Thursday, January 3, 2008

Some background

Since i'm often commenting on Macs and iPhones I figured it may be time for some background.

Beware that this plus the next are long reading. If anyone is watching, get yourself a drink and a snack before starting to read this one...

My first exposure to a computer was the original Apple back in the late 70's in England. From there I owned various models of Apple II computers in the 80s and did a lot of hacking on them with BIOS changes and some programming. At work I used the Apple Lisa computer which was a $10,000 machine at the time and the large company I worked for had a grand total of 2 and didn't know what to do with them. They weren't useful for much at the time. When the original Mac 128 came out, I bought it and still own it. It has the signatures on the inside of the case from all the original development team which is very cool to me. I made several hardware and software modifications to it over time. Through my early career I owned macs (as well as a few other things like the Amiga), the last of which was a decked out Power Machintosh 6100.

In the mid-90's I worked at a company that provided Wintel based machines for home use for free (early days of the work at home concept & they also included frame relay connections). By that time my Power Mac was aging fast and Apple had a poor roadmap for the future. I jumped ship, sold the Power Mac for $4,000 and spent the next decade on WinTel.

About 10 years later my wife wanted a web browser type notebook to use around the house. By that time i'd had my fill of WinTel world and Apple had some shiny new machines out and that included the new OSX. I bought her a PowerBook G4 12" which is a wonderful machine. She still uses it daily (it now has Leopard on it). Its been heavily abused and still runs strong with never a hardware failure. 

I spent most of my career in the SunOS/Solaris/Linux world and eventually ended up at a startup where I needed more than a Unix desktop as I was doing more managerial things but still hands on. So I needed Office apps, but I needed/wanted a Unix environment. I stole my wifes Powerbook and used it until work eventually bought me a 15" Powerbook G4 and then later a 15" MacBook Pro Core 2 which is what i'm currently using at the office.

Home has expanded beyond the PowerBook G4 12" (wife's portable) to include an iMac G5 17" (kids room), an iMac Core 2 Duo 20" (wife's office) and then my current pride-and-joy the dual processor, 8 core, Apple MacPro that I currently have 3.5TB of storage atttached to and 6GB of memory. Its the center of my "digital life."

Just about every machine i've ever owned has been taken apart in some way with non-supported memory upgrades, to disk upgrades (the 12" Powerbook was fun to take apart for a disk upgrade) to ROM upgrades. So far all i've done with the MacPro is add memory and disk but give it time...

Along the way I bought parts of old iPods off eBay and put one together (I wasn't sold enough on the need for music in my life to pay the current price of them) and eventually ended up buying several models, the last of which was the 5th generation iPod Video, 60GB.  I replaced various cards and drives in the iPods for myself and then later friends and family. 

I used various normal cell phones like the Razr and PDAs like the Sony Clie but always hated carrying multiple devices around. I hacked the Mac/Razr environment so I could bluetooth sync my contacts but could never get the calendar to go and managed to fry my Razr trying. I even resorted to trying the dreaded Blackberry 7000 series (aka Crack-berry) but I wasn't a huge fan of the interface and the thing that drove me away is that Blackberry has allowed companies to lock out features of the phone when you register the device with the company. Most companies i've worked for require me to buy the phone, so I think if I pay for the phone I should decide what can and cannot go on it (and yes, I get the security concerns driving the corporate behavior).

And then this year, the iPhone came out (waited in line for 2 hours for mine). So now I have my calendar, contacts and ipod and phone in one place. Then the mission became to have my whole life, work + home on the iPhone and thus the recent rash of blog entries (and frustration). And yes, like the other devices in my life, I hacked the iPhone with 3rd party apps, SSH access etc until Apple made that more painful and now with a SDK coming out and 1.1.3 coming out soon I'm trying to be patient.

So, with all that background you'll now know a bit of where i'm coming from on with my posts and focus on the Apple products. The last bit of the puzzle is that I work as an executive in the high tech industry with software and hardware (more software than hardware). Quality, performance, scalability, security and all those things are daily challenges that I think about at work and home. Having a horrible commute gives me lots of time to ponder content for these strange posts.

So if you're still with me, thanks for reading all this. If not, for some reason I felt I needed to brain dump (latent backup needs??) so there you go. Its way past my bed time, and perhaps yours too. 

'til next time.

Follow up

Well, it seems those Synchronica folks pulled the trigger too early.
Their partner website is unreliable and unresponsive. It also gives no
information on the support model for the pay service. That has me
concerned since the beta/demo version didn't work well enough to pay
for...

Exchange on the iPhone

Seems Synchronica finally got organized and now has licensed their
technology for a professional hosted service. See: http://www.syncyourmail.com

I hope the pay version doesnt have all the timeout issues for deleting/
moving messages...

Monday, December 17, 2007

Vista

Ranked #1 tech disappointment of 2007 by PC World: http://www.pcworld.com/article/id,140583-page,5-c,techindustrytrends/article.html

Apple, don't blow it this time. The 10 years in between the Apple II
and my OSX mac were pure PC torture.

Dumb articles

In this one "10 Reasons IT Should Not Support the Apple iPhone" (http://www.cio.com/article/165254

) you get a pile of garbage. I do agree with #1, they should allow you
to encrypt some data on the iPhone. Thankfully, products like
1Password have that figured out WITHOUT hacking the iPhone (see http://switchersblog.com/2007/10/05/iphone-password-manager.html)

Anyway, dont waste your time reading the article, its junk.

Saturday, December 15, 2007

Back to the file system

Well I tried Yojimbo for a couple days. I kept asking myself, what
does it do better than folders in finder? I could really only find one
thing, the individual file level encryption. Thats not enough to have
a whole proprietary filing system and pay extra with the remote access
concerns etc. So out it goes. It did get me thinking about printing my
receipts online to PDF and just saving them in the file system.

I haven't given up on 1Password -- with that I can have nice and nasty
passwords I dont have to remember or type.

Friday, December 14, 2007

Exchange email on the iPhone?

Can you get the iPhone to work like a Blackberry? No, but you can get
pretty darn close at least for the key stuff:

1) Sync your calendars. Prior to Leopard GroupCal was a nice option
for keeping your exchange cal sync'd to iCal and then to the iPhone.
Leopard came out and the GroupCal authors seem uninterested in their
customer base. They expect an update around Q1. I hope someone finds a
solution that doesn't need GroupCal before then. In the meantime, if
you use IMAP to get Exchange mail, double click on mail invites and
add them to your iCal calendar directly. Thats close enough for me.

2) Email. Even if your company like mine has opened up IMAP, it
probably requires VPN first. Most VPN's ive seen are CISCO based
don't support the VPN the iPhone has built in (or if they do it
requires your IT shop to change CISCO VPN settings. If your
organization is of any real size, forget that.

So you have no VPN and you may or may not have IMAP enabled. Almost
all organizations have Outlook Web Access (OWA) enabled. The iPhone
understands IMAP and POP, what we need is an OWA<->IMAP translation
service.

Enter Synchronica (http://www.synchronica.com/). Their Mobile Gateway
product does just this and for the most part works fairly well. Go to
their web site and sign up for a 60-day free trial. I asked for
pricing after the trial and got no response. Their "resellers" in the
US make no mention of this service/capability. So I have no idea how
to pay for this for real (and given the timeouts in #2 below, i'd be
hesitant until they fixed that)

What you get:

1) Full IMAP like access to your email for reading. You can see all
your folders and all your email and get alerts as new mail comes in.
2) You can generally file, send and reply to emails although sometimes
you get timeout messages where the operation failed. The timeout
happens more on the filing/moving of emails than it does on the
sending. Be careful on the sending since more than once it sent, I got
no error message, but the recipient never received.

For me keeping up on the reading to watch for developing emergencies
(or just to keep on top of things while traveling) its valuable.

Now since I tend to talk about security, lets address that here. Their
IMAP support supports SSL, so data between your iPhone and the
Synchronica gateway is encrypted. OWA is likewise encrypted between
your company's Exchange server and the Synchronica gateway. The email
passes through their gateway and its possible for them to snoop, save,
store etc the data there (naturally they claim they don't and it would
be bad for business if they did). Thats a security risk that most IT
groups would not allow if they knew about it. So you'll have to figure
out for yourself if you tell people how you're reading Exchange email
on your iPhone.

(p.s. When you send mail via this setup it ads a little tag line that
you cant remove while in the demo stage that indicates your mail
flowed by a path like this...)

But, despite my thoughts around security, I dont have a password on my
iPhone. That means if I drop it someone else can read my mail until I
get to a browser to change my password. The iPhone password options
are very limited and have no settings like "enable password if I
havent used it in 1 hour" type controls which would be more useful.
Also as far as I know the iPhone does not encrypt any data it stores
which means a password is just a delay for real hackers.


3) Contacts. AddressX, like GroupCal broke with Leopard and they're
not updating it any time soon. I dont send new emails to many people
from the phone, mostly replies so this really isnt an issue for me.
Those I do send new emails to are in my address book in the mac and
sync to the iPhone just fine.

As to the rest of what the blackberry does, I could care less. I love
my iPhone, I just need it to be useful for both work and home rather
than carry two devices. Yes, I could have just gotten a blackberry,
but both blackberry and my company have conspired to lock me out of
many features on the device (which would be paid for out of my own
pocket) so that was not an option. If its a phone I pay for then I
decide what goes on it.

'nuf said.

Saving stuff

I recently ran into Yojimbo (http://www.barebones.com/products/

yojimbo/) for keeping notes, pictures etc. The whole topic of a
personal storage system for this sort of stuff is interesting. Why not
use the file system? One reason is indexing, another is around
security since you cant encrypt individual items and there's a lot of
overhead in making/using encrypted disk images. I'd be filevault all
the way if the whole concept wasnt totally flawed. So Yojimbo is cool,
and I can print receipts direct to it, save my notes into it and
choose which ones are encrypted or not. It also supports saving
usernames/passwords but offers no browser integration. I've been using
1Password for saving my login information and its a great application
for that with great browser integration. It has the concept of secure
notes but no real import/export capabilities so that piece is sort of
useless. I'd love to see an app with the combination of what both of
these offer. Time will tell.

Thursday, December 13, 2007

Accessing stuff at home from work

Ok, so you've been good and disabled all open ports at home but port
22 (ssh) and you've set it up to only allow access with a certificate
(no username/password) and you've renumbered the port to something
else like 1234. How do you copy files back and forth between home and
work without resorting to the command line and SCP?

Here's how:

From the terminal do this:
sudo ssh -p 1234 myhomecomputer.bounceme.net -l myname -L
8000:127.0.0.1:548

Now in finder Command-K (Connect to server) and enter this:
afp://localhost:8000

Substitute your own remapped ports, your local user name and your home
computer URL or IP address.

No you can drag and drop like its local and SSH will deal with the
security for you.

Wednesday, December 5, 2007

iPhone in the Northeast?

Sitting here shivering in New England it seems obvious that despite
some awesome text correcting algorithms that the iPhone designers live
and work in a much warmer place. Touch typing characters without any
tactile feedback when you're freezing your butt off is not easy. No, I
dont have any ideas how to fix it, perhaps make them run hotter like
the MacBookPro's so they warm your hand to create less jitter :)

Sunday, November 11, 2007

Security

With the help of Proximity (http://reduxcomputing.com/proximity.php) and this the little applescript below I now have my screen saver locking within 10 seconds of me walking away from my mac. No need to trigger the screen saver or press a button, its taken care of. Very cool.

Script:
-- Silly little screen locker
-- to be used with Proximity: http://reduxcomputing.com/proximity.php

display dialog "iPhone not nearby, locking screen. You have 5 seconds to cancel" buttons {"Continue", "Cancel"} default button "Continue" giving up after 5

do shell script ("open /System/Library/Frameworks/ScreenSaver.framework/Resources/ScreenSaverEngine.app")


Friday, November 2, 2007

SSH Access

Since i've been complaining about Leopard, here's a plug. You can now
skip SSH keychain managers and have OSX remember your SSH passwords.
See this URL:

http://www.wand.net.nz/~smr26/wordpress/2007/10/28/mac-os-x-leopard-built-in-ssh-agent/

If you were using SSHKeychain before for keychain management you may
need this helpful tip:

http://garrickvanburen.com/archive/sshkeychainsocket-error-on-rake-remotesetup

Then you can setup a cron job to sync some remote (work?) machine to
some other (home) machine like this:

30 00 * * 1,2,3,4,5,6,7 echo "Starting rsync..." && rsync -avz -e "ssh
-p 1234 -i /Users/aUser/.ssh/aUser_home" --delete --
exclude="*Trashes" /Users/aUser/Documents/ aUser@aUser_home_machine.bounceme.net
:/Users/aUser/Documents/Work_machine && echo "rsync complete"

Make sure you setup SSH on your home machine behind some decent
security. For me, its behind a NAT, only one port is open and its not
well known and it only allows my user name in and it requires a ssh
key (username/password not allowed).

I used to do all the above before Leopard, but now I got to drop
SSHKeychain and do it more natively. Thanks Apple!

Hey Apple

Deleting my crontab files on the upgrade to Leopard was not nice. I
consider that data loss. Who does your QA?

Thursday, November 1, 2007

Time Machine

So Time Machine basically doesn't support File Vault. I was very
disappointed to see this. It will only back up your home directory if
you're logged out and then all the magic "go back in time" stuff is
disabled. In the days of ever increasing need for security Apple
really dropped the ball on this one.

Saturday, October 27, 2007

Finally

Finally there. Didn't help that I have filevault and several macs to do.

This "solution" just stinks: http://docs.info.apple.com/article.html?artnum=305454

. Its basically a wipe. I had the problem but ended up moving a bunch
of stuff out of my filevault home volume and then allowing it to
reclaim the space. Once I did that I could turn off file vault (and
then back on again). Finally I got my Time Machine enabled with my
encrypted home directory.

I also had an old 12" MacBook with no DVD that I wanted to install
tiger on. Fortunately I had an external USB DVD RW drive. Double
clicking the installer didnt work (didnt install the DVD after the
reboot), but holding down option during the boot got me to select the
disk and install it.

There are a lot of look and feel changes that will take time to get
used to, but now at least im using it and not watching installs or
LONG filevault operations.

Friday, October 26, 2007

Progress

Well, I made some progress:

1) Stacks - doh - click (left) on them and they pop, hold and you get
a different menu. I was holding. Dumb operator error...

2) Cisco VPN, get the latest here and you'll be fine: http://www.macupdate.com/download.php/10317/vpnclient-darwin-4.9.01.0080-universal-k9.dmg

3) File vault issues, Apple has an article that worked for me. The odd
thing is that disk utility found nothing wrong and nothing to fix, but
running through this process made it work to turn off disk utility. Go
figure. Here's the link: http://docs.info.apple.com/article.html?artnum=25695

4) Speed of mac pro - clicking on the spotlight icon in the menu tells
me I have 5 hours to go. Sigh. I hope when its done it can actually
find things. The old one never did it well and it sure wasnt zippy.
Perhaps apple needs to meet Lucene (http://lucene.apache.org/java/docs/)?

5) 2 of my 5 macs are now running Leopard so i'm getting there

Leopard first takes

Well, it looks cool but I have to admit i've had my issues with
Leopard already before it even hits the shelves in the store:

1) I cant turn on Time Machine on the shiny new 1TB drive I bought.
Seems nobody knew/mentioned that you have to turn off filevault and
then turn it back on again under Leopard before you can enable Time
Machine with a File Vault enabled machine. Do you know how long it
takes to turn it off then back on again??? Im going to find out but
thats miserable. Not to mention my one machine failed in the "turn off
file vault" operation and just came back up with it still enabled.

2) Those spring loaded folders you've heard all about (stacks) dont
always do the spring thing. So far I havent been able to figure why
they do sometimes and at other times dont.

3) On one machine double clicking "install leopard" after inserting
the DVD worked fine. On another it didnt and I had to reboot and hold
down "c" to get it to CD (DVD) boot so I could install.

4) Post install on my 8 core MacPro, the machine is heavily crunching
the hard drives (a mirrored pair of 500GB 7,200 rpm disks) to the
point that the machine is sluggish. Its like the old spotlight initial
pain from Tiger all over again.

Leopard here!

Yes, the long awaited OSX Leopard arrived at 11am today (I laugh at
those waiting until 6pm for the stores to sell it). Upgrade install
is in progress on my main server. Yes, I have blind faith in Apple...

Friday, September 28, 2007

iPhone 1.1.1

So, yeah, like many I hacked the iPhone to get on all the 3rd party
apps. For the most part they were "nice to have". There was no one
killer app I had to have. The ones I enjoyed the most were SendSong
(custom ringtones) and then the games. Note that I didn't do the
Carrier hacking, AT&T (to my surprise) does just fine for me and
meets my needs. All cell phone companies stink, so they're disposable
as far as i'm concerned.

Some initial observations with the 1.1.1 update:

1) I didnt uninstall my apps first, the upgrade was kind enough to do
that for me but it worked flawlessly. No failures during the update
and no complaints.
2) After the update it said I had to re-activate the phone but that
was basically just a sync with iTunes. I didnt even have to click a
button
3) My SendSong custom ringtones survived (!), otherwise all evidence
of prior hacking/mods are gone
4) Some nice new additons:
a) iTunes Wifi store - awesome. Bought a song, interface was great,
previews and all. Love it!
b) Speaker is noticeably louder
c) You can now shutoff the data roaming if you go overseas (since
you're probably not a billionaire if you're reading this)
d) All the misc stuff like double tap home button, 2 spaces = "." etc.

I'll miss the games and just the look and feel of the home page on
the phone, but overall its a nice improvement for me and i'll look
forward to reading the threads as they figure out how to re-hack it.