Pages

Showing posts with label blackberry. Show all posts
Showing posts with label blackberry. Show all posts

Sunday, July 12

Freedom and Understanding

(From an email list, someone wanted to know how to block services like MobileMe on the network. Normally I’d offer the advice on how to do it, but this time the first question I asked was “Do you local users have Admin to their own boxes?” To which the answer was “Yes.” -- I edited it to make more sense as a blog post. This is a post intended to provoke discussion, obviously my suggestions and things won’t work everywhere and in all scenarios and an all networks. Keep an open mind.)


We are in a new world, a mass world full of mobility. Take the iPhone. This is a computer, a computer I carry in my pocket, but none the less a computer. I could feasibly get away with leaving my laptop at home the majority of the time with the amount of things that I can get done on my phone. Laptops sales have increased significantly in the past few years, people are buying less and less desktop computers. Laptop speeds have caught up with desktop speeds, and things are much more convenient now.


Blackberries were that way, but the iPhone really sealed the deal. Of course now we have a plethora of devices coming out claiming to be “iPhone killers”. The Palm Pre, the things from LG, the Blackberry Storm, but there is still nothing that can touch the iPhone. You put an OS this powerful in a box this mobile, and viola, you have a mobile computing platform. And the solution to a lot of life's little problems. Why doesn’t Apple make a netbook? Wake up, they already have.


I absolutely could not get away with not being able to have MobileMe (or Google, whatever you use) sync my contacts, calendars, bookmarks, etc from the desktop up to the cloud and back down to my phone. I could not function if I didn't have realtime push for all of that kind of stuff. How would I know about that meeting that I just got invited to five minutes ago? Cause you know, no one is going to actually pick up a phone and call you about it (sarcasm).


What are the users doing that they need these sync services? Is what they are doing enhancing productivity or making their life easier? Probably. Is it a security risk? Can it be mitigated without destroying it?


I don't see a reason why not. The time has come for us a security professionals to stop nuking that which we don't understand/want to deal with, and start understanding why things are being used, how they are being used, and does it help? Instead of destroying everything, let’s figure out services and techniques that will provide our users the level of, well, not only training, but the level of convenience that is useful to them.


There are all these great companies out there starting great businesses to solve companies and life's problems, and attitudes like "we need to stop them" -- for no good reason -- just don't fly anymore. It just doesn't make sense in this day and age. Heck the Army even allows people to go to Facebook and Twitter now. Yes, they can click on bad things and people will download bad things and put them on their machines, but you know what, they are going to do it anyway, they will find a way around your control. Instead of inhibiting them, enable your users. I am not saying let them do what they want, or unblock everything. I am saying, let’s find solutions to their problems, instead of saying “no” all the time.


Yes there are security risks, but there are security risks in everything, right?


How can we make our users lives easier, more productive, and efficient without sacrificing security?


Make sure IT operates and conforms to the company policies, and you will have a much happier and much more productive workforce.

Freedom and Understanding

(From an email list, someone wanted to know how to block services like MobileMe on the network. Normally I’d offer the advice on how to do it, but this time the first question I asked was “Do you local users have Admin to their own boxes?” To which the answer was “Yes.” -- I edited it to make more sense as a blog post. This is a post intended to provoke discussion, obviously my suggestions and things won’t work everywhere and in all scenarios and an all networks. Keep an open mind.)


We are in a new world, a mass world full of mobility. Take the iPhone. This is a computer, a computer I carry in my pocket, but none the less a computer. I could feasibly get away with leaving my laptop at home the majority of the time with the amount of things that I can get done on my phone. Laptops sales have increased significantly in the past few years, people are buying less and less desktop computers. Laptop speeds have caught up with desktop speeds, and things are much more convenient now.


Blackberries were that way, but the iPhone really sealed the deal. Of course now we have a plethora of devices coming out claiming to be “iPhone killers”. The Palm Pre, the things from LG, the Blackberry Storm, but there is still nothing that can touch the iPhone. You put an OS this powerful in a box this mobile, and viola, you have a mobile computing platform. And the solution to a lot of life's little problems. Why doesn’t Apple make a netbook? Wake up, they already have.


I absolutely could not get away with not being able to have MobileMe (or Google, whatever you use) sync my contacts, calendars, bookmarks, etc from the desktop up to the cloud and back down to my phone. I could not function if I didn't have realtime push for all of that kind of stuff. How would I know about that meeting that I just got invited to five minutes ago? Cause you know, no one is going to actually pick up a phone and call you about it (sarcasm).


What are the users doing that they need these sync services? Is what they are doing enhancing productivity or making their life easier? Probably. Is it a security risk? Can it be mitigated without destroying it?


I don't see a reason why not. The time has come for us a security professionals to stop nuking that which we don't understand/want to deal with, and start understanding why things are being used, how they are being used, and does it help? Instead of destroying everything, let’s figure out services and techniques that will provide our users the level of, well, not only training, but the level of convenience that is useful to them.


There are all these great companies out there starting great businesses to solve companies and life's problems, and attitudes like "we need to stop them" -- for no good reason -- just don't fly anymore. It just doesn't make sense in this day and age. Heck the Army even allows people to go to Facebook and Twitter now. Yes, they can click on bad things and people will download bad things and put them on their machines, but you know what, they are going to do it anyway, they will find a way around your control. Instead of inhibiting them, enable your users. I am not saying let them do what they want, or unblock everything. I am saying, let’s find solutions to their problems, instead of saying “no” all the time.


Yes there are security risks, but there are security risks in everything, right?


How can we make our users lives easier, more productive, and efficient without sacrificing security?


Make sure IT operates and conforms to the company policies, and you will have a much happier and much more productive workforce.

Sunday, August 24

This just in, someone steals another Apple idea

Okay, so could someone please rip Apple off? I mean, it hasn't been done in a couple days. Watch this video. Blackberry Bold unboxing. Tell me that's not almost the exact design of how the iPhone unboxing is? Please.

Subscribe in a reader

This just in, someone steals another Apple idea

Okay, so could someone please rip Apple off? I mean, it hasn't been done in a couple days. Watch this video. Blackberry Bold unboxing. Tell me that's not almost the exact design of how the iPhone unboxing is? Please.

Subscribe in a reader

Tuesday, June 10

Okay, so here's my iPhone 3G post

No doubt you are reading about the iPhone 3G in 300 other news media outlets today.  However, it would improper for me to call myself an Apple fanatic and not blog about it, so here you go.

1.  I think the price point is beautiful.  299/199.  Now, this includes the AT&T subsidization.  You have to remember that.  The phone isn't any cheaper, just AT&T is giving money to Apple to pay for the phone.  299 is a steal, and the lines to get this phone will be around the block.

2.  You have to buy the phone in the store and activate it in the store.  This is complete horse-sh*t.  That was one of the awesome things I loved about the current iPhone is that you could take it home and activate it.  But there were alot of problems with that.  I remember being stuck in New York City on the launch day last year without an activated phone.  Drove me nuts.

3.  3G/GPS.  As rumored, and it's true.  Next car that I buy will not have the GPS built in (saving me about 3000 dollars).  And since I live in an area that has 3G...  awesome.

4.  MobileMe (while this is not necessarily iPhone related) it's about time that Apple did something with .mac.  Don't get me wrong, I am a .mac user, and I use it all the time, however, I am glad they are doing more with the tech that they built.  I am happy to see that Contacts, Mail, and Calendars will be stored in the cloud and be pushed down to all devices.  This is awesome.

5.  AppStore.  I think there are going to be some very beautiful and useful apps that come out of the AppStore and am excited to see what happens.

Now for a few things that I still don't like.

6.  Lack of MMS.  Come on, let me text friggin pictures!

7.  Can't tether to your laptop (use your iPhone as a modem), but on the other hand, when I had my treo (before my blackberry, before my iPhone), I only used the tethering feature like twice, and it sucked.  So I don't really care.

8.  To-Do's.  I've said it before, and I'll say it again, I want my iPhone to sync To-Do's with my Mac.  Although on the other hand, I really imagine that someone will build an app to be able to have To-Do's synced in the cloud (mobileme) and have them pushed down to all devices, and then there will be a local client app on the iPhone to be able to navigate these.  Duh.

9.  Note syncing.  Will Notes be synced to the cloud (Mobileme)?  Don't know, but hopefully they will, and then hopefully the notes will be pushed down to the iphone's Notes application.

10.  Nothing.

Other than a few points, I will be picking the iPhone up on launch day, just like I did the last one.  There are a few points I am not happy about (like the fact that I have to activate it in the store, what kind of crap is that!), but  I am looking forward to having push email and 3G.

 Subscribe in a reader

Okay, so here's my iPhone 3G post

No doubt you are reading about the iPhone 3G in 300 other news media outlets today.  However, it would improper for me to call myself an Apple fanatic and not blog about it, so here you go.

1.  I think the price point is beautiful.  299/199.  Now, this includes the AT&T subsidization.  You have to remember that.  The phone isn't any cheaper, just AT&T is giving money to Apple to pay for the phone.  299 is a steal, and the lines to get this phone will be around the block.

2.  You have to buy the phone in the store and activate it in the store.  This is complete horse-sh*t.  That was one of the awesome things I loved about the current iPhone is that you could take it home and activate it.  But there were alot of problems with that.  I remember being stuck in New York City on the launch day last year without an activated phone.  Drove me nuts.

3.  3G/GPS.  As rumored, and it's true.  Next car that I buy will not have the GPS built in (saving me about 3000 dollars).  And since I live in an area that has 3G...  awesome.

4.  MobileMe (while this is not necessarily iPhone related) it's about time that Apple did something with .mac.  Don't get me wrong, I am a .mac user, and I use it all the time, however, I am glad they are doing more with the tech that they built.  I am happy to see that Contacts, Mail, and Calendars will be stored in the cloud and be pushed down to all devices.  This is awesome.

5.  AppStore.  I think there are going to be some very beautiful and useful apps that come out of the AppStore and am excited to see what happens.

Now for a few things that I still don't like.

6.  Lack of MMS.  Come on, let me text friggin pictures!

7.  Can't tether to your laptop (use your iPhone as a modem), but on the other hand, when I had my treo (before my blackberry, before my iPhone), I only used the tethering feature like twice, and it sucked.  So I don't really care.

8.  To-Do's.  I've said it before, and I'll say it again, I want my iPhone to sync To-Do's with my Mac.  Although on the other hand, I really imagine that someone will build an app to be able to have To-Do's synced in the cloud (mobileme) and have them pushed down to all devices, and then there will be a local client app on the iPhone to be able to navigate these.  Duh.

9.  Note syncing.  Will Notes be synced to the cloud (Mobileme)?  Don't know, but hopefully they will, and then hopefully the notes will be pushed down to the iphone's Notes application.

10.  Nothing.

Other than a few points, I will be picking the iPhone up on launch day, just like I did the last one.  There are a few points I am not happy about (like the fact that I have to activate it in the store, what kind of crap is that!), but  I am looking forward to having push email and 3G.

 Subscribe in a reader

Friday, February 15

Google Calendar and iCal Syncing

Well, I wanted a way for my wife to be able to accept events on her iCal, have it sync, automatically to her Blackberry, and even more, sync automatically with my iCal.  So, I found a nifty Google app called Google Mobile Sync for the Blackberry that automatically syncs the Blackberry and Google Calendar.  Great.  That's what I needed.

So I made a calendar in Google Calendar under my wife's Google account and tied the Blackberry to that.

Now I had to get her iCal (where she presently has all her events) to be able to sync with her Google Calendar.  Here is the tricky part.  You can read and subscribe to a Google Calendar, even setting permissions, per user, but you can't write to a Google Calendar (you can't use webdav from iCal to publish to Google Calendar.  That sucks.  (Hey Google, fix this, I know a couple of you read this blog.  I have logs, I have logs...)

So I found this app called SpanningSync which syncs your Google Calendar and you iCal (both ways).  Which is essentially the solution.  Only problem with this solution that I see is that you have to pay for the app.   I mean, I don't mind paying for software, I think coders should get paid too, but 65 bucks?  It's a tad bit much.  If it were, say 29 bucks for lifetime usage, then that would be the way to go.  Anyway, I hope this helps you all.

Thursday, January 31

AT&T Wireless Data Outage

Originally posted here.

Thanks all of you that have written in. We have seen the articles that say that AT&T is having a wireless data outage.

We have heard from multiple sources on the issue, and it seems to be limited to only certain regions of the US. (Central and South East primarily). I am currently in the NE section of the country, writing this entry on my AT&T 3G Wireless card. So I know it's working here (plus my iPhone and my wife's Blackberry work fine too).

We have also heard that this problem has been resolved. So everything should be back (if not already) to normal soon.

Subscribe in a reader

AT&T Wireless Data Outage

Originally posted here.

Thanks all of you that have written in. We have seen the articles that say that AT&T is having a wireless data outage.

We have heard from multiple sources on the issue, and it seems to be limited to only certain regions of the US. (Central and South East primarily). I am currently in the NE section of the country, writing this entry on my AT&T 3G Wireless card. So I know it's working here (plus my iPhone and my wife's Blackberry work fine too).

We have also heard that this problem has been resolved. So everything should be back (if not already) to normal soon.

Subscribe in a reader

Monday, July 2

Joel’s iPhone review

Okay, I’ve had all weekend to play with the phone, and here we go, I’ll go app by app, experience by experience.

At first I was caught in the wave of people whose activation wasn’t going through. From the time I submitted my activation on iTunes, to the time it went through was about 19 hours. 19 EXCRUCIATING hours. Let me tell you, sitting here wanting to play with my phone, and it not working is a pain the butt. But eventually, it started working, synced up, and everything is hunky dory now. Turns out there was a ‘hold’ on my activation by AT&T. Whatever the hell that means. But after a couple tech-support calls, it works now, and I am a happy camper.

Unlocking/Locking -- works by touching the top button, works great.

Home screen -- Exactly how it looks in all the commercials, exactly like the picture I have above, it functions as it should.

Text messaging (SMS) -- Works just fine, formats the chat like iChat, like you have seen. The Keyboard, which I will probably discuss several times this entry, is a bit interesting. As Apple says, “you start typing with one finger to get used to how it operates”, but actually, it’s getting used to you. It’s learning the names and proper nouns and things like that you will be typing. After a couple days of use, you can type with your thumbs. I am at this stage, I can type pretty fast, but I am not up to the speed that I was on while on my blackberry. Apple says you have to learn to trust the auto-correcting feature, and once you do, you work faster. I can see this. Maybe i’ll make another blog entry in a couple days reporting on how fast I am.

Calendar -- It works nicely, has the bubble look for calendar entries much like iCal. The only thing that is lacking in iCal is “Todo’s”. It’s not in a separate application or anything, but it’s kinda helpful to have those. I WANT MY TODO’S APPLE!!

Photos -- It’s a photo browsing app, you can flick from picture to picture from left to right, right to left, use the pinch to enlarge and decrease. Works great, no complaints here. I used the Photos feature to make a picture of my daughter sitting up on the floor my wallpaper. I like the feature of being able to email a photo right from the application, it kind of “minimizes” the photo, then puts it in an email for you to send. It’s kind of hard to describe, but I remember watching the effect on one of the Apple videos.

Camera -- It actually takes some descent photos. Considering it’s 2 megapixel camera, you have to kind of forgive it for any shaking or bad lighting. However, considering the camera on my last phone was a 1.3 megapixel, i can see that. Here’s a picture I took with my camera yesterday.



















Youtube -- Not a ‘useful’ feature, but definitely cool to pass the time with if you are bored.

Stocks widget -- I have all my stocks on there, it syncs quickly via Edge or Wifi.

Google Maps -- NICE. The integration with Google Maps is beautiful, Jobs said it was the best Google Maps client ever, and I tend to agree. It’s better then Google’s own implementation, and a hella lot better then the one I had on my blackberry.

Weather -- This is a handy feature, I can have several of them open at the same time, and i can flick left and right to be able to access the weather in whatever areas I set. I set them by hitting the edit button, too easy. Updates quickly via Edge or Wifi.

Clock -- The clock allows me to track the time in several time zones (it syncs via the cell tower), and has Cupertino built in as the default. Also has an Alarm, Stopwatch, and a countdown timer on it as well. The countdown timer has the most satisfying interface, which resembles a DaVinci cryptex
you flick your finger up and down to adjust the time.

Calculator -- It’s a simple +, -, *, /, calculator. Nothing special and nothing scientific.

Notes -- Simple Note pad, the font is sort of informal and rather ‘note-ish’. Kind of satisfying, the only problem is, when it syncs with iTunes it does NOT sync with ‘Stickies’ (The note application), so Notes are not synced anywhere I can see on OSX. One can surmise then that the notes will be synced with the Notes in OSX Leopard’s Mail.app application.

Settings --This was a section that I was curious about, so I’ll try and cover it in some detail:
1) Airplane Mode, simple slide left or right to turn off all wireless features. Nice.
2) Wi-fi -- You can turn wi-fi on or off, select the access point, and turn the “Ask to join networks” on or off. Now, from what i can tell, iPhone won’t just join some random access point. You have to tell it to do so, but once you do, it will remember that access point for future use. Nice. That way you can just walk into Panera, it grabs and IP and is ready for use.
3) Usage -- All kinds of metrics, usage, standby time, call time, lifetime call time, edge network data sent/received.
4) Sounds -- Vibrate on or off in silent mode, vibrate on or off in ring mode, ring volume, ringtone, and tones for voicemail, text message, mail, sent mail, calendar alerts, lock sounds, and keyboard clicking (which i turned off because it’s rather annoying when typing).
5) Brightness -- You can set it, or let it auto-adjust (on by default).
6) Wallpapers -- You can select from a built in wallpaper, or you can select your own.
7) General --
a) About -- what network you are on, how many songs, videos, photos, total capacity, available capacity, version (1.0), serial number, model number, wifi mac address, bluetooth mac address, imei and iccid numbers, and modem firmware. Finally a legal scroll page which includes the GPL license, and the licenses for bsd along with a shit-ton of other legal stuff from Google, Apple, and your mother.
b) Date and Time -- 24 hour time, set automatically, time zone support, and the ability to select a time zone (by city/state).
c) Auto-Lock -- 1, 2, 3, 4, 5, or never minutes.
d) Passcode lock -- (that you would have to type in after you lock/unlock the phone)
e) Network -- VPN and Wi-Fi. VPN supports L2TP and PPTP, as well as proxies.
f) Bluetooth -- ON or OFF, and what devices you are paired to. Apparently supports handsets only.
g) Keyboard -- Auto-Caps, or Enable Caps Lock
h) Reset -- Resets the device (also done by Holding down the Home button and the Sleep/Wake button)

8) Mail -- Allows you to do a bunch of things with mail, setup the accounts, auto-checks, how many recent messages to show, minimum font size and the like.
9) Phone -- Call Forwarding and Call Waiting are found here, as well as the ability to block your phone number.
10) Safari -- Cookies, Cache, etc..
11) iPod -- AudioBook speed, EQ, volume limit
12) Photos -- Repeat, shuffle, and other stuff for slideshows

Phone -- Favorites work well, Recents, Contacts, Keypad, and Visual Voicemail all work excellent like they do in the commercials. The Rubber-banding effect in contacts (well in ANYTHING) really, is nice. It’s like the iPhone is allowing you to scroll off the end, and prove to you yes, there really is nothing there, then brings you back to reality.
Call Quality -- Excellent, the speakerphone isn’t very loud, and I haven’t tested the hold or the conferencing features yet, but generally works great.
Bluetooth headset -- I haven’t tried it with a regular headset yet, but it works great with my car.

Mail -- Again, has a button to sync. (I use IMAP) Works great. Sometimes swiping your finger across an email to delete it is a bit awkward, (doesn’t work everytime, but I think it’s my fault). The Keyboard, as I said before, takes a bit to get used to, but once it’s learning your typing style, it works great. I can now type at full speed wit my thumbs on it. I’ve read some stuff recently about the in-ability to push email to the iPhone. Not true. Yahoo can push email to an iPhone, and I am sure Gmail, and .mac will get it. Blackberry enterprise can’t push but that’s RIM’s fault. ;)

Safari -- Now, I have heard alot of bitching about how slow the Edge network is. In my experience, it’s actually not that bad. It’s not as fast as the wifi, don’t get me wrong, but it’s not as slow as dialup either. I can deal with it. It’s actually faster IMO then my blackberry. My blackberry was painfully slow at webpages. It DOES support Javascript and RSS feeds. Unlike what these tools are saying out there in the press.

iPod -- Enuff said. a visual ipod. It kicks ass.

Things I wish the iPhone had --
Todo’s, already said it.
Removeable battery, even though by the time this one dies it’ll be time to buy a new phone, still though, i wish I could get a new battery, or an extra one for it.
A separate IM application -- I overcame this by setting AOLIM to forward my messages to my mobile when I am not near IM client. Works through SMS, and works just fine. Still though, I would like to have a separate iChat application.

Other than that, I love this thing. It ROCKS. If you are one of the non-believers or one of the people that thinks it’s all hype, then fine, don’t buy one. No skin off my back, I know it kicks serious booty. But I do suggest that you if you are reading an article that just says that the iPhone sucks, check their facts. Email me at the link below and I’ll debunk or approve, I don’t mind. Go to an AT&T store or an Apple store and play with it. You’ll be convinced.

But for those of you are that are looking to reduce the amount of devices and cables they have to carry, and are looking for something to really make their life more organized and simpler, then there you go. Get it.

Monday, December 18

Christmas, and the holiday spirit, and Internet security

Recently, since we've all been shopping, out there paying attention to gifts, what we are going to get, and what we aren't going to get. An attack has been going on. Apparently, against my web server.

I review my weblogs (I review all my logs) on a weekly basis. Because really, what's the point in having logs if you're not going to look at them? A log that isn't looked at is a pointless log. You might as well shut off syslog if you aren't going to look at the logs. But I digress.

I review my weblogs. I have mod_security installed on my apache webserver here, so through my custom mod_security rules, I am provided with audit_log in my logging directory.

I usually get about 200 to 300 entries a week in that file. All denied.

Last week that number jumped to almost 9000. As of this morning (my logs roll over on Sunday), I had over 3000.

As I am on my blackberry I don't have a copy of the logs, so I'll post a sample entry later.

But the string I see a lot is "x-aaaaaaaaaaa" in the header.

Anyone else seeing these?

Wednesday, November 15

Smartphone switching

Okay, so for about a year and a half now, I've been using the Treo 650. It's a nice phone, except that:

A) The battery sucks.
B) Email SUCKS
C) Useability sucks

So recently, I switched to the Blackberry 8700. YES. now THIS is a nice phone. I've never used a Blackberry before, and always looked down on those who do as being "Crackberry" addicts. But now I see why. This is a nice damn phone. Battery life is excellent (lasts about 3 days while using Cell phone and email regularily), bluetooth, and the EMAIL!! OOOOH the email!!! Push technology is so freaking great.

Things I miss:

The IR port.
The extensive amount of Applications for the Palm Platform (although I haven't found a program yet that I haven't found a blackberry equivalent for)
The ability for it to charge from my laptop (Yes, I know some people have done this with their Palm [points to Roesch], but I didn't so I suck okay?)
Auto Sync.


Blackberry 10, Palm 5. 4th Quarter.