My MagSafe adapter light goes out periodically

My T-Connector style MagSafe LED (green light) goes off periodically. Disconnecting and reconnecting the T connector will turn it back on.

This Apple support note was written for people like me...

Apple Portables: Troubleshooting MagSafe adapters

...Whether your product is in or out-of-warranty, you can take your adapter to an Apple-Authorized Service Provider or Apple Retail Store for evaluation and replacement if necessary. You may be eligible for a replacement adapter free of charge provided there are no signs of accidental damage...

I've inspected and cleaned the connector. For now I live with it, but if it gets worse I'll have it replaced. Sounds like an understated semi-recall ...

Update 3/6/11: It seems to be fixed, or at least a lot better. I guess it just needed to be cleaned.

The black YouTube screen problem and the HTML 5 workaround

My 11yo got a "black rectangle" for all YouTube videos today. This is popularly known as the YouTube "black screen" problem, and Google's own engineers say ...

why do Youtube videos no longer load on Firefox? - YouTube Help

... Our engineering team has been working on this for a while. We haven't been able to identify the source of the problem yet, but the details you've provided have really helped...

It's a Flash problem, but it's not Firefox specific. It can strike any Flash-based browser. What a surprise that Flash should have a bug that even Google can't fix ... :-).

There are many Google hits on this problem, but of course there's no fix. The problem comes and goes.

I found that if I took the "embed" URL and opened it in Safari that the video would play. So it's related to YouTube's default video presentation. Upgrading to Flash 10.2 didn't help.

What helped was forcing Safari to load the HTML 5 version of the video. There are several ways to do this

• append "&html5=True" to the YouTube URL
• enroll in YouTube's HTML 5 trial (even though Google has shafted Apple/h.264, the YouTube HTML 5 video player still supports h.264 - for now)
• Install the YouTube5 extension for Safari

I ended up doing the last one, and I set the options to default to 720p. It works.

My next step would have been to install Chrome, which has both WebM and a Google-authored Flash player.

PS. Ben says it "looks cooler" now.

Update 2/20: See comments for other ways to work around this. Windows 7 is also affected. I'm seeing Flash 10.2 problems on many sites, I suspect there are hardware acceleration problems with older hardware configurations.

Managing spam text messages on the AT&T iPhone

AT&T doesn't provide a way to block spam text messages. They suggest signing up for a $120/year service that enables number blocking.

Yeah, mobile phone companies are pure Satan.

AT&T does provide a reporting service:

Answer Center | AT&T - What should I do if I receive spam text messages on my wireless phone? ...

To report spam text messages to AT&T: When you receive text spam, forward the whole message to short code 'SPAM' (7726) from your wireless device. There is no charge to report mobile spam. Messages forwarded to 7726 do not count toward your data usage or voice package.

To this on the iPhone you

1) view the SMS text message conversation

2) tap EDIT at the top of the screen

3) check off the message(s) you'd like to forward

4) tap FORWARD at the bottom right of the screen

Problem is, this only forwards the message, not the sender number. When you submit AT&T replies with a request for the sender number. I had to inspect my incoming message list to find that, and I couldn't copy paste. I had to do the old memory/pencil thing.

RIP Password - Google's two factor authentication

Google is rolling out comprehensive mobile phone based two factor authentication to regular Google accounts ...

Official Google Blog: Advanced sign-in security for your Google account

... If you like, you can always choose a 'Remember verification for this computer for 30 days' option, and you won't need to re-enter a code for another 30 days. You can also set up one-time application-specific passwords to sign in to your account from non-browser based applications that are designed to only ask for a password, and cannot prompt for the code....

Some notes from the help page (emphases mine, square parens my comments)

... Soon after you turn on 2-step verification, non-browser applications and devices that use your Google Account (such as Gmail on your phone or Outlook), will stop working. You'll then have to sign in using your username and a special password you generate for this application...

... If you have an iPhone, iPod or iPad, [3G or later, needs iOS 4] we recommend you use the Google Authenticator application to generate verification codes. The application doesn't require an Internet connection or mobile service to generate verification codes. If you would prefer to receive your verification codes by text message or phone call, follow the directions for Text or voice message below....

... Adding a backup number ensures you can receive a verification code to sign in even if your primary phone isn't available or working. ...

... After you set up your phone to receive verification codes, you will be given 10 backup codes. These backup codes can each be used once each to substitute for a verification code. These could be useful whenever you don’t have access to your phone (for example, while you are traveling)...

... If you've lost access to your phones, you can always sign in using one of your printed backup codes [and then turn off two factor authentication?], which you generated when you first turned on 2-step verification. If you've lost your phones and don't have your backup codes, you'll need to fill out an account recovery form...

... An application-specific password [revocable] is similar to a verification code in that you don't have to memorize it. However, application-specific passwords are longer than verification codes and you do not enter them into web browsers. In addition, you do not get application-specific passwords from your phone -- instead, to generate an application-specific password...

Visit the Authorizing applications & sites page (pictured below) under your Google Account settings...

Soon it will be safe to use my Google services on untrusted (keystroke logger possible) machines -- like my office XP box. I'll configure my trusted machines to remember verification. My iPhone will run an RSA-token like authentication code generator. I will keep at least one backup code in my wallet - albeit in a permuted form.

Of course I will wait several weeks before I switch over. I'm no fool. I'll let the brave and inexperienced take the arrows of early adoption.

The traditional password isn't quite dead yet, but it has one (rotted) foot in the grave.

Thanks Google. Special credit for making Google-authenticator open source and standards based ...

The Google Authenticator project includes implementations of one-time passcode generators for several mobile platforms, as well as a pluggable authentication module (PAM). One-time passcodes are generated using open standards developed by the Initiative for Open Authentication (OATH) (which is unrelated to OAuth).

These implementations support the HMAC-Based One-time Password (HOTP) algorithm specified in RFC 4226 and the Time-based One-time Password (TOTP) algorithm currently in draft.

See also:

• Gordon's Tech: After the Gmail hack - passwords and security
• Gordon's Notes: Thunder in the Cloud: Lessons from my hacked Google Account
• Gordon's Tech: Google hack lessons - where the geek risks are
• Common issues - Accounts Help - managing a lost phone, sign in after losing phone access, multiple accounts, Google Apps admins have special powers, and so on.
• Implementing two factor (4/2011)

10 Minute Mail - a disposable email address

10 Minute Mail gives you a temporary email address on demand. Good when you're forced to provide an email address for product registration or to deal with some other marketing-inspired blackmail. I suppose it's also useful for criminal activity.

Personally I have a yahoo.com address that is purely used for junk mail. That works fine; I set the spam filter to the highest setting and it still seems to work. Makes the marketing droids happy, they think it's worth something. If 10 minute mail really caught on then email traps would refuse to accept it.

Using OS X Spaces, Expose, Minimize and Hide - best practices 2.0

I'm an old dog. It takes work to change my habits. A year ago I took a look at how I use my OS X workspace: Using OS X Spaces, Expose, Minimize and Hide - best practices.

Since then I've switched all my machines to 10.6. This is what I do now (I use two displays):

• I've given up on Spaces. It almost works, but some multi-window apps get scattered across Spaces. Even when it works, it's not quite right. Even in 10.6 it fits poorly with Expose, Minimize, and Hide. I think Apple has given up too; the newest keyboards have a labeled shortcut key for Expose, but not for Spaces. I now use Spaces only when I'm running Fusion -- it gets its own Space.
• I love 10.6 Expose. There are four things you need to know
  • If you click-hold on an app's doc icon Expose shows only that app's windows
  • If you show all windows in Expose, then click on an app's doc icon, you see only that app's windows
  • With 10.6 minimized windows show up in expose in their own row
  • Hidden windows do not show up in Expose -- unless you click on the app's doc icon. Then they are forced to appear.

With 10.6 I recommend ...

• Learn Expose.
• Use minimize and the "grow" button [1]
• Don't use Spaces except for unusual cases such as running a VM. I might try using my 2nd Space just for Aperture.
• Don't use Hide and Hide Others. They are legacy functions left over from Mac Classic. They don't mesh well with Expose.

[1] The "grow" button is problematic. iTunes is completely non-standard for minimize and grow (need to hold opt key to get correct behavior), and many apps simply expand to the entire screen instead of following the "grow to best size" algorithm.

Reeder and Reader change how I read the NYT

My Google world editions experiment has a B grade so far. It's not bad, but Google's news algorithms underrate the NYT and the Guardian. I get too many 2nd and 3rd tier news sources.

Fortunately, my favorite Google Reader iPhone client [2] has changed the way I access the NTY. Reeder.app has integrated Arc90's Readability.

Why does this matter? It matters because the NYT's feed posts are not full text. They're simply pointers to the web articles and they are not mobile-optimized. Byline, my previous iPhone GR client, used to cache these articles [1] so they were fast to display, but Reeder doesn't. Until recently I used Reeder's integrated Google or Instapaper mobilizers to read NYT articles, but that stopped working.

I could use the NYT's iPhone app to read the NYT, but that's a source-specific workflow. Worse, the NYT iPhone app doesn't integrate with my Google Reader shares.

Now, however, Reeder with readability works perfectly with the NYT. To the NYT it looks like I'm fetching pages via a browser, but Reeder's readability function post-processes the page so it renders perfectly on my iPhone.

My NYT workflow starts with the NYT RSS resource page. From there I added about 10 feeds to Google Reader. Individual feeds belong to any of several "folders", but they all belong to an "NYT" folder.

In Reeder.app the articles show as short titles and introductions. By tapping a small icon, or using a spread-finger gusture, I tell Reeder to load the entire article using Readability. From there I can share via Google Reader Shared Items or add notes. Those shared items, in turn, go into my twitter stream. (Typically with truncated annotations. I'm not among those who praise Twitter's insane string length limits).

It's a far better workflow than using the NYT iPhone app. Recommended.

[1] I'm not sure the NYT allows this any more.
[2] There's an iPad client too. A Mac OS X client is in beta, but on the desktop I typically use Google Reader's native web interface.