Categories
In The News Security

Pacemaker Firewall

If you have a pacemaker or a defibrillator you may want to consider getting a firewall at some point in the future. They could potentially be “hacked“:

But hackers could transmit the same radio signals — causing a defibrillator to shock or shut down, or divulge a patient’s medical information — without needing a programmer, researchers found in a laboratory test of one model from Medtronic.

I’m surprised there’s no authentication at all on these things. Considering it’s implanted, it should at least require it’s own serial number to be sent back to it to suggest the sender is authorized (presumably because they have the serial number of the implanted device). By not responding to commands for 10 minutes after 3 wrong guesses, it would take a long time to hack. That’s pretty basic, and not foolproof (what about a mistyped serial number during an emergency?), but a start.

Categories
Google Mozilla

Gmail Contact Sync

Google released the API for contacts. How long before someone comes up with a Thunderbird plugin to sync up with it? Any takers?

I’d love to know why they decided the API route, rather than use LDAP. It can be secured using TLS, and require a bind DN and bind password. If they did it that way, most email clients would be compatible right out of the gate.

There’s also Google Calendar Sync, but only supports Outlook. Still no CalDAV.

I’m slightly disappointed, but at least with an API thinks are workable. Standards would still be best.

Categories
Apple

iPhone SDK & Enterprise Offering

Apple announced it’s Enterprise offering as well as the long awaited SDK for the iPhone today. A few thoughts:

Enterprise Offering

Pretty impressive, at least the way it sounds. I have a feeling they are dead serious on this one. Exchange support, and the administrative stuff will be very big wins. I also wouldn’t be surprised if the line ends up splitting so there’s an enterprise line of iPhones with a more business set of features, and a “personal” line. That will help them compete more on both sides by being able to focus more. Software likely will be identical among them.

The one thing I can’t figure out is cost. I have a strong feeling a price drop for the current EDGE based iPhones will come in June, as the new 3G models are revealed. It’s still a hard pitch for enterprises to buy iPhones when Blackberry’s are getting cheaper and cheaper. Not to mention they can shop for prices among wireless providers. Because of this, I think there’s a price drop in the works to bring the iPhone to where it can really compete.

SDK

I can has SDK? Still can’t download it. Apple’s on Akamai, but their developer stuff is generally not. That really sucks. I’ve been trying all afternoon.

I wonder if the $99 one time fee (setup fee) applies to open source projects? I’d hope they provide an avenue for them to signup at no charge. Especially considering Apple’s involvement in open source.

Other Thoughts

Still no Apple SSH client? I really hope terminal.app is available for download when this thing actually ships.

More when I actually get my hands on some SDK bits.

Categories
Mozilla Open Source

Self Serving Sausage Fest?

Does that title accurately describe open source? Via Valleywag I found this blog post from Psychology Today which I’d recommend reading. This is really the most interesting part:

First, there’s street cred: People want to garner approval from their peers and build their reputation. Second, there’s self-actualization: Working on these projects is enjoyable in and of itself, and it also provides the opportunities to practice your skills, collect feedback, and grow as a geek. Third, there’s pure altruism: Let’s save the world, one squashed bug or “[citation needed]” at a time.

Interesting stuff. I definitely fall in the “practice your skills, collect feedback, and grow as a geek” category.

Also noteworthy: 97.8 percent of open source programmers are male. Like there was any surprise that it’s somewhat of a sausage fest on #developers. Anyone ever check the ratio on about:credits? Come up with an automated way to do that’s licensed under MPL/GPL/LGPL and you’ll earn some serious street cred not to mention save the world and practice your text analysis skills.

I guess this is even more extreme than the Dave-to-Girl ratio.

Categories
Apple

No Flash For The iPhone

Via TechCrunch I noticed that there won’t be flash player for the iPhone anytime soon. I’m not surprised. I said this before.

Apple doesn’t want the iPhone to get the reputation of having poor battery life. Apple is said to have avoided 3G thus far because of power consumption reasons, instead opting for a lower powered EDGE chip. When Apple moves to 3G later this year, they will want to at a minimum keep the same battery life. Having Flash on the iPhone will mean a likely drop in battery life. Something they don’t want.

I suspect in 12-18 months when H.264/AAC is a more common encoding scheme, I think we’ll see a Flash component for QuickTime that can take advantage of the hardware on the iPhone. Right now there’s too much vc6 stuff out there.

Apple doesn’t want anything released to drain battery life or it will be accused of misleading consumers about average battery life. Keeping the CPU idle will help keep that time up.

I suspect the SDK will have some limitations on CPU cycles an app built can consume before it’s throttled in some way. For the exact same purpose. That’s fine for most things, most users won’t notice, but for video, any slowdown or bottleneck becomes very visible.

Categories
Apple Hardware Open Source

Bestselling Laptops

Mark Pilgrim has a great picture of the top laptops on Amazon.com right now. What I found interesting is that the first Windows laptop is #6 (and no it’s not running an Intel), The #1 and #2 goes to Mac OS X and Linux.

  1. Apple Macbook 13″ (2.4GHz)
  2. Asus Eee 4G 7″ (900MHz)
  3. Asus Eee 4G Surf 7″ (800MHz)
  4. Apple Macbook 13″ (2.4GHz)
  5. Apple Macbook 13″ (2GHz)
  6. HP Pavilion DV2740SE 14.1″ (2Ghz AMD Turion 64 X 2)

Taking a look at the competition it’s pretty clear why. The Times They Are A-Changin’.

That new 9″ Asus Eee looks pretty nice. What would be ideal is if they made the 7″ with a higher resolution and kept the price the same. 9″ is a little large for this class of mobile computing.

Categories
Mozilla

A Standards Based Future

I wrote a few weeks ago about Microsoft’s plan to require a meta tag to use standards mode rendering in IE8. There was a ton of backlash. I can’t remember the last time so many browser and web developers publicly spoke out so quickly on an issue. It was pretty obvious to everyone that it wasn’t a good thing for the web.

Microsoft has had a change of heart, and will now use the new standards mode by default, and an IE7 compatibility mode via a meta tag. This is a much better move as it will mean more rapid adoption of standards. The point in which we will be able to develop on a more level playing field moved much closer thanks to this move.

As everyone around the web is noticing, this little nugget in the press release is pretty interesting:

“While we do not believe there are currently any legal requirements that would dictate which rendering mode must be chosen as the default for a given browser, this step clearly removes this question as a potential legal and regulatory issue,? said Brad Smith, Microsoft senior vice president and general counsel.

Most seem to think that’s a reference to Opera’s antitrust complaint with the EU. I would agree.

Go Standards Campaign?

I wonder if it’s worth some sort of cross-vendor campaign (Mozilla, Microsoft, Opera, WebKit/Apple) to get users to adopt modern browsers in a much more rapid pace. IE6 is hanging around for much longer than one would like. I suspect IE 8’s adoption won’t be very quick either. Perhaps it’s necessary for it to be combined with a GoPHP5 style campaign where older browsers are unsupported as of an arbitrary date. While Microsoft may have some obligation to provide security patches until the apocalypse, there’s no reason why websites must support it.

This is of course hard to implement as nobody wants to jump on this train unless all their competitors join in. It would take coordination on the level of Google, Yahoo, Facebook, AOL, Amazon, Adobe sized sites. Odds of something like that working are <5%, but I could be wrong. As a web developer dropping IE6 is a dream I can’t wait to see happen. It would however be interesting to see what innovation would take place if browser support suddenly became much more level.

Give Us Milestone Builds

It would be nice if Microsoft would start shipping milestone builds in a somewhat regular interval (weekly, monthly) so that developers can constantly test and evaluate how their websites behave in IE 8. It would be nice to know up front what we are looking at. Of course this is best when your bug database is open, but even when it’s closed, it’s still helpful to know where you stand at all times. I regularly test websites I work on in WebKit, Opera, Firefox nightlies. Why do I do this? So I know exactly what’s coming. So I can track issues I may have to fix, or the vendor may need to fix. I also can make a time estimate on how long it will take until I’m ready for browser x. Generally with those browsers the time estimate hovers around 0. Every so often an issue worth looking into arises.

I think this would really help the web ease into a fully standards world.

The new generation of browsers including Firefox 3 and IE 8 are really shaping up.

Categories
Mozilla

Acid3

The Acid3 test is out. Ironic that this one comes towards the end of a Gecko development cycle (just like Acid2), meaning it will likely be a while (Mozilla2, the basis of what will likely be Firefox 4.0) until Acid3 compliance is met.

Seems like the WebKit guys are well on their way.

By the time Acid3 complaint browsers are the norm, web applications will have a very nice platform of features that they can depend on. These tests really do help coordinate browser vendors to focus on certain issues by providing a good test case that they can all compare (and compete) against.

Categories
Networking

Accepting Less Than 99.999% Uptime

The Standard has a good writeup on how we accept less than stellar uptime for things that are becoming more and more valuable such as broadband.

Phone service is reliable because it’s mandated to be. There’s pretty strict rules regarding uptime. As a result it’s pretty good. The reason for this is that phones are used for emergencies (911). But what about VoIP?

It makes you wonder why broadband access isn’t being held to these standards. Of course the answer is “money”. But should it be changed? Should ISP’s need to ensure connectivity is as reliable as old POTS lines? I suspect for people to ditch POTS, it will need to be.

I wonder if FiOS is held to the same 99.999% uptime requirements when it’s run by the phone company, and used for VoIP. I doubt it, but I’m not sure.

I suspect reliability of broadband will become more of an issue as VoIP interest increases in the next 18-24 months and larger players like Verizon and Comcast start pushing it to even more homes.

Categories
Internet Networking

Phone 2.0: DNS Dialing Anyone?

I’m going to make a giant proposal to the web. Identifiers suck. Email, IM, Phone, etc. Most people have more than one of each. Lets fix that. Step by step.