30th August, 2008

iPhone Tethering, Not As Hard As It Looks

In a flip-flop move reminisant of John Kerry’s 2004 presidential campaign, Rogers Wireless has reversed it’s policy regarding smart phone tethering. I’m not even going to try to speculate what’s going on internally with this company. Buried in this CBC article about Rogers’ (baffling) new data plans is this nugget:

Unlike other cellphone carriers, Rogers is allowing customers to “tether” their smartphones, or connect them to a computer and use them as a modem.

This new policy was one of the reasons I decided to jailbreak my iPhone earlier this week.

Finally got around to trying it out tonight. A quick google pulled up a very ominous looking 9 step How To. In actuality there are only 3 things you really have to set up. 1) ad-hoc network on the pc, 2) run ‘socks’ on iPhone, 3) set up SOCKS proxy connection in your browser

First Impressions:

  • 3G is fast! Speedtest.net gave me 2742 kb/s down and 246 kb/s up. That was with full bars of reception, during off-peak. This is definitely fast enough for standard browsing and not too bad for file downloads. I’ve gotten worse connections with paid wifi.
  • Because it’s a browser based solution, it’s somewhat limiting. I suspect there’s some software available that would hook into a proxy server at on a lower level, it might even be a standard configuration setting in windows. I didn’t look into it.
  • Either the socks app stopped working and/or firefox randomly forgot my proxy settings. Over the course of my 15 minute trial, I had to reset firefox’s proxy settings 5 or 6 times.
  • Battery drain on the iPhone is high. You probably only have an hour max.

Overall, it’s pretty cool.
That said, I’m not entirely sure where I’d use this. Most of the time the iPhone is going to be as much internet as I need. I might use it at an airport, if I wanted to sync some podcasts before a long flight or something. I may use it if I wanted to work in a wifi-less location. Other than that, it’s a good backup incase the cable ever goes down.

1st August, 2008

Security? Why Bother

I’ve been working on an internal information delivery system for an unnamed multi-national.

I just logged in to their production database to set up some new features. One of which involved updating their user database. While poking around, I noticed that all but 62 of their roughly 400 users had the same password hash (meaning they all had the same password)!

Seriously!

28th May, 2008

How To Round Unixtime To Midnight

This might be pretty obvious to anyone with basic math skills. It took me a few minutes to figure out, so I thought I’d share with the world. To round a unix timestamp to the previous midnight (UTC) use the following function:

function unixtime_round_to_midnight ($t) {
return $t – ($t%86400);
}

Thanks to Ian for pointing out my math ineptitude.

14th March, 2008

Thoughts on Online Privacy & How to Protect Yourself [OR How Facebook Can Save Your Identity]

The following is an excerpt of an email I wrote in response to this article Facebook can ruin your life. And so can MySpace, Bebo

A lot of the current batch of social networks have very poorly designed privacy controls. On facebook for instance, it’s very hard to tell which of your contacts have access to different which areas of your profile and it’s not entirely clear how much of this information is accessible via google. In fact, there is a bug in Facebooks’ architecture that will allow any of your friends to see a newsfeed item (not the full post) for all of your activities via the official Facebook API, even if you have set up your account to block certain users from seeing this. Also, facebook is also more closed off then some of the old social networks, so it might not even be clear to most users that their profiles show up on google. Combine all of these factors; bugs, security holes, phishing attacks, user ignorance/naivety and you’ve got a shitstorm waiting to happen. I wouldn’t be surprised if in the next couple of years a big player is completely knocked out of the game by a major attack and the bad press that follows. Not too long ago a file containing nearly 1 million myspace usernames and passwords was making it’s rounds; it went largely unreported, but if a major news outlet had picked it up it would’ve been very bad for myspace.

That said, I think a lot of the people mentioned in this article probably didn’t have great legal representation. Writing a journal entry about how much you hate your job, doesn’t neccessarily mean you’re a bad idea. Making a drunken post about how much of a drunk you are, doesn’t mean much if that’s the only time you’ve had a drink in 6 months. Accidentally adding someone to your friends list on a social network because you didn’t know how to use the interface, is not nearly the same thing as banging on someone’s front door demanding to speak with them.

Interestingly, I’ve found that using my real name on websites/networks is a good way of protecting my online reputation. Social networking and similar sites will generally have much higher weighting in google then the average site – networking type sites are built with search engine optimization in mind. So if you are a member of a number of these types of sites and you post content that you are proud of on a every once in awhile, when someone does a search for your name they will almost always find content that you can vouch for. Additionally, if there is any kind of negative content about you somewhere on the web – say someone has posted something mean about you in their blog, or even worse if articles about your latest criminal conviction in show up in a local newspaper’s website – it is very likely that when a potential employer does a search for your name, your profiles on larger websites will show up before these negative articles on smaller websites.

14th February, 2008

Viewing All Images On Reddit

In case you didn’t know (I didn’t for the longest time), it is possible to view all images posted on reddit using this URL: http://reddit.com/r/pics/