July 27, 2008 at 10:47 · Filed under Personal, Techie
AT&T Customer for 5 years or more — Check
AT&T Stock Holder — Check
Original iPhone Owner — Check
AT&T Business Enterprise Customer — Check
What does all that buy you? A big fat cup of nothing. While in DC for business I did the unthinkable and waited outside of an Apple Store to buy an iPhone 3G. The line was wrapped around the front of the store and I doubted my chances of being afforded the “privilege” of purchasing a phone. It was my lucky day as many left the line after being informed that only the white edition was in stock. The Apple Employee wandered towards me armed with his Wireless Symbol Palm computer to verify if I was eligible. After a few missteps inputting information (there is no backspace on the device) we were off. Turns out I am not eligible to purchase a new iPhone from Apple. Why you might ask yourself? I am a business user…soak on that for a minute. I am a business user and therefore am relegated to the second class HELL HOLE that is AT&T Stores. After waiting in line I was left speechless. Here is the background as to why:
http://discussions.apple.com/thread.jspa?messageID=7648902
Basically I give up. I do not want the damn phone anymore. I am looking at other options.
July 22, 2008 at 13:59 · Filed under Personal
Hello from the kitchen
July 14, 2008 at 19:23 · Filed under Techie
I hate you Steve Jobs…I hate you with every fiber of my being
————————–
UPDATE:
Oh actually the website was a lie. Thanks for driving 40 minutes into Huntsville for NOTHING. This is the most un-Apple like experince I have had in years. What a load of crap. Out of spite I am looking at a used iPod Nano and a Openmoko or something.
September 11, 2007 at 08:54 · Filed under Techie
NICKS STIG:
Settings –> Wi-Fi Networks –> Ask to Join Networks
This must be enabled so your phone doesn’t simply join a strong signal network. This would leave you open to Man-in-the-Middle attacks.
Settings –> Wallpaper –> Image with Warning
Include a wallpaper that informs users of contact information and return information.
Settings –> General –> Date & Time –> Set Automatically
This is two-fold for security. Good date and time ensures proper and true logging time stamps in the event of your phone needing forensic information gathered. Also the phone will periodically check-in for time syncs giving a better chance for tracking the phone in the event of a loss.
Settings –> General –> Auto-Lock
Change the setting to 1 minute for quick closure. While this is annoying it means your phone will be secure in case you leave your phone unattended.
Settings –> General –> Passcode Lock –> Turn Passcode On
Settings –> General –> Passcode Lock –> Require Passcode Immediately
Settings –> General –> Passcode Lock –> Show SMS Preview Off
If locked a SMS preview comes up revealing information despite the locked state of the phone.
Settings –> General –> Network –> VPN On
The iPhone expands your surfing habits by giving you always on access. What we forget is you are broadcasting unencrypted traffic all over. You are given the option to use L2TP or PPTP. L2TP is extensively more secure than PPTP. You should try using a DD-WRT Linksys at the house for your own network or signup for a VPN online.
Settings –> General –> Bluetooth
The iPhone gives very little control of bluetooth which is unforutante. The device while on menu options will be discoverable. Due to recent Blue Snarfing hacks you must be careful to exit the menu and remove yourself from openeness. Leave bluetooth off if you aren’t using it. Helps save battery and your privacy.
Settings –> Mail
Ensure that you are using hosts that allow for SSL encryption certificates. Possible actions are to forward your mail to a host like Dreamhost that allows for SSL IMAP/SMTP. This is also helpful for converting gmail to IMAP rather than POP3.
Settings –> Mail –> Preview
Change preview to None. You never know who is looking over your shoulder while your email comes in.
Settings –> Safari –> JavaSciprt Off
Safari and the iPhone have already had vulnerabilities. This is a weighted option, most websites need it and Safari offers no white-list of acceptable sites.
Settings –> Safari –> Plug-Ins Off
Quicktime and others in the Safari browser leave you open for those security risks.
Settings –> Safari –> Block Pop-ups On
No need to explain, not only are they annoying but they can initiate cross-site scripting hacks.
Settings –> Safari –> Accept Cookies Never
The From visitied allows for casual surfing but you never know what the cookie contains when saved. This is an audit trail of activity. This may interrupt surfing sites so From visited maybe a better real-world setting.
Settings –> Phone –> Show My Caller ID Off
Why am I telling everyone who is calling on their screen? Some people won’t answer if it is unknown. Those who know me and want to talk do.
That should do it! A good start to securing your new sudo-smartphone.
September 6, 2007 at 03:39 · Filed under Personal
I am happy to report that usingthe ICE Link for my Mini works great with the mini. I now have a mini computer in my mini car. It even fades when calls come in. If I can get the iPhone to integrate into the bluetooth for the car I will soon be victory dancing!
