Journaling on estrip is easy and free. sign up here

Paul's Journal

paul
My Podcast Link

12/24/2011 22:45 #55793

The price of wheat grass at the lexington coop
Category: food
And I though them charging $4.95 for a softball size cauliflower was outrageous...

Wheat grass prices at the coop blow my mind. $9.99 for 4oz and $19.95 for a pound. 4oz is a small ziplock bag full. The tortoises could eat it all in about 90 seconds.

I actually don't understand how wheat grass, which grows so easily, can cost more per pound than steak. What the hell is going on?

image

12/24/2011 22:38 #55792

Bug Based Candy
Category: food
I was at the candy shop on elmwood looking for some gifts when saw these bug based candies. I remember my cousin from AZ getting me one of these as a kid. I never ate. Does anyone really like these or are they purely for gag gifting.

image

image
metalpeter - 12/26/11 13:49
I have no idea wonder who catches the bugs and if they just really get the candy all in them so they taste like the candy? Also if the scorpion one is real one would think it could be dangerous as they have venom?

12/24/2011 22:36 #55791

Santa Claus
Category: holidays
The kids are always so thrilled to see him.

image

12/21/2011 20:03 #55784

Android Lync Chat Client - Data Security Danger
Category: mobile
I was playing around with the microsoft lync client for android today when I discovered just how insecure the data from your chats are on your phone. I can't understand how it could be allowed in a very controlled corporate environment like you would find in banking, healthcare, etc.

Microsoft admits freely that the conversation history is stored on the device.

What they don't say is that basically, the client stores all of the chats you have a in sqlite database that is pretty much plain text accessible.

Using the android development toolkit and grep (basic free tools) I was able to locate the lync data store on the phone at /data/data/com.microsoft.office.lync/

You can easily pull it off you adb connected device with this. It will grab the data and put in a directory on your local computer called lync.
adb pull /data/data/com.microsoft.office.lync lync


Say you send someone a message with secure data e.g. "the secret pin for my bank account is 1234"

Then someone steals your phone, adb shell into the phone copy the data over the computer or an sd card for safe keeping.

then they can extract whatever they want.
grep -r -a secret com.microsoft.office.lync/databases/DataStore.sqlite
and two minutes later they find


"the secret pin for my bank account is 1234"

So what that it might have a little binary content on either side.

Not only that but lets say you are the investigative, computer type - the app lets you send off any conversation as an email. So any app that accepts email intent (gmail, mail, text messaging, etc) accepts the content and passes it from that app to the world at large. If you have any special controls over your corporate exchange, like outgoing filters to look for sensitive data, they get bypassed going out through something pretty insecure like plain text email or text messaging.

I can see how they wanted to side with convenience. At the same time I can't understand how this can appeal to the customers they tend to appeal to most (government and big business). Why would they not encrypt this data on the phone at least.

paul - 06/05/13 20:30
Actually reinvestigating this, what is worse is the spell correct suggestion in the android keyboard. I could get it to pretty much retype my conversations as suggestions by just continuously selecting the choice it wanted me to go with, without typing anything. The other day I get the email address and contact info of a top level exec plus my security review of another situation all by just pressing the spelling suggestion over and over.
tinypliny - 12/22/11 10:46
I see a future in world spy-network domination right here.
heidi - 12/22/11 00:07
All chats? gchat? or Lync chat in particular?

12/21/2011 19:44 #55782

Ipad vs andoid ssh client
Category: mobile
The ssh clients on the ipad/iphone have so many less ratings than on android. It makes me wonder if really not that many developers use the ipad/iphone compared to android. I mean the top ssh client on the iphone which also does rdp has less than 100 ratings while the one on android has 23,000+ and over 1,000,000 downloads. The ipad app store doesn't list number of downloads. Hopefully, I can get work to reimburse me.

image

image

The issh app seems to be pretty great. Having all of that extra space to type and have keyboard vs on the iphone/samsung galaxy sii makes a huge difference. Work has disabled my ability to take screenshots on the ipad as a "security precaution" so I have to keep taking pictures of it instead.
image

Here is a video someone did about using issh

paul - 12/21/11 20:05
Yes, that was last week, lol. No seriously I want an android tablet so bad. If my work did those I would have gladly had one of them instead.
tinypliny - 12/21/11 19:56
Is that a surprise? Didn't you resolve, as a developer, never to work on the ipad again because of the arbitrarily large fees?