Register Your Domains Hassle-Free
Showing posts with label Security and Permissions. Show all posts
Showing posts with label Security and Permissions. Show all posts

Sunday, 20 October 2013

How to let another person load pictures to your Picasa-web-album

This article shows how to let another person (Google account) upload pictures to your Picasa-web-albums:   this is one possible way to work around the issues with Google's photo auto-enhance feature.

Picasa-web-albums and your Google account

Previously I've described Picasa desktop vs Picasa-web-albums, and noted that you can upload pictures to your PWA folders using either of the two pieces of software.

Each album and folder in Picasa-web-albums belongs to one Google account (which may or may not have an associated Google+ account).

Google now provide a tool to transfer Picasa-web albums from one account to another - but only once ever in the life-time of the album.   You cannot transfer ownership to one person now, and to another person in  a year's time (which is quite different to the way you can easily transfer other aspects of your blog to a new owners).

And Google also provide a way for an account owner to let another Google account add photos to the owners albums.


How to let another Google account add photos to one of your  Picasa-web-albums.


Log in to Picasa-web-albums using the Google account that owns the photo-albums and other related things (eg blogger administration rights), and which you want to be the main owner/administrator of your photos.
(See Stop being automatically redirected from PWA to Google+ Photos if you have difficulty staying in Picasa-web-albums.)


View the  individual album that you want to allow someone else to add photos to.


Click the Share button in the right-hand panel.


If your account does not have a Google+ Profile, then clicking the Share button opens the basic Picasa-web-sharing invitation.   In it:
  • Enter the email address of the Google account that you want to give upload permissions to, and any message that you want to send them., 
  • Tick "Let people I share with contribute photos".   
  • Then click Share Via Email.

Standard Picasa-web-albums album sharing settings screen



If your account has a Google+ Profile, then clicking the share button open a "Share on Google+" window.  To use this to give someone permission to upload to the album:
  • Remove any suggested circles
  • Enter the Google account name(s) that you want go give upload permissions to.
  • Click Share
  • When you return to the standard Picasa-web-screen, in the right-hand-panel, click the "allow uploads" icon to the right of the name that you entered.

Google+ Profile photo-album sharing request screen



Allow shared-with users to upload pictures to your album


What the people you have invited see

The people who you have invited to contribute pictures to your Picasa-web-albums will get either an email message or a Google+ notification telling them about the permission you have given them.

When they go into Picasa-web-albums, they will see the album that you have shared listed as an album that they can see - and they will have an Add Photos link where they can upload pictures in the same way they would add photos to their own albums.


Sharing several or all your albums at once

Picasa does not seem to provide any options for this at the moment.





Related Articles:

Understanding Picasa vs Picasa-web-albums

How to set up a Google+ Profile for an existing Blogger account - and why you might not want to

Saturday, 19 October 2013

How to set up a Google+ profile for an existing Blogger account

This article is about how to set up a Google Plus profile for a Blogger account which already exists.  It looks at the history of Blogger and Google accounts, how to make a Google+ profile for a Blogger account, and what the consequences of this might be.



Google+ and Blogger accounts

Once upon a time, you could sign up to use Blogger without using Google at all.

Then Google purchased Blogger, and over time the two types of accounts were slowly combined - and everyone who had an old "Blogger-only" account was asked to convert it to a Google account, which also gave them access to other features like Picasa-web-albums, Analytics, etc. People who signed up to Gmail first found that this made them a Google account that had access to email (via a gmail address), and Blogger, PWA, etc.

More recently, Google introduced Google+.

Today, people who sign-up to use Blogger are asked for their real name during the registration process, and are automatically set up with a Google+ account at the same time. But it is possible to opt out of this and not use Google+ with the Google/Blogger account. And there are many people - and organisations - who have Google accounts which were created before Google+ was launched and which do not currently have a Google+ profile.   This is is not a problem until the owner finds there is some feature in Google+ which affects how Blogger operates, eg the auto-enhance features in Picasa-web-albums / Google+ Photos.

Luckily it's very easy to set up a Google+ profile for an existing Blogger or Google account.   And doing this does not force you to actually use Google+ for anything:   it's possible to set up the Google Plus account, use it for whatever you need to, and then never use it again.


How to set up a Google+ account for an existing Blogger account


Log in to Blogger using the Google account that you use to edit / administer your blog at the moment.


In another tab or window in the same browser, to go www.plus.google.com


If your Google account is not already set up for Google+, then the Google Plus registration screen will open, with some details automatically filled in from your Blogger/Google account profile.




Check these details, enter a gender and date of birth, tick the "I understand the Picasa" changes box, and press Upgrade.


Depending on how Google has interpreted your name from your Google / Blogger profile, you may get an error message like this:
The name you entered doesn't seem to meet our Names Policy. Check it over and try again.
Did we mess up? Click here to submit an appeal (usually processed in 24 hours).
If so, you can either submit an appeal (by clicking the button) or change the name that Google suggested from your Blogger profile - for example by removing any hyphens from it..   Notice that they don't actually ask for your real name - even though this is what Google Plus is supposed to have.


Once you have resolved any problems with the name etc, your Google Plus profile will be created.



Customizing your Google+ Profile - or not

After your profile is created, the sign-up tool takes you through two more screens where you can connect to other people, and to choose people or pages to follow.  

If you want to use your Google+ profile, then it is a good idea to do this.

And if you don't connect to any people, you will get a message telling you that you might be lonely - just click Continue Anyway, unless this concerns you.







Has this linked your blog to Google+?

Absolutely not.  

The procedure described above simply creates a Google+ profile for the Google account that you are using.    It does not change your blog settings in any way, and any Blogger posts that you make will still be attached to your Blogger profile, not to the Google+ profile.

If you want to attach your blog to your Google+ profile, then you can change this by clicking the Get Started button on the Google+ tab, and accepting the changes.    But this is not compulsory - and it may not be a good idea on if you are an administrator of any team blogs, because this switch affects all your blogs.






Terms and Conditions

Notice that you were not asked to agree to any Terms and Conditions at any point in the Google+ account creation process - apart from agreeing that you understood the impact on your Picasa-web-albums.

However there are, of course, some.   You can read them here.  There is also a Names Policy, which says that:
Google+ profiles are for individuals. If you want to use Google+ to represent someone or something other than yourself -- like your business, your band, your family, or your pet -- you should create a Google+ page instead.

So if your Blogger account represents something other than you (eg I have one for my choir, and one for a local parents group), and you convert it to a Google+ profile, then you will be breaking Google's rules - even though they did not point this out to you during the conversion process, and even though there are some aspects than you cannot set for a Google+ page.

So you need to be aware of this, and weigh up whether the benefits of having a non-compliant Google+ account are worth the risks involved.

At the moment, it's just not clear how much Google are viewing this as a problem, and whether they will do things like delete Google+ profiles that break the rules in this way.    By comparison, Facebook do this.   But the Google+ situation is a little different because of the historic nature of the separate accounts.



Related Articles:

Understanding Google accounts

Ways to let other people contribute to your blog

Tuesday, 4 June 2013

How to keep your Blogger password safe

This QuickTip introduces a useful post about password management from Google.


quick-tips logo

Giving computer or password-management advice to people who don't have lot of experience with IT has always been challenging: there is a lot of background information that you need to know before it all starts to make sense.

And eaching colleagues to use a mouse back in the 1990s was a lot easier than explaining on-line services and security is in the twenty-teens!  I know that I'm not the only person who struggled to explain the difference between email and gmail to someone who just didn't understand "gmail is one type of software for doing emails" - he just kept asking "so what does fmail do?"

To help with this challenge, Google have released a very carefully written article with advice about managing passwords. My guess is that lots of research went into working out exactly how much someone who uses a few on-line services needs to know, and how to explain it simply.

They key points they cover are:
  1. Use a different password for each important service
  2. Make your password hard to guess
  3. Keep a copy of your password somewhere safe (and yes, it's ok to write it down, provided you write it somewhere safe)
  4. Set a recovery option.

And of course the article has plenty of useful links to show you how to do these things for your Google account.

There are a couple of things that I would like to say a little more about.


How to identify your important on-line services

This is a very personal process, and may vary over time.

Google, of course, think that your Google account is important. But that may not be true for everyone. For most people, the important services are:
  • Ones to do with money (on-line banking, AdSense, AdWords, other affiliate accounts, Amazon and others that you have your credit card listed with)
  • Their primary email account - the one that you set as the password-recovery email for other online services.

After that, it's very individual. For some people, Facebook is important, while other people don't use it at all. Ditto Twitter, LinkedIn, YouTube etc. Job-hunting websites may be very important at certain times in your life, and of no importance at all in-between times.

Personally, I started deciding if passwords were "important" or not years ago: ones that are vital always get a unique passphrase, while lower-priority ones usually get an obvious variation on one password that I use in lots of places.


Keeping your passwords somewhere safe

The issues you need to consider here are probably wider than you think.

Most people plan to deter hackers and other malicious people. Keeping passwords in a paper notebook in your bedside table, not beside your computer, is probably enough to keep things safe from them. (Unless of course you are so famous that hackers might break into your house looking for your password - and if that's the case, you probably don't need to read this post!)

But it might not keep them safe from obsolescence - for example from becoming out-of-date when you change a password or set up a new account on your computer but don't immediately walk upstairs to update your notebook.

And it most certainly won't work if there's a fire in your house: your passwords will be safe, but totally inaccessible too.  And while it's easy to say that if your house burns down you've got more important things to worry about, for people who make their living on-line, losing access to their accounts could make things a lot worse.

Personally, I haven't worked out a good solution for this yet: it seems to me that it's some kind of balance between keeping password in safe on-line services (as much as any electronic "vault" is every really secure), and using a range of off-line options.


What worries you about managing your passwords?

Sunday, 14 April 2013

What happens to your blog if your Google account becomes inactive?

This article describes Google's Inactive Account Manager, a new tool that gives you control over what happens to your Google account if you don't log on to it for a period of time.



Ages ago, I read a thought-provoking article on ProBlogger about making a "blogging will". His main aim was to ensure that his family could access his business assets (ie his blogs etc) if something untoward happened to him.

Now, Google's Data Liberation Front have annnounced a new tool called the Inactive Account Manager, which lets Google account owners say what should happen if they ever stop using their account.

This tool lets you decide
  1. If and when your account should be treated as inactive
  2. What happens with your data if it becomes inactive, and
  3. Who else is notified, and what is said to them.

At the moment, it covers these Google tools - which are attached to your Google account:
  • +1s
  • Blogger
  • Contacts and Circles
  • Drive (which I guess means Docs too)
  • Gmail
  • Google+ Profiles, Pages and Streams
  • Picasa Web Albums
  • Google Voice
  • YouTube.

AdSense is a notable exception: I don't know what happens to your outstanding balance and income if your AdSense account becomes inactive.   But I suspect that it might be managed in the same way as a bank account or book royalties - and because each country will have different laws about managing estates and the like, it's not possible to let you "opt-out" in the same way as it is for regular data.


What situations is this for

There are a few scenarios that the IAM ("Inactive Account Manager" is such a mouthful) might be useful for.

Death / Serious illness or injury

The most obvious thing that you could use the IAM to provide for is if you unexpectedly die, or become so sick/injured that you cannot log in any more.

In this case, if your blog and other Google content (eg YouTube videos) is personal, you may or may not want family or friends to access it - and you may or may not want it to be deleted.

But if your blog belongs to an organisation or a business, it's quite a different scenario:   you will almost certainly want someone else to have access.

And if it contains material about a hobby or public interest topic, you may well want to have it transferred to some kind of "data steward" - or you may want your estate to manage it as an asset, if it is profitable.

Losing access to your account

Some people lose access to their Google account because they:
  1. Set them up with an external email address
  2. Lose access to that email address
  3. Forget the Google account password
  4. Cannot remember enough details to regain access via the forgotten-password wizard.
The IAM will only help these people if they have set it up, and if they (or a friend) still has access to the alternative email address they entered.   So it's not a universal cure for this problem, but may help a little.

Losing interest in your account

People's lives and priorities change over time.   The blog that was all-important ten years ago may now be a distant memory.   In this case, if IAM is set up, people will at least get a chance to think about whether they want to maintain what was there, or not

The best approach?

There is no "one right way" to use the IAM to look after your blog when you stop updating it.   It's a very private decision, and depends on what risks you think you want to cover off, and how you are using your Google account.

Personally, I don't think that losing interest or losing access are likely to happen.    So I've set up my IAM information to cover the first case, ie death or incapacity, and used it to send messages to carefully selected friends and relatives.  I could do more, eg include details about selling a couple of blogs that would be "assets" in the right hands, and send messages to the firm who would be looking after my affairs.   But it's a start - and as with so many "death and taxes" type of issues making a start is half the battle.


How to set up your inactive account information


Once you have thought about what sort of situations you want to deal with, then setting up your inactive-account information is pretty easy.

To start with, go to the Account Management option your Google account settings page.   Once you're there, there is an easy set-up wizard, which covers the following points.

Warning that you're in danger of becoming inactive

Google doesn't want your account to suddenly become inactive.   So they collect details are used to warn you by sending a text message to your cellphone and email to an alternative address, saying that your account is close to becoming inactive. The current definition of "close" is one-month. Basically, this is your chance to stop the account becoming inactive by logging in.  

They ask for:
  • A mobile phone number (which needs to be verified - so it must be one that you can access now)
  • An alternative email address (which isn't verified - yet!)

Setting the timeout period

You need to choose how much time needs to go by without you logging in before your account is considered to be inactive. The default is three months, and other options are six, nine and 12 months.

Who else to tell

You can nominate one or more trusted contacts - ie email addresses that receive notification, and (if you choose, access to your data), once your account actually becomes inactive.



For each trusted contact, you need to give some message-text and also say which specific Google products they should get access too.



You can also set up an auto-reply to messages to your Gmail account, which is sent in response to all incoming messages after your account becomes inactive - or at most once every 4 days if one account sends you lots of messages.


What happens to your account:

Finally, you choose whether to delete your data once your account is inactive - the default value is "no", but you should change it to "yes" if you want to be sure that your blog etc are removed.


Confirmation

After you have saved your settings, you will get an email confirming that you entered.    (In my case, this message took several days to arrive - possibly because I get up my IAM settings fairly shortly after it had been introduced.   Hopefully it's got quicker now.


Limitations of the IAM

At the moment, IAM lets you set thresholds, notifications and actions for a whole Google account - there is no way to say that some blogs should be kept, and some deleted.

And there are still lots of things that we don't know about how IAM will work in practise.
  • Do you get only one reminder - or one every time you reach the inactive-account threshold again  (ie every 3, 6, 9 or 12 months)?
  • What happens if you're one administrator of a team blog, and your account becomes inactive with instructions to delete it - but there are other member or administrators who are still actively contributing?   (I would hope that the presence of these people means that your "delete" instruction is ignores, at least for the blog.   But I suspect that this won't be an easy scenario to provide for - and it's possible that Google haven't worked through all the options here.

    Ditto other shared resources (YouTube Channels, Shared folder/documents in Drive, etc)?  The dimensions will be different in each product, but the underlying problem is the same.


So while I think that IAM is a great idea, I'm also a little nervous about what problems it could cause if people choose to delete things without thinking through all the consequences.

And if you are going to set it up for your own personal blogs, then maybe now is a good time to transfer ownership of blogs that you made for clubs / societies / organisations / businesses to generic accounts being managed for them.




Related Posts

Understanding Google accounts

Team blogs:  letting other people write to your blog

Transferring blog ownership

Understanding how Blogger and Picasa-web-albums work together

Setting up AdSense for your blog

Monday, 4 February 2013

The "Single-Slash Double-Dot" rule for identifying spam links in phishing emails

This article is about email phishing, and spam-links in emails: how you can recognize them and what to do about them.


Understanding Spam vs Phishing


Most people know what regular spam is. Phishing is a more sophisticated type of spam, which combines information that the spammer knows (or guesses) with conventional spam techniques. Often phishing emails are addressed directly to you, and offer a "product" or "service" that you might realistically want. For example, they may offer to fix a security problem with your on-line banking (just as soon as you have gone to their website and given them your real on-line banking details).

Bloggers are particularly susceptible to phishing emails, because we write websites where we share information about ourselves. For example, anyone who reads Blogger-hints-and-tips should have no trouble guessing that I use both Amazon Associates and Chitika, and that I have a domain hosted with DomainDiscount24.  It's not much harder to work out that I'm interested in folk-music, and know a lot about public transport in my city. And even though I don't display my email address on the blog, it isn't that hard to guess from some of the screen-shots I use, or by subscribing to my RSS feed.    And you might be even more vulnerable if you link your blog to your Facebook profile instead of a Page.


Protecting yourself from Phishers

ISPs and email services detect and delete most regular spam emails before they are delivered. But this is harder to do with phishing emails, because they often look genuine. So you need to protect yourself against phishing.

The best way to do this is to be curious-and-cautious about any email you receive. There are lots of suggestions below about what this means, and what characteristics to look for. None of them can give a 100% certain answer about whether a message or offer is dodgy. But being aware of the sort of things you need to check, and in particular the "single-slash-double-dot" rule for checking links, is a an excellent start.


How to spot phishing emails

An email message may be a phishing attempt if some of the following are true:
  • You were not expecting the message, or any contact from the organisation it apparently comes from.
  • You've never heard of the organisation or company that it comes from - or you don't have any dealings with them.
    (That said, sometimes unknown organisations do contact you - try to establish their legitimate website or phone number from another source, to check if they're "for real" or not).
  • The message asks you to confirm account details by giving some personal information: no reputable company will ever want you to do this by email. Intelligent reputable companies will not expect you to do so by clicking on links in their website.
  • The message tries to make you respond quickly, to stop something bad from happening. (Basically, they're trying to stop you from thinking about the message before you respond to it.)
  • An email doesn't have your address in the To field - or it has your address and many others which you don't know.
  • The message-body doesn't start with your name (eg if it says "Dear Customer" instead of "Dear Joe Soap")
  • The from address, or the name as the bottom of the message (like the "signature" in a paper-based letter) is missing, or seems strange given where the message came from.
  • Bad spelling. Bad grammar. Poor formatting. Odd looking graphics / pictures / logos. Strange sentence structures (either to try to trick you, or because the author doesn't know your language well).

None of those features guarantee that a message is dodgy. But any of them should be enough to make you a little suspicious.

But there are some features that are more of a give-away:
  • The URL / hyperlink in the message isn't the right one for the company (eg it's from www.ebay.org instead of www.ebay.com)
  • The message contains a link which doesn't match the website show when you hover the mouse over it eg www.amazon.com - notice that it's linked back to Blogger-HAT instead of to the real Amazon.
    NB Even if a link looks like a link, ALWAYS check where it goes to by hovering your mouse over and seeing what the "tool tip" text is.
  • The message uses an URL shortening service (eg tinyurl.com, bit.ly, goo.gl) which stops you from checking where the link really goes.
    (This is a good reason why you shouldn't use link shortening services yourself:  they make it look like you have something to hide. Whenever I tweet about a post, I always put in the full URL: even though Twitter doesn't display all the characters in the message, they are available to anyone who hovers over the link).


A simple rule for evaluating links:

The last three points are the most helpful - but they rely on you being able to look at a website-link and know if it's spammy or not.

And spammers know that it's easy to confuse people by showing them long, complicated real links, that superficially look like real ones.  For example, consider
www.cnn.com.newslist.2013-01.headlines.trouble.com/headline-listing/xx03/index.html
Lots of people will look at this, see the "cnn.com" and think "ahh, that's a reliable news site, it must be fine."   But that's not actually true.

Fortunately there's a simple rule that you can use to find the real website that a link points to. It is
Single-Slash, Double-Dot

To use it, look at where the the link really goes (by hovering the mouse above it) and:
  • Find the first single forward slash
  • Look at the words between the two or three dots just before the slash
  • Decide if the link is genuine, based on these words.

The Single-Slash Double-Dot rule explained


In the example above, the first single forward slash is actually half-way through the link:
www.cnn.com.newslist.2013-01.headlines.trouble.com/headline-listing/xx03/index.html

So the website that it is pointing to is actually trouble.com - which might not be a place that you want to visit.  Compare this with
http://www.bbc.com/future/story/20130129-blue-heart-of-the-planet
where the first single-slash is quite near the start, just before the very genuine www.bbc.com.

In summary, the website name between these two or three dots should match the one that is shown in the email, and should be the right one for the company. For example, one of these points to the real TradeMe, and one doesn't:
TradeMe 
TradeMe
(Yes they look the same:  remember you need to start by hovering your mouse over the links, to find out where they really point to.


Two vs three dots?

You sometimes have to check back three dots because some countries have two-level internet addresses. For example, instead of .com you will find
  • .co.uk - in the United Kingdom (two level, so you need to check three dots)
  • .com.au in Australia (again,two level, so you need to check three dots)
  • .ie - in Ireland, (single-level, so you only need to check two dots).

So like the many internet security issues, there are still judgements you need to make, and knowledge you need to apply.   But still, it's fair to say that you can ...
Use the single-slash-double-dot rule to work out where the link in an email message really goes to.
[Tweet this quote].


What do to if an email or link is suspicious

With old-fashioned spam, the rule was always to delete the message, no questions asked.

With suspected phishing emails, it's a little harder.   You need to make a judgement:
  • What are the chances that this is genuine?/
  • What are the consequences if it is genuine, but I ignore it?
  • Is there some other way that I can check out this out, without clicking on the link in the email? For instance by going directly to the banks' website by typing in the address myself - or by phoning the person to ask if they really did email me.

You need to weigh up these three factors, and based on them decide whether to investigate further (eg by going to the website directly, or emailing the sender for more information, whether to trust the email message, or to just delete it.


TL/DR:

Phishing emails use information about you to personalize spam.

Apply common sense and intuition to every email that you receive. Check that links go where they are supposed to - and don't click them if they don't.

Use the single-slash-double-dot rule to work out where the link in an email message really goes to. [Tweet this quote]






Related Articles:

Displaying email addresses on your blog

Offering an RSS feed

Linking your blog to your Facebook profile

How to make a "tweet this quote" option.

Monday, 16 January 2012

Letting other people write in your blog

This article describes the ways that you can allow other people to write and publish on your blog.  It looks at and the advantages and disadvantages of each approach.

Comments vs blog-posts, the case for team-blogs


There are two main ways that content can be put into your blog: comments and posts.

Blogger is designed, around the idea that initial discussions about new topics are started by you, and put into posts.   Readers interact with you by commenting on your posts - although, yes,  there are ongoing problems with readers not being able to comments, it seems mainly because of their security settings.

But there may be some people who you want to be able to do more than just comment.  Increasingly people want to do more with their comments - they want to include links (eg to pictures that show what they mean), or they want to integrate comments with their social networks (for example, as shown in the ways that James from JS Blogstop has integrated Facebook and Twitter comments with his blog-comments.

And some groups of people want to work together to make a blog that they all write posts for, and are prepared to make and follow their own rules/guidelines (which aren't enforced by Blogger) to make this successful.


Team organisation vs Blogger tools

There are many ways to organise a team of bloggers.
  • Some blogs are run by one person (the owner or manager), who recruits people to write for them (either for payment, or as volunteers).
  • Some belong to a company, and are operated by an employee according to their job description. 
  • Some blogs are owned by a committee, who delegate one person to do all the work on them. 
  • Some have a team of writers who and designers, who all contribute equally and who make collective decisions about how things are done. 
And there are many more options in between.

Unfortunately Blogger cannot set up permissions for all the different ways that real-world teams work - there are just too many options. Instead, you need to design the way your team works, using the options that Blogger does provide.   So - what are these?


Have posts emailed to you

Email icon crystalThis is the simplest way to let other people write for your blog:  authors write their content in the tool of their choice, and email it to you. You load it to Blogger, do any formatting or editing and hit the publish button.

Pros
  • Authors don't need to learn Blogger software
  • You have total control over what's published, and when, and how it looks

Cons
  • Time:  You need to put time into converting each submission
  • Conversion problems:  Some formats don't convert well (eg Microsoft Word can only sometimes be successfully converted to blogger - and should never be copy-and-pasted)
  • Wasted time - and risk of mistakes:
    If an author has put a lot of effort into layout (headings, bold, italics, tables, footnotes, etc) you may need to recreate it all yourself - and some features, eg tables, may not be well-supported by Blogger.
  • Managing attached files:If a post includes a lot of graphics or videos, you need to receive these files too, and load them to Picasa (or an appropriate file-host for non-image files), and link to them from the post: your author will not be able to set up the links. Alternatively if your author has linked to pictures that are hosted somewhere, you lose control over whether these will continue to work in the future.  And there won't be a thumbnail picture for the post if none of the pictures are stored in Picasa-we or Google + albums.

To make receiving posts by email less painful:

If you end up using this option because none of them others are suitable, you could ask your writers to send you  HTML instead of a custom document format like Word.

Or ask them to work in Google Docs, which you can copy-and-paste from.

Or  send PDF files: host these  in a place that provides embed code (eg Scribd), and you keep their formatting by putting the embed code into your posts.



Have posts emailed to your blog

Blogger has the "mail2Post" feature, which lets you set up your blog to receive posts that are emailed to a "secret" address that you have set up.

You need to choose whether mail2Post submissions are automatically published or set to draft, and the "secret words" part of the mail2Post email address.

Then you need to tell the people who you want to post how to do so, ie what email address to send their contributions too, and how to handle things like pictures or videos that they want to include.

Pros:
  • Saves you time
  • Lets people post even if you aren't available to Publish
  • Writers can work in a familar tool, and only need to be on-line while they're sending their content

Cons:
  • Attached photos don't always work, your writers don't control where in the post they are put, and you don't control where the picture files are saved
  • There is no way to automatically add Labels to posts (you need to add them manually later)
  • Content that you don't want may be put on your blog if a hacker guesses your secret-words-address
  • There are no guarantees about formatting (bold, italics, bullet-pointed lists) being shown correctly: a lot depends on the writer's email client settings
  • You cannot tell who the post-author was from the Blogger dashboard
  • If you set incoming posts to draft, Blogger has no way of notifying you that there are new posts waiting for you  r approval - you need to notice that they're there.


Making it work:

The last few problems can be avoided if you use email-forwarding and mail2Post together. This also lets you add rules / filters within Gmail, so reduces the risk of automatically publishing something inappropriate, and you can set up notifications to yourself about posts waiting your review.



Blogger Author rights:

Each blog can have one or more administrators (who can do anything), and or more authors, who can only write new posts, and edit their own existing posts. Authors and administrators are considered to be members of a team blog, and each blog can invite up to 100 people to be members.
Pros:
  • It's fairly easy to make someone into an author
  • The writer can use Blogger's tools for formatting their post, and for adding pictures and videos.
  • Labels can be applied before a post is publihsed
  • Posts can be scheduled into the future
  • It's easy for authors to format links nicely (eg "this article on Blogger-HAT" instead of "www.blogger-hints-and-tips.blogspot.com/XXX")

Cons:
  • You cannot force writers to always let you review posts before they're published: you can ask them to save posts as draft, but there's nothing to guarantee that they will do so
  • You cannot guarantee that authors will always use your preferred styles and formats
  • Authors need to learn to use Blogger: we all know it's not that hard - but I will guarantee that some people think it is!
  • You cannot stop writers from editing their earlier posts
  • Authors can only edit their own earlier posts, and not those of other wrtiers. (This  could be a problem later if some authors move on you have new-team members: only administrators can edit the work of now-departed authors.)
  • You cannot control where your writers host pictures and videos: the post-editor lets them link to any location. this means that an author keeps all their photos in Flickr will write posts that don't have a thumbnail picture (because these pictures must be stored in Picasa-web-albums


Making it work:

Members of your team need to be very clear about how you work together, and what the consequences are if someone breaks the rules.



Administrator rights

A blog administrator has full rights over a blog: they can change the template, delete the blog, add other administrators, set up mail2Post, delete posts, etc - just like you can. Giving someone administrator right is the ultimate step in letting them write for your blog.

Pros:
  • This has the same advantages as giving someone author rights - and granting administrator rights is just a small extra step once someone is an author
  • And administrators can edit the work of other authors too, which may be an advantage or disadvantage depending on your circumstances.
  • Having a 2nd administrator can be a good safety precaution, in case you become sick or lost access to your account.

Cons:
  • Someone with administrator rights has full control over the template and posts in your blog: they can do everything you can do.
  • They can also remove other administrators - meaning they could remove your admin rights!


Making it work:
You need very clear rules about who is responsible for what - and  a very trusting relationship with the other administrators.



Mix-and-match


Petes Candy StoreRealistically, if your blog has a number of team members, possibly including guest-posters, then you will probably use a mix-and-match approach to giving rights to other people.

This means you will need to make choices about who can do what - and why.

For example:
  • New / prospective guest-posters may be invited to email posts to you
  • Established guest-posters may be set up with mail2Blog, or even as authors inside Blogger
  • Regular writers may be set up as authors
  • Core team members will probably all be administrators - and you will have a range of measures (including regular backups and password change rules) to make sure that you are all honest with each other.


Your experiences?

I am keen to hear more about how people have made team-blogs work in practice:   how did you decide what rules to follow, how did you sort out arguments, and prevent team-members from hi-jacking the blog?    What other problems did you face?




Related Articles:



Making someone into an author on your blog

Making someone into an administrator on your blog

Setting up mail2Post / Post to profile on your blog

mail2Post: knowing who posted what

Using tables to show data in your blog

Converting from MS Word to Blogger - via Google Docs

File hosts:  places where you can keep files that are used on your blog

How is the thumbnail picture for each post chosen

Friday, 13 January 2012

Giving another Google account control over your blog

This article is about changing the ownership of your Blogger blog.   As well as looking at how to make the changes inside Blogger, it also looks at some other issues you may need to think about (eg comment moderation, items outside Blogger, advertising).


Blogs and Google Accounts

Each blog is "owned" by at least one Google account.   This administrator account can do anything in the blog:  write posts, set up new authors, change the template, add new formatting rulesdelete posts - or the entire blog, moderate comments, etc etc etc.

Initially, the account that sets up the blog is the owner.  But if the person using this account gives someone else administrator rights, then there are multiple owners.

And once there are multiple administrators, any one administrator can delete all the others, or just demote them down to being authors, thus making him or her self into the owner,

So this is the very minimum that you need to do to transfer blog ownership to another Google account:
  1. Give the other Google account author rights, then once this is successful,
  2. Give the other Google account administrator rights.

But, unless you have a very, very simple blog, you cannot stop there: you also need to think about other things that may have been set up, inside Blogger, and in any other tools that the blog uses.


Inside Blogger


Comments
You may want to change who is notified about any comments that are left on the blog.  This is done on the Settings / Comments tab:  there are separate sections for
  • Comment moderation (one email address)
  • Comment notification (a list of email addresses)


Email Notifications:
If the blog is set up to notify anyone when it is published, you may want to review this - any any related Google groups or forwarding addresses you may be using to make this work.


Mail2Post:
If the blog is set up to receive postings by email, you may want to change the secret words (so the old owner no longer knows them).   If there is an intermediate email-address used so that the owner can tell who made Mail2Posts, then the new owner should either take over this account, or set up and use a new one.   
All set under (Settings / Email and Mobile /Posting Options)


Mobile Posting:
If the blog is set up to receive postings by SMS, you may want to change the device that is registered, so the old owner no longer has access.  (Settings / Email and Mobile /Posting Options)


Custom URL:
If your blog has a custom domain, then you'll almost certainly want to transfer control of this.

If you purchased the domain inside Blogger, then you should have set up a domain-administrator account shortly after registering the domain-name.   The easiest option is just to tell the new owner the login name and password for that account - and tell them how to access it.

If the new owner doesn't want to keep the Google (ie goDaddy or eNom) link, then they can log in to whatever domain registrar that they want to use, and request a transfer.   You will get an email and need to do some things in response to make the transfer successful.   Make you you read it carefully, because each registrar is different.

But I'm not currently sure if there's any way for the new owner to keep the Google (goDaddy/eNom) link.


Items controlled outside Blogger

These days, most blogs include some items which are stored outside Blogger. If you transfer the ownership of a blog, you may also want to transfer these items, or at least make a plan for what will happen to them.

I've put notes about a few that I know about here - If you know about any others that are popular, please leave a comment below and I'll update the list.


RSS Feeds created in Feedburner
To transfer ownership of an RSS feed, log into Feedburner, click on the Feed that you want to transfer, and click on the Transfer Feed link.   You are prompted to enter an email address, and Feedburner say that they will contact that email to arrange the transfer within 72 hours.

Photos / Images
Any pictures that you upload via Blogger are stored in a Picasa web-album that belongs to the account that did the uploading.   Unfortunately Google doesn't yet provide any way to transfer ownership of individual web-albums.    I don't (yet) know if the recently introduced collaboration features help here or not, but they may.

Also, pictures uploaded before Blogger started using Picasa-web-albums (possibly sometime in 2007 I think) cannot be transferred.

Calendars 
???

Docs files 
If your blog links to any files hosted in Google Docs or Sites file stores, then these are owned by the Google Account that created or uploaded them.   Check with that site to see if it's possible to transfer.


Custom Maps
I don't think that there is any way to transfer ownership of these.

An option is for the old owner to provide the export file location (view the map, right click on "view in google earth" and choose copy URL), and the new owner could then create a new map (and put this into the blog) - however this will be a lot of work if may maps are used.


Custom-searches
I don't think that there is any way to transfer ownership of these.  


Videos 
(if you own them - not ones owned by others that you're just linked to)


Social Network sites
For example Facebook pages, Twitter accounts.   (These may not be inside the blog at all, but may be a key part of it's promotional tools - if you are taking over ownership of a blog, you will probably want to take over these too.)

    For items that cannot be transferred, you need to transfer them manually (if this is possible), or to reach an agreement between the old account owner and the new account owner about what will happen to the items.    For example, you may agree that the old account owner will not delete the web-albums for one month, and that they will download the photos and provide them on CD to the new account owner - who will then upload them, and change all the photo links in the blog to the new URLs.

    If your blog has any advertising (eg AdSense, Amazon Associates, Chitika, or indeed any other advertiser) you may need to transfer the account that this is linked to.

    For AdSense, if the advertising was set up through Blogger, you can change the account under the Monetize tab.   However if any ads were put inside individual posts, these posts will all have to be edited, and ad-units for the new owner will need to be added.   (I don't think you can just replace the Publisher-ID, because the ad-unit has and ID as well.

    I'm not sure how sophisticated this is as yet:  if you want to keep the advertising, rather than removing and then re-creating the advertising, it may be a good idea for the new account to set up advertising accounts for itself on another (test) blog first, and then switch it over in the blog that's being changed, so that the existing ads/ad-structures are kept.


    An Alternative:

    Depending on how many items-outside-Blogger that the current account owns, it may be better for the person who owns the current account to just give it to the new owner, and to get themselves a new account.

    Even better:  If there's a chance that the blog will ever change hands, set up a new account just it when you start the blog.  I'm going to write a whole post about this one day soon - but for now I'm convinced that you really need to think about the future as soon as you start your blog.



    Related Articles: 



    Understanding Google Accounts

    Granting administrator-level access to your blog

    Setting up a new author for your blog

    Deleting blogs and blog-posts

    Setting up email posting for your Blogger account

    How to resolve conflicting Google and Google Apps accounts

    Why RSS / Subscribe to Posts is important for your blog

    Understanding Picasa-web-albums

    Getting started with Blogger

    Monday, 26 December 2011

    Setting up a new Administrator for your blog

    This article shows you how to set up someone else (ie another Google account) as an administrator for your blog.

    What is a blog administrator 

    Wikipe-tan moppingAn administrator is a Google account (controlled by a person!) that has full rights over your blog: they can do anything that you can do, including write posts, edit anyone else's posts, change the template, add gadgets and formatting rules.   Also they can grant and remove author and administrator rights.

    This last point is very important: if you add someone as an administrator, then they immediately have the power to remove you as an administrator. This means that you need to be very careful who you give these rights to.

    How to give someone administrator rights

    Firstly, give them author rights.
    To do this, you may need to log in as the other person, or to wait for them to accept the invitation themselves. If you log in as them, then make sure that you either:
    • Use two computers,
    • Use separate browsers on the same computer (eg Firefox and Chrome, or Internet Explorer and Safari), OR
    • At least clear your cache and restart your browser between each login.

    Then upgrade them by logging in to Blogger as yourself (ie with an account that has administrator rights already).

    Pre-Sept-2011-Blogger (ie the old interface):
    • Go to the dashboard, Settings > Permissions tab.
    • Every account that has accepted an invitation to be an author will be listed. Choose the one want to make into an administrator, and click the Grant admin privliges link  to the right of their email address.  
    • Click Grant admin privileges button on the confirmation screen

    Post-Sept-2011-Blogger (ie the new interface):
    • Go to the dashboard ("home" button), Settings > Basic tab.
    • Scroll down to the Permissions area. 
    • Every account that has accepted an invitation to be an author will be listed. Choose the one want to make into an administrator, and choose Admin using the drop-down arrow to the right of their email address.   (Note:  this is an immediate change, you do not have to click Save.)

    Note that there are also options here for removing administrator rights, and removing author rights too.


    Very important:
     If you are doing this before removing your own administrator rights, eg as part of transferring a blog from one account to another, then it is very important make sure that the transfer has been successful before removing yourself: you do not want to be in a situation where your own account is no longer an administrator, but you don't have access to the actual administrator account.

    As before, ways of doing this include
    • Using two different computers,
    • Use separate browsers on the same computer (eg Firefox and Chrome, or Internet Explorer and Safari), OR
    • At least clear your cache and restart your browser between each login.


    Other things to consider

    Comment moderation:
    Only blog-administrators can moderate comments, so you may need to:
    • Set up comment notification so that the new administrator is emailed when a comment is left
    • Make sure that they know the policies that are applied to comments
    • Agree who is responsible for moderation at what times

    Custom domain administration:
    If you have a custom domain, and the new administrator may need to be involved with this, then you need to tell them about the domain-administrator account that you set up after purchasing the domain.

    Or if you are using a domain from an external domain registration company, they may need some other information about how to manage the domain.


    Other blog settings:
    Because an administrator has full control over the blog, they can do a number of things including:
    • Editing posts made by other authors
    • Change the template, layout or gadgets
    • Edit any of the blog's Pages
    • Granting and revoking other people's permissions
    • Change the default language and date/time settings 
    • Changing the RSS feed settings in any way
    • Edit the Adult-content warning setting, or the blog's Open-ID URL.
    You may need to agree how changes like this are to be done on your blog - including ensuring that backups are stored safely.



    Related Articles:



    Making an author for your blog.

    Transferring blog ownership

    Setting up a custom-domain administrator account

    Using a custom domain from an alternative registrar 

    Friday, 9 December 2011

    Making someone an author on your blog

    This article shows you how to set up another person (ie another Google account) as an author for your blog.

    Google, Blog-Authors and Blogger

    Setting someone up as an "author" in Blogger is one way that you can let other people post to your blog.

    It's easy to do: you tell blogger to create an invitation, which sends the person an email saying you would like to be an author, they click a link in the email and then sign in with a Google account to accept the invitation. And once it is done, the person can write and edit their own posts.
    All you need to know is the person's email address: it doesn't matter if it's a gmail address or not.  You can send invitations to people with hotmail, yahoo, and indeed any email address where your invitee can read their email.

     However the other person will need to use a Google account (which doesn't necessarily include Gmail) to accept the invitation: don't waste time inviting people who are allergic to Google and not willing to sign up for an account.


    How to make someone a blog author

    Send them an invitaton:
    Pre-Sept-2011-Blogger (the old interface):
    • Go to Settings > Permissions > Add Authors
    • Enter the email address of the person you want to invite
    • Click Invite
    Post-Sept-2011-Blogger (new interface):
    • Go to Settings > Basic > Permissions
    • Beside Blog Authors, click + Add Authors
    • Enter the email address of the person you want to invite
    • Click Ok


    A few minutes later, the email address that you sent to receives an email invitation, like this, from no-reply@google.com:
    -------- Original Message --------
    Subject: You have been invited to contribute to AnotherTestBlog
    Date: Tue, 06 Dec 2011 20:47:45 +0000
    From:   THE NAME OF FROM YOUR BLOGGER PROFILE 
    To: maryc@act.nz

    The Blogger user Mary has invited you to contribute to the blog: AnotherTestBlog.

    To contribute to this blog, visit:
    http://www.blogger.com/i.g?inviteID=468-GEEKY-LOOKING-CODE-973&blogID=31-GEEKY-LOOKING-CODE-83

    You'll need to sign in with a Google Account to confirm the invitation and start posting to this blog. If you don't have a Google Account yet, we'll show you how to get one in minutes.

    To learn more about Blogger and starting your own free blog visit http://www.blogger.com.


    When the person who gets the email clicks on the link, they are taken to Blogger, and asked to sign in

    Once they have clicked the link and sign in, the Google account that they log in with has "author rights" to your blog (just the one you invited them to, not any others you've made).

    The person does not need to have a gmail or Google account for you to invite them to be an author - but they will need to sign in using a Google account (new or existing) to accept the invitation.


    What you will see:

    Once the person has accepted the invitation, the Google account name (which looks like an email address) that they use to accept it is shown as an author on the permissions tab (the one that you went to to invite them to be an author):



    If they accept the invitation by signing to Google in with a differnt email address than the one you invited, you will get a message telling you about this. It says
    -------- Original Message --------
    Subject: Your invitation was accepted using a different email address
    Date: Tue, 06 Dec 2011 22:51:33 +0000
    From: Blogger
    To: YOUR-EMAIL-ADDRESS

    Your invitation for THE-EMAIL-ADDRESS-YOU-INVITED for your private blog "AnotherTestBlog" has been accepted, but using a different email address. It has been accepted by THE-ACCEPTING-EMAIL ADDRESS.

    If your invitation has been accepted by someone you do not know or did not intend to invite, please visit the Permissions tab of your blog where you can choose to revoke access.

    Thanks,
     The Blogger Team

    What your new author will see:

    When your new author logs in to Blogger.com - using the Google account they accepted your invitation with - they see a regular Blogger dashboard, except that they only have access to a limited range of functions:


    An author can:
    • Create a post,
    • Edit the date for posts they have made
    • Turn comments of for posts they can edit (provided the default setting is On)
    • Edit a post that they made
    • Add a mobile device so they can post using SMS/MMS - (this may only work in certain countries)
    • Set themselves up to post using email (the mail2Post feature) - note that their "secret words" address is different to yours - and that an author could use this feature to let anyone else post from their account.
    • Remove themselves as an author

    An author cannot:
    • Edit posts made by other authors or administrators
    • Change the template, layout or gadgets
    • Change the blog's URL, title or description
    • Set up for any email address to receive comment-moderation alert messages
    • Moderate comments (even about their own posts), or change the global comments settings
    • Edit any of the blog's Pages
    • See the blog's statistics
    • Install AdSense into the blog (although they can put ad-units of their own inside their own posts)
    • Give other people permission to write on the blog - except by sharing their own mail2Post "secret words" address.
    • Change the default language and date/time settings for the blog
    • Alter the RSS feed settings in any way
    • Set up Google Analytics for the blog
    • Edit the Adult-content warning setting, or the blog's Open-ID URL.


    Troubleshooting

    Be sure your transfer works:
    If you are accepting the invitation yourself (eg you are transferring the blog to another Google account that you control), then make sure that you either
    • [Recommended]: use a different browser for each Google account, or
    • Each time you need to change Google accounts, log out of the present account, clear your cache and re-start your browser.

    Make sure the emails arrive:
    We sometimes see questions in Blogger Help Forum from people who say that they sent invitations, but the email message was never received.

    The most common solution is that the author-to-be needs to check their spam folder - very often that's where the messages have gone.  If that doesn't work:
    • Try sending the person an email address from your regular email account - so you know if there's a  problem with their email.
    • Cancel the invitation (there's a link in the Invitation screen), wait a few minutes and try again.
    • Try sending an invitation to a different email address that you control, and forwarding that message (without clicking the accept link) to the person.yourself.

    If none of this helps, post a question in Blogger Help Forum: tell us your blog's URL, and exactly what options you have tried.


    More things to think about:

    As well as giving the person rights, you may also need to work with them to make sure they understand how you use certain features in Blogger:
    • What policies do you have for responding to comments - Who is notified about comments left about their posts?  What guidelines are followed about complaints?  How do you deal with spam and abuse - and what do you regard as abuse?
    • How do you organise pictures, and other external files that your blog uses?
      I always upload pictures to Picasa-web-albums outside of Blogger, LINK so I can control the picture size/resolution. If you do this, you need to make sure that your new author knows where to file their pictures.
    • Have you got a place where you keep policies, documetation, ideas for new posts, etc (eg I use a separate documentation blog for this) - does your new author need access to this?

    Next:

    Giving someone administrator access to your blog.



    Related Articles:



    Understanding Google accounts

    Putting AdSense ads into your posts

    How to put posts into your blog's pages

    Why RSS / Subscribe to Posts matters for your blog

    Your blog and the so-called-social networks:  Facebook, Twitter, eg al

    Putting pictures onto your blog

    Advertising and your blog, some things to consider