"anyone can build a wave server and interoperate, much like anyone can run their own SMTP server. The wave protocol is open to contributions by the broader community with the goal to continue to improve how we share information, together"

A unit testing framework for App Engine. Includes a browser-based test runner, which is sort of cool and weird.

If I ever run Google Notifier again...

Google implements web hooks for Code hosting.

"This document is meant to provide web application developers, browser engineers, and information security researchers with a one-stop reference to key security properties of contemporary web browsers."

Makes JavaScript safe(-ish?) for IFRAMEs and widgets and such.

"We provided some UX research on desktop apps using federated login and/or OAuth."

"an open source cryptographic toolkit designed to make it easier and safer for developers to use cryptography in their applications"

Libraries and informal plugins for GAE.

"A semi-automated, largely passive web application security audit tool, optimized for an accurate and sensitive detection, and automatic annotation, of potential problems and security-relevant design patterns based on the observation of existing, user-ini

"lets you access multiple sources of structured data that you can display, choosing from a large selection of visualizations"

A simple Ruby library to wrap the Google Chart API

"lets you dynamically generate charts"

thx Ben