You’re not naked…but what about your computer?

Laptopcoffeeshop_3
In January of 2005 I wrote Are You Naked? and again in July of 2007 Are you *still* naked in a coffee shop?. My objective was to try and elevate the discussion about the fact the overwhelming majority of us who use free wireless internet access in public hotspots are completely "naked" since it’s trivial to capture your wireless packets as they fly through the air.

There are certain things I never do in a coffee shop: use File Transfer Protocol (FTP) but instead the Secure FTP; never access my banking or stock sites; set my firewall and more (for best practices, see that second post on the subject here).

Managing eight email addresses through the Google Gmail interface, I’ve always made certain that I access Gmail through Secure Socket Layer (SSL) which is the encrypted security protocol used by banks, stock sites, ecommerce and any other transactional site with security (you know you’re using SSL when you see the little padlock in your browser and an "s" after "http" in your browsers address bar). Felt pretty good about it too and I’ve trusted the big brains at Google to be 110% on top of security issues.

Now comes word that there is a security hole in Google’s Gmail javascript (used in Gmail for the fancy-shmancy Ajax interface framework and elements):

When Robert Graham demonstrated how Web 2.0 wasn’t safe
at last year’s Blackhat, it was thought that at least the SSL mode
(HTTPS) of Google Gmail would be spared from sidejacking.  That
presumption now appears to be false according to this updated blog posting
from Graham.  Even with SSL enabled, Gmail sessions can still be
hijacked by Graham’s Hamster and Ferret (or less easily with Wireshark
and Mozilla’s cookie editor).

This is just great. If me, Mr. Security and Web Application Awareness, has an opening for his laptop and Gmail session to be compromised, what about everyone else?

My daughter logs on to any wifi hotspot with her iPhone or Macbook and sees zero harm — though I’m trying to educate her on how to be safe (which feels to me like havng a safe sex discussion and we know how effective THAT has been globally…but I digress). This means, for example, a "packet thief" could sit in a coffee shop, log in to the free wifi and setup a rogue hotspot (it’s simple to set up your own laptop to pretend it’s a wifi access point and lure in the unsuspecting) and then fire up the tools on their laptop and capture my daughter’s packets that come through the packet thief’s own laptop. Voila! The packet thief now has her username, password — or in the case of Gmail’s cookie security hole — the cookies with temporary credentials in them.

With a temporary cookie session initiated, the packet thief can now change her password and have complete control over her email (and, God forbid, her banking, stock trading, or any ecommerce transactions executed while accidentally logged on to a thief’s laptop).

Fix this Google…now.

Sprout: A mashup & application tool for the masses

Sprout
Our pals at Techcrunch just posted about a new company that debuted today at DEMO called Sprout and thought I’d attempt to get in on the private beta and lo-and-behold…I got in.

The ‘sprout’ (their term vs. ‘widget’) you see below is one I created in 15 minutes. It took me longer to open Photoshop, reduce the size of the Connecting the Dots header and to type in the pathnames to my podcasts (yes I know…they’re OLD) then it did to create the sprout!

I just grinned and shook my head in disbelief as I used it since Sprout has delivered on
my pent up desire to have just such a mashup and creation tool which
begs the question: why the hell didn’t Adobe do this with their rich internet application
(i.e., RIA or Adobe Integrated Runtime (AIR)) strategy? To date mere mortals — who are savvy enough to
use InDesign, Photoshop, Illustrator and the like — can’t truly
deliver on AIR, Microsoft Silverlight or even Webkit apps unless the propeller on
their beanie is fairly large.

There are a few nits (the words "Click on any playlist…" were bolded and italicized which didn’t publish) but they’re so few compared to the power Sprout has unleashed they’re easily overlooked. I also want to understand what they’ll charge for the service — or those I direct to Sprout to create — before I get too fired up about recommending people leap on the tool and deliver mission-critical products.

I also noticed a slight latency as my ‘sprout’ loads which you might notice also. I’ve been a broken record on the topic of the "dirty little secret"
– that Internetwork latency is already affecting mashups,
Web/Enterprise 2.0 applications, video delivery and essentially
everything we do over the Internet — but this latency won’t likely slow down the creation and delivery of mashed up applications. I hope, really hope, that this latency doesn’t crush the spirit of those of us truly wanting to create and deliver significantly higher value on the Web with tools like Sprout.

Using this tool for 30 minutes tonight has sparked about 25 ideas for how I’d use it. From completely self-contained multimedia slideshows to a different sort of ebook to a poor man’s RIA, I suspect many others will have exactly the same reaction and start building these things like mad.

Reality of One Laptop Per Child?

Olpc
So much has been written about the One Laptop Per Child (OLPC) project that I won’t rehash it in this post, but will say that my position has always been that the primary value in the OLPC project is that the Internet is the biggest shift in human communications and knowledge storage ever, and ideas, innovations and human connection now move at the speed of electrons. Denying anyone, any kid, from being a part of that shift — no matter how small and regardless of the technology used to participate in it — is relegating them to a future of intellectual and knowledge poverty.

When I was invited to join the Institute of Distributed Creativity mailing list (comprised of many academics and thought leaders in education, learning, social media and more), I was part of a very spirited discussion about the OLPC with people’s opinions being slanted toward it being "male created technology" or that we Americans (OLPC head Nicholas Negroponte in specific) were acting as "imperalists" or "capitalists" within the context of OLPC, pushing our way and consumerism on the third world.

After participating in this OLPC discussion, I then ranted on the list that I’d expected the list members would be comprised of deep thinkers and those who appreciate vision and are trying to move the world forward. People who push against the membrane of the future rather than pull back from it as critics (and I felt I was seeing more criticism than critical thinking). I’ve been accused of being a happy-assed optimist (my words) in the list with respect to technology and am guilty as charged, but at least Negronponte was doing something while the list members pontificated about their views of such a project and how it should be done or not done at all.

Then the thread went silent….until today when a man named Martin Lucas weighed in with such a well written counter-point to my optimism — and the varying perspectives about OLPC — that I asked him if I could publish it on my blog in total as it’s too good to leave on a closed list.

Continue on to read Martin Lucas’ "One Slate per Child" paper that gives a dose of reality — from someone on the ground in the African state of Malawi — about the reality of introducing the OLPC and obstacles faced in one country ostensibly a perfect target for OLPC…

[Read more...]

Macworld 2008: Tablet? Mac Touch? Let’s pay homage to the Apple Newton

Next week sees Steve Jobs on stage giving his Macworld 2008 keynote. Some things are obvious (new Mac Pro announcement this week shows machines starting at $2,798 so there’s a huge gap to be filled below it, probably with a midlevel, headless machine) and rumor speculation is rampant with an ultraportable Mac near the top of the list.

I still have an Apple Newton with an Apple fixed asset tag on it (they didn’t want it back when I left the company in 1999). While I didn’t like it well enough to have paid money for it (even with my employee discount), the handwriting recognition in the 2.0 software was excellent and not rivaled for several years until Microsoft debuted the Tablet PC.

In the spirit of yesterday’s post of how slooowly things move — and that each of us should be grateful and amazed by how far we’ve come in such a short time — let’s pay a little homage to the Newton by viewing this getting started video for the device. Seeing how archaic it seems today will surely make you appreciate the ease-of-use of a touch-enabled iPhone or iPod Touch all the more and get you ready for whatever "one more thing" happens next Tuesday.

I bet it will be "touchy".

Getting Started with Apple Newton

CES: Hey Linksys…it’s 2008!

Linksyswvc54gc
In a day of accelerating Macintosh market share (Windows is still over 90% of the market…though declining) and where Internet-centric applications, communications and participatory social media make your device choice less relevant, I’m taken aback when a vendor the size of Linksys (owned by Cisco) announces a brand new, very affordable ($120 or $99 street price) stand-alone webcam that only supports Windows.

Linksys’ User Guide says this in the FAQ, “The Camera is designed for computers running a Windows operating system and Internet Explorer 5.5 or higher. You cannot view video on a Macintosh.

This lack of support is not what many people experience with, for example, their ISP (mine is Comcast) who often state, “Ahh…we don’t support the Macintosh” but it turns out they don’t because they don’t have that machine sitting in front of them to troubleshoot nor has the ISP’s customer service group created scripts for the clueless drones to read.

This is no exaggeration: Out of the 100 or so geeks and early adopters that I know, well over 90% of them use Macs. Most have RAM maxed out and are using Parallels to run Windows and Linux within a virtual container inside of Mac OS X (I do the same thing, though mostly for goofin’ around vs. serious geek work). Every company chases influencers — especially in a day where social media is exploding and people want guidance as complexity increases — so it’s really puzzling why Linksys would turn its back on influencers.

[Read more...]

Is that an LED projector in your pocket?

Miniprojector Minnesota-based 3M announced today that they have released an earpiece-sized LED projector for mobile and handheld device projection.

3M is now providing consumer electronics manufacturers with a revolutionary advancement in the emerging field of miniature projection technology. 3M scientists developed a breakthrough ultra-compact, LED-illuminated projection engine designed for integration into virtually any personal electronic device. Roughly the size of a wireless earpiece and less than half an inch thick, the 3M mobile projection engine delivers brilliant VGA resolution images and is available today.

This company creates and develops alot of cool technology, but is primarily a supplier of infrastructure materials or building blocks that others turn into finished goods. They do say in the press release that they are "…partnering with leading consumer electronics companies that plan to launch products in early 2008."

Before I get too excited I’ll have to see one in action. Though I love the several smaller-than-dime-sized-lens 7 megapixel Panasonic and Canon cameras we own, when I’m serious about a photograph I’ll grab my Nikon digital SLR with its huge sensor and lens about the size of a small apple. The resulting image is low on noise and high on clarity.

Of course, cost and convenience are why we always buy the tiny, less qualitatively nice gear, heh? When I look at this tiny little projector component in the 3M picture, I can’t help but remember wheeling  a huge Sony 3 gun projector (like this one) into a large group presentation and have been enjoying the continued reduction in size — and increase in quality — of the small projectors. At some point I’ll buy one when I’m confident a small one will be decent.

Comcast: No iChat, No Choice

Ichatdead_4
Since I rarely use Bittorrent and have experienced just a few issues with using Skype (and none with Vonage) services over my Comcast High Speed Internet connection, the confirmed accusations of Comcast’s packet shaping have been troubling but haven’t yet personally affected me and — like most of us with so-called "broadband" (which others outside the US laugh at in terms of speed) — we have no choice in high speed providers unless we want to go dog slow with some flavor of DSL or go back to using a modem.

In a bizarre twist, what has affected me is a quite useful product (iChat) and I’m growing madder by the day: Using Apple’s iChatAV in a session with video or screen sharing starts off just fine but within minutes deteriorates and becomes unusable (pixelated video, audio dropouts, slow response with screensharing).

iChatAV is incredibly useful since my 81 year old Dad, my sister and other family members have it and I can easily perform remote management of their machines through simple chat. It’s so laughingly easy that it has taken me minutes to teach someone how to use audio and video chat or to share my screen — or ask to share theirs so I can troubleshoot some difficulty they’re having — and thus I can sprinkle my knowledge around as needed and help my loved ones out (without getting in the car and driving over or flying).

I’m not the only one that is having this issue as evidenced by this Macintouch thread here (look at October 2007 comments on) as well as this long one in the iChat AV forum at Apple’s site. There are numerous fixes people have tried (throttling iChat’s bandwidth; rebooting the modem; opening a window and shouting) which sometimes works and mostly doesn’t.

After the jump, you’ll see the note I just wrote to Rick Germano, the SVP of Comcast Customer Service and a link to a page you can use to also send Mr. Germano a nice note…although he and his executive cronies at Comcast probably sit around at cocktail parties guffawing over people having issues with their service, "Oh yeah….so what are they gonna do….switch!?!" (Insert a bunch of lit-up guys howling with laughter here).

[Read more...]

NetRadio’s 1995 debut in Minneapolis

If you weren’t deeply immersed in the Internet’s early days as I was, it’s hard to remember the pain, the obstacles and the now almost quaint state-of-the-art in 1995.

It was that year in November that NetRadio made its debut here in Minneapolis and is an invention and milestone that needs to be lauded and remembered. Invented by Scott Bourne and Scot McCombs (more here), NetRadio used RealAudio‘s first player and server technology to run. A former Authorware (now part of Adobe) colleague of mine, Rob Griggs, was an early investor and co-founder and he invited me to the offices you’ll see in the video below (via TWiT) to see their new radio offering streaming over the Internet.

At the time I was impressed and could easily visualize the possibilities, but also knew in every cell of my being how long it would take before this was anything more than cool and a novelty. In fact, my belief as to one, key cause of the dotcom crash was that there was a HUGE amount of Web content pouring into the top of the funnel (i.e., being served) and most of us were sipping through the tiny hole at the bottom of the funnel (i.e., with dial-up 56k modems) and there was no way rich media of any kind — including low audio quality radio — would yet flourish over copper wires for quite some time.

In 1995 there were, as the video points out, roughly "110,000 Web sites" and that NetRadio received "about 25,000 Web visitors in the first few days". Impressive at the time, but so was the Model T in 1908.

Biker identified with iPod: Adam Finley

Adam
Turns out that the 30 year old guy, Adam Finley, who was hit and killed on his bike near Lake Calhoun in Minneapolis last Thursday — and was identified only because the police worked with Apple Security First Tech Apple experts to identify him from the iPod he was carrying — was a blogger and TV Squad is reprinting some of his articles in memoriam.

It also brought back bad memories since I was hit by a car jogging on that exact same intersection when I was 29 years old, carrying no identification and listening to a Sony FM Walkman at the time.

AIntersection drunk was making a left turn westbound Lake Street and fortunately was going very slowly. I turned and saw him at the last minute simply coming at me and it gave me time to leap up in the air, landing on the hood of his car. I slid off, he hit the brakes and the rear tire ended up six inches from my head.

Others snagged his keys and kept him there until police arrived, and I was just damn lucky I wasn’t killed — it just tore my jacket and gave me a few bumps and bruises. Adam’s untimely death — though I didn’t know him or read his blog — really has given me pause about how quickly things can go the other way, how lucky I was and how I’ve carried identification ever since when I’m out running or biking.

Take a moment and think about how interesting it is to live in a time when digital breadcrumb trails can be left by people like Adam in blogs, podcasts, MySpace pages…or by you…and how good it is to remember someone partially by the contributions they’ve made. I think often about preserving my blog and podcasts to be discovered by some interested descendant of mine who might wonder who I was and what was happening when I was alive. In a small way, I now have a glimpse into Adam Finley whose life stopped far too early.

Hacking the iPhone

Hacktheiphone

For the last month I’ve been hacking my iPhone with iFuntastic. Adding ringtones, moving stuff around and so on is fun…but I want more. I want applications. Why? Because as much as I enjoy and truly love my iPhone, I’m bored. I’d love to be able to buy an application, for instance, that would allow me to have a To Do list that is useful (that little note pad is pretty worthless).

The problem is that the hacks don’t work well and few developers are willing to invest in application development if the runtime is dependent upon a hack to make it work. For example, iFuntastic allows icons alone or icons with captions…but not all turn off. It’s a little thing but it ruins the aesthetic of the iPhone when it’s all kludgy looking. An Apple update for the iPhone often removes the hack and a restore is necessary…not something a developer would be to keen on.

This post on Lifehacker is one I’ll try next.

Whether or not you have an iPhone or if you’ve hacked it or not, the energy around trying to arm-wrestle this device into submission is one in which I delight. There are people just like me — bored but with the technical acumen to actually hack the device — that are providing ways to customize it. The recent SIM card hack is one example of how people are figuring out how to make it more useful, including having it run in places Apple would prefer it doesn’t at this time.

What is interesting about this phenomena is how companies try to position and control technology and its release…but people mold, bend and shape it to their own ends. With the instant access to news and information (and how-to’s) flying around the internet at the speed of electrons, control is being lost and quickly.