Technolutionary

Destroying Old Hard Drives

tbridge — Fri, 05 Apr 2013 12:17:37 -0400

If you’re anything like most people we know, you probably have been holding on to some old hard drives or computers not sure what to do with them before you get rid of them. Here’s what we recommend:

First, erase the drive. You can do this on any 10.7 or 10.8 Mac easily by booting into Recovery Mode (Hold Command-R at boot) and then use Disk Utility.
If you’re really concerned about sensitive information, you can use the secure erasure option, but be prepared to give it some time to run. This can take hours.
Once you’re done, extract the hard drive. Depending on the model, this can be difficult, but it’s worth it for peace of mind. Check iFixit.com for a take apart guide if you need to, but since this machine won’t work again, don’t worry about keeping track of the screws.
Once you have the HD out, grab a good hammer (I prefer a 5lb sledge, but any claw or ball-peen hammer will work) and just beat the ever-loving crap out of it.
Your goal should be to hit the spindle in the center, which will often get you radial fractures in the magnetic platters, which is a death sentence for any residual data.

Then, take the whole thing to your neighborhood ecycler. Most communities these days have free options for ecycling old electronics. Check with your neighborhood waste disposal group for options.

Other methods of destruction that will work include:

Drill Press
Firearm (if legal in your state, please be responsible.)
The PD-4 Hard Drive Destroyer (a steal at $5,000)
Disassembly

But really: just don’t burn it. Too many toxic chemicals that you don’t want to breath. That includes microwaving it, folks.

Twitter's Mass Email

tbridge — Fri, 01 Feb 2013 20:42:26 -0500

This afternoon I, and many others, received an alarming email from Twitter.

It said, in short, we’ve been compromised at least in part, and we’ve reset your password as a security measure.

The details of the hack are on Twitter’s blog and basically seem to say that Twitter lost a bunch of credentialing information.

What’s that mean?

Twitter may have given up a bunch of information related to your account.

I have a twitter account (@tbridge) that has an email address attached, a password attached, and some server-side security stuff like session tokens attached. This information, it seems, was compromised at Twitter.

This doesn’t mean that my plaintext password was compromised, because they don’t store my plaintext password anywhere. My password is mathematically altered by a “salt” which then results in a value that they store. Think of this like a secondary security measure that means if they DO get this information, it’s only useful insofar as they have an email they can target for a password reset (that’s what got Mat Honan), and it’s a way to link users to accounts.

So. What should you do now.

Well, if you got an email from Twitter - or someone claiming to be them - I would read it carefully, and then don’t click on anything in it. It’s not a good plan to be alarmist, but this is also a good time now for spearphishing. Instead, go to twitter.com, and use their site to reset your password.

Picking good passwords is simple if you do one of two things. Option 1 is my preference, and that’s using a password generator/rememberer like 1Password which stores secure information securely. Option 2 is to use techniques like correct horse battery staple from XKCD.

Either are good.

The recommendation this week from people who know is that 16 characters is a good place to start passwords, and 20-24 characters is a good place to be. If you need to write these down do just that but then store those like you’d store your passport, a stack of cash, or those pictures you told your high school sweetheart that you destroyed: in a box with metal walls and a lock on the front.

This whole thing has me wanting better technology than passwords, but I’m not sure that’s ready yet.

The Java Problem, and what you should do

tbridge — Fri, 11 Jan 2013 21:48:00 -0500

Hello everyone,

This is a security update concerning your Macs and PCs, and you should stop and read the following and take action if necessary.

This week, security researchers have identified a Zero Day Exploit (meaning, a security flaw that was released into the wild without notification) that affects Java. This security problem is severe and should be treated with the utmost caution. Apple has taken the precaution of blacklisting Java Applets within Safari for those running Mac OS X 10.7 and 10.8, but those running 10.6.8 or earlier should take some precautions to ensure their safety for the time being. These steps are also necessary for those running 10.7 and 10.8 and using Firefox or Chrome as your web browser:

Chrome

Click on the Chrome menu, and then select Settings.
At the bottom of Settings window, click Show advanced settings
Scroll down to the Privacy section and click on Content Settings.
In the Content Settings panel, scroll down to the Plug-ins section.
Under the Plug-ins section, click Disable individual plug-ins.
In the Plugins panel, scroll to the Java section. Click Disable to disable the Java Plug-in.
Close and restart the browser to enable the changes.

Note: Alternatively, you can access the Plug-ins settings by typing about:plugins in the browser address bar.

Firefox

Click on the Tools menu and then select Add-ons
In the Add-ons Manager window, select Plugins
Click Java (TM) Platform plugin to select it
Click Disable (if the button displays Enable then Java is already disabled)

Safari

Choose Safari Preferences
Choose the Security option
Deselect Enable Java
Close Safari Preferences window

There is a planned update to Java to fix this issue, but it is not currently available. We will provide a second update once it’s available.

Please share this information widely.

Note, if you do have a critical application that requires the Java plugin in your web browser to be functional, contact us for details on how you can use Java with reduced risk.

Storm's comin'.

tbridge — Fri, 26 Oct 2012 15:23:00 -0400

Dear Clients & Friends,

If you haven’t heard, a confluence of 2 major storms (A Nor’easter and Hurricane/Tropical Storm Sandy) is expected to hit our area possibly as early as Sunday. They’ve even given it a catchy name, Frankenstorm. Washington Post coverage is here http://tinyurl.com/8n7y99s

We hope it fizzles out and we just get a little wind and rain. However, now is a good time to think about what you will do in the event of loss of power, loss of internet and phone services (including cellular) and possible flooding or physical damage to your facilities. It’s possible your business operations could be affected for several days.

In the event of a data, power, or telephony outage, we’re available on call throughout the storm to assist.

We’ll be tracking the storm and will issue additional updates as warranted. Please don’t hesitate to get in touch if you have any questions.

iOS 6 is here!

tbridge — Wed, 19 Sep 2012 14:56:05 -0400

Today, Apple released iOS 6 for the public. Generally speaking, while we think it works pretty well, we recommend that you hold off on updating for a few days to let the crush subside, and any showstopper bugs that made it through extensive testing in Cupertino get squashed. Apple has a good “What’s New?” page, but don’t take their word for it, here’s a few of the highlights of iOS 6:

Turn by Turn Directions

One of the most glaring faults in the native iOS Maps app had been its lack of good turn-by-turn directions. While there was a vibrant third party market, nothing ever quite felt right to me in terms of the UI. The new Maps app in iOS 6 is a huge leap forward. The new Map tiles are quite attractive, and that’s all well and good, but really what I am excited about is the pervasiveness of the turn by turn directions, and the extensibility of maps.

Maps in iOS 6 can be extended for different routing instructions, for transit directions, for course running, for cycling, and we should see a fair number of expansion packs in the App Store.

Do Not Disturb

The only thing that’s ever made me miss a Blackberry was the lack of a good Do Not Disturb mode on the iPhone, and thankfully that’s been fixed in software.

Do Not Disturb mode in iOS 6 shuts out all warnings, reminders, and sounds. It can be set on a timer, so that your phone doesn’t bother you at night, or at lunch, or during your workout. Like a good assistant, though, you can tell it when it’s okay to bother you. You can specify a group of contacts in your address book that can make it through, or set it so that if you get two calls from the same number in less than three minutes, it can make it through.

Reminders from other apps

The Reminders app that debuted with iOS 5 has gotten a big boost from Apple in iOS 6, in that other apps on your phone can now add reminders to your lists. That means that third party apps will be able to set Reminders in the future, including geofencing and timing of reminders. Pretty slick.

Siri on your iPad

Yes, those of you with the most recent iPads will also have Siri starting in iOS 6. Siri has new features, also, allowing you to get directions to anyone in your Find My Friends app, as well as access to sports scores, Open Table restaurant reservations, and more.

iMessage on your iPad now gets your iMessages to your phone number

This has been one of those things so long in the process that I could’ve sworn it had happened by now, but starting with iOS 6, iMessages sent to your iPhone number can also be read at your iPad.

A Better Phone App

Not taking calls? Send someone a text message back, “Hey, I’m on the phone right now, call you in a few” or “what’s up?” or other custom messages of your choosing. You can also set a reminder from their call screen to call them back after you’re off the phone, which is pretty great.

VIP Inbox

Email isn’t all equal. Those forwards from your second cousin, and the latest sale warning from that shop you went to once on vacation in 2007 just don’t rate the same attention as your spouse, significant other, or favorite coworkers. Now, you can setup contacts as deserving of VIP status and they get their own inbox on your phone. Messages here can be read and responded to without wading into the fray of the rest of your email. Think of this like a priority inbox, but for your phone.

Panorama camera

If you have an iPhone 4S or an iPhone 5, the camera application got a sweet new feature to create a Panorama. Start the Panorama, then just move your camera smoothly to the right. Follow the on-screen arrow, and it will generate a panorama photo right from within the app. Impressive.

Photo Streams upgrade

For those of you with iCloud accounts, you can now share parts of your Photo Stream with other users on the fly and automatically. Take a photo, add it to a shared stream, and it just arrives on the other person’s devices like magic.

Some Questions and Answers

When’s it out?

It’s out now!

What’s it cost?

It’s free. Yes, really.

How can I install it?

We’re still sussing out if it will be an over-the-air update (I don’t think it will be) or if it will be done through iTunes, but it’s a safe bet that iTunes is the easiest way. That means you’ll plugin your device, open iTunes, and handle it through iTunes. We really, really recommend doing it this way instead of over the air. If you want a very detailed guide, our friends at Macworld have written a beauty on how to do it.

Anything I should do before I install it?

Backup your phone or iPad before you do. If you use iCloud backup for your device, plug it into power, and then go to Settings > iCloud > Storage & Backup > Back Up Now. If you sync with your computer for backup, make sure that you sync before you upgrade.

How long will it take to do the upgrade?

Leave at least an hour to do the upgrade, including the time to backup your phone or iPad before starting. Once complete, you must sync with your phone to have all the data re-transferred back to your iPad, so if you have a large iTunes database on your iPad, it may take longer to transfer.

Which devices can run iOS 6?

iPhone 3GS, iPhone 4, iPhone 4S and iPhone 5 on the handheld side, as well as the iPod touch 4th generation, and then iPad 2 and iPad 3 devices. Not all features will be available on iPhone 3GS and iPhone 4 handhelds.

"Uniting under a single privacy policy is more convenient for the consumer, but it’s also a lot..."

tbridge — Thu, 01 Mar 2012 22:53:03 -0500

““Uniting under a single privacy policy is more convenient for the consumer, but it’s also a lot more convenient for them to exploit the data they collect about you,” Tom Bridge, a partner at Technolutionary, said.”

- Google privacy policy changes: How the new policy will affect your surfing | WJLA.com

Google Accounts, Privacy, and Our Clients

tbridge — Wed, 22 Feb 2012 16:45:00 -0500

If you maintain any Google accounts (Google Apps, Gmail, YouTube, Google+, etc). Google will be changing their privacy policy to allow them to consolidate or share your web search history among their products.

We thought our clients and friends should be made aware of the possible impacts of this change.

From the Electronic Frontier Foundation:

On March 1st, Google will implement its new, unified privacy policy, which will affect data Google has collected on you prior to March 1st as well as data it collects on you in the future. Until now, your Google Web History (your Google searches and sites visited) was cordoned off from Google’s other products. This protection was especially important because search data can reveal particularly sensitive information about you, including facts about your location, interests, age, sexual orientation, religion, health concerns, and more. If you want to keep Google from combining your Web History with the data they have gathered about you in their other products, such as YouTube or Google Plus, you may want to remove all items from your Web History and stop your Web History from being recorded in the future.

Visit the link below to find out how to remove your existing web search history. We recommend that if you want to delete your web history, that you do it without delay.

https://www.eff.org/deeplinks/2012/02/how-remove-your-google-search-history-googles-new-privacy-policy-takes-effect

Please get in touch if you have any questions or concerns that we can address.

Regards,

Mark & Tom at Technolutionary

iCloud, iOS 5 and Mac OS X 10.7.2

tbridge — Tue, 18 Oct 2011 11:10:27 -0400

By now you’ve likely heard, Apple has released iOS 5 for mobile devices, OS X 10.7.2 for Macs, and iCloud. With the release of OS X 10.7.2, Lion appears to be ready for prime time. We have been testing iOS 5 and OS X 10.7.2 since its early beta release and we’re ready to pronounce them both “ready for primetime,” with some notable exceptions*. While download and activation servers were under high load initially, they have settled down and you should not experience undue delays.

The upgrade to iOS 5 is free for all users of iOS, and works on the iPhone 3GS and iPhone 4. The iPhone 4S that is released on Friday will come with iOS 5.

The biggest feature we’ve been asked about is iCloud. iCloud is the successor to Apple’s MobileMe service.
iCloud works as a web between your iOS and Mac OS devices, to sync documents and photos, and if you’re not already using an ActiveSync account for Calendars and Contacts (like so many of our clients do with their Kerio accounts), it can work with those, as well. In addition, it provides you with a secure backup service “in the cloud” at Apple, which means should your iPhone be stolen, provisioning a new iPhone is as simple as logging in with your Apple ID when you get your new phone. Backups occur over WiFi only, and happen only when the iPhone or iPad is plugged in.

iCloud requires OS X 10.7.2 to work on your Mac, but works on your iOS 5 device without requiring OS X 10.7.2.
If you care currently using MobileMe to sync data from your Mac to iPhone and your Mac is still running MacOS 10.6 (aka Snow Leopard) you will want to hold off upgrading your iPhone to iOS 5 until after you upgrade your Mac to MacOS 10.7.2.
If you upgrade your iPhone to iOS 5 or purchase an iPhone 4S and sign into iCloud for syncing your MobileMe account is converted to an iCloud account. If your Mac is not running MacOS 10.7.2 you will lose the ability to sync with your Mac (you will still be syncing to iCloud)

Apple has released some documentation about what that might mean for those still running OS X 10.6:

http://support.apple.com/kb/HT4929

The highlights: Without OS X 10.7.2, you will not be able to access any Calendars or Contacts associated with your iCloud ID on your 10.6.8 Mac. This won’t affect many of our clients who are already using Calendar & Contact syncing with Kerio accounts or Google accounts.

The upgrade to Mac OS X 10.7 is a paid upgrade for those using OS X 10.6 and above, and volume licensing is available for Apple beginning at 20 users. We would be happy to help devise a migration path for your office or personal computers.
* Current caveats include delegation of calendars for Kerio users (being fixed in Connect 7.3.0, a free maintenance release due in November) and any users of software that requires Rosetta under Snow Leopard (Office 2004, some versions of Adobe CS products, and other programs. Check http://www.roaringapps.com for any applications that are fairly old.)

Preserving battery life: you can turn off cellular data entirely. Also, IIIRC turning off Wi-Fi's "Ask to Join Networks" will help preserve battery life. Same with Settings » Sounds » Vibrate [turn off]. (Also note: Turning off location services will help, but it will also mean that you can't use Google Maps to find your location or use "Find My iPhone".)

Sat, 27 Aug 2011 10:10:14 -0400

TJ’s got a few extra tips for you in the run up to the storm. You *can* turn off cellular data, but dialing it back to EDGE will give you maximum utility. A text is cheaper on the battery than a phone call.

iPhone Battery Preservation Tips for the Hurricane

tbridge — Fri, 26 Aug 2011 18:35:00 -0400

Hurricane Irene is set to arrive in the DC area tomorrow afternoon, and with it possible power outages throughout the Metro DC region. Here are a few tips to keep your iPhone lasting as long as possible:

Turn off Push Notifications. You really don’t need a message from Facebook that Janie’s dog did the cutest thing. Settings > Notifications > Off
Turn off Bluetooth. You’re not driving in a hurricane. Turn off Bluetooth to save a bit of extra juice. Settings > General > Bluetooth > Off
Turn off 3G. The goal here isn’t updating Twitter or keeping up on work email, it’s preservation of the phone so you can call Pepco or BG&E when the power goes down. Moving to EDGE data will help. Settings > General > Network > 3G Off
Turn off Location Service. If you’re hunkered down, you know where you are. You can always turn this on for a bit to see where the nearest pizza place is: Settings > General > Location Services > Off
Turn off Push email & calendaring. Again, this is a hurricane, so you don’t need that calendar invite from your cousin right away. Same for the email from your mother in law. If they need you, they’ll call, which is what we’re saving battery for. Settings > Mail, Contacts & Calendars > Fetch New Data > Push: Off
Turn off auto-check of email. If you’re important enough to need this, you’re important enough to be somewhere with a gen-set, a massive flywheel UPS, and redundant bandwidth. Turn it off. Settings > Mail, Contacts & Calendars > Fetch New Data > Manually
Turn down your screen brightness. Given how dark these storms are, you can lower your brightness from blinding to dim. Settings > Brightness
Shorten your auto-lock period. See previous statement about hunkering down. This is more to save battery than be convenient. I’ll forgive you for turning off your passcode (if you can) for this weekend, if you want. Turn it back on Monday. Settings > Auto-Lock > 1 Minute.
Make sure to kill graphics-heavy apps like Angry Birds. From the home screen, double-press the Home Button, then press and hold on the app icon, then hit the red minus at the top of the icon in the switcher tray.
If coverage goes out, switch to Airplane Mode. In the event of cell coverage going out, or worse, getting spotty, switch to Airplane Mode for a while. Searching for signal is very battery intensive.

Alright, that ought to do it for now. Good luck & good hunting.

Hurricane Irene

tbridge — Tue, 23 Aug 2011 12:10:00 -0400

We’re currently monitoring the storm track for Hurricane Irene, which is currently down near Haiti and the Dominican Republic. The storm looks to be fairly serious, and as of this morning’s forecasts, the track would affect the greater DC Area:

http://www.nhc.noaa.gov/refresh/graphics_at4+shtml/145015.shtml?5-daynl?large#contents

The storm is currently slated to make landfall in coastal North Carolina on Saturday, and be centered over the southern end of the Chesapeake, still at Hurricane status, on Sunday morning. Currently, forecasters are saying that the storm reminds them a lot of Hurricane Floyd that dumped 14” of rain on the DC area, along with 70mph winds and 500,000 people without power.

We’re going to be watching this storm very carefully over the next 72 hours, and we’ll have an update for you midday on Friday. Storms like this can be fairly disruptive to power and internet access. While we expect our colocation facility not to be affected, you may wish to contact your area service providers about redundancy in the case of power outage and storm damage.

Watch our Tom Bridge this Sunday!

tbridge — Fri, 29 Jul 2011 15:26:24 -0400

Our own Tom Bridge will be on the ABC 7 Washington Business Report this Sunday morning at 9:30am on WJLA in the Washington DC area. We’ll post the video when it gets put online. He’ll be talking about Cloud Computing and how it affects big and small businesses.

On the release of 10.7 Lion

tbridge — Wed, 20 Jul 2011 08:52:00 -0400

Late on Tuesday, as part of their earnings call, Apple announced that its new operating system, OS X 10.7 Lion, would be released on Wednesday during the day. You may have many questions concerning the release of Lion, upgrade paths, upgrade features, group licensing, and compatibility. We’ll be working to answer those questions on a case-by-case basis as we go forward during the next few weeks.

There are some impressive new UI features for the new upgrade, including significant support for gestures on the built-in trackpad and magic trackpad accessories. In addition, Lion Server has support for provisioning many features of your company-owned iPads and iPhones and iPods, to allow us to deploy email configurations, applications, and other settings over the air, which means less plugging in and configuring these devices.

Currently, it is our advice that you NOT upgrade to 10.7, pending the results of some compatibility testing that we’ll be doing over the new few weeks.

As Saleh so correctly said in Raiders of the Lost Ark: ”Asps, very dangerous, you go first, Indy.”

For the last two releases prior to the version that will ship from Apple, I have been running Lion on my day to day workstation, testing various applications and configurations. There are a few big bugs that were fixed by the Golden Master, but there are still a few bugs that remain. For those of you working with a Kerio Connect server, we would counsel you to wait until Kerio has updated its server to adapt to the new versions of Mail and ICal that are being released with Lion.

Applications initially built for the PowerPC platform such as Office 2004, any version of QuickBooks prior to 2010 and Quicken 2007 will not run under Lion. Your applications will need to be upgraded, in some cases incurring costs. Rosetta, the translator that allowed these applications to run, is no longer included with Lion, and will not be supported. If you have questions about which applications these may include, you may check the following wiki, which has good information: http://roaringapps.com/ or feel free to ask us.

To sum up: Lion is coming out on Wednesday, but please don’t upgrade right away. We’ll be happy to answer any questions you may have, and Apple has a good amount of information here: http://www.apple.com/macosx/

"Tech expert Tom Bridge from Technolutionary LLC believes the privacy risk is low. “This is a example..."

tbridge — Wed, 08 Jun 2011 18:09:06 -0400

“Tech expert Tom Bridge from Technolutionary LLC believes the privacy risk is low. “This is a example of a time when you can go and look at your privacy settings on Facebook and determine what it is you want to be sharing,” he said.”

- Facebook facial recognition features roll out world wide | TBD.com

"There is no consistent library for implementing SSL in the browser,” said Tom Bridge, a..."

tbridge — Mon, 23 May 2011 12:14:32 -0400

““There is no consistent library for implementing SSL in the browser,” said Tom Bridge, a partner at Technolutionary, a technical services firm. “Firefox, Safari, IE, Chrome, they all use different processes for handling the SSL handshake. Encryption is still a heavy-math process, something that requires both RAM and processor time.””

- A Step Towards a Secure Internet: Google Developers Make Progress with SSL False Start

SSL False Start, if approved, could drastically improve the performance of SSL-secured sites.

"Tom Bridge, a partner at a firm called Technolutionary, seemed to think that Mac users might be..."

tbridge — Mon, 23 May 2011 10:40:00 -0400

“Tom Bridge, a partner at a firm called Technolutionary, seemed to think that Mac users might be better at avoiding malware because of previous experiences on other platforms. “We have yet to see a single one of the Macs we support be hit by MAC Defender or its like,” Bridge told Ars. “We have clients that have been taken by these scams before on PCs, and perhaps they are just more well educated against this particular type of scam, but generally speaking, we’re not seeing this here in the DC area.””

- Malware on the Mac: is there cause for concern? Ars investigates

Ars Technica spoke with Technolutionary partner Tom Bridge about the latest malware exploits on the Mac. While malware is certainly a growing concern, it has not yet reached epidemic proportion.

Some good guidelines about installing software:

First: Make sure you’re getting it from a reputable source. If you have questions about the source, better to err on the side of asking a question, first.

Second: You can always look for purchase options using trusted software markets like Kagi, Esellerate and the Mac App Store instead, if you have extra concerns

Third: When in doubt, don’t install. Especially anything that says it’s found a virus. That’s just not how these things work.