chxo internets RSS

A network of memes,
by Chris Snyder

See also
CHXO Internet
twitter.com/64

Archive

Jun
7th
Tue
permalink

You call it a Cloud, but it looks like a Silo

I predict that Apple’s iCloud will have the same problems inherent to every other mass “cloud” effort to date: no awareness of family.

If you share a computer or device with others, you know what I’m talking about. It’s not just my photos, music, and books. It’s OUR photos, music, and books. And yet, they are always tied to just one user account in these services, with any sharing happening manually or through clunky workaround interfaces like iTunes Library sharing (ugh!).

Businesses are in a similar situation, of course, but employees get paid to transfer data between silos. 

What am I asking for? Give me (us) a way to set up groups and sync information and files across multiple user accounts. Based on recent history, I fear that this is not even on the radar at Apple (or Google) (or Amazon). But we’ll see.

May
22nd
Sun
permalink
permalink

Why hasn’t Amazon ditched their Comodo Certificates?

On April 14, 2011, OS X and iOS were updated to blacklist a group of certificates that were infamously cloned by attackers using a compromised Comodo affiliate Registration Authority. 

This isn’t the first time Comodo has been compromised.

So why does Amazon still use Comodo? Parts of their ordering pipeline are broken (no images) due to the now untrusted certificate shown above. 

May
4th
Wed
permalink
permalink

When Inline Attachments Get Scary

I just got an interesting 419 letter purporting to be from the Lagos office of the FBI. Unlike most such, it came as a PDF (screenshot above).

It’s obviously not credible on several levels, but what gave me pause was this: Apple mail automatically rendered the attached PDF. 

We have been hearing about PDF attacks for years, where a maliciously crafted PDF can lead to arbitrary code execution when opened. Most of these have been in Adobe’s abominable Reader, but there have been necessary patches to Apple’s PDF code, too. Some day, an enlightened 419 scammer will realize that a maliciously crafted advance letter may be all they need to get your bank account details the easy way, via keylogger. It won’t matter that the email looks bogus; Core Graphics has already opened the PDF.

There needs to be a setting in Mail Preferences to prevent this, just like the setting to prevent downloading of remote images. Until there is, or they disable this sketchy practice by default, you can use the following Terminal command.

How to turn off inline attachments in Mail.app

defaults write com.apple.mail DisableInlineAttachmentViewing -bool yes

Thanks to Micah Gilman for the tip.

Mar
28th
Mon
permalink

Run Linux command as a different user

It’s easy to forget how powerful the unix su command is. You can have it launch a different shell than the one specified in /etc/passwd, and tell it to run a particular command.

This comes in especially handy when adding startup tasks in /etc/rc.local, when you want to launch a server or some other process as an unprivileged user:

su -s /bin/sh - edarwin -c "/usr/local/erasmus/startup-debian.sh"

That is, as user edarwin, use the /bin/sh shell in a fresh environment to run the script startup-debian.sh. 

Via this forum post.

Mar
26th
Sat
permalink

Dilbert.com

In the future we shall all be assimilated.

Mar
14th
Mon
permalink

How do you transfer a domain registered through Google Apps?

Short answer: you have to write to the email address that Google gives you under Advanced DNS Settings, and request the auth-info code for the domain.

Long answer:
How to Transfer a Domain Name Registered With Google to a GoDaddy Account

permalink

Dr Josef Oehmen explains Fukushima Accident

I am writing this text (Mar 12) to give you some peace of mind regarding some of the troubles in Japan, that is the safety of Japan’s nuclear reactors. Up front, the situation is serious, but under control. And this text is long! But you will know more about nuclear power plants after reading it than all journalists on this planet put together.

Mar
10th
Thu
permalink

Use Decomb instead of Deinterlace in Handbrake

I use Handbrake to extract video from DVDs all the time, as part of my job. And being old-school, I like to use the deinterlace filter to remove the field lines from the video so that it doesn’t look like it was shot in the 1980s.

But it turns out that it’s better to use the decomb filter instead, because it is smarter and less invasive. This page on the Handbrake wiki explains it all, with examples.