolute numbers, because it targets people
who are concerned about being tracked and have taken steps to make
cookies less effective. (For example, I discard cookies at the end of
each browser session, making long-term tracking ineffective.)

It isn't virtually impossible to block; mapping addthis.com on the
client computer to 127.0.0.1 (using /etc/hosts on Linux and Unix
machines) does a nice job of it. But anyone who uses it really is
betraying the user's trust.


-- 
Gary McGath, Professional Software Developer
http://www.garymcgath.com


[CODE4LIB] Digital Initatives Librarian Position at RIT

2014-08-13 Thread April Younglove
FYI if you are interested in applying to my outgoing Digital Initiatives 
position at RIT, I'm happy to answer questions about it. Coding skills are not 
required, but in my personal opinion, would be a plus.

http://www.higheredjobs.com/details.cfm?Jobcode=175935249aID=568print=yes

April Younglove
Digital Initiatives Librarian
Asset Management
[Description: TWCLogoBrownOrange small]
90 Lomb Memorial Drive
Rochester, NY 14623
585-475-7797
amy...@rit.edumailto:amy...@rit.edu



Re: [CODE4LIB] Archival File Storage

2014-08-13 Thread KLINGLER, THOMAS
Shameless plug for our cheap, nice, brutal hardware/software solution that 
gives you massive distributed (back room dark) storage across three boxes with 
fixity checking and all that

Presentation:
http://www.cni.org/topics/digital-preservation/economical-big-local-storage/

Software:
https://github.com/ksulibraries/KentDSS


--TK--


Tom Klingler
Assistant Dean for Technical Services
University Libraries, Rm 300
1125 Risman Drive
Kent State University
Kent, Ohio 44242-0001
330-672-1646 office







-Original Message-
From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Will 
Martin
Sent: Wednesday, August 13, 2014 12:41 PM
To: CODE4LIB@LISTSERV.ND.EDU
Subject: [CODE4LIB] Archival File Storage

As with most libraries, we're accumulating an increasing number of digital 
holdings.  So far, our approach to storing these files consists of a haphazard 
cocktail of:

- A ContentDM site whose contents haven't been updated in three years
- live network storage in the form of shared drives
- a Drobo
- CDs and DVDs
- hard drives stored in static-proof bags, and
- ancient floppy disks whose contents remain a mystery that would surely scour 
the last vestiges of sanity from our minds if we had a 5 1/4 
drive to read them with.

In short it's a mess that has evolved organically over a long period of time.  
I'm not entirely sure what to do about it, especially considering our budget 
for improving the situation is ... uh, zero.

At the very least, I'd like a better sense for what is considered a good 
approach to storing archival files.  Can anyone recommend any relevant best 
practices or standards documents?  Or just share what you use.

I'm familiar with the OAIS model for digital archiving, and it seems well 
thought-out, but highly abstract.  A more practical nuts-and-bolts guide would 
be helpful.

Thanks.

Will Martin

Web Services Librarian
University of North Dakota


Re: [CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread Jimmy Ghaphery
Interesting thread,

AddThis is certainly everywhere (5 percent of the top 100,000
websites--ProPublica), often in contrast to an organization's stated
privacy policies.

Here's three examples of use within OCLC and their products:
http://oclc.org/research/people/follow.html
ContentDM: http://www.contentdm.org/help6/custom/configure9.asp
WorldCat.org:
http://www.worldcat.org/title/jazz/oclc/25048293referer=brief_results

For kicks I just did a Google Advanced search for AddThis limited to the
.edu domain, wow.

What is the alternative for libraries looking to promote their services out
into the polluted ocean of the internet where everyone else is swimming?

--Jimmy





On Wed, Aug 13, 2014 at 2:33 PM, Gary McGath develo...@mcgath.com wrote:

 On 8/13/14 1:22 PM, Eric Hellman wrote:
  It seems that Code4Lib hasn't discussed this., though the news is 2
 weeks old. It seems that there are libraries using social share tools from
 AddThis, a company that has been using a technology called Canvas
 Fingerprinting to track users.
 
  In other words, it looks like libraries are giving away the user-privacy
 store.
 
  For example, AddThis is used by my public library's Polaris catalog
 (BCCLS).
 
  I'd be interested to learn how widespread this is.

 It's pretty widespread in general, but I don't know how many libraries
 are using it, or why.

 It's a concern regardless of absolute numbers, because it targets people
 who are concerned about being tracked and have taken steps to make
 cookies less effective. (For example, I discard cookies at the end of
 each browser session, making long-term tracking ineffective.)

 It isn't virtually impossible to block; mapping addthis.com on the
 client computer to 127.0.0.1 (using /etc/hosts on Linux and Unix
 machines) does a nice job of it. But anyone who uses it really is
 betraying the user's trust.


 --
 Gary McGath, Professional Software Developer
 http://www.garymcgath.com




-- 
Jimmy Ghaphery
Head, Digital Technologies
VCU Libraries
804-827-3551


Re: [CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread William Denton

On 13 August 2014, Karen Coyle wrote:

*ps - I had a great cookie manager for a while, but it's no longer around. 
Cookie control in browsers actually was easier a decade ago - they've 
obviously been discouraged from including that software. If anyone knows of a 
good cookie program or plugin, I'd like to hear about it.


I use Cookie Monster [0] and like it.

Related:  on my work box I'm trying out the EFF's Privacy Badger [1], which I 
hope will be a success.  At home I use Disconnect [2], which blocks entire 
domains.  It's great for cutting out cookies and junk like AddThis, but cripes, 
I hadn't realized how many people pull in Javascript libraries from Google or 
Yahoo.  That's a harder way of tracking to avoid.


Bill

[0] https://addons.mozilla.org/en-US/firefox/addon/cookie-monster/
[1] https://www.eff.org/privacybadger
[2] https://disconnect.me/disconnect

--
William Denton ↔  Toronto, Canada ↔  http://www.miskatonic.org/

Re: [CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread Devon
 It isn't virtually impossible to block; mapping addthis.com on the
 client computer to 127.0.0.1 (using /etc/hosts on Linux and Unix
 machines) does a nice job of it. But anyone who uses it really is
 betraying the user's trust.


I was looking around for a complete set of addthis domains to block and
came across this extensive, up-to-date hosts file. It blocks more than
10,000 domains.

http://someonewhocares.org/hosts/hosts

/dev


Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference Committees

2014-08-13 Thread Salazar, Christina
YESSS! Anyone else?

And I am willing to help out in whatever capacity. (You probably don't want me 
taking care of your kids though.)

The typical obstacle that I've seen in helping/offering childcare has been 
insurance stuff. Just for whatever THAT'S worth...

Christina Salazar
Systems Librarian
John Spoor Broome Library
California State University, Channel Islands
805/437-3198

-Original Message-
From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of sara 
amato
Sent: Wednesday, August 13, 2014 5:54 AM
To: CODE4LIB@LISTSERV.ND.EDU
Subject: Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference 
Committees

Quick question for those planning to attend Code4Lib 2015 -  Would the 
availability of childcare make a difference in your being able to attend?  If 
so I'll propose and lead a childcare committee (seeing as I'm almost local to 
it.) 


On Aug 12, 2014, at 3:35 PM, Tom Johnson wrote:

 The 2015 Code4Lib annual conference may seem like a long way away, but 
 it's already time for various volunteer committees to start work on 
 the planning. As you know, the conference happens each year thanks to 
 the work of the community at large; please take the time to sign up 
 for confrence committees here:
 
 *http://wiki.code4lib.org/index.php/2015_Conference_Committees
 http://wiki.code4lib.org/index.php/2015_Conference_Committees*
 
 *We especially need people for the Keynote Speakers and Sponsorship
 committees.* These groups need to begin work ASAP and are short on 
 membership.
 
 Thanks to everyone who has already signed up to help!
 
 --
 Tom Johnson
 on behalf of the C4L15 PDX Team


Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference Committees

2014-08-13 Thread Terry Reese
So, I realize we are a great volunteer organization with lots of trustworthy
folks -- but this is something where if you are going to be offering child
care, it cannot be by committee or volunteer.  For an event like this, you
will need to use someone that has been background checked and would need to
be someone trained to deal with medical issues and handling special needs.
Fortunately, the Oregon State University Library has a relationship with a
group that offers child care to students while they are in the library --
I'm wondering if that group could be hired to provide care for this event if
this was something folks wanted.  

--TR

-Original Message-
From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of
Salazar, Christina
Sent: Wednesday, August 13, 2014 5:40 PM
To: CODE4LIB@LISTSERV.ND.EDU
Subject: Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference
Committees

YESSS! Anyone else?

And I am willing to help out in whatever capacity. (You probably don't want
me taking care of your kids though.)

The typical obstacle that I've seen in helping/offering childcare has been
insurance stuff. Just for whatever THAT'S worth...

Christina Salazar
Systems Librarian
John Spoor Broome Library
California State University, Channel Islands
805/437-3198

-Original Message-
From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of sara
amato
Sent: Wednesday, August 13, 2014 5:54 AM
To: CODE4LIB@LISTSERV.ND.EDU
Subject: Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference
Committees

Quick question for those planning to attend Code4Lib 2015 -  Would the
availability of childcare make a difference in your being able to attend?
If so I'll propose and lead a childcare committee (seeing as I'm almost
local to it.) 


On Aug 12, 2014, at 3:35 PM, Tom Johnson wrote:

 The 2015 Code4Lib annual conference may seem like a long way away, but 
 it's already time for various volunteer committees to start work on 
 the planning. As you know, the conference happens each year thanks to 
 the work of the community at large; please take the time to sign up 
 for confrence committees here:
 
 *http://wiki.code4lib.org/index.php/2015_Conference_Committees
 http://wiki.code4lib.org/index.php/2015_Conference_Committees*
 
 *We especially need people for the Keynote Speakers and Sponsorship
 committees.* These groups need to begin work ASAP and are short on 
 membership.
 
 Thanks to everyone who has already signed up to help!
 
 --
 Tom Johnson
 on behalf of the C4L15 PDX Team


Re: [CODE4LIB] EZProxy ssl security

2014-08-13 Thread Stuart Yeates

Thank you, that helped greatly.

cheers
stuart

On 13/08/14 10:09, Will Martin wrote:

I can't offer a comprehensive guide, but I can give you some tips
gleaned from the EZ Proxy mailing list and my own experimentation.

There are some configuration settings you can adjust to improve its
security.  Here are the ones from mine:

# Disable old, insecure SSL methods
Option DisableSSL56bit
Option DisableSSL40bit
Option DisableSSLv2

Those go before setting the LoginPortSSL -- in my config.txt, they're
the first thing after the Name directive at the top of the file.

Doing that will help a good bit.  Here's the report for my server on SSL
Labs:

https://www.ssllabs.com/ssltest/analyze.html?d=ezproxy.library.und.edu

A marked improvement.  Not perfect, but much better.

EZ Proxy embeds a statically linked copy of the SSL libraries, so SSL
upgrades to it only happen when you update EZ Proxy itself.  I'm on
version 5.7.32, which still suffers from some old security
vulnerabilities, as you can see in the SSL labs report.

I believe the next version of EZ Proxy is supposed to update the SSL to
support newer protocols.  But I'm not sure, and I'm unlikely to find out
of my own.  OCLC recently changed their pricing model to a yearly
subscription fee if you want to receive continued updates, and my
university has not chosen to pay for that at this time.  So we won't be
getting any further updates until we can find the money for the yearly fee.

Hope this helps.

Will Martin

On 2014-08-12 16:38, Stuart Yeates wrote:

So I just ran my EZproxy through an SSL checker and was shocked by the
outcome:

https://www.ssllabs.com/ssltest/analyze.html?d=login.helicon.vuw.ac.nz

Finding other EZproxy installs in google and checking them gave a
range of answers, some MUCH better, some MUCH worse. Clearly secure
EZproxy is possible, but patchy.

Is there a decent guide to securing EZproxy anywhere?

I'm hoping that it might be as simple as dropping a new openssl
library into a directory within the EZproxy install?

cheers
stuart


Re: [CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread Eric Hellman
I blogged this.

http://go-to-hellman.blogspot.com/2014/08/libraries-are-giving-away-user-privacy.html

Do libraries even realize they're doing this?

Eric

On Aug 13, 2014, at 4:28 PM, Jimmy Ghaphery jghap...@vcu.edu wrote:

 Interesting thread,
 
 AddThis is certainly everywhere (5 percent of the top 100,000
 websites--ProPublica), often in contrast to an organization's stated
 privacy policies.
 
 Here's three examples of use within OCLC and their products:
 http://oclc.org/research/people/follow.html
 ContentDM: http://www.contentdm.org/help6/custom/configure9.asp
 WorldCat.org:
 http://www.worldcat.org/title/jazz/oclc/25048293referer=brief_results
 
 For kicks I just did a Google Advanced search for AddThis limited to the
 .edu domain, wow.
 
 What is the alternative for libraries looking to promote their services out
 into the polluted ocean of the internet where everyone else is swimming?
 
 --Jimmy
 
 
 
 
 
 On Wed, Aug 13, 2014 at 2:33 PM, Gary McGath develo...@mcgath.com wrote:
 
 On 8/13/14 1:22 PM, Eric Hellman wrote:
 It seems that Code4Lib hasn't discussed this., though the news is 2
 weeks old. It seems that there are libraries using social share tools from
 AddThis, a company that has been using a technology called Canvas
 Fingerprinting to track users.
 
 In other words, it looks like libraries are giving away the user-privacy
 store.
 
 For example, AddThis is used by my public library's Polaris catalog
 (BCCLS).
 
 I'd be interested to learn how widespread this is.
 
 It's pretty widespread in general, but I don't know how many libraries
 are using it, or why.
 
 It's a concern regardless of absolute numbers, because it targets people
 who are concerned about being tracked and have taken steps to make
 cookies less effective. (For example, I discard cookies at the end of
 each browser session, making long-term tracking ineffective.)
 
 It isn't virtually impossible to block; mapping addthis.com on the
 client computer to 127.0.0.1 (using /etc/hosts on Linux and Unix
 machines) does a nice job of it. But anyone who uses it really is
 betraying the user's trust.
 
 
 --
 Gary McGath, Professional Software Developer
 http://www.garymcgath.com
 
 
 
 
 -- 
 Jimmy Ghaphery
 Head, Digital Technologies
 VCU Libraries
 804-827-3551


Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference Committees

2014-08-13 Thread Tom Johnson
Sara: that is a fabulous idea!

Do you mind if I add you (and Chirstina?) to the wiki page under a new
'childcare committee' heading?  That way the host committee can communicate
with you about assessing needs and feasibility.

- Tom


On Wed, Aug 13, 2014 at 2:44 PM, Terry Reese ree...@gmail.com wrote:

 So, I realize we are a great volunteer organization with lots of
 trustworthy
 folks -- but this is something where if you are going to be offering child
 care, it cannot be by committee or volunteer.  For an event like this, you
 will need to use someone that has been background checked and would need to
 be someone trained to deal with medical issues and handling special needs.
 Fortunately, the Oregon State University Library has a relationship with a
 group that offers child care to students while they are in the library --
 I'm wondering if that group could be hired to provide care for this event
 if
 this was something folks wanted.

 --TR

 -Original Message-
 From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of
 Salazar, Christina
 Sent: Wednesday, August 13, 2014 5:40 PM
 To: CODE4LIB@LISTSERV.ND.EDU
 Subject: Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference
 Committees

 YESSS! Anyone else?

 And I am willing to help out in whatever capacity. (You probably don't want
 me taking care of your kids though.)

 The typical obstacle that I've seen in helping/offering childcare has been
 insurance stuff. Just for whatever THAT'S worth...

 Christina Salazar
 Systems Librarian
 John Spoor Broome Library
 California State University, Channel Islands
 805/437-3198

 -Original Message-
 From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of
 sara
 amato
 Sent: Wednesday, August 13, 2014 5:54 AM
 To: CODE4LIB@LISTSERV.ND.EDU
 Subject: Re: [CODE4LIB] ACTION REQUESTED: Volunteer for 2015 Conference
 Committees

 Quick question for those planning to attend Code4Lib 2015 -  Would the
 availability of childcare make a difference in your being able to attend?
 If so I'll propose and lead a childcare committee (seeing as I'm almost
 local to it.)


 On Aug 12, 2014, at 3:35 PM, Tom Johnson wrote:

  The 2015 Code4Lib annual conference may seem like a long way away, but
  it's already time for various volunteer committees to start work on
  the planning. As you know, the conference happens each year thanks to
  the work of the community at large; please take the time to sign up
  for confrence committees here:
 
  *http://wiki.code4lib.org/index.php/2015_Conference_Committees
  http://wiki.code4lib.org/index.php/2015_Conference_Committees*
 
  *We especially need people for the Keynote Speakers and Sponsorship
  committees.* These groups need to begin work ASAP and are short on
  membership.
 
  Thanks to everyone who has already signed up to help!
 
  --
  Tom Johnson
  on behalf of the C4L15 PDX Team



Re: [CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread Genny Engel
We have had, for some time now, a section in our privacy policy explaining what 
services we use and giving links to opt out.

http://sonomalibrary.org/governance/library-policies/privacy-statement


Genny Engel
Sonoma County Library
gen...@sonoma.lib.ca.us
707 545-0831 x1581
www.sonomalibrary.org

-Original Message-
From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Eric 
Hellman
Sent: Wednesday, August 13, 2014 3:37 PM
To: CODE4LIB@LISTSERV.ND.EDU
Subject: Re: [CODE4LIB] Canvas Fingerprinting by AddThis

I blogged this.

http://go-to-hellman.blogspot.com/2014/08/libraries-are-giving-away-user-privacy.html

Do libraries even realize they're doing this?

Eric

On Aug 13, 2014, at 4:28 PM, Jimmy Ghaphery jghap...@vcu.edu wrote:

 Interesting thread,
 
 AddThis is certainly everywhere (5 percent of the top 100,000
 websites--ProPublica), often in contrast to an organization's stated
 privacy policies.
 
 Here's three examples of use within OCLC and their products:
 http://oclc.org/research/people/follow.html
 ContentDM: http://www.contentdm.org/help6/custom/configure9.asp
 WorldCat.org:
 http://www.worldcat.org/title/jazz/oclc/25048293referer=brief_results
 
 For kicks I just did a Google Advanced search for AddThis limited to the
 .edu domain, wow.
 
 What is the alternative for libraries looking to promote their services out
 into the polluted ocean of the internet where everyone else is swimming?
 
 --Jimmy
 
 
 
 
 
 On Wed, Aug 13, 2014 at 2:33 PM, Gary McGath develo...@mcgath.com wrote:
 
 On 8/13/14 1:22 PM, Eric Hellman wrote:
 It seems that Code4Lib hasn't discussed this., though the news is 2
 weeks old. It seems that there are libraries using social share tools from
 AddThis, a company that has been using a technology called Canvas
 Fingerprinting to track users.
 
 In other words, it looks like libraries are giving away the user-privacy
 store.
 
 For example, AddThis is used by my public library's Polaris catalog
 (BCCLS).
 
 I'd be interested to learn how widespread this is.
 
 It's pretty widespread in general, but I don't know how many libraries
 are using it, or why.
 
 It's a concern regardless of absolute numbers, because it targets people
 who are concerned about being tracked and have taken steps to make
 cookies less effective. (For example, I discard cookies at the end of
 each browser session, making long-term tracking ineffective.)
 
 It isn't virtually impossible to block; mapping addthis.com on the
 client computer to 127.0.0.1 (using /etc/hosts on Linux and Unix
 machines) does a nice job of it. But anyone who uses it really is
 betraying the user's trust.
 
 
 --
 Gary McGath, Professional Software Developer
 http://www.garymcgath.com
 
 
 
 
 -- 
 Jimmy Ghaphery
 Head, Digital Technologies
 VCU Libraries
 804-827-3551


Re: [CODE4LIB] C4L DC 2014 Thanks

2014-08-13 Thread Francis Kayiwa

On 08/13/2014 12:59 PM, Joshua Westgard wrote:

A big, public thank you is in order to Laura Wrubel, Dan Chudnov, and their 
whole team for organizing and running the C4L regional meeting in DC over the 
past two days, to GWU Libraries and DLF for hosting and sponsoring it, and to 
Andromeda Yelton and Jason Griffey for leading the workshops.  It was a huge 
success and a lot of productive fun, as I'm sure many others will agree! Thank 
you all!


+1

Indeed. A fantastic event full of win.

./fxk

--
Cheer Up!  Things are getting worse at a slower rate.


Re: [CODE4LIB] Canvas Fingerprinting by AddThis

2014-08-13 Thread Eric Hellman
What you're saying on the Sonoma County Library website is accurate and 
correct. I hope other libraries follow your example, if they use AddThis.

Although it would be even better if services were used that didn't use cookies 
in order to provide advertisements about goods and services. For example, in 
the comment on my post, Piwik is mentioned by Dan Scott. Why aren't more 
libraries using Piwik? Are any libraries using Piwik?

Eric



On Aug 13, 2014, at 7:00 PM, Genny Engel gen...@sonoma.lib.ca.us wrote:

 We have had, for some time now, a section in our privacy policy explaining 
 what services we use and giving links to opt out.
 
 http://sonomalibrary.org/governance/library-policies/privacy-statement
 
 
 Genny Engel
 Sonoma County Library
 gen...@sonoma.lib.ca.us
 707 545-0831 x1581
 www.sonomalibrary.org
 
 -Original Message-
 From: Code for Libraries [mailto:CODE4LIB@LISTSERV.ND.EDU] On Behalf Of Eric 
 Hellman
 Sent: Wednesday, August 13, 2014 3:37 PM
 To: CODE4LIB@LISTSERV.ND.EDU
 Subject: Re: [CODE4LIB] Canvas Fingerprinting by AddThis
 
 I blogged this.
 
 http://go-to-hellman.blogspot.com/2014/08/libraries-are-giving-away-user-privacy.html
 
 Do libraries even realize they're doing this?
 
 Eric
 
 On Aug 13, 2014, at 4:28 PM, Jimmy Ghaphery jghap...@vcu.edu wrote:
 
 Interesting thread,
 
 AddThis is certainly everywhere (5 percent of the top 100,000
 websites--ProPublica), often in contrast to an organization's stated
 privacy policies.
 
 Here's three examples of use within OCLC and their products:
 http://oclc.org/research/people/follow.html
 ContentDM: http://www.contentdm.org/help6/custom/configure9.asp
 WorldCat.org:
 http://www.worldcat.org/title/jazz/oclc/25048293referer=brief_results
 
 For kicks I just did a Google Advanced search for AddThis limited to the
 .edu domain, wow.
 
 What is the alternative for libraries looking to promote their services out
 into the polluted ocean of the internet where everyone else is swimming?
 
 --Jimmy
 
 
 
 
 
 On Wed, Aug 13, 2014 at 2:33 PM, Gary McGath develo...@mcgath.com wrote:
 
 On 8/13/14 1:22 PM, Eric Hellman wrote:
 It seems that Code4Lib hasn't discussed this., though the news is 2
 weeks old. It seems that there are libraries using social share tools from
 AddThis, a company that has been using a technology called Canvas
 Fingerprinting to track users.
 
 In other words, it looks like libraries are giving away the user-privacy
 store.
 
 For example, AddThis is used by my public library's Polaris catalog
 (BCCLS).
 
 I'd be interested to learn how widespread this is.
 
 It's pretty widespread in general, but I don't know how many libraries
 are using it, or why.
 
 It's a concern regardless of absolute numbers, because it targets people
 who are concerned about being tracked and have taken steps to make
 cookies less effective. (For example, I discard cookies at the end of
 each browser session, making long-term tracking ineffective.)
 
 It isn't virtually impossible to block; mapping addthis.com on the
 client computer to 127.0.0.1 (using /etc/hosts on Linux and Unix
 machines) does a nice job of it. But anyone who uses it really is
 betraying the user's trust.
 
 
 --
 Gary McGath, Professional Software Developer
 http://www.garymcgath.com
 
 
 
 
 -- 
 Jimmy Ghaphery
 Head, Digital Technologies
 VCU Libraries
 804-827-3551