OpenSocial is a framework that allows developers to write code once that can run across multiple social networking platforms. It includes a JavaScript API and a generalized data API to access user data from different sites in a common way. The document discusses OpenSocial's security features like separate domains for iframes to prevent XSS attacks, and rate limiting. It notes that major sites like Hyves, Hi5, Myspace, and Orkut are implementing OpenSocial, with a timeline of Q1 rollouts on those sites. Google is also heavily committed to OpenSocial by contributing to specs and providing hosting.

1. OpenSocial

2. Write once, run anywhere
1 general version, many specific versions
(interface, specific fields)

3. •Javascript API
•Data API

4. Data API
Like a ‘normal’ API, but generalized.
No specification yet, people working on it
however
Our API
http://hyves-api.hyves.nl/
http://trac.hyves-api.nl/

5. Hyves.nlHyves.nl
http://www.slide.com/os.xml
Served from:
http://gadgets.hyves.nl/gadget?url=http:%2F
%2Fwww.slide.com%2Fos.xml
Slide.com
Data.hyves-api.nl
OpenSocial call
Secure phone home
Gadgets.hyves.nl
internet
ifpc

6. All complexity abstracted in javascript API. (makeRequest,
requestPermission, getOwnerFriends)
Caching of gadget on the gadgetserver – bandwidth

7. Security
Separate domains (iframe, XSS)
Caja
Rate limiting
Google security experts

8. •OpenSocial is alive and going forward fast
•Hyves, Hi5, Myspace, Plaxo, Orkut, Six Apart high
level presence
•Now 0.6, going towards 0.7
•Timetable: Q1: Hyves, Hi5, Myspace, Orkut
•Gadgets: many. Slide.com, Shelfari, iLike, RockYou
Very serious Google commitment (specs, caja,
shindig, gmodules.com, hosting)

9. Questions
hyves-api@hyves.nl
hackathon

10. Questions
hyves-api@hyves.nl
hackathon