I quit installing Java JRE (Java Runtime Environment) on new computers some time ago but I still have a couple of older installs with Java running on them. Oracle recently started pushing Java 7 to them. With Java 7 these computers were SILENTLY installing something called JavaFX. I Googled it and found mostly developer-oriented discussions.
Long time readers of this blog know I'm a regular listener to Leo Laporte and Steve Gibson's Security Now. Alternate episodes are listeners' questions so I posed the JavaFX question to Steve. My question was chosen for Episode 358.
In short, Steve's answer was "This is more bad news."
Just uninstall Java and JavaFX. You really won't miss it.
Sunday, June 24, 2012
Wednesday, June 20, 2012
Am I the Last Person?
Maybe I'm the last person to figure this out but really...
Have you ever bought anything using PayPal? Ever bought anything using Amazon checkout? Ever used Facebook social plugin?
Did you realize that after you finished the transaction with the store and looked around to make sure that you were logged out of the store that you still had an active authorized session with PayPal or Amazon? You can't imagine what information Facebook captures and shares if you're logged in!
Try this the next time you use PayPal. When you finish the transaction, look around to make sure that you are logged out of the store. Close the browser tab. Now open a new tab and browse to paypal.com. You're still logged in.
Now admittedly you're in your own house with your own browser but a malicious site with a click-jacking exploit could look around and see the still active session with PayPal and have fun with your credit. Amazon works the same way.
All you need to do to be safe is after a web transaction that uses a third party payment system, go to that third party site and logout. You'll sleep better.
Have you ever bought anything using PayPal? Ever bought anything using Amazon checkout? Ever used Facebook social plugin?
Did you realize that after you finished the transaction with the store and looked around to make sure that you were logged out of the store that you still had an active authorized session with PayPal or Amazon? You can't imagine what information Facebook captures and shares if you're logged in!
Try this the next time you use PayPal. When you finish the transaction, look around to make sure that you are logged out of the store. Close the browser tab. Now open a new tab and browse to paypal.com. You're still logged in.
Now admittedly you're in your own house with your own browser but a malicious site with a click-jacking exploit could look around and see the still active session with PayPal and have fun with your credit. Amazon works the same way.
All you need to do to be safe is after a web transaction that uses a third party payment system, go to that third party site and logout. You'll sleep better.
Sunday, June 17, 2012
It's a DONGLE
I'm conflicted on Apple products. My wife loves her iPhone. My iPad is worlds better than my hacked Android Nook Color. But I recognize the Apple Tax. And the Reality Distortion Field is unbelievable.
The recent announcements are a case in point. While I'm not in the market for an Apple laptop I still follow the products. I was reading PCMag's review of the new MacBook Pro. Right at the top of the page were the Pros and Cons.
Doesn't that distortion hurt?
I couldn't believe that using Ethernet on a modern laptop requires a DONGLE. Please Apple, don't call it an ADAPTER. It's a DONGLE.
I went off to find what this gadget looks like. Amazon has them for pre-order.
I thought that looked familiar so I Googled some. Yep. I thought I'd seen that before.
Why couldn't Apple have used the elegance of XJACK?
They could have called it an iJACK and have said that "When not in use, the iJACK magically retracts into the MacBook for storage."
There's an alternative review on Wired.
The recent announcements are a case in point. While I'm not in the market for an Apple laptop I still follow the products. I was reading PCMag's review of the new MacBook Pro. Right at the top of the page were the Pros and Cons.
Doesn't that distortion hurt?
I couldn't believe that using Ethernet on a modern laptop requires a DONGLE. Please Apple, don't call it an ADAPTER. It's a DONGLE.
I went off to find what this gadget looks like. Amazon has them for pre-order.
I thought that looked familiar so I Googled some. Yep. I thought I'd seen that before.
Why couldn't Apple have used the elegance of XJACK?
They could have called it an iJACK and have said that "When not in use, the iJACK magically retracts into the MacBook for storage."
There's an alternative review on Wired.
Thursday, June 14, 2012
How I Keep Current on Technology
In a recent discussion with a Fortune 10 organization I was asked how I keep current on technology. The answer was quick - "I don't listen to the radio in the car."
Very briefly here are the mechanics. I use a BlackBerry Remote Stereo Gateway that presents an A2DP connection to one of several Android devices, Captivate or NOOKcolor running Car Cast app.
What I listen to:
All About Android
All about Microsoft
Commonwealth Club Radio Program
Daily Internet Storm Center Threat Update
IT Conversations
Microbite
NPR: Technology Podcast
Radio Leo
Security Now!
Speaking in Tech
Tech News Today
Technometria with Phil Windley
I try to aggregate these on my Podcasts I've Listened To blog.
And I read a few RSS feeds:
A Software Insiders Point of View
Between the Lines
Chaos Manor Reviews
Computer Technology
dalingrin
Digg / Technology
Google Voice
Googling Google
(IN)SECURE Magazine
IntelliAdmin.com
John C. Dvorak
Krebs on Security
Lifehacker
Microsoft Security Bulletins
RISKS Digest
Smarterware
The Raw Feed
The Register
Very briefly here are the mechanics. I use a BlackBerry Remote Stereo Gateway that presents an A2DP connection to one of several Android devices, Captivate or NOOKcolor running Car Cast app.
What I listen to:
All About Android
All about Microsoft
Commonwealth Club Radio Program
Daily Internet Storm Center Threat Update
IT Conversations
Microbite
NPR: Technology Podcast
Radio Leo
Security Now!
Speaking in Tech
Tech News Today
Technometria with Phil Windley
I try to aggregate these on my Podcasts I've Listened To blog.
And I read a few RSS feeds:
A Software Insiders Point of View
Between the Lines
Chaos Manor Reviews
Computer Technology
dalingrin
Digg / Technology
Google Voice
Googling Google
(IN)SECURE Magazine
IntelliAdmin.com
John C. Dvorak
Krebs on Security
Lifehacker
Microsoft Security Bulletins
RISKS Digest
Smarterware
The Raw Feed
The Register
Sunday, June 10, 2012
Tracking Cookies
Recently when I was browsing the Guardian I got this bar across the top of the page.
This must be from the EU's new cookie directive. From the Register:
In that section was a link to the Network Advertising Initiative.
I went there and clicked on that big red button on the right.
That button took me here.
While I had all either "No Cookie" or null entries a friend had a lot of sites with "Active Cookie: You have not opted out and you have an active cookie from this network."
So you know what I did. Clicked on "Select All" and then "Submit."
Ooops!
Hmmm. Why didn't it take?
I tripped myself up. In Chrome I had third party cookies blocked. It seems that the opt-out cookies are technically third party cookies.
So I went to Chrome's Settings. In Settings I clicked on "Show advanced settings..." Next I went to Privacy / Content Settings.
I unchecked "Block third-party cookies and site data" and clicked "OK" way down at the bottom.
Then I tried the "Select All" and then "Submit."
Much better. A couple of them still didn't take but I made real progress. Then I re-checked "Block third-party cookies and site data" in Chrome's settings.
On this page the NAI says:
For the truly paranoid, go run this test.
This must be from the EU's new cookie directive. From the Register:
The EU has put forward a directive that partly covers the use of cookies (Directive 2009/136/EC [PDF]) and set a timetable for this to be incorporated into the national law of member states by 25 May. The rules emphasise the need for clear consent from a user, underpinned by clear up-front explanations, before cookies are installed on a user's machine.The link in the bar on the Guardian page took me here. That page is very thorough and further down the page was this section on "How do I turn cookies off?"
In that section was a link to the Network Advertising Initiative.
I went there and clicked on that big red button on the right.
That button took me here.
While I had all either "No Cookie" or null entries a friend had a lot of sites with "Active Cookie: You have not opted out and you have an active cookie from this network."
So you know what I did. Clicked on "Select All" and then "Submit."
Ooops!
Hmmm. Why didn't it take?
I tripped myself up. In Chrome I had third party cookies blocked. It seems that the opt-out cookies are technically third party cookies.
So I went to Chrome's Settings. In Settings I clicked on "Show advanced settings..." Next I went to Privacy / Content Settings.
I unchecked "Block third-party cookies and site data" and clicked "OK" way down at the bottom.
Then I tried the "Select All" and then "Submit."
Much better. A couple of them still didn't take but I made real progress. Then I re-checked "Block third-party cookies and site data" in Chrome's settings.
On this page the NAI says:
The NAI has adopted a policy that all NAI member companies set a minimum lifespan of five years for their opt out cookies.So I should be done for a while.
For the truly paranoid, go run this test.
Wednesday, June 06, 2012
Nook Color Ice Cream Sandwich
Last summer I installed Android 2.3 (Gingerbread) on my Nook Color. I used a technique described on the XDS Developers forum that let the Nook boot Gingerbread from a microSD card. The developer (verygreen) of this technique has apparently moved on to new challenges.
In the meanwhile, Android 4.0 (Ice Cream Sandwich - ICS) has dropped and there are nightlies for the Nook Color but the installation techniques install ICS to the eMMC, the internal flash drive. I still like the simplicity of booting from a microSD card.
The thread above has continued to get comments and questions and leapinlar has been very helpful in fielding these.
So here's how to install CyanogenMod 9 (CM9) Ice Cream Sandwich on a microSD for a Nook Color.
Use a Sandisk Class 4 8GB microSD card as recommended here. Use a microSD USB adapter and inset the microSD and USB adapter into your computer.
leapinlar has updated verygreen's microSD image to support ICS. Download the latest generic-sdcard-v1.3-ICS-large-Rev[?].zip from here. Unzip and extract generic-sdcard-v1.3-ICS-large-Rev[?].img.
If you're running Windows, download win32diskimager-RELEASE-0.3-r27-binary.zip from here. Unzip and extract the folder win32diskimager-RELEASE-0.3-r27-binary. Run Win32DiskImager.exe and write leapinlar's image (generic-sdcard-v1.3-ICS-large-Rev[?].img) to the microSD card.
After Win32DiskImager is done with writing, eject the microSD and USB adapter and re-insert it into your computer.
Download a CM9 nightly build from here. Pick the newest that does not say opengl. Be sure to scroll down to the bottom of that page to get the newest build.
Download the Google apps for Ice Cream Sandwich (currently gapps-ics-20120429-signed.zip) from here.
With the newly imaged microSD and USB adapter back in your computer, copy the CM9 nightly build zip and Google apps zip into the root partition (the only one you can see) of the microSD card.
Eject the microSD and USB adapter from your computer.
Make sure that the Nook Color is powered down and insert the new microSD card into the Nook. Power it up.
If the Nook doesn't boot at this point, revisit the microSD and USB adapter and the downloaded .img file. Explore alternatives perhaps using a different microSD and/or USB adapter and redownloading the .img file.
Sit back and watch. It will take a few minutes and lots of messages will scroll by. Then the screen will go black. Power up the Nook.
Ice Cream Sandwich!
I still had to use the Google Play Store to install Gmail and youtube.
See also the errata.
In the meanwhile, Android 4.0 (Ice Cream Sandwich - ICS) has dropped and there are nightlies for the Nook Color but the installation techniques install ICS to the eMMC, the internal flash drive. I still like the simplicity of booting from a microSD card.
The thread above has continued to get comments and questions and leapinlar has been very helpful in fielding these.
So here's how to install CyanogenMod 9 (CM9) Ice Cream Sandwich on a microSD for a Nook Color.
Use a Sandisk Class 4 8GB microSD card as recommended here. Use a microSD USB adapter and inset the microSD and USB adapter into your computer.
leapinlar has updated verygreen's microSD image to support ICS. Download the latest generic-sdcard-v1.3-ICS-large-Rev[?].zip from here. Unzip and extract generic-sdcard-v1.3-ICS-large-Rev[?].img.
If you're running Windows, download win32diskimager-RELEASE-0.3-r27-binary.zip from here. Unzip and extract the folder win32diskimager-RELEASE-0.3-r27-binary. Run Win32DiskImager.exe and write leapinlar's image (generic-sdcard-v1.3-ICS-large-Rev[?].img) to the microSD card.
After Win32DiskImager is done with writing, eject the microSD and USB adapter and re-insert it into your computer.
Download a CM9 nightly build from here. Pick the newest that does not say opengl. Be sure to scroll down to the bottom of that page to get the newest build.
Download the Google apps for Ice Cream Sandwich (currently gapps-ics-20120429-signed.zip) from here.
With the newly imaged microSD and USB adapter back in your computer, copy the CM9 nightly build zip and Google apps zip into the root partition (the only one you can see) of the microSD card.
Eject the microSD and USB adapter from your computer.
Make sure that the Nook Color is powered down and insert the new microSD card into the Nook. Power it up.
If the Nook doesn't boot at this point, revisit the microSD and USB adapter and the downloaded .img file. Explore alternatives perhaps using a different microSD and/or USB adapter and redownloading the .img file.
Sit back and watch. It will take a few minutes and lots of messages will scroll by. Then the screen will go black. Power up the Nook.
Ice Cream Sandwich!
I still had to use the Google Play Store to install Gmail and youtube.
See also the errata.
Sunday, June 03, 2012
Microsoft Tags
Recently I had a meeting with a former CIO, now VP of sales with a large regional VAR. As we exchanged business cards I noticed that he had a symbol on his. It looked like a QR code but somewhat stylized, i.e. triangles instead of squares.
I immediately pulled out my Captivate and fired up Barcode Scanner and waited and waited. Barcode Scanner couldn't read it. The VP was confounded as to why nobody else in the room could read it.
Turns out it wasn't a QR code but a Microsoft Tag.
I was going to write a long blog post about QR codes and Microsoft Tags and the difference but who cares?
Suffice it to say that Microsoft took something that was simple and universal and added complexity and took away interoperability for a modest gain in functionality that won't matter because nobody will use it.
If you insist on reading more on Microsoft Tags, here's a good blog post.
I immediately pulled out my Captivate and fired up Barcode Scanner and waited and waited. Barcode Scanner couldn't read it. The VP was confounded as to why nobody else in the room could read it.
Turns out it wasn't a QR code but a Microsoft Tag.
I was going to write a long blog post about QR codes and Microsoft Tags and the difference but who cares?
Suffice it to say that Microsoft took something that was simple and universal and added complexity and took away interoperability for a modest gain in functionality that won't matter because nobody will use it.
If you insist on reading more on Microsoft Tags, here's a good blog post.
Wednesday, May 30, 2012
Browser Share IV
Time to look at browser share again. It's been almost a year and a half since I examined this previously.
Click on the charts to make them bigger and see the raw data.
I got this data from Site Meter. Here are the statistics for Ben's Blog, Where I've Ben, and BenMoore.info. Please weigh in on my assumptions and interpretations.
The page views on BenMoore.info are so low (less than 1 per day) that I'd discard it statistically . I show it only that Internet Explorer shows up overwhelmingly here. My reading of that is that BenMoore.info gets hit by more enterprise users than the other two.
Back to Ben's Blog and Where I've Ben. I think that the browser war is over. And the winner is not Internet Explorer. Not Firefox. Not Chrome. But Safari! Safari has a dominant share on both blogs.
Then the question came to mind, are these Mac users or iOS users? That's hard to tell from this chart but let's look at page views by operating system.
Again, click on the charts to make them bigger and see the raw data.
Let's just concentrate on Ben's Blog and use the raw numbers.
Safari was 36.4% of the page views. Unfortunately iOS is not separated out in the Operating System numbers. And to confuse things, Android's browser calls itself "Safari."
Here's the signature from my iPad:
I know the Operating System says "Macintosh MacOSX" but I believe iOS is lumped into "Unknown."
Here's what a "real" Macintosh looks like. Notice the screen size.
And from my NOOK Color:
That really puts a kink in the numbers. But assuming that the usage of "Safari" is all on either Mac OS X, iOS, or Android we can back into it. Mac OS X was 12.8% of the page views. Linux UNIX was 8.0%. This leaves 23.6% of the page views from mobile devices with iOS leading with 15.6%. Mobile beats Firefox at 23.5% and we know that Firefox is floundering.
Ladies and gentlemen, we have a winner.
Firefox 23.5% Chrome 21.8% | Chrome 21.4% Firefox 9.5% | IE 8 17.2% IE 9 12.1% Firefox 12.1% IE 7 5.1% |
Click on the charts to make them bigger and see the raw data.
I got this data from Site Meter. Here are the statistics for Ben's Blog, Where I've Ben, and BenMoore.info. Please weigh in on my assumptions and interpretations.
The page views on BenMoore.info are so low (less than 1 per day) that I'd discard it statistically . I show it only that Internet Explorer shows up overwhelmingly here. My reading of that is that BenMoore.info gets hit by more enterprise users than the other two.
Back to Ben's Blog and Where I've Ben. I think that the browser war is over. And the winner is not Internet Explorer. Not Firefox. Not Chrome. But Safari! Safari has a dominant share on both blogs.
Then the question came to mind, are these Mac users or iOS users? That's hard to tell from this chart but let's look at page views by operating system.
Unknown 29.5% Win XP 13.7% Mac OS X 12.8% | Mac OS X 19.8% Win NT 12.3% Win XP 11.1% Linux UNIX 11.1% | Unknown 22.6% Win XP 16.7% Mac OS X 11.9% |
Again, click on the charts to make them bigger and see the raw data.
Let's just concentrate on Ben's Blog and use the raw numbers.
Safari was 36.4% of the page views. Unfortunately iOS is not separated out in the Operating System numbers. And to confuse things, Android's browser calls itself "Safari."
Here's the signature from my iPad:
I know the Operating System says "Macintosh MacOSX" but I believe iOS is lumped into "Unknown."
Here's what a "real" Macintosh looks like. Notice the screen size.
And from my NOOK Color:
That really puts a kink in the numbers. But assuming that the usage of "Safari" is all on either Mac OS X, iOS, or Android we can back into it. Mac OS X was 12.8% of the page views. Linux UNIX was 8.0%. This leaves 23.6% of the page views from mobile devices with iOS leading with 15.6%. Mobile beats Firefox at 23.5% and we know that Firefox is floundering.
Ladies and gentlemen, we have a winner.
Sunday, May 27, 2012
Google Voice II
Almost 3 years ago I posted about how I used Google Voice. Lots has changed since then so it's time for an update.
Since then I've continued to use Google Voice and become more dependent on it. So much that my wife got frustrated with the incoming calls at our house that started off with Google Voice's call screening. To mitigate this I am using a RingMaster number as part of my AT&T Complete Choice Enhanced service. This RingMaster number has distinctive ring so she can tell that the incoming call is for me. As Complete Choice has multiple RingMaster numbers I have a second Google Voice number for my wife that has its own distinctive ring.
One of the issues I noted in my original post regarding cellular mobile to mobile was covered here as not being an issue but I'll repeat that here for completeness. Don't worry about it for incoming calls.
Google Voice is now incorporated in Google Hosted Apps so contacts are shared between Google Voice and your Google Hosted Apps e-mail. And obviously these contacts are presented on your Android phone so the contacts and their management is now seamless. Nice.
In my original post I called "voice mail transcription (cute but really pretty worthless)." I stand by that. I'm disappointed that Google hasn't made any progress in that area. The only thing remotely useful in the transcriptions is telephone numbers.
Previously I mentioned "service disruptions." These are almost non-existent now. Rarely I have a call where the sound is choppy and that is always with one of the parties being on a mobile phone.
The Google Voice exchanges are sometimes new to the local phone network and I've had occasional issues with private telephone switches not recognizing the Google Voice exchange. This is always on SMB phone systems so I think it is a local administrator issue.
One of the most useful features is the Google Voice logs. The "History" log is a comprehensive history of all calls, incoming and outgoing, and text traffic. In addition to the expected information, e.g. number, date, time, status, etc., there is a "note" field. I use this to annotate the calls including the name of the caller if not in my Contacts. As expected there is a powerful search capability.
International calling rates are still the most attractive I've found. Basically calling a landline in Western Europe is 2¢ per minute. I am not a big international caller so I'm actually still running off the startup $1.00 credit Google gave me.
Downsides?
Google Voice still doesn't support MMS text messages, i.e. SMS with media. There is a workaround for Sprint customers described here but I'd still call that a hack.
Google Voice doesn't support fax. Although this is getting less and less pertinent it's still an issue when dealing with many businesses.
Since then I've continued to use Google Voice and become more dependent on it. So much that my wife got frustrated with the incoming calls at our house that started off with Google Voice's call screening. To mitigate this I am using a RingMaster number as part of my AT&T Complete Choice Enhanced service. This RingMaster number has distinctive ring so she can tell that the incoming call is for me. As Complete Choice has multiple RingMaster numbers I have a second Google Voice number for my wife that has its own distinctive ring.
One of the issues I noted in my original post regarding cellular mobile to mobile was covered here as not being an issue but I'll repeat that here for completeness. Don't worry about it for incoming calls.
Google Voice is now incorporated in Google Hosted Apps so contacts are shared between Google Voice and your Google Hosted Apps e-mail. And obviously these contacts are presented on your Android phone so the contacts and their management is now seamless. Nice.
In my original post I called "voice mail transcription (cute but really pretty worthless)." I stand by that. I'm disappointed that Google hasn't made any progress in that area. The only thing remotely useful in the transcriptions is telephone numbers.
Previously I mentioned "service disruptions." These are almost non-existent now. Rarely I have a call where the sound is choppy and that is always with one of the parties being on a mobile phone.
The Google Voice exchanges are sometimes new to the local phone network and I've had occasional issues with private telephone switches not recognizing the Google Voice exchange. This is always on SMB phone systems so I think it is a local administrator issue.
One of the most useful features is the Google Voice logs. The "History" log is a comprehensive history of all calls, incoming and outgoing, and text traffic. In addition to the expected information, e.g. number, date, time, status, etc., there is a "note" field. I use this to annotate the calls including the name of the caller if not in my Contacts. As expected there is a powerful search capability.
International calling rates are still the most attractive I've found. Basically calling a landline in Western Europe is 2¢ per minute. I am not a big international caller so I'm actually still running off the startup $1.00 credit Google gave me.
Downsides?
Google Voice still doesn't support MMS text messages, i.e. SMS with media. There is a workaround for Sprint customers described here but I'd still call that a hack.
Google Voice doesn't support fax. Although this is getting less and less pertinent it's still an issue when dealing with many businesses.
Sunday, May 20, 2012
Messaging Clients
This is gonna take some noodling.
I've been using AIM for forever. I even played with MSN Messenger. Both of these clients got so heavily ad-based that they turned me off. And I had to have 2 clients installed and 2 different buddy lists.
Then I came across gaim. Don't go looking for it. It's gone. It has been replaced by pidgin. It's still client-based but consolidates the following protocols:
AIM
Bonjour
Gadu-Gadu
Google Talk
Groupwise
ICQ
IRC
MSN
MXit
MySpaceIM
SILC
SIMPLE
Sametime
XMPP
Yahoo!
Zephyr
But it's still client-based so I have to install it everywhere (yes there's a portable variation) and the logs are local to the application instance.
Then I found meebo. It's web-based so there's no install and it consolidates the following protocols:
AIM
Yahoo!
Facebook
Windows Live (formerly MSN)
MySpaceIM
Google Talk
ICQ
Jabber
myyearbook
Closer. And meebo even supports iPhone, Android, BlackBerry and Symbian. But... MSN won't allow but a single logon per identity. This means that if I'm logged on to MSN at one computer using meebo and go to a second computer and logon to MSN using meebo, MSN force logs me off of the first computer. Then if I log off the second computer, I'm not logged on to MSN anywhere. I kept searching.
I finally found imo.im. Yep, web-based and supports the following protocols:
MSN
Skype
Facebook
Google Talk
AIM
ICQ
Yahoo!
Steam
VKontakte
Hyves
MySpaceIM
Jabber
And imo supports iPhone, iPad, Android, BlackBerry, and Symbian.
Here's the twist. imo establishes the sessions with their server, not your computer. Let that soak in. Now your MSN session is with imo's server and you can have multiple concurrent sessions.
You can even go from one computer to another computer and pick up the conversation in progress. Really nice.
imo optionally will maintain centralized logs and even encrypt them. And you can link your identities. What this means is that when you login to imo with one of your identities all of the linked identities will be logged in as well.
Easily the best I've found so far.
I've been using AIM for forever. I even played with MSN Messenger. Both of these clients got so heavily ad-based that they turned me off. And I had to have 2 clients installed and 2 different buddy lists.
Then I came across gaim. Don't go looking for it. It's gone. It has been replaced by pidgin. It's still client-based but consolidates the following protocols:
But it's still client-based so I have to install it everywhere (yes there's a portable variation) and the logs are local to the application instance.
Then I found meebo. It's web-based so there's no install and it consolidates the following protocols:
Closer. And meebo even supports iPhone, Android, BlackBerry and Symbian. But... MSN won't allow but a single logon per identity. This means that if I'm logged on to MSN at one computer using meebo and go to a second computer and logon to MSN using meebo, MSN force logs me off of the first computer. Then if I log off the second computer, I'm not logged on to MSN anywhere. I kept searching.
I finally found imo.im. Yep, web-based and supports the following protocols:
And imo supports iPhone, iPad, Android, BlackBerry, and Symbian.
Here's the twist. imo establishes the sessions with their server, not your computer. Let that soak in. Now your MSN session is with imo's server and you can have multiple concurrent sessions.
You can even go from one computer to another computer and pick up the conversation in progress. Really nice.
imo optionally will maintain centralized logs and even encrypt them. And you can link your identities. What this means is that when you login to imo with one of your identities all of the linked identities will be logged in as well.
Easily the best I've found so far.
Thursday, May 17, 2012
Dreaded e-mail
I got one of those dreaded e-mails this afternoon:
Here's a screen shot of the e-mail:
Notice the little gold key at the top left. This is Gmail verifying that the e-mail did actually come from eBay. That's about the last good thing in the e-mail. The e-mail is html so the link for you to go to "if you did not make this change" isn't simple text so the underlying link could be anything. Thankfully it is consistent but why make me worry? Next there is no way to navigate to the eBay location without using that link. In other words, you can't just type ebay.com in the URL field and navigate independently of the e-mail. That is Rule One of links in e-mails: Ignore them and type them yourself. Remember the IP address in the e-mail. We'll look at that in a minute.
So off I went.
Look at the site information that Chrome presented from that link:
For comparison here's what eBay looks like when I login:
Much more comfortable. That's what I'd like to see when I think my password has been hacked.
I followed the links and called eBay. I was on hold less than a minute. The agent e-mailed me a link to reset my password.
That was a plain text e-mail. Much better.
I did that and all was fine.
Here's the e-mail I got from eBay that I'd changed my password:
html again. Interesting how different that is than the fraudulent one. Why?
Now let's step back some.
That first e-mail had the IP address that changed my password: 68.160.170.79 WhatIsMyIPAddress.com does a good lookup on it. It was from a Verizon broadband customer in the Boston area. Nope, I haven't been to Boston lately.
Interestingly when I did get logged in to eBay, I could tell that the hacker had actually used my account.
Yeah, I know how to spell "Ford Explorer" and I'm not looking for a '79 Trans Am parts car. I did have a '79 Trans Am once and parts are all it's good for.
Well, that was an exciting afternoon but seems that all is well.
This is a courtesy notice to let you know that your eBay password has been changed. No response is needed!I think a response IS NEEDED!
Here's a screen shot of the e-mail:
Notice the little gold key at the top left. This is Gmail verifying that the e-mail did actually come from eBay. That's about the last good thing in the e-mail. The e-mail is html so the link for you to go to "if you did not make this change" isn't simple text so the underlying link could be anything. Thankfully it is consistent but why make me worry? Next there is no way to navigate to the eBay location without using that link. In other words, you can't just type ebay.com in the URL field and navigate independently of the e-mail. That is Rule One of links in e-mails: Ignore them and type them yourself. Remember the IP address in the e-mail. We'll look at that in a minute.
So off I went.
Look at the site information that Chrome presented from that link:
The identity of this website has not been identified.None of that made me feel very good.
Your connection to ocs.ebay.com is not encrypted.
Site Information:
You have never visited this site before today.
For comparison here's what eBay looks like when I login:
Much more comfortable. That's what I'd like to see when I think my password has been hacked.
I followed the links and called eBay. I was on hold less than a minute. The agent e-mailed me a link to reset my password.
That was a plain text e-mail. Much better.
I did that and all was fine.
Here's the e-mail I got from eBay that I'd changed my password:
html again. Interesting how different that is than the fraudulent one. Why?
Now let's step back some.
That first e-mail had the IP address that changed my password: 68.160.170.79 WhatIsMyIPAddress.com does a good lookup on it. It was from a Verizon broadband customer in the Boston area. Nope, I haven't been to Boston lately.
Interestingly when I did get logged in to eBay, I could tell that the hacker had actually used my account.
Yeah, I know how to spell "Ford Explorer" and I'm not looking for a '79 Trans Am parts car. I did have a '79 Trans Am once and parts are all it's good for.
Well, that was an exciting afternoon but seems that all is well.
Sunday, May 13, 2012
DSL Bandwidth
I've blogged about DSL before and about bandwidth before but never about DSL bandwidth so here goes.
There are always rumblings about bandwidth caps among the carriers, both landline and wireless. While I'm not a huge user of bandwidth that got me interested in what I was using.
Fortunately I'm using dd-wrt in my home router. One of the administration screens shows you the WAN bandwidth over time. Here's what one month's looks like.
I've been capturing this month by month and graphing this.
So I'm just below 3 Gb down per month. That spike back in the summer of 2011 is the month before my TechNet subscription lapsed.
I'm not sure that this is actionable right now but is interesting nevertheless.
There are always rumblings about bandwidth caps among the carriers, both landline and wireless. While I'm not a huge user of bandwidth that got me interested in what I was using.
Fortunately I'm using dd-wrt in my home router. One of the administration screens shows you the WAN bandwidth over time. Here's what one month's looks like.
I've been capturing this month by month and graphing this.
So I'm just below 3 Gb down per month. That spike back in the summer of 2011 is the month before my TechNet subscription lapsed.
I'm not sure that this is actionable right now but is interesting nevertheless.
Sunday, May 06, 2012
Another iSecret
I talked about my descent into Appleland. I have to admit that I've continued that descent. A co-worker of mine just had to have a "new iPad." He had a practically new iPad 2 that I took off his hands. Do you think I might buy a Mac next?
I did a factory reset on the iPad 2 and restored my wife's iPhone 4 from iTunes. That worked fine.
One thing I can't figure out is how to synchronize the Camera Rolls between the iPhone and the iPad. I turned on iCloud for the Photo Stream but that didn't do it. I'll keep looking.
I was looking for the Logitech Zagg case but started with an Acase. It works like Apple's Smart Cover.
Then I found the Logitech case on 1SaleADay for $20 and jumped on it.
I'm still searching for the Holy Grail of using a tablet to take notes in a business setting. I tried a Bluetooth keyboard on my TouchPad. Close but no cigar.
I tried a Google search and turned up the MyScript Memo app.
I had picked up a stylus on sale at BestBuy so I was ready.
The ability of MyScript to recognize handwriting is amazing. Even my wife can't read my handwriting but MyScript does. The app as downloaded from iTunes is really just a demo app as you can't save the recognized text. There's an in-app purchase for $2.99 to enable all the features.
Here's my handwriting.
The gray area below the handwriting is a movable palm shield.
Here's the recognized text.
Then I selected to send the text via e-mail.
There are a couple of issues. You only have that one screen to write on. Then you have to create another "note." Takes 2 taps. Also the formatting is severely limited which isn't a big deal except that you either can specify that there is a carriage return at the end of each line or there are no carriage returns.
I did a factory reset on the iPad 2 and restored my wife's iPhone 4 from iTunes. That worked fine.
One thing I can't figure out is how to synchronize the Camera Rolls between the iPhone and the iPad. I turned on iCloud for the Photo Stream but that didn't do it. I'll keep looking.
I was looking for the Logitech Zagg case but started with an Acase. It works like Apple's Smart Cover.
Then I found the Logitech case on 1SaleADay for $20 and jumped on it.
I'm still searching for the Holy Grail of using a tablet to take notes in a business setting. I tried a Bluetooth keyboard on my TouchPad. Close but no cigar.
I tried a Google search and turned up the MyScript Memo app.
I had picked up a stylus on sale at BestBuy so I was ready.
The ability of MyScript to recognize handwriting is amazing. Even my wife can't read my handwriting but MyScript does. The app as downloaded from iTunes is really just a demo app as you can't save the recognized text. There's an in-app purchase for $2.99 to enable all the features.
Here's my handwriting.
The gray area below the handwriting is a movable palm shield.
Here's the recognized text.
Then I selected to send the text via e-mail.
There are a couple of issues. You only have that one screen to write on. Then you have to create another "note." Takes 2 taps. Also the formatting is severely limited which isn't a big deal except that you either can specify that there is a carriage return at the end of each line or there are no carriage returns.
Sunday, April 29, 2012
I've Got a Secret
I've been keeping a secret. I bought an iPhone. Actually I bought my wife an iPhone. She loved her BlackBerry Curve but when Google announced late 2011 that they were dropping support for Gmail on BlackBerry I started looking for alternatives for her. To be clear, Google didn't kill Gmail support on BlackBerry but "deprecated" Gmail support. The scary part for me was that you would no longer be able to download a fresh copy should you have to rebuild the phone. I realize there are alternatives for that but still the handwriting was on the wall.
AT&T had a refurbished white iPhone 4 on sale Black Friday weekend for $49.95. I ordered her one. I was worried about her adapting to the soft keyboard after the Curve's hardware keyboard but that hasn't been a problem.
I had seen the handwriting on the wall for the BlackBerry for a while and had migrated her to the web-based Gmail interface. That made it easy to use the Exchange Active Sync protocol to connect the iPhone to her Gmail e-mail. I found Google's instructions here. Be sure to follow the "Next..." link at the bottom for Calendar support.
The Google support has been seamless. Push e-mail and push calendar are incredible. I share my calendar with her so she can see where I am.
She isn't big into taking pictures with her iPhone (yet) but what she does love is the Camera Roll. She gets lots of e-mails with pictures of our granddaughter and she saves them to the Camera Roll.
She likes to listen to the radio while she gets ready in the mornings. The AM/FM radio I had in the bathroom didn't have a good antenna. I got her a Jensen Docking Speaker System. It is compact, has stereo speakers and charges the iPhone. It actually has an FM receiver built-in but I didn't use that. There's an iTunes app that we don't use but you need it as the phone complains if it is not present when you place the phone in the dock. The app runs the radio built into the dock and presents a clock. I wanted to stream her favorite FM station over the Wi-Fi. After a couple of false starts I ended up with TimeTuner. It presents a nice clock and has 4 presets for streaming Internet radio stations. That has been a perfect solution for her.
We converted her 200MB BlackBerry data plan to an iPhone data plan. She's been running around 35MB per month as she uses Wi-Fi at all our family's houses. This is about twice as much data as her BlackBerry. With iMessage handling text messages among the other iPhones in the family she's been well within her 200 text message plan. She's actually using less text messages due to iMessage.
Last week she said "I love my iPhone." 'nuff said.
AT&T had a refurbished white iPhone 4 on sale Black Friday weekend for $49.95. I ordered her one. I was worried about her adapting to the soft keyboard after the Curve's hardware keyboard but that hasn't been a problem.
I had seen the handwriting on the wall for the BlackBerry for a while and had migrated her to the web-based Gmail interface. That made it easy to use the Exchange Active Sync protocol to connect the iPhone to her Gmail e-mail. I found Google's instructions here. Be sure to follow the "Next..." link at the bottom for Calendar support.
The Google support has been seamless. Push e-mail and push calendar are incredible. I share my calendar with her so she can see where I am.
She isn't big into taking pictures with her iPhone (yet) but what she does love is the Camera Roll. She gets lots of e-mails with pictures of our granddaughter and she saves them to the Camera Roll.
She likes to listen to the radio while she gets ready in the mornings. The AM/FM radio I had in the bathroom didn't have a good antenna. I got her a Jensen Docking Speaker System. It is compact, has stereo speakers and charges the iPhone. It actually has an FM receiver built-in but I didn't use that. There's an iTunes app that we don't use but you need it as the phone complains if it is not present when you place the phone in the dock. The app runs the radio built into the dock and presents a clock. I wanted to stream her favorite FM station over the Wi-Fi. After a couple of false starts I ended up with TimeTuner. It presents a nice clock and has 4 presets for streaming Internet radio stations. That has been a perfect solution for her.
We converted her 200MB BlackBerry data plan to an iPhone data plan. She's been running around 35MB per month as she uses Wi-Fi at all our family's houses. This is about twice as much data as her BlackBerry. With iMessage handling text messages among the other iPhones in the family she's been well within her 200 text message plan. She's actually using less text messages due to iMessage.
Last week she said "I love my iPhone." 'nuff said.
Sunday, April 22, 2012
DSL Upload Speed
I don't think I can explain this. The best I can do is show you what I did and the results.
Ok, if you don't have DSL I think you can quit reading. But I'm not sure so maybe you want to read on. I don't know.
I have AT&T's "FastAccess DSL XTREME 6.0." This is advertised as 6.0 Mbps down and 512 Kbps up.
AT&T actually does pretty well delivering this.
Except when I'm doing massive uploads. Understandably the uploads are limited by the upload speed but what I've been experiencing as long as I can remember is that when I'm uploading the download speed drops to dial-up. Consequently I end up queueing up big uploads for overnight.
Until October 2011 I thought this was something that just affected me and I wasn't willing to arm wrestle AT&T to work on this. Then when we were in Italy I had the same experience. The "hotel" I stayed at in Manarola had DSL. Their download speed was over 10 Mbps but when I uploaded my pictures the whole Wi-Fi network slowed to a crawl. The good news is there were only 4 rooms in the "hotel" so I didn't really impact anyone else.
Hmmm. The problem I was seeing must be a general DSL problem, not just something in my configuration. So I went off and Googled it.
I found this article.
So I wrote it off as a DSL phenomenon and started thinking about cable Internet. But cable Internet is more expensive and, as you know, I'm cheap. So I didn't do anything.
Fast forward to March 2012. I listen to Steve Gibson's Security Now podcast on TWiT. His show on March 14, 2012 was entitled "Buffer Bloat." The best I can explain this is that modern network devices with large buffers defeat TCP's built-in self-pacing capabilities. It was pretty much over my head and it didn't seem that I could do anything about it anyway.
A month later Steve had a question and answer edition. A listener had written in how he had used his router's QoS settings to manage the "Buffer Bloat" upstream from him. You can watch the question and answer here.
So I went into my router and found the QoS settings. I enabled them and set the uplink speed to 350 Kbps, just less than my observed upload speed.
Problem solved.
Ok, if you don't have DSL I think you can quit reading. But I'm not sure so maybe you want to read on. I don't know.
I have AT&T's "FastAccess DSL XTREME 6.0." This is advertised as 6.0 Mbps down and 512 Kbps up.
AT&T actually does pretty well delivering this.
Except when I'm doing massive uploads. Understandably the uploads are limited by the upload speed but what I've been experiencing as long as I can remember is that when I'm uploading the download speed drops to dial-up. Consequently I end up queueing up big uploads for overnight.
Until October 2011 I thought this was something that just affected me and I wasn't willing to arm wrestle AT&T to work on this. Then when we were in Italy I had the same experience. The "hotel" I stayed at in Manarola had DSL. Their download speed was over 10 Mbps but when I uploaded my pictures the whole Wi-Fi network slowed to a crawl. The good news is there were only 4 rooms in the "hotel" so I didn't really impact anyone else.
Hmmm. The problem I was seeing must be a general DSL problem, not just something in my configuration. So I went off and Googled it.
I found this article.
You should expect download speeds to be very seriously impacted by any file uploads that you may be undertaking at the same time. This is a normal consequence of the design of ADSL services.Read the whole article. There's lots more that I didn't understand.
So I wrote it off as a DSL phenomenon and started thinking about cable Internet. But cable Internet is more expensive and, as you know, I'm cheap. So I didn't do anything.
Fast forward to March 2012. I listen to Steve Gibson's Security Now podcast on TWiT. His show on March 14, 2012 was entitled "Buffer Bloat." The best I can explain this is that modern network devices with large buffers defeat TCP's built-in self-pacing capabilities. It was pretty much over my head and it didn't seem that I could do anything about it anyway.
A month later Steve had a question and answer edition. A listener had written in how he had used his router's QoS settings to manage the "Buffer Bloat" upstream from him. You can watch the question and answer here.
So I went into my router and found the QoS settings. I enabled them and set the uplink speed to 350 Kbps, just less than my observed upload speed.
Problem solved.
Sunday, April 15, 2012
Browser Share
Tom's Hardware had a recent article on the futures of the various browsers. In summary the author predicted that Firefox would rise again after overcoming some of its recent problems. He calls 2011 "...A catastrophic year for Firefox." I agree.
Perhaps I hadn't been watching closely enough but what surprised me was the ongoing precipitous drop for Internet Explorer as shown in this chart.
The data comes from StatCounter. Maybe there's an agenda there but I'm not aware of it. Tom's Hardware doesn't seem to have a dog in the fight. The author says "take any market share predictions with a grain of salt."
Perhaps I hadn't been watching closely enough but what surprised me was the ongoing precipitous drop for Internet Explorer as shown in this chart.
The data comes from StatCounter. Maybe there's an agenda there but I'm not aware of it. Tom's Hardware doesn't seem to have a dog in the fight. The author says "take any market share predictions with a grain of salt."
Wednesday, April 11, 2012
Patch Tuesday
PCs I applied Microsoft patches to on 04/10/12:
- T420s
- XP VM
- T61
- Server
- XP VM
- Windows 8 VM
- T43
- X40
- X100e
- XP VM
- Byhalia
Lumia 900 Data Bug
I started to write a blog post today accusing Nokia of falsely reporting a problem with data on their Lumia 900 in order to offer a $100 rebate effectively making the phone free. That isn't true and I'm glad I didn't post it. If you know me, I'm not opposed to free. It just worries me to think that Microsoft/Nokia would have to make a well respected piece of hardware free in order to push the operating system.
I had the original blog post almost written. The premise was that I couldn't find any user reports of the data bug before the rebate was announced.
Finally I stumbled across the problem reports in a Windows Phone specific forum.
In retrospect I think that the problem with me not finding anything with Google was that there were not enough of the Lumia 900s sold to create enough Google "juice" to get the articles on the problem high in the search results.
On the same topic, ZDNet reported that Windows Phone's market share is dropping an average of 1% per month. In that Windows Phone is at less than 4% that doesn't look good. For the time being Windows Phone is still leading Symbian.
This doesn't look good for Windows Phone. I hope Microsoft and Nokia get their act together as we need an alternative to iOS and Android.
Update: Now you can make $80 by buying a Lumia 900 at Target.
I had the original blog post almost written. The premise was that I couldn't find any user reports of the data bug before the rebate was announced.
Finally I stumbled across the problem reports in a Windows Phone specific forum.
In retrospect I think that the problem with me not finding anything with Google was that there were not enough of the Lumia 900s sold to create enough Google "juice" to get the articles on the problem high in the search results.
On the same topic, ZDNet reported that Windows Phone's market share is dropping an average of 1% per month. In that Windows Phone is at less than 4% that doesn't look good. For the time being Windows Phone is still leading Symbian.
This doesn't look good for Windows Phone. I hope Microsoft and Nokia get their act together as we need an alternative to iOS and Android.
Update: Now you can make $80 by buying a Lumia 900 at Target.
Sunday, April 08, 2012
When Clouds Go Bump
There certainly has been a lot of discussion at the CIO level about Cloud Computing. A recent CIO I spoke with was looking at the cloud to help him address his challenges in staffing and running his data center. He and I had deep discussions about his in house alternatives to the cloud. Interestingly while we were having these discussions one of the biggest clouds went bump.
On February 29, 2012 Microsoft's Azure product had a global service failure. Microsoft's Azure Service Dashboard was overwhelmed and pretty much unavailable for hours on end. When it was accessible here is one of the updates approximately 8 hours into the outage:
What I want to highlight is that cloud providers are not immune from service failures. They are likely capable of providing more redundant and resilient services than many organizations can provide.
My question is as a CIO are you comfortable with this level of opacity to service failures? Are you willing to answer your users and executives with one-way information flow from a (sometimes available) web page? Would a 10 day service credit make your CEO happy?
On February 29, 2012 Microsoft's Azure product had a global service failure. Microsoft's Azure Service Dashboard was overwhelmed and pretty much unavailable for hours on end. When it was accessible here is one of the updates approximately 8 hours into the outage:
The restoration steps to mitigate the issue are still underway. This incident impacts Access Control 2.0, Marketplace, Service Bus and the Access Control & Caching Portal in the same regions where Windows Azure Compute is impacted. As a result affected customers may experience a loss of application functionality. Further updates will be published to keep you apprised of the situation. We apologize for any inconvenience this causes our customers.This is not a Microsoft bashing. In April, 2011 Amazon also suffered a broad failure.
What I want to highlight is that cloud providers are not immune from service failures. They are likely capable of providing more redundant and resilient services than many organizations can provide.
My question is as a CIO are you comfortable with this level of opacity to service failures? Are you willing to answer your users and executives with one-way information flow from a (sometimes available) web page? Would a 10 day service credit make your CEO happy?
Monday, April 02, 2012
Chrome Setup
After my previous post on Firefox's EOL, I thought I'd document my Chrome setup.
Extensions:
I use the Greyscale theme.
Have fun!
Updated 02/24/13
Extensions:
- Adblock Plus for Google Chrome™ (Beta) - General - uncheck "Show icon in address bar", Filter lists - select EasyList, uncheck "Allow some non-intrusive advertising"
- AddThis - Share & Bookmark (new) - Hide button
- Chrome Toolbox (by Google) - Hide button, uncheck "show image floating toolbar", uncheck "show video floating toolbar"
- Drag and Go - uncheck "support 6 most frequently used mouse gestures"
- New Tabs At End
- Click the settings icon (3 bars) on the browser toolbar.
- Select Settings.
- In the "On Startup" section, check "Continue where I left off."
- In the “Search” section, use the “Enable Instant for faster searching and browsing” checkbox to enable or disable the Instant feature.
- Click on "Show advanced settings..."
- Check "Send a ‘Do Not Track’"
- Uncheck "Enable Autofill."
- Uncheck "Offer to save passwords."
- Check "Ask where to save each file before downloading."
I use the Greyscale theme.
Have fun!
Updated 02/24/13
Subscribe to:
Posts (Atom)























