Sidejacking: good news for the VPN providers

Tidbits has a long article on "sidejacking". It's a man-in-the-middle attack on non-encrypted hot spot transactions. Nothing new, but now the attacks are packaged. Basically, you need to pay for VPN services ...

TidBITS: Sidejack Attack Jimmies Open Gmail, Other Services

Use a virtual private network (VPN). A VPN can encrypt all the data entering and leaving your machine, which prevents any local sniffer from gaining anything of utility, including tokens. Several services offer VPN "rentals," where you pay a monthly or yearly fee to have a tunnel from your computer to their servers, out in a network operation center far away from the network you're using. A couple of services are particularly Mac friendly: WiTopia.net's personalVPN ($39.99 per year for an SSL/TLS VPN) and publicVPN ($5.95 per month or $59.95 per year for an L2TP/IPsec VPN).

Jobs explains iMovie '08

The Secret Diary of Steve Jobs: Smurfy Pogue stabs me in the back

See here. He's pissed about the new iMovie. Which, um, I agree kind of sucks. And he kinda sorta hints at why we put out such a brain dead movie maker program. Little hint. Our initial marketing slogan was gonna be, "You wanna make real movies? Go buy Final Cut Pro, you cheap bastards." Or something like that. That one was Phil Schiller's idea. Katie Cotton suggested we try to "soften" it a bit and so in the end it just became: "Completely redesigned to help you make movies in minutes".

Actually, it's not Final Cut Pro Apple's protecting, it's Final Cut Express. $300. Grrrrrrrrr.

iPhoto '08: makes Aperture look fast?

I agree:

iLife 08 - Macintouch

...iPhoto 08 is much slower than 06. When I open it, the MDS process all of a sudden uses a ton of CPU, anywhere from 30%-100%. This happens as long as iphoto is open. Closing iPhoto fixes the problem. I'm running a black macbook 2GHz Intel Core 2, 1GB RAM....

Apple has figured out how to make Aperture look better -- it's now more responsive than iPhoto! I sure hope this will turn out to be a fixable bug. In imported 26 images into an empty folder, and mid-way through the fifth full screen edit iPhoto became sluggish and my MacBook fan roared to life.

Update: I tried another session and I didn't run into this problem, but I avoided full screen editing this time. I'm hoping this really is a bug, possibly with the full screen edits. The editing tools are all significantly improved. I like the events features because I never used rolls, events are simpler. it's odd that double clicking the title bar doesn't hide iPhoto, maybe Apple's abandoning that age-old UI feature.

If this isn't fixed, then I'd suggest not upgrading to iLife '08, but instead save your pennies for Lightroom.

(iLife '08 includes iPhoto 7.01, but most people call it iPhoto '08.)

Panorama from ProVUE: stealth product from stealth company

I remember Panorama as a FileMaker alternative back in the days when there were at least six significantly marketed end-user database solutions for the Mac. So when I read a Macintouch notice of a new version of Panorama I paid a visit to the ProVUE web site:

ProVUE Company Product History.

...2002 The Panorama iPod Organizer combines the power of Panorama's unique RAM based database technology with the portability and flexibility of the iPod for storing phone numbers, email addresses, flight numbers, appointment times ... all the important information you need to access on the go...

It's quite a list of products, most of which I'd never heard of. It's a curious example of a company that's lasted a very long time, but keeps a pretty low profile. I suspect their niche market is older machines running commercial applications -- they still support Classic!

Retrieving a set of original photos from Picasa - quickly

Need to get a set of full res images from Picasa?

Official Google Data APIs Blog: Picasa Web Albums adds new API features

• Searching a user's photos: You can search through all the photos belonging to a single user using the q query parameter. Example:

  http://picasaweb.google.com/data/feed/api/user/userID?kind=photo&q=penguin

  will find all photos owned by user userID which contain the word 'penguin' in the title, caption or tag.


• Downloading the original photo: You can now download the original photo, including all EXIF data. This is accomplished by retrieving the feed with the imgmax=d query parameter and value This will return a feed where the media:content elements reference the original downloadable image.

I tried this:

http://picasaweb.google.com/data/feed/api/user/jfaughnan?imgmax=d. This produced a nice feed result in bloglines of all my public albums (if I'm not logged into Picasa) or ALL my albums (if I am logged in to Picasa), but only links to the albums.

http://picasaweb.google.com/data/feed/api/user/jfaughnnan?kind=photo&imgmax=d just gave me an error message.

Still working on this ...

Google Calendar Gadgets

Yes, this is cool ...

Calendar Gadgets:

...Calendar Gadgets are special events that appear as icons above a day's events. When clicked, the icon can pop up with any image, webpage, or Google Gadget....

...The only required field is the icon URL. In its most simple form, Calendar Gadget content can consist of just the icon above the day's events — like the Phases of the Moon calendar in the above image. If you want to point to a webpage or image, the type, width, and height must also be provided. For example, the birthday reminder below pops up with an image, and the Movie Releases calendar pops up with an HTML page with movie details...

But what I really want is robust synchronization with Outlook. Pretty please Google?

Windows Live Writer: Firefox integration

There's a Firefox extension that allows you to  "Blog This to Windows Live Writer". It works very well with Microsoft's unequalled blog authoring tool, I've been using it for months now, but these usage instructions are handy:

The Blog This gesture is available in two places: the toolbar button, and the right-click menu. I tried to be a little smart about what you are trying to blog. If you have a selection active in the browser, it’ll be used for the contents of your post. If you right-click on an image or link and select Blog This, that’s what’ll be used.

The "announcement" post this came from was reposted in error today -- the original came out last year. Even so, it's a good reminder of this terrific extension. The odd thing is that Microsoft offers it at all -- WLW is so good it could have forced me (very reluctantly) to switch to IE [1]. On the Mac WLW is threatening to force me to run FF/WLW within an Win2K VM!

Here's the download link for the released version. As I've noted before I used to have problems making it work, but they went away ...

[1] I only have two nits with WLW. One is that it's a modern .NET app, so it's slow to launch on all but the fastest machines and uses a lot of memory. Secondly, it quits after use, or stays open with the post remaining. I'd rather after each post it stayed resident but closed the post window -- in part because it's so slow to launch. (Maybe that's one nit?)