Jim Kehrt and his crew at Custom Pool and Patio have been building high-quality backyard entertainment fixtures in the Richmond Hill community and surrounding locales for years and years.   Aside from construction, they also distribute a line of high quality pool chemicals and supplies to those in need of a cleaning.

We’re proud to have built Custom Pool and Patio’s first website, and we hope you’ll check this pretty (and relaxing!) site out.  It makes us want to grab a Corona and head pool-side.

Services:  Wordpress CMS Integration, Logo Design

URL: http://www.custompoolandpatio.com

Richmond Hill Reflections is a magazine dedicated to covering the news, community developments, history, interesting and influential local people, organizations and businesses of the Richmond Hill, Georgia community. We are very proud to have helped them launch their very first website, and are also proud that they covered Shinefire Studios in their June 2009 issue of the magazine.

We like this crew so much that we even advertise Shinefire Studios on their homepage!

Services: Full website design, Wordpress CMS integration

URL: http://www.richmondhillreflectionsmag.com

I use 3 desktop apps right now:

• Photoshop
• Picasa
• iTunes

That’s it.  Everything else I do in a browser.   Word processing and spreadsheets: Google Docs.  Email: Gmail.  Etc.

With the advent of streaming media sites like Hulu, Netflix, and Pandora…I can’t help but think iTunes will be replaced by web-based versions sooner rather than later.

If you think about it…Apple is already making that move on the iPhone OS 3.0 with wifi downloads of music, podcast, and movies. As the iPhone hard drive storage increases, and wifi download speeds increase…there won’t be much of a need for iTunes.

As far as the Adobe Suite of products go – I don’t think they’ll move away from the desktop. At least not in the next 5 years. Performance requirements are ridiculously high for these apps, and unless websites can find a way to harness the end-user’s CPU through a browser…it ain’t happenin anytime soon.

I’ve been trying to figure out a way to centralize all of my data across computers. Cloud storage and backup has piqued my interest. Carrying an external backup hard drive around everywhere with me isn’t always convenient. Or secure. So I signed up for a free Dropbox account this morning and am gonna give it a test run between all of my machines.

I’m hoping that the cost of cloud storage will continue to decrease, but for about $0.15 per gig…it’s worth it to have 24/7 backups of most of my personal data…not to mention 24/7 accessibility from a web browser.

Final thought:

We are happy users of Basecamp.  When I finished installing Dropbox, I couldn’t help but think “what if I could sync project files to our Basecamp storage?”

Or, what if I could bring my own storage when I signed up for Basecamp?

Extraordinary times, folks.

Author Courtney Brandt commissioned the websites for two of her young adult novels to be designed and built by Shinefire Studios – The Line, and sequel A Fine Line.   Both sites have turned out great, and have helped sell dozens of copies of these fun and nostalgic young adult novels.  Additionally, we provided banner advertisement design and consulting for online ad campaigns to promote the novel.

Courtney was one of our first clients, and we love being her “go-to” web firm!

Services: Custom site design, Banner ad design, Internet marketing

URL: http://www.thelinebook.com

Some of the plugins and gems Aaron mentioned were quite familiar to me, such as Restful Authentication and Clearance.  Others, like Authlogic, I hadn’t seen before.

I scribbled some notes during Aaron’s talk and figured someone might find them useful:

###

Rails Authentication Plugins

Restful Authentication

• simple authentication
• a small, single application for user authorization
• the authors of the plugin have done their homework, and seem to have a better overall understanding of how authentication should work
• lots of great documentation surrounding this plugin
• the current release doesn’t really have developer-friendly tests, however

Authlogic

• cleaner code base
• easy to install
• script/plugin install …. run a generator, run the migrations….up and running
• tests tied to Shoulda test framework

Clearance

• new
• clean code, lots of tests

All of the above:

1. are easy to install
2. have decent tests built in
3. are non-transferable
4. are great for single apps that aren’t that big

Single Sign On Authentication Servers

Central Authentication Service

• CAS…originally a java project

Rubycas Server

• bundling apps together on a server
• tests aren’t amazing

Castronaut

• CAS implementation that’s a little more sound and with good tests
• A CAS server should say, “hey, authentication source…is this user cool with us?”
• has adapters for the different authentication systems
• easier to maintain adapters than the code base
• can run multiple authentication sources…against LDAP directory & a database
• can have fallback authentication sources…”try here, if fail, try here”
• to use proprietary auth systems…all you have to do is write the adapter, and you’re done
• to have multiple domain authentication…where there might be an app on one domain and an app on another domain, you have to write another layer of cas, and there’s the issue of domain trust

OAuth

• used by Flickr
• used by the major Google apps
• Facebook supposed to be supporting it
• rails plugin – code.google.com/p/oauth-plugin/
• need ruby oath gem
• twitter’s using the OAth plugin
• using oath returns control, and can revoke keys at any time…unlike cached passwords
• downside => fairly new

Other

Bcrypt

• a crypto-algorithm for generating secure password hashes and the like
• crypto algorithms many times judged on the increase and decrease in CPU resource costs when generating hashes for security
• bcrypt-ruby gem

Lessons

• don’t roll your own authentication framework, leave it to the professionals
• don’t do your own crypto
• if the app is big, really security conscious….split admin concerns
• create a separate admin application…don’t expose www.domain.com/admin to public
• TEST
• if you can…hire somebody to audit your authentication system and try to break into your app, a team of security experts preferably
• don’t just take the plugin, install it, and assume it’s secure
• when in doubt, ask for help from plugin creators, mailing lists, and the like

###

Are there any other systems that you use for rails authentication or single sign-on?  Add your favs in the comments!

Richmond Hill Reflections is currently distributed for free across the town of roughly 10,000 and is supported by local business advertisements.  The bi-monthly magazine showcases the “beauty and many unique characteristics” of the low country in and around Richmond Hill, Georgia.

We’re excited to have Richmond Hill Reflections on the project calendar, and look forward to working with Paige and her team.

Are there any features you’d like to see on their new website?  Let us know in the comments!

[Update]: The Reflections site is now live: http://www.richmondhillreflectionsmag.com/

The following process worked for us, and we suggest you try these steps out the next time you choose a domain:

1. Create a shared Google Spreadsheet for easily logging and collaborating on potential names and URLs
2. Hit up the thesaurus or wikipedia to maximize your business-naming potential
3. Pick out your top 20 favorite names from the spreadsheet
4. Try out each of the top 20 names on the super-quick domain checking site, Ajax Whois

Warning – combining the following services could lead to more productivity when choosing a domain name:

How do you choose your domain names?  Let us know in the comments!

Here’s a visualization of my delicious bookmarks:

Apparently I spend a lot of time researching rails, linux, and wordpress. Yup, sounds about right. What a geek!

Having just decided to “go legit” as a small business, we wanted to make sure that with all of the minutiae of day-to-day operations clouding our minds during these first few months, that we still maintained a strong focus on sales and increasing cashflow.  In particular, managing all the different contacts and businesses we’ve talked to, and deals we’re pursuing.  Also – we didn’t want to have to remember who to call when, or what the status on a deal was.

So the basic requirements were:

• Incredibly easy to use
• Decent feature list
• Inexpensive but scalable
• Email reminders
• Web based

I’d seen Salesforce before, and although the testimonials seemed convincing and I’ve heard nothing but good things, you have to fill out a complete information sheet just to view a demo of their software.  That one’s out.

I’d also heard about SugarCRM…which ended up being quite pricey and a little too robust for the needs of a small business.

Having already been a (kind of obsessive) user of Basecamp, we gave Highrise a look.  We ended up not looking much further.

Here’s where Highrise started out right: “Start a Highrise Account: 30-day free trial, 60-second signup, web-based, nothing to install.”

I’m listening.

Next, they have a one-minute guided video tour to give you an overview.

Not only does it satisfy the aforementioned requirements, but you can actually forward correspondence (emails to/from your clients) to Highrise and it automatically files the conversation under the correct Contact.  Can you say time saver?

We started out with the free account which lets us manage up to 250 contacts, and one “Deal”.  Should be sufficient until things really start moving.

I have to say I’ve been quite pleased with how accountable it’s kept us.  Plus, we have our own custom login page:

Here’s the TechCrunch post on the Highrise launch.

Update: Just discovered this page detailing how Google Apps and Salesforce have mashed up their product line.

History of the Internet from PICOL on Vimeo.

For those interested, I found the video posted on the BlogWell site, which hosted a conference today (that was a phenomenal success according to this tweet), and in general is a blog that promotes “making better use of the social web.” I’m already liking their PDF on how to redirect a Wordpress.com blog to a self-hosted Wordpress blog.