Showing posts with label Apple. Show all posts
Showing posts with label Apple. Show all posts

Saturday, April 30, 2016

Goodbye Quicktime on Windows

In case you missed it, Apple is no longer going to support patching of Quicktime on Windows.

As a potential web-browser plugin, having an unpatched version present is an avenue for vulnerablity exploit on your system.

And with lots of other video playback options that can handle Quicktime media files, it just doesn’t make sense to keep this one around.

Convinced yet?

Constant Vigilance!

--Claus Valca

Saturday, February 13, 2016

Miscellaneous Apple bites

Looks like I am literally picking low-hanging fruit from my “to-blog” tree branches.

I previously reported this on my the struggles GSD post but am reposting here for topic inclusion.

The takeaway was to quit Process Explorer. I’ve seen a few other software installations where I have needed to close out Process Explorer entirely to make sure it doesn’t get in the way of some installations. Weird.

Of course, iTunes wanted to be updated, so I used the Apple Software Updater but it complained about the “iPod Service” not being able to start so the install kept failing. I then tried to download and run the iTunes package rather than using the updater but that failed at the same point.
I found this post Service ‘iPod Service’ (iPod Service) could not be installed... over in the Apple Support forums and followed “rickybpta” steps.

  • close SysInternals's Process Explorer ( if you have it and it's open )
  • close all Task Manager(s)
  • close Windows Services console ( services.msc )
  • close all command prompts ( cmd.exe )
  • open a cmd.exe as Admin
    • run: sc create "iPod Service" binpath= "C:\Program Files\iPod\bin\iPodService.exe"
    • close all command prompts ( cmd.exe )
  • open Windows Services console ( services.msc )
    • look for "iPod Service", see if it's not Disabled. If so, start it
    • close Windows Services console ( services.msc )
  • Run iTunes.msi again ( previously downloaded via the Apple Software Update's Only Download function )

That did the trick and it went on without any other fuss.

I had purchased a Yeti Blue USB microphone a while back to up my audio recording game. I had hoped to be able to eventually use it with my iPad/iPhone but there were some challenges reported so I’ve just stuck it out with my Windows 7 laptops where it has done a rocking-cool job of upping my audio game. Couple that with Audacity and The Levelator from The Conversations Network and while I am no audio-engineer, I can do a fine good job for most recording needs.

So it was exciting to see this news:

I need to update this post Claus’s iPhone App List - Updated 01/2014 as I’ve gone through some serious changes with the iOS apps I carry. I have purchased more than a few as well…so they must be that good! “Hey Siri! Remind me to update that post!”

Apps of note to get (or are recommended)

Music Memos – Apple – This one looks interesting but I’m not sure it might really meet my audio-recording needs on my Apple gear.

GarageBand for iOS – Apple – This looked good too, but maybe there is a better audio mixing app for “studio” mixing.

Due – Apple App Store – This is the best reminder/count-down timer/recurring event reminder app ever. Period. Buy it.

Round – Apple App Store – Because Due doesn’t currently handle recurring reminder events of less than a day (that I am aware of), you can’t yet use it to set medication dosing reminders. This looks to be designed specifically for that need.

Mighty Timer – Apple App Store – free app to help with brewing your tea. Alvis and her husband gave Lavie and I some very nice porcelain cups along with some fancy Matcha style tea. It has to be brewed very carefully but is super good!

Cheers.

--Claus Valca

Sunday, July 12, 2015

Summer’s On! Super Sysadmin Linkfest

Little Bro and I just wrapped up some Saturn Ion A/C system repairs in the driveway. Got the chill winds blowing in the cabin again. So with that resolved, time looks available for a summer’s on, super sysadmin linkfest dump to cover all the bases.  (And expect another Shade-tree Saturn Ion Mechanic tip post very soon, too.)

CryptoPrevent (Foolish IT) News

I personally use and recommend the awesome CryptoPrevent Malware Prevention utility from Foolish IT.

It is simple to use, hasn’t caused me any issue with the default security level settings, and gives me the comfort of having an additional layer of protection against ransomware threats. The free version works nicely on our home systems.

If you are using CryptoPrevent, this technical post may be useful: CryptoPrevent, ShadowExplorer, and VSSADMIN - Foolish IT.

Foolish IT has been hard at work on a new version and this post shows some of the new features and GUI - CryptoPrevent v8 Teaser.

Alternative remain thirdtier.net’s Cryptolocker Prevention Kit (updated) over at Spiceworks.

Considering the rash of ransomware infections at work lately, I’m surprised the AD and security team hasn’t gotten together to review the settings in the prevention kit noted above.  Just say’n…

Malwarebytes Tips and Updates

How-To’s

In my GSD post (mostly) Fast burn video file to DVD-playable format I ended up using DVDStyler Portable to burn some miscellaneous video files to a DVD. I really wanted to use DVD Flick (see this interesting comment thread and this one too regarding a portable version) but problems and a limited amount of time to solution the issue prevented a real trial. I had also found this Free Video to DVD Converter at DVDVideoSoft .

So it was with interest I spotted this post that looks like it could do the job as well.

The app mentioned was Freemake Video Converter. It is clearly stated in the post and in the comments that the application comes bundled with OpenCandy that may be tricky to decline installation thereof. A comment in the thread recommended running the installer from the command-line with the “/nocandy” switch. I tried that and it seemed to work. When you download the installer off the product web-site it is just a “stub downloaded” which then fetches and retrieves/installs the “full” package. In my case it was:

C:\Users\<PROFILEID>\Downloads\FreeVideoToDVDConverter.exe /nocandy

A follow-up scan with Malwarebytes Anti-malware come back clean (…well except where it found it embedded in the full app download package placed in the TEMP folder) and it always detects OpenCandy in installer packs (based on my personal experiences).

So here is a fourth option worth considering if you need a free utility to burn various video files into a single DVD compilation.

Passwords

I’m a hard-core user of the free KeePass Password Safe & MiniKeePass (iOS) utility. That said, I have to confess that it is very challenging keeping the core database synced between mine and Lavie’s various iDevices and laptops. Add to the fact that the master password datebase file is a hot target for hacking with all the keys to the kingdom I’m sincerely open to a new model for complex/random password management. And at work KeePass (and all password managers) are not approved software so I have to do a super-kludgy solution with using a Bitlocker volume file.

Master Password – project page.  Thanks to the TinyApps blogger I’m now very intrigued and will likely be seeing if I can incorporate this into my routine. There is lots of documentation available (both on TinyApps’ post and on the project page) and is is all very human-readable. The desktop version is a Java app so there is that “issue” if you are on Windows and have stripped Java from your system, though I guess you could go with jPortable and the jPortable Launcher from portable apps as a compromise. The developer also has a beta version of a Web app that could work.

Encrypting Windows Hard Drives - Schneier on Security

Network Nuggets

TraceWrangler – Jasper Bongertz’s awesome tool for sanitizing and anonymizing trace files was updated a while back to beta build 0.4.0 build 616 in x32/x64 flavors. ChangeLog. Sadly, I don’t (yet) do the twitter so there doesn’t seem to be an RSS alternative to watching for update releases without stopping by for a visit from time to time. Update! Jasper Bongertz has kindly now updated the project page to include a RSS feed! Awesome and many thanks! See also these recent posts by Jasper:

Link to test –> Speed test – DSLReports

Note to get the application to run successfully in Firefox (running NoScript) I had to temporarily do the following:

Adblock, or NOSCRIPT - is blocking access to remote IPs (not scripts).
Set NOSCRIPT>Options>Advanced>Trusted>Cascade top document.

Once testing was done, I disabled that option setting.

New or Interesting Utilities

SimpleWMIView reminded me a bit of WMI Explorer over at CodePlex. Probably would be complimentary apps.

SterJo NetStalker – SterJo Software – This is an interesting app. I particularly like that it comes in a portable version. As noted in the gHacks post, it is very similar to (but with some differences) to Nir Sofer’s CurrPorts utility.

At the church-house we run a program called Shelby Systems. It is a client/server based model and though most all of the systems have the client software on it, only one user in particular is constantly having issues connecting to the server unless we shut-down the (Windows) server’s firewall, allow the client communication to establish, then turn on the firewall again. So it looks like the server firewall has some not-yet-located firewall rule in play not set correctly. I’m hoping that this and/or CurrPorts can help us hone in on the specific issue. If I do solve it, I’ll post a troubleshooting guide.

SterJo Software – Products – SterJo offers a number of freeware utilities that may be of use to some sysadmins.

Troubleshooting Tips from the Pros

Windows SysAdmin Tips and Techniques

Microsoft Trainings and Infographics

Kali & Docker

McAfee & The Great Stinger “feature update” Debacle

So McAfee’s standalone Stinger AV tool is/has-been/was a great tool to run in an attempt to scan a system for specific threats and attempt to neutralize/remove them.  It is updated often with new definition patterns and has been a long-time tool in the GSD infection response toolkit.

However a while back an uproar occurred when it was found a new version upgrade with enhanced features left a running/persistent McAfee service (the 'McAfee Validation Trust Protection Service' mfevtps.exe) on your system afterward; even when the binary was removed, and with no clear way to remove it.

It seemed that the only way to really “clean” your system from McAfee after you tried to clean your system with McAfee’s Stinger was to follow these steps: How to uninstall or re-install supported McAfee products using the Consumer Products Removal tool

Only what I didn’t see in the aftermath were any notices that McAfee reported the persistent service module everyone was hollering about was due to a bug in the application. It was quickly fixed and now Stinger behaves the way it used to, fully cleaning itself up after run.

PortableApps McAfee Stinger news Comment thread post. From that comment..

John - thanks for reporting this issue.

The McAfee Validation Trust Protection Service is needed for Stinger to perform rootkit scanning of a system. This service is temporarily installed during a Stinger scan and is removed once the rootkit scanning portion is completed.

In a recent update to the Stinger's rootkit scanning engine, an issue was found where it wasn't getting uninstalled in certain conditions. We've fixed that in last week's release. The latest Stinger available for download should not leave behind any components post a scan.

Please let me know if you require any other clarification.

Best,
Vinoo Thomas
Product Manager, McAfee Labs

Possibly interesting (or conversational) but not related to McAfee Stinger debacle - Beware: Free Antivirus Isn’t Really Free Anymore – How-To Geek blog. I may come back to this post in more detail at a future time…

Microsoft Surface / Surface Pro News & Tips

iOS 9 Peeks & Misc Apple News

I’m really excited to see some dual-tasking coming to the iPad device in iOS 9!

Whew!

--Claus V.

Monday, May 04, 2015

iOS Security News

It’s hard enough keeping current on just the Windows security ecosystem. Now that we are iOS mobile device users as well, there is a whole second ecosystem to keep a security eye on. Of course, those devices have software and need to communicate so there are those layers as well to monitor for security awareness.

So here are a round of articles and tools involving iOS security findings of late.

Per that second Ars Technica article by Dan Goodin, each are different bugs but both involve components of AFNetworking,

“an open-source code library that allows developers to drop networking capabilities into their iOS and OS X apps. Any app that uses a version of AFNetworking prior to the just-released 2.5.3 may expose data that's trivial for hackers to monitor or modify, even when it's protected by the secure sockets layer (SSL) protocol. The vulnerability can be exploited by using any valid SSL certificate for any domain name, as long as the digital credential was issued by a browser-trusted certificate authority (CA).”

  • SSL MiTM attack in AFNetworking 2.5.1 - Do NOT use it in production! - Minded Security Blog - a more technical breakdown of the security issues. According to the post, the issue has been fixed in a newer 2.5.2 version of their library code. However it still requires developers to update their apps and get them on user’s devices where installed.
  • iOS Code Report - SourceDNA’s searchable database to see if your iTunes Developer has released app(s) that remain vulnerable to the weaker code.
  • SSL Analysis: Now With More Pinning - SourceDNA | Code Transparency for iOS & Android Apps, SDKs - SourceDNA Blog

This database reminded me of the ZAP - Zscaler Application Profiler that I had previously come across. It remains a great tool to look up the security of an iOS (or Android) application before -- or after -- you install it on your device.

From the “About” page link:

About ZAP

Zscaler Application Profiler (ZAP) is web based tool designed to streamline the capture and analysis of HTTP(S) traffic from mobile applications. ZAP is capable of analyzing traffic from both iOS and Android applications and includes the following functionality:

  • Search: View summarized historical results for past scans.
  • Scan: Proxy traffic from a mobile device through the ZAP proxy and the mobile app traffic will be automatically captured and analyzed
  • iPCU: Upload your iOS device configuration file(.deviceinfo) to check risk score of installed application. It will give you overall risk score of your device. The information provided is based on out knowledge base.

ZAP classifies traffic into the following buckets and calculates an overall risk score for the application:

  • Authentication: Username/password sent in clear text or using weak encoding methods.
  • Device Metadata Leakage: Data that can identify an individual device, such as the Unique Device Identifier (UDID).
  • Personally Identifiable Information Leakage: Data that can identify an individual user, such as an email address, phone number or mailing address.
  • Exposed content: Communication with third parties such as advertising or analytics sites.

Zscaler also has a detailed video on this service on their blog: Zscaler Research: Introducing ZAP.

  1. Check their historical report data on apps already researched, or
  2. Connect your device to their proxy to do a scan on a new app/version not already captured historically, or
  3. Upload your own iOS device config file.

Meanwhile on the far side of the globe, web security/developer Troy Hunt has been hard at work finding issues with additional iOS apps down under. His reviews provide great learning material to extend across other iOS application reviews closer to home.

Troy offers a free Pluralsight course to help get into the issues around mobile app security, Hack Your API First – Pluralsight Training

Finally, here is a guide from the Telerik crew on how to use Fiddler to Capture Traffic from iOS Device

Constant Vigilance!

Claus Valca

Monday, February 16, 2015

Tiny iOS News - Outlook for iOS & Firefox mockup

I don’t think this update actually solves a core issue with the Outlook for iOS app. But it does signal to me that the development team for the product is at work so maybe a more secure solution could be coming, eventually.

The other thing (I think) I am waiting for is a Firefox app for iOS. Unfortunately, the way I understand it, third-party iOS browsers still need to use the browser rendering engine from Apple. So even though I use Chrome for iOS, at the core it is still powered the same as Safari for iOS.  Firefox has to comply as well.

There isn’t a good way to tell if the final product will look anything like these images. I’m not really certain I like the result; seems very busy with all the different modal views.

Still, I’ll give it a shot if/when the final product comes out.

I do like the Chrome iOS feature that allows me to synchronize my settings and bookmarks between the iPad and iPhone. That is handy and looking at one of the rows of screenshots, Mozilla will have a similar feature in their release.

Cheers,

--Claus Valca

Sunday, February 01, 2015

Outlook iOS App – Nice try but with caveats

This week Microsoft released a “new” iOS app for Outlook.

Microsoft Outlook - App Store on iTunes

As I understand it, it is based on a previous “Acompli” iOS app purchased by Microsoft.

Nevertheless, it is slick, allows you to see multiple email accounts in a unified inbox, does some magic to try to sort mail into various groupings for easy processing, etc.

I downloaded it and it worked great for my Outlook accounts.

Here are more articles and details.

However, there are some potential security concerns..both for those who might like to use it with their corporate Outlook accounts and for standard users as well.

I can’t recommend using it (just yet) with any work-based accounts, nor would I consider using it on a workplace issued iPhone. At least not until more work is done.

If you are curious about the security fuss, take a look at these articles and choose accordingly.

I’m going to play with the the app some more for now with a toss-away Outlook account to get more familiar with the product.

I really like what I see but I’m just not sure about the security concerns just yet. I need to hear more debate and see more data before becoming convinced.

Constant Vigilance!

Clause Valca

Saturday, December 20, 2014

A New (old) iPhone for Claus

IT Lavie went out a few months ago and (on her own) upgraded her iPhone 4 to a new iPhone 6 (16GB) model.  She enjoys it very much and the storage space is now double from what her model 4 had. She looked at the Plus model but settled on the standard 6 size. Compared to the 4, the size of the 6 was a pretty big jump in itself.

I’ve spent some time on it (while doing the migration support for her) and while the technical details of it are very nice, I haven’t been overwhelmed by either the more rounded styling nor the feel of it.

All that to say I much prefer the more solid and “blocky” feel of my older iPhone 5 unit. Plus the 64 GB storage size is super-duper.

And will all that said, a few weeks ago I got a new iPhone for free.

There I was a work on my lunch hour relaxing and closing out my RSS feed review. As I went to tuck it away I noticed that the screen seemed to be a bit “proud” of the bumper case edging. Currently I’m rocking a very trim Spigen iPhone 5 Case Neo Hybrid in the bright red. It is super trim and just a touch flashy with a soft polymer cover. I assumed I had just pushed the phone up a bit from behind and tried to snap it back it.

Nope.  After some trials I removed the phone from the case and discovered the touch-display screen itself was popping out of the actual phone case.

I didn’t capture any photos of the issue, but this post I found over by Travis Ehrlich at Gear Diary pretty well matched my experience exactly, photos and all, Is Your iPhone 5 Screen Lifting Up and Away?

I hadn’t dropped it, stepped on it, drove over it, or otherwise abused it (that I could remember) so the only thing that came to my mind was that the battery may be swelling causing the screen to be pushed up and off the phone body.

With images of the alien-body-popper scene fresh in my mind, and a battery meltdown/explosion I shut the phone off and called Apple.

They had me turn it back on, do some stuff to send diagnostics to them, confirmed the phone seemed to be in great shape (and reported I was very good on my battery/charging activity somehow), that it wasn’t included (based on SN) in the Apple battery recall scope, and advised me to run it in to an Apple Store for a Genius review.

The whole process of getting an appointment, waiting, etc. for an Apple Store service visit is a post in of-itself. However, for this one, one I finally found the store, and waited for a while (an hour?) the Genius took the phone into the back, came back out and informed me that yes, the battery inside the device was indeed swelling pretty nicely, that it was out of warranty, and not included in the battery recall scope.

However, they “graciously” would go ahead and replace it for me free of charge.  Only they didn’t have a replacement in their store. Would I be willing to go to another store that had it in stock? Yep.

So we secure wiped my iPhone (I had a back-up at home about a week or two old so no significant data loss worries) and pointed me to the 2nd Apple Store.

A mad dash across town and after some discussion with that store’s Genius staff, they eventually pulled the replacement unit. The Genius agent swapped my SIMM card between the phones after re-confirming my old one had already been wiped, I was able to talk them into getting me a piece of tape so I could pull and reuse my screen scratch protector (Spigen also). It came off fine and with some skilled tape-usage, I was able to get it transferred to the new phone lint/bubble-free.

A new (old) iPhone 5 64-GB phone in my hand.

The Genius couldn’t/wouldn’t tell me if this unit was refurb or new but from later production runs. Either way it looked brand new and ran just fine so I’m not complaining.

The phone has continued to operate well since.

Some forum crawls have found others with the same issue of a non-scope iPhone 5 with battery issues that Apple has replaced for free.  Some comments are that they may do so for phones with this problem up to one year beyond the original 2-year warranty period. I think it is currently a case-by-case basis at Apple’s discretion.

Regardless, I’m very pleased with the service provided in my case. It took a while to work through the process but it turned out well for me.  And having several Apple Stores in the Houston area was a real plus. I never considered going to the carrier’s stores for help and if you don’t have an Apple store around, you would likely need to send it in which would be a hassle also.

Hopefully this one will last for another two-years…So that may mean there would be an iPhone 7 or 8 model out to consider?

Cheers,

Claus Valca

Saturday, October 04, 2014

Shellshock/Bash-bug News and Linkage

Yes, it has been that kind of a week.

Here is my picks of news and link summaries for the Shellshock/Bash-bug exploit that hit the InterWebs this past week.

Again, like BadUSB, it pays to be familiar with these exploits and trends even if you “think” you are safe in a Windows environment.

Everything you need to know about the Shellshock Bash bug - Troy Hunt’s blog. And to address that “We’re on Windows so we are safe” thought, let me quote directly from Troy’s post above:

All our things are on the Microsoft stack, are we at risk?

Short answer “no”, long answer “yes”. I’ll tackle the easy one first – Bash is not found natively on Windows and whilst there are Bash implementations for Windows, it’s certainly not common and it’s not going to be found on consumer PCs. It’s also not clear if products like win-bash are actually vulnerable to Shellshock in the first place.

The longer answer is that just because you operate in a predominantly Microsoft-centric environment doesn’t mean that you don’t have Bash running on machines servicing other discrete purposes within that environment. When I wrote about Heartbleed, I referenced Nick Craver’s post on moving Stack Overflow towards SSL and referred to this diagram of their infrastructure:

There are non-Microsoft components sitting in front of their Microsoft application stack, components that the traffic needs to pass through before it hits the web servers. These are also components that may have elevated privileges behind the firewall – what’s the impact if Shellshock is exploited on those? It could be significant and that’s the point I’m making here; Shellshock has the potential to impact assets beyond just at-risk Bash implementations when it exists in a broader ecosystem of other machines.

FREE Pluralsight Course: Understanding the Shellshock Bash Bug - Troy Hunt’s blog. Troy offers a free 35+ minute training presentation going over the Shellshock Bash Bug. It should be a great review that everyone in the security or IT administration community should take advantage of.

The anatomy of a Shellshock attack in the wild - Troy Hunt’s blog.

So what harm could be done? Um…plenty.

Even more reading…

Constant Vigilance!

Claus Valca

Saturday, September 20, 2014

Upgrading to iOS 8 (the long way ‘round)

Unless you totally are not into the Apple scene you may have heard that

Lavie’s 8GB iPhone 4 is getting very sad and tired and she is itchy to upgrade. I think the best deal for her (now out of her 2 year contract) would be to get either a 16 GB iPhone 5s or 5c. I’m leaning to the 5s myself even though it will be more expensive. However her thrifty-ness surprises me sometimes so she might be OK with the 5c.  She is not a power-user of apps or streaming so from a hardware perspective either should be more than adequate after the 4 she has now.

Last night I went ahead and decided to upgrade my 4th gen iPad Retina to iOS 8.  What should have been a quick process went super bad super fast.

It’s a 32 GB model but I have it jammed packed with videos (mostly sysadmin/training videos) and PDF whitepapers of for/sec/admin-related topics to read when I’m between activities.

As such I had < 5 GB of free space so I couldn’t do a WiFi only iOS update. But if you do the upgrade from iTunes you don’t need to have free space on your device.

Mistake #1: Not confirming/taking a backup.

Mistake #2: Plugging the device in to a powered USB hub rather than directly on my system.

I plugged the iPad into a brand-name USB powered hub extender and the iPad was detected ok.

I mis-read the initial prompt about do I want to backup some apps that were on the iPad and not my iTunes and said “no”.  Bad decision.

The update downloaded and began to apply.

As part of the process the iPad rebooted but it would not reconnect automatically to the USB port, which caused the iTunes update to fail.

I repeated again and more fails and each time I retried it said I had to do a device Restore. Yikes!

Finally after hunting down error codes and update failures I switched the cable over to a USB port directly on my laptop.  I did a hard-reset of the device and then the iOS 8 upgrade went on. Yea!

Only it was a (mostly) factory restore.  Somehow, some backup items were found from an older backup (or maybe the device itself?) and restored.

I had to put all my music library, videos, photos, and videos specific to my VLC app library back on manually; a few apps that I hadn’t downloaded to iTunes also had to be restored/reinstalled. That took a very long time. Luckily all my (considerable) ebooks and whitepaper PDFs stored in Adobe Reader and Documents apps were all present and accounted for.

It took a long time (4-5 hours!) for the whole process before I was chilling again on the couch with the iPad but I finally got it tweaked back to the way it was before.  I’m wondering what I haven’t found missing yet because after the upgrade and auto/manual rebuild, I’ve now got around 10 GB of free space.

So this Saturday morning I’ve been busy doing manual iTunes updates (we don’t back up to iCloud) of both our iPhones as well.

I’m not in much hurry to upgrade my iPhone 5 just yet after that iPad update drama and Lavie’s iPhone 4 doesn’t qualify for the iOS 8.

I also figured out how to review and delete a bunch of old iTunes backups to clean house:

The other big headache after the upgrade and restoration was coming to terms with all the new features and setting changes brought by 8.  I had a ton of re-tweaking deep in the Settings to do to ensure it was set to my comfort levels.

Here is a list of iOS 8 items you may want to review before/after you do your iOS 8 journey. Many of these tips and suggestions have been super-helpful to me.

Cheers.

--Claus Valca

Sunday, August 31, 2014

OneNote for iOS

Just like I post “linkfests” here for my archival reference and for sharing, I collect URL’s for family and friends as well.

These typically run much less technical; though admittedly more than fairly geeky.

Common subjects are interior design trends, architecture, recipes, Dr. Who fandom bits, short films, science, and faith/life-balance.

Unlike the GSD blog where they get shoved out on stage and dialog/feedback is relatively rare, these more personal links across the web are chosen with discussion and togetherness in mind. They are random encounters discovered that can be shared and reflected. We need to build out new dreams, wishes, and hopes as we re-discover the Lavie and Claus bond that isn’t centered around Alvis any longer.

The iPad makes a great platform to pull out on the couch when I’m sitting with Lavie. It’s a lot more comfortable (and feels more personal/intimate) than using either of our laptops.

Only sharing the sharing bit is a bit clunky.

I’ll send the URL collection out via email, but when we want to view the links together on the iPad, it requires opening the email client, finding the email (which can be quite buried…so it needs to be tagged/flagged), then clicking an embedded link. From there we review, then we need to return to the email client and hit the next one. Repeat.

It works but is a bit clunky.

What I wanted to do for some time is to select the HTML markup body of the email, paste it into a document editing app, then just use that as the launching place.

Probably because I’m still not very familiar with the iOS app landscape this discovery process has been more of a challenge than it should be.

My first hope was that Notability (App Store on iTunes) could handle embedded HTML markup copied and pasted. Nope.

Neither could Byword (App Store on iTunes) or Documents by Readdle (App Store on iTunes). In all cases it would strip out the HTML markup code and leave me with useless plain text.

Why was it hard to find a note-taking or document app that would keep copied HTML markup?

Eventually I found what I was looking for.

Microsoft OneNote for iPad  and Microsoft OneNote for iPhone (App Store on iTunes)

I’m very familiar with OneNote usage on the Windows desktop (I have an Office 2010 version) but didn’t think about using it on my iDevices.

One “gotcha” is that you will need to log in with a valid account to use the application. Having a Microsoft Outlook Live account makes the process very smooth. There were some extra validations and secret code-pasting required but it was easy to follow.

Once I had the application installed and linked, I tested it by copy/pasting a big block of HTML markup from one of my emails to Lavie and Alvis with tons-o-links into a fresh note page.

Hurrah! It looked like it kept the HTML formatting! I selected one of the links and it opened up quickly and perfectly in Safari.  Solution found!

I then installed the app on my iPhone. This time all I had to do was log in, no additional account validation was required second go round.

I must confess, the iPad version looks and works much more like the Windows desktop version than the iPhone version. However, having quick access to the notes is indeed handy.

To add another major boost to handy-access of things, I quickly discovered I could link the additional OneNote notebooks I have on my desktop via the OneNote 2010 application I use to both the iPad and iPhone apps. It leverages Microsoft’s OneDrive storage platform.

I’m still not ready to drink shoving all my electronic life to the “cloud”, but this is a handy start.

So, if you are looking for a way to keep HTML markup notes -- from web or email snippings -- on your iPad or iPhone, then the free OneNote iOS apps are a great option to consider. And doubly so if you have a Windows client version of OneNote 2010 or higher on your desktop.

Don’t have Microsoft OneNote for Windows desktop? Microsoft offers it for free:

Download OneNote 2013

Other platforms supported are Windows Phone, Mac, Android, Amazon, and the Web

Cheers.

--Claus Valca

Saturday, June 21, 2014

Lavie’s iPhone loss Mystery - Resolved

This past Monday, Lavie called me at work terribly upset after her first visit to our new doctor. (Another rant story for another day.)

Turns out the visit had gone very well and our new doctor meets Lavie’s approval. Yea!

Turns out that somewhere between leaving the practice and getting home, she discovered her iPhone was lost. Noo!

I immediately logged into the Apple “Find my Phone” app on my own iPhone at work, entered her information in, and saw her phone…kind of.

The phone showed up but it couldn’t be located on a map. Turned off perhaps? In a dead zone?

We both had tried calling it to no avail.

I used the option to send a message to the phone and have a finder call us when it was discovered.

Alas, at the end of the day no call and the phone still wasn’t showing up.

Lavie was convinced it was on its way across one of our borders, I wasn’t sure and figured it was at the bottom of the elevator shaft or kicked under one of those heavy examination table/cabinet combos.

The doctor’s office staff said they looked and didn’t see it.

The practice security desk was contacted and didn’t report it being turned in but made a note in their log just in case.

Lavie was still deeply upset with the lost. (She has never lost any mobile phone she has ever owned.)

I was so calm about the loss that contributed to Lavie’s freaking out worse.

So the following day we worked on damage control.

I called our cellular carrier who disabled the SIMM card/# for the phone to prevent any unauthorized phone calls on our account. The rep was very kind and helpful.  No the phone hadn’t been used since her last call that morning to me. No new data usage or activity was showing up.

The phone had both a passlock code set on it as well as the “Find My Phone” feature with iCloud enabled.

I logged back into the iCloud and set it to “auto-wipe”.  I was pretty confident we wouldn’t have any data leakage/breach from it (hence my calmness) but was still curious why it was “dead” in the iCloud.

Luckily, we still had Alvis’s old iPhone 4 as well. After her marriage, her husband had bought her a new iPhone 5s on their own account. Her old phone was on our account, and a few months away from the 2-year contract end, so I elected to keep in on rather than paying an ETF to remove it.

So Lavie just carried Alvis’s phone for the day until I got back off work and we could drop by the local AT&T storefront.

The AT&T rep was very helpful. He cut a new SIMM card (for free!) with Lavie’s cell # on it, then swapped out the SIMM from Alvis’s phone with the new one, also releasing the hold on Lavie’s cell #. Almost good to go. I hung on to Alvis’s SIMM card as it was still good.

Back home, I backed up Alvis’s phone in iTunes, copied off all the photos from it (she said he already had them but I wanted to be sure), then wiped the phone.

I then restored the last backup we had in iTunes for Lavie’s old phone to this one. It was from late December 2013 but it had most everything.

I did have to spend some time re-adding a few apps but not that big a deal. Two hours later Alvis’s old iPhone was now fully migrated to being Lavie’s phone.

Lastly, I checked Lavie’s iCloud account again, and now there were two “Lavie’s iPhone” objects listed. The new one I just finished setting up (with GPS locator hovering over our residence on the map active) and the old one…still not located and “dead” with wipe pending.

So…we were out one iPhone 4..with one to two months left on our contract…and that pretty much it.

Only guess what?

Thursday night the security desk at the practice called.

Lavie’s phone had been found…where they couldn’t say…but she was welcome to come pick it up at our convenience.

So Friday Lavie picked up her phone.

It was almost drained but very much still powered on.  It did say “No Service” as the SIMM had been disabled by our carrier but it connected to our Wi-Fi with nary an issue like a grinning tomcat dragging in after a long night of adventure.

And the phone didn’t wipe.

Curious.

So today I figured out why the phone didn’t show up in iCloud, nor wipe itself as told.

First, Lavie recovered a few missing phone numbers out of her contacts that had been added since the original backup.

Then I got digging.

Going in the Settings and iCloud area, I could clearly see “Find my Phone” was switched on with a nice green indicator showing. What up iPhone?!!

Only there was a hazy semi-opaque haze to the page.

Lavie’s information was all present, but it appears she (we I) didn’t actually log back into iCloud on it after the last iOS 7 upgrade.

Once I did that, Bammo!  The phone wiped.

So, lessons learned from the experience:

  • Make sure your iPhone/iPad is pass-coded. A longer passcode option can be selected over the standard four digit one.
  • Set up Find my iPhone/iPad on your device. Correctly. iCloud: Set up Find My iPhone
  • Test iCloud - Find My iPhone, iPad to make sure it really is seeing and tracking your device!
  • If you carry a lot of passwords on your iPad/iPhone, be sure to keep them in a password manager app, not in Notes. MiniKeePass.
  • Back up your iPad or iPhone device in iTunes (or via iCloud if that is  your thing) regularly. Like every week or so to capture Contacts changes and stuff.
  • If you do loose your device, set the call-back message if found in iCloud.
  • Call your mobile carrier and suspend your number just to be safe you don’t end up with any unauthorized calls.
  • If in deep doubt you will find it again, set it to wipe.

More handy linkages:

Cheers.

--Claus V.

Dad’s iPad Air Mystery - Resolved

Dad had purchased a very nice 4th generation iPad Retina for his wife some time ago.

She loved it and would use it primarily to catch up on emails, let the little nieces play games on it, maybe watch a saved movie or TV show while traveling. It was the Wi-Fi only model.

Sadly, while bustling about the kitchen, Dad knocked it off the island and it fell onto their tile floor.

It landed on a corner, denting the aluminum case inward by several millimeters, and cracking the glass in the black masking area in that corner.

Other than the cosmetic damage and cracked glass corner, it worked fine and the touch sensor and Retina display were no worse for wear.  Some well placed tape protected fingers and kept the glass shards from falling out.

Dad felt bad although his wife took it in stride and after some teasing, just continued to use it.

Fast forward to about a month ago when Dad finally decided to replace it for his wife’s birthday.

After some consultation, he upgraded to what she originally “really” wanted. This time it was an iPad Air with Wi-Fi and a cellular data plan. Now she wasn’t tied to using it just at home and the school’s Wi-Fi but could fully use it on the road to check her mail, etc. (Yes, I suppose we could have tethered the original one to her iPhone to piggy-back on that cellular data but she really wanted an “all-in-one” device connection.

Dad is a good sport.

We backed up her original device and then restored most of her items to the new one without fuss. She was thrilled.

The original cracked Wi-Fi-only iPad found a second home with me (sweet) after a device wipe. For now I picked out the remaining shards of glass from the dinged corner, then put a layer of super-clear packing tape over that damaged corner, colored it with a black Sharpie, then put another layer of super-clear packing tape over it again. For the untrained eye it isn’t noticeable at all. Maybe I will try to replace the glass myself later…or put a thin layer of putty in the “floor” of the now-glass-free area, then fill it in with a layer of clear epoxy for a more permanent fix. Minor details.

So now the stage has been set…

Dad called me yesterday at work. He had got his bill from AT&T and the data usage charge for the billing period showing on the device was just over 650 MB.  That’s pretty small potatoes to me. I carry a 3 GB data plan on each of our iPhones.

Bad for Dad however, as he is a bit more frugal and has just a 250 MB data plan on the iPad.

That resulted in an unexpected 400 MB of data usage; with overage charges applied accordingly.

So we discussed why it could have been suddenly so high.

First thing that came to mind was that the Wi-Fi connection wasn’t set up correctly and the device was using cellular data rather than their home Wi-Fi connection. I walked him though the Settings, but we were able to confirm it was active on their Wi-Fi network just fine.

“Running” apps can leak data, and I always close out any active apps that I am not using on my iPhone and iPad just out of habit…and to save a few bits of battery as well.

Dad apparently wasn’t aware of this so when I showed him how to check (iOS 7) double-tap the home button then swipe up to close them, he was amazed at all the apps that were loaded and running.

Looking at the apps seen, there were a few that “might” be data-leak culprits (email attachments and/or push notifications), but not really any that I would expect to pull down 400 MB + of data in a month.  That seemed to me more like an iOS software upgrade package.

After talking through it more, Dad decided he would follow up with the AT&T store reps to see if they could drill into his bill with him. He doesn’t use the AT&T online site or an AT&T iOS app. If he did, he could have gone into the data usage status for that device which will show how much cellular data is used on a daily basis for each device. If you haven’t looked, it is pretty cool and helpful to understand your usage patterns. On-line account management via the web or apps still seem a bit dodgy for him…so we just roll with it old-school for now.

Dad called me back that night with his findings.

The AT&T store rep took a look at his account and then the device.  When they went into the Safari app, they found it was closed out, but when re-launched, about a bazillion page “tabs” open. Dad and his wife didn’t seem to realize with the Safari for iOS gui you may not catch that you have a bazillion tabs open. (With the Chrome browser for iOS app it’s a bit more apparent.)  More than a few were for their church’s web-page, which -- wait for it -- hosts streaming and playable video content.  Drilling into the iPad’s detail setting page for app data usage confirmed it was the Safari web browser that was the offending eater of almost all of that 650 MB data. I had forgotten about that detail info view while talking to him earlier.  More. Apparently even though Safari wasn’t “running” it was still periodically communicating and pulling down media files…which would account for the excessive MB usage rates seen.

So Dad and his wife got another lesson about closing out tab/pages in Safari as well.

All is well and Dad was a good sport to chalk it up to a learning experience.

So…mystery cellular data usage solved…mind those Safari page tabs and monitor your data/app data usage periodically for good measure to look for developing trends.

Cheers!

--Claus V.

Sunday, March 09, 2014

For the iOS crowd

A few nights ago, I came home from work and Lavie was quite frustrated with her iPhone.

She had heard a local news story about how the iPhone can track the user and how to disable the feature…only she couldn’t find the news story on the station’s web-site despite their comment.

I was familiar with a number of “feature” settings that could conceivable track and “spy” on your iPhone usage habits and personal travels, but none of those seemed to satisfy Lavie’s understanding of the news story.

Took me a few days but I finally tracked it down for Lavie:

The applicable part was this bit in the story:

“On an iPhone, it’s a bit more complicated. Just go to ‘Settings’, click ‘Privacy’, then select ‘Location Services’, scroll down to ‘System Services’, that’s where you find ‘Frequent Locations’. Just turn that feature off.”

The news story wraps a lot of drama around the issue but it certainly succeeded in getting Lavie’s attention.

I also found these new-to-me reports of other iOS security concerns.

And by the way…

Dad?  These links are for you and that iPad.  I’d say you could blame it on the cats but you don’t have any pets in the house…

Cheers,

--Claus Valca

Friday, January 24, 2014

Claus’s iPhone App List - Updated (Jan 2014)

So it has been a little while since I’ve posted an update to my last iPhone App List so I figured “why not now?”

Before we get to that, let me point out a few new apps I’ve added that stand out:

I have a very well-rounded collection of weather apps on my iPhone (see below). That class of apps is probably the most used set on a daily basis, followed by my RSS feed reader, web browser, and email app.

BeWeather - (free/$$) - App Store on iTunes - This one is new to me, though apparently Blackberry users have loved it for a long time. I really like the way the data is displayed and the background images are very pleasing but not distracting. The free version has almost all the features the average Joe could want, except a detailed (by the minute) precipitation forecast (available in the $$ version) and unlimited numbers of weather location saves (for when you want to quick-check the weather in more than your current location---also opened up in the paid version). Next time I get an iTunes card I’ll probably go ahead and buy it. However it faces some already stiff and entrenched competition from apps like Wunderground weather and The Weather Channel that cover all the same features and a few more. Still, I don’t mind having it handy and would recommend it. Check it out.

Reeder 2 - ($$) - App Store on iTunes - I had been using the previous version “Reeder” for my RSS feed reading. It went from ($$) to free a while back during a short window before the developer yanked it from the iTunes store. I could continue using it but decided to show my support and pony up the $$ for the new Reeder 2 edition. It has more bells and whistles and I really works nicely for my OMPL (standalone) RSS feed reading. I don’t use any cloud-based RSS services (now that Google’s feed service shut down). This app really rocks for my purposes; and it does support a lot of cloud-based RSS feed services if that is your thing.

VNC Viewer - (free) - App Store on iTunes - I spotted news that a free Android version of VNC was available and went looking to see if there was a free iOS version out. Yep. This is it. I use TightVNC on our home systems for my remote-support needs and VNC Viewer is pleasantly compatible with it. No surprise there. I found the iOS app interface for VNC Viewer to be very easy and stable to use. I did previously pay for the ($$$) version of Mocha VNC and it seems to have more features so I’m sticking with it, but I will keep VNC Viewer app on my phone and will use it as well.

The TeamViewer for iOS app offerings is a mess.  I’ve been using this TeamViewer for Remote Control (free) on my phone for the (very) limited times I’ve needed to perform emergency remote-support to family and friends while on the road but it was very kludgy. When I launched the app today it recommended I jump to a new version (not an upgrade of the current one I had). It pointed me to this one TeamViewer: Remote Control (also free) which has been optimized for iOS 7. So I downloaded it and installed along side. There is also this older (free) TeamViewer HD for Remote Control app for iOS as well. It’s a bit hard to tell the difference between the two older versions feature-wise. Anyway, if you need it and you have a newer platform/iOS version you probably want to go with the middle one I linked to above.

Microsoft Remote Desktop - (free) - this one is of limited value to me at the moment. I can use it to connect to an virtualized version of Window 7 (IETester) Enterprise I have, but since my primary systems are running Win 7 Home it doesn’t work. We don’t really use RDC/RDP at work so no use there.

CNP Mobile Outage Tracker - (free) - A while back my brother called me to check if we had power on our side of town. We did but he did not. Localized outage. I pointed him to this (regionally useful) app so he could check for status updates himself over his iPhone. If you live around the Houston area and have CenterPoint as your electricity infrastructure provider, you may find it useful. Works OK in an emergency but really could use an overhaul for iOS 7.

VLC for iOS - (free) - This app has gone through a series of updates. I really like it, especially being able to upload video files to it directly from my PC when I’m too lazy to connect my iPhone via USB and iTunes to drag-n-drop the files over. Plays great. Great features. Lots of fun.

Updated January 2014

Not a lot of “new” installations…though lots of existing apps have been updated to newer versions.

Here is an updated listing, semi-categorized, of iOS iPhone apps I’m using on my iPhone 5.

All links will be to the iTunes App Store page unless otherwise noted. I’ve updated the permanent link on the sidebar under “Claus’s Toolbox”.

I’m only listing Apps that I use (or plan to purchase relatively soon for use). This post is for me to self-reference and primarily be a way to recommend/share Apps with the few family and friends who have iPhone discussions with me.

A mini price-range key:

  • free = free. May or may not be ad-supported. That said, if it is ad-supported or pop-up in-app notifications to upgrade to a paid-version are too annoying or obtrusive, the app is deleted.
  • $ = $.99 to $2.99 range.
  • $$ = $3 to $7.99 range.
  • $$$ = $8 to $9.99 range
  • $$$$ = over $9.99

Note that when posted, some apps may be on a special pricing discount for holiday or promotions. I’ll try to keep an eye on things but it’s only a rough guide.

“Default” apps that come installed/bundled with the iOS don’t get listed.

I have a few great Apps I won’t list for privacy reasons; banking/insurance/shipping/specific shopping/vendors, etc. Just because you don’t see those listed, doesn’t mean I don’t use them.

Finally, just because all these apps fit on and run on my iPhone 5 (64 GB), currently iOS 7.0.4, doesn’t mean they will all fit on your own iPhone.

Here’s the list.

Core Apps

  • Reeder 2 - ($$) Supports “standalone” RSS feeds rather than one of many supported on-line RSS services. Newer version has many more nice interface features and GUI enhancements.
  • Chrome - free
  • Gmail - free
  • Google Maps - free
  • MiniKeePass - free
  • Naturespace - free/in-app $ (and I purchase a LOT of these tracks)
  • Wave Alarm - free (note I sprung for the in-app $ paid version). Wakes me up every day!
  • Wave Timer - free (note I sprung for the in-app $ paid version)
Productivity/Organization Apps Weather Apps
  • Weather Underground - free - (I paid $ for a 1-year in-app removal of ads) “realtime” radar data map display makes this app priceless to me! + it comes with lots of tropical weather (hurricane) tools and links so I may not need to purchase a hurricane-specific app.
  • WeatherMap+ - $ - Super cool forecast data projections. Awesomeness!
  • The Weather Channel® Max - $$
  • BeWeather -free/$$ - very nice GUI and great features.
  • NOAA Hi-Def Radar - $ - beautiful image quality but radar data lags from several to +5 min behind current time. I want near real-time radar data please!
Text/Reading Apps Networking/IT/SysAdmin Apps Faith Apps Media & Sports Apps Specialized Utilities Photography/Art Health/Fitness/Education/Fun Hardware Support
These are the primary “hardware” items I use (or will be using) with my iPhone. Note: Price rating system suspended here. Do the research if you are curious.
  • Bluetooth Headset, Jabra WAVE - Got this in lieu of a Jawbone ERA. The reviews were good but the two factors that really sold me on this replacement headset for my battered Jawbone were the ability to connect/pair it to TWO iPhones at once (I now carry two, one from work and one is my personal) so hands-free car-driving is a joy again…and the fit around my ear due to the design means it stays fast and put when I am working and playing…no sag like the Jawbone ear loop does after a while. Highly Valca recommended device. Call quality is quite good (my own experience and feedback from family/friends on the far end).
  • Jawbone JAMBOX Wireless Speaker - Christmas present from Lavie. GSD post: It just has to be bigger on the inside…
  • Lightning Digital AV Adapter - Lightning to HDMI - Apple Store (U.S.) - Hey Mom, seen movie (insert title here) yet? Nope? Want to watch it right now off my iPhone on your HDMI TV? Great! Let’s go!
  • Jawbone (version 2) - (obtained back in 2008) - still running strong, though highly battered. Now retired but still works in a pinch.
Previously Used Apps (free) Upgraded to Purchased Versions or Alternatives
These are apps that I previously had on my iPhone but later upgraded to purchased versions and/or removed to make way for another/different version of the same app function. They are still highly recommended. Still pending purchase/installation - (sooner or later)

Hope you find this helpful.

--Claus V.