Planet GreenRiver.org

wondering what’s going to happen with my AT&T; wireless account now that I’ll be roaming 100%. will they cancel me?

It’s always a good day for a little Carl Sagan. I love this excerpt and his reading is of course amazing.

MUTO a wall-painted animation by BLU (via Quotably.com/popular)

This is unbelievably amazing.

FINISHED!!!!!!!!!!!!!!!!!

Off to my final final!

Last night as a student: Looking like an allnighter. Fitting way to end a school career.

Wow, news of the horrible earthquake in China was at the top of http://quotably.com/popular before CNN even had an alert up.

This happened to me after I trashed my iPhone as a result of a corrupted SpringBoard.app property list file. (I think this was Installer.app’s fault, but I can’t say for certain).

Anyway, to restore the iPhone that iTunes doesn’t see follow these steps:

1. Connect iPhone to computer
2. Power up iPhone if it’s off
3. Press and hold down both the power and home buttons at the same time
4. The “drag to turnoff” slider will come up, but keep holding down the buttons
5. The screen will go black, then the apple logo will appear
6. let go of the power button, but keep holding the home button
7. iTunes should open and say your iPhone is in recovery mode and offer to restore.

This worked for me, YMMV.

An update on Hahlo security (it’s improving, but still needs work): http://stream.btucker.org/post/34406476

Big props to Dean Johnson of Hahlo for improving security of the tool. After some discussion Hahlo no-longer stores your twitter authentication details in the clear in cookies. This is certainly an incremental improvement, but there are still problems.

1. The login page is still not SSL, so for the login request your credentials are still in cleartext for anyone nearby to snoop. Still much better than them being included with every request as was the previous situation.

2. Now your credentials are stored unencrypted for the duration of your session (up to 7 days) on the Hahlo server. This is unfortunate, since it means anyone that gains access to the Hahlo server now knows your twitter username and password. Since half the internet uses the same password for multiple accounts, this would mean that in addition to all Hahlo users from the previous 7 days have their Twitter accounts open to being hijacked, so to would any other online services for which they used the same credentials.

So at the end of the day, here’s my current advice. Hahlo is now probably the best choice, security-wise, of the iPhone web-based Twitter clients. BUT (and that’s a big but), change your twitter password if it’s the same as one you use for another online account, and refrain from logging in to Hahlo at a Tech Conference, College Campus, Coffee Shop, or somewhere else traffic is likely being snooped.

Hahlo could still completely solve the issue by moving to SSL for the login and encrypted credentials stored in cookies.