People who buy iPhones are image-conscious fad-following idiots

Thursday, November 24th, 2011

“people who buy iPhones are image-conscious fad-following idiots”.

The words of Apple pundit John Gruber of Daring Fireball fame, not mine. But a pretty good summary of the situation.

Gruber was complaining about the brilliant Samsung Galaxy S II ad making the rounds. Here is the long version (1m25s) which you might otherwise miss. There's lots of additional clever repartee not in the airplay version: "I guess this is what adultery feels like," says one of the Apple fans in the queue with the Samsung Galaxy in his hands.


long form version of the brilliant Samsung ad

I'm one of the people who moved from iPhone to Android and is really happy about it. Here's why. I owned an iPhone 3GS. After the initial thrill of ownership wore off, I became very tired of:

  • being forced to update to the latest version of iTunes every week
  • having my mobile phone tied to my credit card and personal account at Apple, sending all the info in my mobile phone to Apple anytime Apple chooses
  • fighting with a virtual keyboard which fills most of the screen when you are using it
  • really slow network switching (I live on the border between Slovakia and Austria and need to switch networks often), usually requiring turning the iPhone on and off
  • having to hack the iPhone to be able to share the internet connection from the iPhone even to a Mac: and then to be worried that any given update could kill my tethering set up
  • looking at really lousy photographs, worse than my two year old Nokias

Business, IT | 18 comments

Textile Editing on OS X: BBEdit, iTextile, MarkMyWords

Tuesday, November 8th, 2011

As regular readers know we are heavy users of Basecamp. This month is the first time in a while I'm not happy about our subscription as we've had to move up to the Elite Suite at $249 month as we've run out of Basecamp projects at 100 (we've been rotating them for awhile but five more projects came in and there just isn't space). For those who are counting, that's $3000/year for a software subscription.

Basecamp uses Textile as the main editor (well 37signals have added some kind of WYSIWYG editor lately but for those of us writing messages, comments and writeboards for the last seven years, Textile is in our blood).

So what I want to be able to do is write all my posts and drafts in Textile and then convert them to html for publication (saving the original in Textile for further editing).

For a while I used iTextile a wrapper around a Python script. It worked pretty well but was kind of ugly and not customizable. I gave up on iTextile due to ergonomics. When I went to fire it up again yesterday, it turns out iTextile is PPC only and requires Rosetta. On my most recent machines, I've managed to get rid of Rosetta completely so I was warned about installing Rosetta. I'd prefer not to have the emulator overhead hanging around waiting to steal memory and cycles, so I said no.

There is an interesting application called MarkMyWords from xelaton.com in Germany. MarkMyWords allows you to write in the mark up language of your choice (important ones include Markdown, Textile, BBcode and Wiki syntax) and get html out on the other end.

Preview is live which is very cool.

MarkMyWords does what it promises very well and even includes full screen and distraction free modes. If you are looking for a new text editor, MarkMyWords has a lot to recommend it.

MarkMyWords edit window
MarkMyWords edit window

MarkMyWords Downsides:

  • MarkMyWords is another application to install and maintain and learn across all your computers
  • MarkMyWords requires a change in workflow (I write mainly in BBEdit and other people have their own text editor prefernces)
  • The icon is fussy and ugly.
MarkMyWords icon
MarkMyWords icon

Textile Editing on BBEdit

At this point, I was thinking what I really need is to get Textile into BBEdit. I don't know why the BareBones guys have been so lazy about adding a Textile module themselves. Apparently there's been Markdown syntax for a long time.

I found a reasonably good article about how to add Textile to BBEdit but the explanations aren't very clear and one of the download links is broken and the other doesn't give the right filename when unpacked. [Update: dpkendal's original version was broken - our own Martin Vicenik has fixed it for you and uploaded it.]

So for non-programmers, here's how to get Textile editing working on BBEdit:

  1. download our Textil.sh filter from Github.
  2. unpack the very long file gist1348479-0d1929ba5ff2b3e2b4293dd63254604b72d62b58.tar
  3. you will get a folder with a file with this name in it: "Textile.sh"
    Note:If the github ever disappears, here's a local copy. We found that this script has some bugs in it's current version (the constants are not properly added). Before this gets submited to Github.com download the fixed version here: Textile.sh.zip
    Our version also won't convert single and double quotes to HTML entities. This should be an option in the original version, hopefully our changes get into Github.com soon.
  4. move this file to /Users/~/Library/Application Support/BBEdit/Unix Support/Unix Filters/
  5. go ahead and write some Textile
  6. open up the Unix Filters palette: Windows -> Palettes -> Unix Filters
  7. you should see Textile.sh at the bottom
  8. when you are ready to convert your Textile to html, just doubleclick the Textile.sh item. You can create a hot key as well (very useful)
  9. as it's BBEdit you can see your html and get a preview of it and then just use undo (command-Z) to get back to the Textile version for further editing
  10. when you save your file, make sure you save the textile version
  11. for bonus points before posting into WordPress or even Basecamp run the html optimize filter on the result to get rid of all line breaks: Markup -> Utilities -> Optimize
BBEdit unix filters palette
BBEdit unix filters palette

Bingo, you now have full Textile writing inside of BBEdit at zero cost. Apparently this filter will work for other text editors which accept php filters (TextMate among others) but I can't provide step by step instructions as BBEdit 8.7.2 is my weapon of choice.

I may still buy MarkMyWords as I have something of a fetish for text and html editors (own at least ten of them) and earn my living writing and coding. $25 for another work tool is no big deal. But I wouldn't encourage it's adoption across our company as that would be $200 for what most people wouldn't use nearly enough. Our programmers will be much happier with a working php script. On the other hand, Textile.sh doesn't require me to change my workflow at all.

This article full of ordered and unordered lists was written in BBEdit and Textile.sh with no issues.


Marked does not get a review here as Marked is AppStore only. I will not sign into or buy anything from the AppStore or even let it run on my computers (the AppStore is effectively a back door).

IT | No comments

Apple Mail: Fixing Broken IMAP accounts after a server move

Wednesday, October 5th, 2011

Moving a site can certainly be a hassle. With tools like cPanel's built in migration tools, this process gets more faster, as it will pack and unpack the files, create all the databases for you and even move the mailboxes, preserving their passwords and content.

However - don't not forget to check the site and email functionality afterwards. We will take about the emails and IMAP in here. Specially about IMAP not storing Sent Messages in Apple Mail after the site has been moved.

Testing IMAP Sent Messages Folder in Apple Mail

  1. Make sure you are sending the mail through the right SMTP server (the same one as IMAP)
  2. Send a some email.
  3. It should appear in Sent folder.
    apple mail sent messages
    Apple Mail sent Messages
  4. It should appear in the "Sent Messages" or "Sent" folder on webmail.
    horde sent messages
    Webmail Horde Sent Messages

Fixing issues with IMAP Sent folder

First thing to check is the mailbox preference this enabled storing of sent messages (Store sent messages on the server). This is on by default.

apple mail account mailbox behaviors
Apple Mail Account Mailbox Behaviors

So you probably already have this checked. But what happens when you

  • close the settings window
  • open up Apple Mail's Activity Window
  • send a test mail?

You probably won't notice any errors in the Activity Window, but when you open the settings window again, it might have "Store sent messages on the server" unchecked.

When troubleshooting these issues we found that it's caused by the ~/Library/Mail/IMAP-user@example.com@mail.example.com directory.

If you moved from one server to another and mail.example.com has changed to mail.your-server.com, that's just another place where the things could go wrong, as it's clearly still showing the old mail server name in the directory name.

Since you are using email, we recommend that you:

  1. Login to webmail and check if all the received and sent messages are there
  2. Backup your ~/Library/Mail/IMAP-user@example.com@mail.example.com directory
  3. Remove the account from Apple Mail Preferences
  4. Quit Apple Mail
  5. Remove ~/Library/Mail/IMAP-user@example.com@mail.example.com directory
  6. Launch Apple Mail and re-add your account - it will get all the email via IMAP from the server.
  7. If you had some older messages in your INBOX, you can copy them from the backup of ~/Library/Mail/IMAP-user@example.com@mail.example.com folder.

Now your IMAP should return back to its normal operation.

IT | 2 comments

Focus in Business Means Leaving Money on the Table: Apple

Tuesday, July 5th, 2011

This post is a continuation from a recent post about Scientific Management and the Toyota Way.

Something we are working on is some additional capacity in peak periods (as auto manufacturers have additional suppliers they can bring online if a sudden surge in demand appears). Gradually we are getting there. In the meantime, I take great care not to take on more work than we can handle. There's at least a $100,000/month of business which I'm not seeking as we just couldn't maintain quality standards yet. We are working on increasing capacity first and then slowly adding those additional clients.

My girlfriend is shocked and horrified that we are leaving this kind of money on the table. Her shock diminished when I explained that every day Foliovision leaves millions on the table in Slovakia alone:

Business | No comments

Ten steps to build a great mobile version of your website

Monday, June 13th, 2011

Building mobile versions of websites was an arcane art for a couple of years. And not all that necessary as only a minority of people had smart phones and even fewer of them were using them to actively browse the web. Over the last year as the devices get better and better, more and more visitors are using their smart phones to visit websites.

If you don't already have a mobile version of your site, it's time to put one in right now. Here's how you do it, from A to Z. If the beginning seems a bit complicated, just push ahead. There's an easy point form summary at the bottom of the article.

If you have even a reasonably busy WordPress site, you need to have a caching solution in place. Without caching, you'll get your site kicked off shared hosting lickety-split or you'll cripple performance on your VPS. Visitors like fast sites and cached sites are two to five times faster than uncached sites. For WordPress, there are three major choices in caching solutions: WP Super Cache, W3 Total Cache and Hyper Cache.

For a mobile site, you need to have a caching solution which will pass through mobile clients quickly and reliably to your mobile version.

Of the three above, by far the most reliable is WP Super Cache. Donncha O Caoimh has been providing reliable code (and an almost unspellable name) for five years now. (Donate here. We did.)

Start by making sure your caching plugin is properly set up. These settings are not the default but are where you want to be. Donncha includes the most compatible and much slower defaults in his plugin (good idea, as new WP users can get some benefits with little risk). Here are Donncha's main instructions to get WP Super Cache to really fly and to reduce your load times for Google (good for SEO):

  • Mod_Rewrite. The fastest method is by using Apache mod_rewrite (or whatever similar module your web server supports) to serve "supercached" static html files. This completely bypasses PHP and is extremely quick. If your server is hit by a deluge of traffic it is more likely to cope as the requests are "lighter".
  • If you are not using legacy mode caching consider deleting the contents of the "Rejected User Agents" text box and allow search engines to create supercache static files.
  • Likewise, preload as many posts as you can and enable "Preload Mode". Garbage collection will still occur but it won't affect the preloaded files. If you don't care about sidebar widgets updating often set the preload interval to 2880 minutes (2 days) so all your posts aren't recached very often.

Now it's time to get ready to set up the mobile version. First you need to make a choice on building your own mobile solution or starting with a mobile plugin. We recommend using a plugin as starting from scratch is a lot of busy work. There's really not all that much room 320 x 240 pixels for creativity (the exception proves the rule guys) so you may as well set up something attractive and standard and business-like. There are a couple of good plugins out there to give you a running start.

Free and slightly unreliable: WP Mobile Pack.

WP Mobile Pack works or broken
WP Mobile Pack works or broken

Paid and very good but with some issues outside of Apple's i-universe: WP Touch Pro. Here's a WP Touch Pro feature chart (there is/was a free version as well).

You'll want a full list of user agents for which you will serve the mobile version. Next, make sure the list of user agents match in both your mobile plugin and in your cache plugin.

Here's a list to match WP Super Cache's list of mobile user agents which you can copy and paste into the user agent theme preferences in WP Touch Pro.

Mobi
Mobile
MMP
240x320
400X240
AvantGo
BlackBerry
Blazer
Cellphone
Danger
DoCoMo
Elaine/3.0
EudoraWeb
Googlebot-Mobile
hiptop
IEMobile
KYOCERA/WX310K
LG/U990
MIDP-2.
MMEF20
MOT-V
NetFront
Newt
Nintendo Wii
Nitro
Nokia
Opera Mini
Palm
PlayStation Portable
portalmmm
Proxinet
ProxiNet
SHARP-TQ-GX10
SHG-i900
Small
SonyEricsson
Symbian OS
SymbianOS
TS21i-10
UP.Browser
UP.Link
webOS
Windows CE
WinWAP
YahooSeeker/M1A1-R2D2
iPhone
iPod
Android
BlackBerry9530
LG-TU915 Obigo
LGE VX
webOS
Nokia5800
iPhone
iPod
incognito
webmate
Android
dream
CUPCAKE
froyo
BlackBerry9500
BlackBerry9520
BlackBerry9530
BlackBerry9550
BlackBerry 9800
BlackBerry 9780
webOS
s8000
bada
IEMobile/7.0
Googlebot-Mobile

This list doesn't include the WP Super Cache substrings as they are too short and dangerous to use in WP Touch Pro as WP Touch Pro matches substrings throughout the user agent, while WP Super Cache matches substrings against just the beginning of the user agent. Pasting the full list of substrings into WP Touch Pro makes full Safari and Opera display mobile versions (they match on "tosh"). We'll keep working on a better version of mobile agents for WP Touch Pro and post it here.

If there's a problem, all that will happen is that mobile user will get the standard site uncached.

Here's the WP Touch Pro theme preferences where you should paste the user agents above:

WP Touch Pro user agents
WP Touch Pro user agents

There's some discussion about whether to give a full site or the mobile site to an underpowered device which can't really handle the full WP Touch experience.

In principle these weak web browsers like Opera Mini 4 have special mobile modes to deal with standard sites, doing the reformatting themselves. But the reformatting will be easier if they are starting from WP Touch's advanced mobile version.

The difference won't be that great.

Here are some screenshots of WP Touch Pro iPhone version and Opera Mini minified version.

Opera Mini WP Touch Pro version
Opera Mini WP Touch Pro version
Not bad for a start if a bit too wide
Opera Mini WP Touch Pro filtered mobile
Opera Mini WP Touch Pro filtered mobile
that's more like it and includes site colours

The minified version of the normal website through Opera's built-in mobile proxy is not much worse but the navigation (not shown) is much more difficult. And you have to rely on the end user to turn on minified versions. Relying on the end user is a fool's game.

Opera Mini full site Opera mobile proxy filter
Opera Mini full site Opera mobile proxy filter

WP Super Cache handles mobile settings a bit differently than W3 Total Cache and Hyper Cache. WP Super Cache doesn't let you hand in a list of mobile devices but generates it itself and puts it in .htaccess along with the basic rewrite rules. Here's what the list looks like:

RewriteCond %{HTTP:X-Wap-Profile} !^[a-z0-9\"]+ [NC] RewriteCond %{HTTP:Profile} !^[a-z0-9\"]+ [NC] RewriteCond %{HTTP_USER_AGENT} !^.*(2.0\ MMP|240x320|400X240|AvantGo|BlackBerry|Blazer|Cellphone|Danger|DoCoMo|Elaine/3.0|EudoraWeb|Googlebot-Mobile|hiptop|IEMobile|KYOCERA/WX310K|LG/U990|MIDP-2.|MMEF20|MOT-V|NetFront|Newt|Nintendo\ Wii|Nitro|Nokia|Opera\ Mini|Palm|PlayStation\ Portable|portalmmm|Proxinet|ProxiNet|SHARP-TQ-GX10|SHG-i900|Small|SonyEricsson|Symbian\ OS|SymbianOS|TS21i-10|UP.Browser|UP.Link|webOS|Windows\ CE|WinWAP|YahooSeeker/M1A1-R2D2|iPhone|iPod|Android|BlackBerry9530|LG-TU915\ Obigo|LGE\ VX|webOS|Nokia5800|iPhone|iPod|incognito|webmate|Android|dream|CUPCAKE|froyo|BlackBerry9500|BlackBerry9520|BlackBerry9530|BlackBerry9550|BlackBerry\ 9800|BlackBerry\ 9780|webOS|s8000|bada|IEMobile/7.0|Googlebot-Mobile).* [NC] RewriteCond %{HTTP_user_agent} !^(w3c\ |w3c-|acs-|alav|alca|amoi|audi|avan|benq|bird|blac|blaz|brew|cell|cldc|cmd-|dang|doco|eric|hipt|htc_|inno|ipaq|ipod|jigs|kddi|keji|leno|lg-c|lg-d|lg-g|lge-|lg/u|maui|maxo|midp|mits|mmef|mobi|mot-|moto|mwbp|nec-|newt|noki|palm|pana|pant|phil|play|port|prox|qwap|sage|sams|sany|sch-|sec-|send|seri|sgh-|shar|sie-|siem|smal|smar|sony|sph-|symb|t-mo|teli|tim-|tosh|tsm-|upg1|upsi|vk-v|voda|wap-|wapa|wapi|wapp|wapr|webc|winw|winw|xda\ |xda-).* [NC]

The advantage of this system is that it makes bypassing normal processing ultrafast (the movement happens at an OS level, rather than on invoking PHP).

It also means you as the end user don't get to fiddle endlessly with what devices to include. You'll have to count on Donna to choose the right ones.

Which it seems he does.

As you can see, it's very complete, including iPhones, Androids, Palm, Blackberrys, Palms, Nokias, Symbian.

On the other end though, if you are using WP Touch Pro, you'll have to give it a list of devices. Look out for versions under 2.2. The Skeleton template 1.0.8.1 does not handle blackberrys very well. Skeleton Template 1.2 definitely does, so if you're having trouble, make sure to upgrade WP Touch Pro to the latest version and then update your template.

Both Hyper Cache and WP Super Cache have built in compatibility with WordPress Mobile Pack. If you haven't already jumped on the WP Touch Pro bandwagon, WP Mobile Pack might be worth a try as it's already fully integrated to two of the top cache plugins and free. Unfortunately, WPMP appears to have some compatibility issues and is not kept up to date. You'll have to do some digging of your own to get it to work properly.

Once you are up and running, you'll want to test your settings. Here are the easy tests. Opera has a desktop emulator for their advanced mobile browser and an online java version for Opera Mini.

http://www.opera.com/mobile/demo/
http://dev.opera.com/articles/view/opera-mobile-emulator/

Test for iPhone with Safari by enabling the developer menu and then reassigning user agent. On a Mac, I recommend Keyboard Maestro to set up a hot key on the menu command (usually application menu items can also be done in keyboard section but it's a bit trickier). I've assigned command-U and it really speeds up testing for different user agents. You can also then use Safari to test for Blackberry user agents and other exotica.

Ideally you'd have at least a few real mobile devices with which to doublecheck your site. An iPod Touch is a great inexpensive stand-in for an iPhone/iOS. Opera Mini will install into most devices in parallel with the main browser. Make sure to navigate around to be sure everything is working.

When you know that your mobile versions are making it through you'll want to sit down and have a think about what someone visiting your site on a mobile browser would want to see (insurance calculator, mortgage calculator, listings search, catalogue or weblog posts) and put those front and center. You might even want to remove large sections of your site which won't display well on a mobile device from mobile navigation.

With multiple mobile device formats (think iPad), WP Touch Pro has alternately display models which it handles internally.

So to recap here are the steps.

How to Quickly Build a Great Mobile Version of Your Site

  1. Put together a list of user agents which you would like to show a mobile version (the longer the merrier, there's no sense in being parsimonious here).
  2. Set up your cache plugin not to pass through mobile devices (not to show cached full pages). Recommendation: WP Super Cache which comes with baked in list.
  3. Set up your mobile plugin to serve a mobile version to those same user agents (if you miss a few, no worries). WP Touch Pro recommended.
  4. Check appearance with Safari in iPhone mode and with Opera Mini online emulator.
  5. Tweak appearance to match site colours.
  6. Tweak menu items to show what is important for mobile and hide what is irrelevant for mobile or will not display well.
  7. Remove mobile plugin branding (branding on commercial plugins/themes is obnoxious: are you listening Brave New Code?).
  8. Add a large 512 pixel icon for people who bookmark, create automatic apps in Safari. (WP Touch Pro feature).
  9. Test that mobile versions are being served up to the principal user agents and browsers with Safari.
  10. Test on whatever real devices you do have.
  11. Send your client to visit the site on his or her mobile device (remember what I said about adding Blackberry user agents: this is the moment of truth, an astonishing number of clients will have Blackberrys).
  12. Prepare to do this for all the rest of your clients.

Every site should have a mobile version now. WP Super Cache and WP Touch Pro make it very easy for developers to provide high quality mobile versions at an affordable price. There's no excuse not to offer clients an affordable mobile version of their site.

SEO, WordPress | No comments

Google Search Settings won’t stick in Safari or OmniWeb: turn off Instant!

Friday, January 7th, 2011

If you don't know about this, here's a great Google tip. Change your search settings to allow 100 search results. It's much easier to go through a lot of search results when they are on a single page than to go through ten at a time. Google has some very good compression so loading 100 results doesn't take much more time than loading 10.

One of our principal areas of business at Foliovision is SEO. So when I upgraded to Apple's Snow Leopard on my main work computer (I only upgraded since Leopard 10.5 won't run on a Macbook Air 11": still prefer Leopard and its quiet reliability), I was horrified to see that I could only get 10 search results from Google in both Safari and Omniweb.

So I thought the problem was with Safari 5 or webkit as Snow Leopard forces an upgrade to Safari 5. I tried the latest version of OmniWeb. Same issue. Impossible to get 100 results. Now I was really unhappy. My work life was about to become miserable rooting through Google search results ten at a time.

I had just installed Chromium* to see how it compares in memory usage with a lot of tabs open as I have just dropped from 8 GB of RAM to 4 GB of RAM and was feeling the pinch. Safari 5 uses a lot of memory with 40 tabs open - what is disappointing is that when you close all the tabs, Safari hangs onto a lot of the memory. Chrome creates a separate mini-application for each tab using even more memory than Safari but when you close a tab it gives back all of its meemory.

So I decided to run the Google results test on Chromium. No problem to get 100 results with Google Chromium.

Google Instant 100 search results in Chromium
Google Instant 100 search results in Chromium

Considerably more research alerted me to a solution: turn off Google instant in Google's settings and Safari would yield 100 results again.

Strangely I could get 100 results with Google instant on Google's Chromium, the open source version of Google Chrome. So the issue is not with compatibility between 100 results and instant (I thought perhaps it was a bandwidth issue).

It looks more like a deliberate crippling of Safari and Omniweb to give Chrome a leg up in the Apple browser wars. Even more diabolical, you have to save your settings twice in Safari after turning off Google Instant to get your 100 setting back.

Google wins our Microsoft Embrace-Extend-Extinguish award of the month for their attack on Safari and other webkit browsers.

"Don't be evil." Maybe. Apparently, a little bit wicked is completely fine. See footnote for evidence of outright evil.

* Note: Don't ever use Google Chrome, it's spyware which will not even run without an admin level updater application on your computer! Get the latest build for Chromium for OS X here: cherish that direct link, Google hides it.

IT, SEO | No comments

Apple Mail: Getting rid of multiple draft messages in IMAP

Thursday, January 6th, 2011

I've written at length about how to move from POP to IMAP on Apple Mail. This is an update on how to improve your experience with IMAP on Apple Mail.

A tendency to multiply outgoing draft messages is the most irritating characteristic of Apple Mail IMAP. Sometimes they expand to 25 versions of the same outgoing message. You don't want to delete the most recent one but you do have to stomp them out like weeds, sometimes several times per day. Due to this issue, I was considering moving back to POP. There are no settings on the server or in your account settings which seem to cure this trait.

Apple Mail IMAP draft messages
Apple Mail IMAP draft messages

Fortunately there is one clever workaround. Stop using IMAP for your drafts. If you set Apple Mail to save your drafts locally, they don't proliferate. There is a significant disadvantage. Any drafts which you have locally will not be available on your other computers.

For me, the absence of drafts across my secondary computers is a price worth paying to not have drafts proliferating like rabbits on my main computer* all day every day.


* A Macbook Air 11" 1.6 GHz 4GB these days: the Macbook Air is holding up well under stress apart from the 4GB of memory which is very tight in a busy Safari sessions with photo editing in the background when one is writing web log posts. Like now for instance.

IT | 2 comments

Apple’s Privacy Policies look more and more like Microsoft

Wednesday, January 5th, 2011

Every time I use my Apple computers, it becomes more and more apparent that Steve Jobs has wholly sold out user's privacy. Publicly Jobs denies privacy violations:

We've always had a very different view of privacy than some of our colleagues in the [Silicon] Valley. We take privacy extremely seriously.... A lot of people in the Valley think we're really old-fashioned about this...Privacy means people know what they're signing up for, in plain English and repeatedly.... let them know precisely what you're going to do with their data. That's what we think.

But use of an Apple computer on the ground suggests differently.

Apple Aperture violating your privacy
Apple Aperture violating your privacy

Let's start with a simple example from a pro app: Apple's Aperture goes after configuration.apple.com every time even with all web checkboxes turned off. l.google.com (location for Google) is understandable if you are using Aperture's built-in geo location services. But not if you have it turned off as I do.

I'm not the first one to find Apple's monitoring of our use of their apps disturbing. The issue of iLife '06 phoning home was a sore spot as far back as 2006. What goes on with iPhones with individual apps tracking every use along with your unique iPhone ID and your Facebook profile is astonishing.

But with the pro apps for which we are paying hundreds of dollars, one would think that one had more than paid for the right to privacy.

Apparently not.

What is even more disturbing is that with a virgin Little Snitch install, almost all Apple servers and services are considered safe and permitted out of the box. Why does Objective Development implicitly trust Apple? Moreover, there is nothing to prevent Apple from engineering around Little Snitch and Apple has certainly done so.

known Apple privacy violations in Aperture
known Apple privacy violations in Aperture

I am slowly becoming convinced that there are back doors into even our fruity and once alternative Apple computers. I wonder if user tracking was a deal Apple signed with the devil to be given free road in telecommunications. For decades, Microsoft has taken the side of the US government and security institutions against users. There are hidden files on Windows computers which log all your internet visits and emails in plain text. Very handy for law enforcement. Here's what one IT professional's experience:

Internet history, documents and all sorts of potentially sensitive data is cached as well. When recovering documents for users I've found copies of those documents in some really strange places. The user was just glad I recovered some or all of their lost work. I just sat there scratching my head as to why there was a copy there and not in the normal temp dir where you'd think such files would be kept. Varies from version to version as to where those things turn up.

If this doesn't worry you as a US citizen, take a closer look at the supervisory protection offered by your courts. No requests for wiretaps were turned down in 2009 out of 2,376. These are only the visible wiretaps and not the secret ones rubber stamped behind closed doors. That none were turned down suggests that US law enforcement is not being supervised by the courts. It's the same as all students getting A+ on their exams.

The Obama administration is openly insisting on unrestricted access to all online communication. Governments all over the world and most notably the UK have enacted laws to force you to reveal the key to any encrypted data with penalties of up to two years in jail. In the case of the UK, even the assessment of taxes or any charge payable to a government department justifies invoking RIPA. The list of agencies who are allowed to invoke the act is forty or more and includes local councils including fire authorities and the Charity Commission.

There is perhaps nowhere where your data is less secure than the UK. Basically if you are travelling to Britain, you'd best take a laptop with next to no information on it: just the bare minimum to access your email.  You are free to complain to the Investigatory Powers Tribunal about inappropriate use of surveillance authority under RIPA. In ten years, 956 complaints were registered: only 4 were upheld. Again, the case of all students receiving A+. Those grades don't tally well with the five law enforcement officers jailed for running illegal surveillance networks using RIPA means to ill ends.

Glenn Greenwald quotes surveillance expert Julian Sanchez:

If you want to sift through communications in bulk, it's only going to be feasible with a systemic backdoor.

Apple is doing their share in providing those backdoors and detailed tracking of its users. It does no harm that the data they are collecting on consumers gives them enormous power in the marketplace. So not only do they get favours from the powers to be, they make money to. Plutocratic oligarchy at its best.

What is Apple doing with all its loot? Spending it on filing more patents. The spurious patent strongbox of Apple is filled like a pirate's chest.

Google is no better than Apple and probably worse. So as a computer user, you have three commercial choices of whom to trust with access to your data:

  • Google, the greatest data miners in history and close allies of the US government
  • Microsoft, proven collaborators (how much of their poor security practices are deliberate and how much is intentional is the only question)
  • Apple who is slowly violating its core principles and tracking you for all its worth

No matter where you turn, you are compromised before you leave the gate, easily trackable at every moment online and with your cellphone. You are always in the matrix.

Google's Chrome browser installs invasive tools by default that check in with Google on every run, ostensibly looking for updates. A more privacy aware open source version of Chrome called Chromium exists for Mac OS X in nightly builds no less. For some reason Google hides those builds on their Chromium public pages, only offering instructions on how to build the damn browser from scratch.

Google offers only Chromium build source
Google offers only Chromium build source

It's looking more and more like Linux is our only option if we want to retain our privacy. I'm surprised to see Steve Jobs sell out like this. I suppose he'd call it pragmatism. I'd suggest it's betrayal.

If I decide to stop using Apple computers, that's 5 personal computers down and ten more company computers. I think it's time someone took the bull by the horns and started producing sanitisers for of OS X which shut down all of this phoning home with a combination of Little Snitch behaviour and automated creation of hosts files, with regular monitoring and testing of other backdoors. The task is very onerous as Apple can always enclose special keys or particular data in encrypted files. The only way to prevent your computer being compromised is to allow no outgoing communication at all without your assent and a minimum at that.

Particularly vulnerable is Mobile Me. With Mobile Me, you are able to share Mail, Contacts, Calendar and control your computer remotely depending on what options you enable. Presumably Mobile Me communicates all of the requisite information, whether you turn on selected services or not. So once you've used Mobile Me even once, US authorities have full access to all of your computers.

I had to help my own sister with her Mac. The only system which worked reliably to access her Mac and help her with it was Mobile Me. Mobile Me was a blessing to be able to get her new Macbook Pro working just right. On the other hand, signing up and enabling some of its features on my own computers probably compromised decades of relatively secure computing practices.

One of the reasons that Microsoft got away from its antitrust case after an initial guilty verdict are their ties with national security in the US. The cost to national security by breaking down the computer OS monopoly were considered larger than the gain by enforcing anti-monopoly and antitrust legislation. The backdoors and collaboration with national security were Microsoft's get-out-of-jail card. Google plays the same card and thus can break privacy and copyright laws with relative impunity.

Steve Jobs is no fool. Having seen competitor one thrive and survive via collaboration (Microsoft) and seen competitor two burst from zero to exceed Apple's market capitalisation earned over decades in just a few short years (Google) via such collaboration, there's just no way the gentleman feels in a position to protect users.

On the other hand, Apple users are said to be wealthier and better educated than Windows users. Surely one day we'll be smart enough to realise we've been had and we are all sailing in boats with sieve ridden hulls.

Ironically, these backdoors can help to protect the innocent. In one case, the surveillance backdoors on the iPhone saved an innocent man from 5 consecutive sentences of 14 years on false rape charges. But the exception proves the rule. We are under more and more tacit surveillance using our Apple phones and computers.

What could Apple do to reengender trust among its users? Remove any calls to its servers without explicit authorisation from the OS or their own applications. For those who want a simpler experience, give them a global security setting which means something. Something like three simple options:

  • No calls home without specific authorisation (i.e. manually checking for version and software updates).
  • Anonymous information for updates without system profiles and for time with no location information.
  • Full functionality for the best and simplest Apple experience.

Unfortunately I don't think it's going to happen.

Sooner or later if you value your privacy, a permanent exile in the Antarctic icecap with the other penguins looms. For political activists, Linux should be de rigeur as the starting OS. It's a little difficult for me at this point with decades now invested in expertise and productivity on Apple computers. I own and use dozens of great OS X only shareware programs as well as commercial graphics and video applications like Aperture, Photoshop and Final Cut Pro for which there are no adequate equivalents at the South Pole.

It's looking like a second computer is in line now for just private writing and private life. Even if you can't leave behind Microsoft, Google and Apple for your business life, you should get a second machine Linux machine which never goes online. Even an Apple computer would be fine, as long as you never ever plug it in. The recommendation is epoxy for the networking ports which include Ethernet and Firewire and removal of wireless functionality. DHCP is just too easy and tempting. You'll need to hold on to USB for backups.

IT | 3 comments

Keyloggers for OS X – Why you should install one and which one to choose: Spellcatcher, BackTrack, logKext

Sunday, January 17th, 2010

Everyone who works on the web should have a keylogger. Browsers crash often enough when you are writing into a form or browsers have hot keys (especially forward or back) which will reload the page on you at an unexpected time, just when you are in the middle of a very long post.

apple os x keylogger for mac
 If you value your time, the question is not whether to use a keylogger
but which keylogger for Mac OS X to choose. Photo jgarber.

I've heard all the privacy arguments against keyloggers but I'm not sold. If you are typing into a computer, particularly one which is near constantly connected to the Internet, you need to accept that there is very limited privacy. For very private writing, it should be done on paper or on an old computer which is no longer capable of being hooked up to the Internet easily or at all (i.e. missing a network card and wifi and/or automatic DHCP).

IT | 40 comments

Apple Dual DVI Mini DisplayPort Adapter MB571Z Problems Solved

Sunday, December 20th, 2009

Yes, everything awful you've heard about these adapters is true. They don't really work right, under Mac OS X. The strange thing is that those who've turned their Mac Minis into either Windows XP or Linux rigs do not have trouble with the adapter. So it's not really hardware related. A bit embarassing that the Apple engineers can't get their own gear working. Another senior engineer transferred to the iPhone video driver department?

Apple Mini DisplayPort Dual Link DVI Adapter MB571Z
Apple Mini DisplayPort Dual Link DVI Adapter MB571Z
 

Here's what recent reviews on Apple's own store say (just two of two hundred):

Flicker two or three times a day – GM, Dec. 9

I am a totally MAC fan. I love their stuff. It is always quality. This thing is awful. I depend on my monitor as I do a lot of photo work. I had an older macbook pro which had the DVI output. Ok, so I have buy a 100 adapter now, I am sort of ok with that. Then I find it takes up one of my USB ports as well. A little less happy, but give me a product that works. Now this… Two or three times a day I need to cycle this thing. Very poor. I really hope they fix this.

bad, bad, bad – VC, Dec. 9

This thing is junk. Sadly I have to re boot or put my computer to sleep at least three or four times a day because it goes out and comes back with the dreaded TV Snow we all hated as kids when the cable went out. Apple should have gotten this right by now. As a consumer and big spender on apple product I'm disappointed again. Windows 7 anyone? (Joke) Is Apple listening?

IT | 20 comments

How Apple Won Our Mini Enterprise Contract

Tuesday, December 15th, 2009

Until recently, Apple had no good inexpensive computer in its lineup. There was the Mac Mini but the graphics were crappy built-in on-board Intel adapters. As an ex Macbook owner, I knew how weak that chip is.

On the other hand, the Mac Mini with the 9400GF is a real computer. A Core2Duo processor at 2 GHz can handle anything except gaming and high end video editing.

I hope to hell my staff are not gaming and I know we aren't doing high end video editing these days. If we decide to start, I'll get a more powerful computer.

I know that when we do go to video editing, there are no audio and video sync issues on Macs (sync issues are the historic bugaboo of video editing on Windows computers).

We've just bought a total of six Mac Minis and Macbooks to switch Foliovision over to being primarily an Apple company. Here's why.

IT | 4 comments

Backup on Mac OS X: Testing MimMac with Backup Bouncer

Sunday, January 18th, 2009

I just found a great little utility to test backup systems.

It's called Backup Bouncer and like the bouncer in a bar Backup Bouncer is there to keep the patrons honest. It will let you know ahead of time if your backup system is letting you down in complex ways, like not copying metadata or is blowing out resource forks or resetting creation dates.

These are the sorts of things you won't notice until you've lost your original and for some reason your Aperture or iPhoto library won't run properly anymore.

Of course, even a defective backup is better than none.

WordPress | 15 comments