how to - ReadWriteWeb http://www.readwriteweb.com/feeds/tag/how to en Copyright 2009 Richard MacManus readwriteweb@gmail.com Tue, 24 Nov 2009 12:40:23 -0800 http://www.sixapart.com/movabletype/?v=4.23-en http://blogs.law.harvard.edu/tech/rss How to Secure Your Jailbroken iPhone Earlier this week, the news of the first iPhone worm made its way around the net. Since the worm only targeted jailbroken devices and then only those which had the SSH program installed, there wasn't a need for concern on the part of most iPhone users. However, a second hacker tool which uses the same security hole as the so-called iKee worm has reared its head and this one is far more dangerous. According to security firm Intego, the new hacker tool goes after personal data stored on the device including email, contacts, SMS messages, calendars, photos, music files, videos and any other data recorded by any iPhone app.

In other words, if you're the owner of a jailbroken phone, you should now be concerned.

]]>Sponsor

]]> New iPhone Worm Discovered

Unlike the relatively innocuous iKee worm which the creator designed more as a "public service" to alert users to the potential for malware on the iPhone, the new hacker tool, dubbed "iPhone/Privacy.A," is the real deal. Where iKee simply switched the iPhone wallpaper to display a photo of singer Rick Astley (a nod to the internet meme of rickrolling), Privacy.A gives the user no indication that it is running on the device.

The new hacker tool also operates a bit differently than iKee does, as it doesn't have to sit on the iPhone itself in order to inflect its damage or spread. The hacker can either load the worm onto their personal device and then monitor the network for jailbroken devices to attack or they can load the malicious program onto a computer. As Intego points out in their post, this computer could be on a public network at an Internet cafe or retail store. In that scenario, the tool would then scan for any other jailbroken iPhones that came within range of the Wi-Fi network and attack them.

How to Secure your iPhone

Although many jailbreakers are tech-savvy enough to know how to lock down their devices to protect themselves from attack, there are quite a few who have simply followed online instructions such as these to perform the jailbreak. This group, while arguably somewhat tech-savvy, doesn't necessarily know all the nitty-gritty details about the iPhone filesystem or its security mechanisms.

To make it easy on these users, we've provided steps on how to change your iPhone's root password - the common denominator required in order for the malware to gain access to your device.

While some may argue there's no need to change your root password if you haven't also installed the SSH program, another necessary element for these attacks to work, we think that's a little short-sighted. It would be easy enough for a malicious hacker to trick jailbreakers into installing SSH by bundling it with some other third-party application offered through underground App Stores like Cydida or Icy. By masquerading as something innocent like a wallpaper-changer or ringtone bundle, a hacker could easily set up a number of jailbreakers with SSH without the victims even being aware that it has been installed. Although we haven't heard of anything like this happening yet, if we thought of it then you can bet that the hackers out there have thought of it too.

Changing the Root Password

The best protection is to simply change your iPhone root password. That will keep you safe from the current iPhone malware...as least for now. Here's how:

  1. Install the MobileTerminal application from Cydia.
  2. Reboot your iPhone.
  3. Launch MobileTerminal and type in the command: passwd
  4. At the prompt which asks for the "Old Password," type in: alpine
  5. At the new password prompt, type in a new password of your choosing, making sure to pick something strong.
  6. Re-enter the password to confirm.
  7. You'll then be returned to the Mobile$ prompt which means the change was successful.
  8. Now you'll need to change the password for the secondary admin. Type in the command login root.
  9. Again, you're prompted for the old password. Type in alpine.
  10. Now type in the command passwd
  11. You'll then go through the change password routine a second time, entering in alpine as the old password, creating a new password and then re-entering it to confirm.
  12. When you are finished, close the application.

Note: these instructions assume you are running iPhone OS 3.0 or higher.

Update 11/16: Intego requested that the new attack be described as a "hacker tool," not a worm.

]]>Discuss]]>
http://www.readwriteweb.com/archives/how_to_secure_your_jailbroken_iphone.php http://www.readwriteweb.com/archives/how_to_secure_your_jailbroken_iphone.php Apple Fri, 13 Nov 2009 06:01:15 -0800 Sarah Perez
13 Tools for Building Your Own iPhone App These days, everyone wants to build their own iPhone applications, but not everyone knows how write the code necessary in order to create them. Fortunately, there are now a number of tools that allow non-developers the ability to create their own iPhone apps without knowing programming or scripting. Some are general-purpose app builders designed for small businesses while other target specific needs, like apps for musicians or for eBook authors. Still others let developers familiar with simpler programming languages like HTML write apps using the code they know and then will transform that code into an iPhone application which can be submitted to the iTunes Store.

Below we've listed 13 different tools that let you create your own iPhone applications, none of which require knowledge of Objective C, the programming language used to build apps for the iPhone OS .

]]>Sponsor

]]> 1. Sweb Apps

What it Does: Sweb Apps offers an online service which lets anyone build their own iPhone apps even if they don't know how to code. Designed with small business owners in mind, the company offers pre-created templates which you can customize with different background images and your own custom icons if desired. Otherwise, you're welcome to use the graphics provided by the company's own image library. After picking the category for your app (Restaurant, Retail, Business, etc.), you choose the buttons you want to include (Menu, Directions, Map, etc.). You can even create a mobile storefront where Sweb Apps manages your inventory. 

How Much it Costs: The company offers four-, six- and eight-button packages, which all include a one-time set-up fee of $50 per button. Then there is a $25 monthly hosting fee applied to every application going forward

Our coverage: Build Your Own iPhone App with New Service from Sweb Apps and Sweb Apps 2.0: Build Your Own Mobile Storefront for the iPhone

2. AppIncubator

What it Does: Think you have a great idea for an iPhone app but not the skills to build it yourself. Like Apple says: "there's an app for that!" The AppIncubator iPhone App from MEDL Mobile lets you submit your ideas which the company's development team will then build into apps for you. App submissions can be sent in via the iPhone app or by way of the company website. Once received, you go online to use the company's "storyboard" tool to sketch out in more detail how you imagine the app working.

How Much it Costs: Using the service or downloading the iPhone app itself is free, but MEDL Mobile takes a cut of the profits after the app goes live in the iTunes App Store. 25% of the total revenue is shared with you and the company keeps the rest.

Our coverage: This iPhone App Helps You Make iPhone Apps

3. Kanchoo

Kanchoo is another platform that allows content producers to create native iPhone applications, this one is designed for news organizations. To use the service, you provide the company with an iPhone application icon, a splash screen (in .png format) and a description of your application which will be used in the iTunes App Store. Then, using their online tools, you build your app by uploading the content which can consist of either photos or news articles.

How Much it Costs: Basic account holders pay $88 for creation of their iPhone application and submission to the iTunes App Store along with a $28 per month fee for bandwidth and hosting.

4. AppBreeder

What it Does: AppBreeder is another DIY app builder service, similar to SwebApps. Where SwebApps offers categories to choose from, AppBreeder offers "App-Kits." These are pre-defined collections of app settings which include gadgets, icons, and behavioral elements. There are kits for a wide range of industries including everything from real estate to legal and bands to restaurants. You use the kits as a jumping off point to start building your app and then add or remove gadgets as your needs require. After building your app, you can then publish it to the iTunes App Store. However, AppBreeder isn't just limited to the iPhone - it also lets you publish apps for Blackberry and Android devices as well. (Note: the company's website says that "due to sudden demand spike" AppBreeder's build and publishing tools will be unavailable until Nov. 30th.) 

How Much it Costs: AppBreeder offers different packages depending on whether your app will be ad supported or ad-free and which platforms you plan to distribute it on. Ad supported apps are free, iPhone web apps are $9.95 - 14.95, native iPhone apps are $29.95, and the iPhone/Blackberry/Android app package is $39.95 - 49.95.

5. MyAppBuilder

What it Does: MyAppBuilder is a service that creates iPhone applications designed to help you sell your content. Whether that's books, music, videos, etc., the service turns any content into an app. You can also use MyAppBuilder to create custom quizzes, apps that are fed by Twitter pages, or you can turn your blog into an app by way of its RSS feed. To use the online app builder, you login to the service's "Control Panel" where you submit details about your app including content, features, flow, and image files. The company then uses this information to create an app for you which is sent back to you for review. After you approve the app, MyAppBuilder submits it to the iTunes App Store on your behalf.

How Much it Costs: The service is available for a fee of $29 per month. There is also a $20 processing fee to compile your data, put it in the appropriate format, and submit it to the App Store for review.

6. BuildAnApp

What it Does: BuildAnApp is another DIY cross-platform app builder designed for small businesses, community groups and professional service organizations. Using the web-based service, you can pick and choose from the company's customizable templates to create apps for the iPhone, Blackberry, or Windows Mobile platforms. As with Sweb Apps, creators can use their own graphics or choose images from the company's own online gallery. A special feature of this service is its ability to house an email distribution list that will notify end users to download the application once it becomes available. (Note: this service is currently in private beta testing right now. You can sign up here to be notified when it's available).

How Much it Costs: The company says pricing has not yet been determined but will be "competitive" with similar services.

7. eBookApp

What it Does: The eBook App Maker is a service specifically designed to create iPhone apps from eBooks. The app builder supports nearly all digital formats including PDF, Doc, Zip, CHM, HTML, TXT, FB2, PDB, PRC, Mobi, PDB, MHT, RTF. eBook creators can also specify various fonts and sizes, can add images and notes, can lock the orientation to landscape or portrait, and more.

How Much it Costs: The company's site doesn't publicly list its pricing but offers a "request a quote" form instead.

8. GameSalad

What it Does: GameSalad is a downloadable tool for creating games without needing to know programming or scripting. Using the company's visual editing software, you can create games which can then be published to both the web and to the iPhone. GameSalad offers a suite of "interactions" and attributes which you can add into your game to create the action. You can also drag-and-drop art files and sound files from your computer into the game builder, too. As you create the game, you can tweak the various elements during the building process and can preview what the game looks like before compiling it. 

How Much it Costs: The company offers a basic, free version of GameSalad which lets you publish to the web, but not the iPhone. For iPhone games, there are two versions available: the Express version for $99/year and the Pro version for $1999/year.

Our coverage: Gendai Games Launches GameSalad Beta

9. MobileRoadie

What it Does: Mobile Roadie is an application builder that lets bands create their own custom iPhone applications which can include content like photo galleries, streaming music files, YouTube videos, upcoming concert listings, lyrics, news, Twitter and RSS feeds, and even interactive features like a "wall" where fans can post comments and photos.  The app can also link to Ticketmaster and LiveNation ticket sales information and to the band's album(s) on iTunes.

How Much it Costs: There is a $499 set up fee for Mobile Roadie followed by a $29/month fee for the first 100 installs. To get rid of the 1 cent per install fee, bands can choose to host their own content instead.

10. MobBase

What it Does: Similar to Mobile Roadie, MobBase is also an app creation tool designed for bands. Without needing programming skills, musicians can create apps that include videos, images, bios, band news, streaming playlists, concert schedules and links for music purchases. The tool, offered by MixMatchMusic,

How Much it Costs: Applications are $20 dollars to activate. Free apps are priced at $15 dollars a month for the first 500 installs with $5 dollars per additional 1000 downloads. Paid apps cost $20 dollars per month for the first 500 installs and $6 dollars per month for each additional 1000. MobBase does not take any application sales fees in regards to revenue share. The company also receives 5% of purchased music downloads.

11. Rhomobile

What it Does: Rhomobile does require that you know how to code, but only HTML and Ruby, not the Objective C required for building iPhone apps. Developers can build any application and then use Rhomobile to deploy their app anywhere - including the iPhone, Blackberry, Windows Mobile, Symbian, or Android marketplaces.

How Much it Costs: The Rhodes framework is free for developers who open source their applications under GPLv3. Commercial Rhodes licenses are also available at $500 per application and commercial RhoSync server licenses are available based upon the planned number of users connected to the server.

12. PhoneGap

What it Does: Like Rhomobile above, PhoneGap is also an open source development tool for building mobile apps. Also like PhoneGap, you do need to know how to code, but this time, you just need to know HTML and Java as opposed to the iPhone's Objective C. With this tool, you can build apps for iPhone, Blackberry, and Android while also taking advantage of the phones' native features like geolocation, the accelerometer, sound and more.

How Much it Costs: PhoneGap is completely open source and free to use.

Our coverage: PhoneGap: People's Choice Winner at Web 2.0 Expo Launch Pad

13. RedLaser

What it Does: Red Laser is an iPhone application that lets you scan barcodes with your iPhone in order to compare the in-store price with other online deals. However, with the latest version of the application, RedLaser 2.2, you can create your own custom barcode scanning apps. To do so, first download the updated application from the iTunes App Store, then visit www.redlaser.com/apps from the iPhone's web browser. Follow the instructions on the page to set up your own application - you'll need to fill in data like the URL of the site you want to compare prices with, the URL for the app icon, etc. When complete, tap the "build app" button. The completed app can then be added to your homescreen. Although this app is designed more for personal use and not resale, it's still worth checking out if you want to create your own barcode scanning application without needing to know how to code.

How Much it Costs: RedLaser is available on the iTunes App Store for $1.99.

Update!

While this post was by no means meant to be a definitive list, it's amazing the response it's received in both the comments and via email. So many people have asked "how could you forget.. this company or that?" OK, Appcelerator was an oversight, but as far as the others, they just weren't on my radar. Here's a few of the ones that received multiple mentions:

  • TapLynx: A DIY solution for building apps without coding.
  • MobileAppLoader: Another DIY solution for building iPhone apps without code.
  • MobileStoreMaker: A DIY solution for making a mobile storefront for iPhone.
  • Appcelerator: Like Rhomobile and PhoneGap, you do need to code, but you don't need to know Objective C. Instead, you can build iPhone apps with HTML, JavaScript, CSS, Python, PHP and Ruby instead.

  • MobiOne: An iPhone emulator that lets you build iPhone apps by coding them using your web development skills.
  • Appanda: A system that lets you build apps through RSS, links and manual uploads. Still in beta.

However, there are tons of others, too. Really - tons! Hop into the comments section to see even more suggestions from their users and fans.

]]>Discuss]]>
http://www.readwriteweb.com/archives/13_tools_for_building_your_own_iphone_app.php http://www.readwriteweb.com/archives/13_tools_for_building_your_own_iphone_app.php Apple Tue, 03 Nov 2009 07:48:23 -0800 Sarah Perez
How to Avoid Malware on Facebook and Twitter: 8 Best Practices Thanks to the popularity of social networking sites like Facebook and Twitter, it's a given that malicious hackers will devise ways to exploit the sites' numerous users in order to infect their computers with malware. This unwanted software is designed to do a number of terrible things ranging from identity theft to turning computer into remote-controllable "zombie" machines.

Without sufficient anti-virus and malware protection programs installed, social networking users can easily become victims to these ever-evolving attacks. However, the best way to avoid becoming a victim yourself is to be aware of what's out there and what sorts of things you should avoid. Below are the best practices which you should use on Facebook and Twitter in order to keep yourself safe.

]]>Sponsor

]]>

The Problem with Malicious Links

One of the most common vectors for attacks are malicious links posted either to Twitter or to your Facebook wall. In the past, such as with the malware known as Kooface, the troublesome links could be easily identified because they would often use a consistent phrase followed by a URL. For example, in August, Koobface was posting links that read "my home video :)" which was followed by a URL and then a random component on the end such as "HA-HA-HA!!", "W.O.W.", "WOW", "L.O.L.", "LOL", ";)" or "OMFG!!!"

Although the end piece changed from tweet to tweet, the message itself remained the same. However, security researcher Costin Raiu of Kaspersky Lab tells us that easy-to-identify messages are not as common anymore. Today, it's much harder to identify malicious links thanks to two newer techniques being used by hackers. Below those two newer methods are described in more detail as is the tried-and-true method of spreading malware via email.

Method 1: Hijacking Twitter's Trending Topics

The first technique, which really became popular in August of this year, involves hackers creating Twitter new accounts and then posting messages related to whatever trending, or "hot," topic was being heavily discussed on Twitter at that time. This would allow the post to be aggregated in Twitter search results where unsuspecting users would click on the included link. The text accompanying the link would be intriguing to those interested in the subject, enticing them to click through.

Method 2: Hijacking Legitimate Accounts

The second technique involves infiltrating legitimate accounts through phishing attempts and other methods so that the hacker essentially has control over a "real" account. After control has been established, if on Twitter, the hacker will then tweet out links that redirect users to malware-infected sites. Because the tweets come from an account that already has an established set of followers, those reading the tweets assume it's safe and don't hesitate to click the links.

After infecting the account of a Facebook user, malware often uses that particular person's account to spread, too. As with the malicious links on Twitter, because it appears that the links posted are from a trusted friend, other users don't realize that the posted link is harmful.

On Facebook, one of the most problematic malware programs is Koobface, a particular type of malicious software that sees 20 to 30 new variations per day. Despite the number of variants out there, Koobface's M.O. is relatively consistent: it tricks people into clicking links. These links appear on social networks like Facebook and Twitter, but also on MySpace, hi5, Bebo, Friendster, and others.

Method 3: Dangerous Email

A third method to encourage social networking users to click on infected links is the old but still effective technique of sending out spoofed email. Hackers can create email messages that appear to be sent from a social networking site. The messages prompt you to "update your account" or open an attachment containing your new password among other things.

Image Credit: Last Watchdog

Image Credit: Last Watchdog

Although many users are now wary of email, these techniques are still being seen in the wild, so it's clear that to some extent they still work.

How To Stay Safe

There are a number of best practices that you should follow in order to stay safe and avoid infection. They are as follows:

  1. Don't assume a link is "safe" because it's from a friend: As noted above, your friend's account may be infected. You should never assume that a link is safe just because a friend tweeted it or posted it to your wall. Use your common sense. If it doesn't sound like something they would say, be wary, don't click. If you're unsure, try to contact them through another channel and see if the link is legit.
  2. Don't assume Twitter links are safe because Twitter is now scanning for malware: In August, Twitter partnered with Google to use Google's Safe Browsing API, a technology that checks URLs against Google's blacklist. This prevents spammers from posting malicious URLs to Twitter, but it does NOT prevent them from posting shortened URLs which direct users to those same malicious sites. It's better than no protection at all, but it's not going to keep you entirely safe.
  3. Don't Assume Bit.ly Links are Safe: Earlier this year, Twitter's default URL-shortening service Bit.ly, began warning users of malware. Bit.ly also uses Google's Safe Browsing API along with two other blacklists to identify malicious links. Although the service doesn't prevent users from posting these links, it will warn upon clicking that the site being linked to is infected. However, as Raiu tells us, this is not 100% effective either. Kaspersky has identified a number of malicious links which Bit.ly did not block. However, you can assume that Bit.ly is generally safer than the other URL-shortening services because it uses this technology and because the hackers are generally avoiding this service at the moment because of its built-in protection. But it is not completely safe - nothing ever is.
  4. Use an up-to-date web browser: Kaspersky recommends using the latest version of your web browser and keeping it up-to-date with the necessary patches. That means Internet Explorer users should be on IE8 - and since this browser is attacked the most, it's critical that you make sure it stays updated as needed. Firefox is the second most attacked browser, but fortunately, it has a self-updating feature built in. Google Chrome is also good because it has a self-updating feature as well as another security feature that runs plugins in "sandboxes," or restricted environments. If an attacker was able to exploit the browser and run malicious code, it would be isolated to this sandbox and would not able to effect the entire machine. Opera and Safari are also good browsers and should be kept current, too.
  5. Keep Windows up-to-date: As always, Windows users should make sure their systems are current with the latest patches from Microsoft. Automatic updates should be turned on.
  6. Keep Adobe Reader and Adobe Flash up-to-date: At the moment, Adobe Reader and Flash are the two most targeted programs by hackers. A lot of malware specifically goes after known vulnerabilities within Adobe's software. In addition, a common method of attack, such as that used by Koobface, is to redirect a victim to a malware-infested site where the user is prompted to update their Flash player or Adobe Reader in order to see the website content. NEVER do this. Always go to Adobe's site on your own to download the latest version or update the software on your computer using its own built-in update mechanisms.
  7. Don't assume you're safe because you use a Mac: While it's true that Mac users are less targeted than Windows users, they are not immune to malware, despite what those commercials may say. Although Apple did include some malware protection in their latest operating system, it only protects users from two trojans; you cannot count on it alone to protect you. There are a couple of hundred of trojans currently in the wild that specifically target Mac machines, according to Kaspersky. In fact, there may even be as many as a thousand, but researchers are unable to identify all of them because Mac users don't typically run anti-virus software which is how much of the data is collected. These days, when a user clicks an infected link, the malicious web page will now sometimes identify whether that user is coming from a Windows or Mac machine and then display the appropriate version of the trojan accordingly. A particular family of trojans known as "DNS Changer" trojans are the most common ones used to attack Mac machines. The only way to really be sure that you're protected against these malicious programs is to run anti-malware software on your Mac, but most Mac users won't do so, preferring to take their chances since their risk is lower.
  8. Be wary of email messages from social networks: Because email addresses can be "spoofed" by hackers, you can't assume that an email from Facebook or Twitter is really from those the site it claims to be from. As always, you should never open attachments you were not expecting to receive and you should be wary of clicking on links - especially if you're being told to "update your account." If you do click on a link and are taken to a web page that asks you to log into the site, DON'T DO IT. It would be handing over your password to the hackers. Instead, you should always access the sites directly by typing in their URL in your browser or clicking a saved link in your Favorites.

It's Not Just a Matter of Common Sense Anymore

As the above best practices show, a lot of the things you can do to protect yourself from malware are the same as they have been in the past - keep your computer and browser up-to-date, don't open attachments, etc. However, malware is trickier to identify these days thanks to social networking sites. It now uses the trusted identities of your friends in order to lull its victims into a false sense of safety. You can no longer simply assume that because someone you know posted a link, it's automatically safe. You can't even assume that the networks themselves are safe, either. They're not always scanned for malware-laden links, and when they are, such as is the case with Twitter, it's not a 100% effective method.

Security researchers are actively working on better ways to fight this problem - for example, Kaspersky just announced their "Krab Krawler" project which will help keep their blacklists current by scanning for malicious links on Twitter, but it's not a tool that end-users can download to protect themselves; it's only one of many methods that security firms use to collect data about the malware on the internet. The best way to stay safe is to follow through with all the best practices - not just one or two. Malware isn't ever going away, so everyone must do their own part in order to stay safe on the web.

]]>Discuss]]>
http://www.readwriteweb.com/archives/how_to_avoid_malware_on_facebook_and_twitter_8_best_practices.php http://www.readwriteweb.com/archives/how_to_avoid_malware_on_facebook_and_twitter_8_best_practices.php Facebook Fri, 30 Oct 2009 17:00:00 -0800 Sarah Perez
5 Easy Steps to Stay Safe (and Private!) on Facebook When the President of the United States warns schoolchildren to watch what they say and do on Facebook, you know that we've got a problem...and it's not one limited to the U.S.'s borders, either. People everywhere are mindlessly over-sharing on the world's largest social network, without a second thought as to who's reading their posts or what effect it could have on them further down the road. For example, did you know that 30% of today's employers are using Facebook to vet potential employees prior to hiring? In today's tough economy, the question of whether to post those embarrassing party pics could now cost you a paycheck in addition to a reputation. (Keep that in mind when tagging your friends' photos, too, won't you?)

But what can be done? It's not like you can just quit Facebook, right? No - and you don't have to either. You just need to take a few precautions.

]]>Sponsor

]]> Unbeknownst to most mainstream Facebook users, the social network actually offers a slew of privacy controls and security features which can help you batten down the hatches, so to speak. If used properly, you'll never have to worry about whether you should friend the boss and your mom. You can friend anyone you want while comfortable in the knowledge that not everyone gets to see everything you post.

The problem in implementing these privacy options is that they're just too confusing for most non-tech savvy people to handle. And often, folks don't want to bother to take the time to learn. To simplify the process, we're offering five easy steps you can take today to help make your Facebook experience safer, more secure, and more private.

Step 1: Make Friend Lists

Yes, it will take some time, especially if you're connected to a couple hundred friends already. But this step, while not the quickest, is fairly simple. And it will be one of the most useful things you can do on Facebook.

Friend lists, like they sound, are lists for categorizing your friends into various groups. The nice thing about this feature is that once you set these lists up, you won't have to do it again. We suggest that you put your work colleagues and professional acquaintances into a friend list designated "work," personal friends you're not very close with into a list called "Acquaintances," and people you're related to into a list called "Family." Those three main categories will separate out the groups of "friends" who you may want to hide some information from.

To create a friend list, click on "Friends" at the top of the Facebook homepage. In the left-hand column, click "Friends" again under the "Lists" section. Now you'll see a button at the top that says "Create New List". Click it. In the pop-up that appears, you can name your list and pick members. If you've ever shared an application with your friends, the process of doing this will be very familiar.

When you've finished making lists, you'll be able to use them when selecting who can see what (or who can't!) when configuring the security settings described below.

Step 2: Who Can See What on Your Profile

At the top right of Facebook, there's a menu that many people probably ignore: "Settings." But this menu is now going to become your best friend. To get started, hover your mouse over the Settings menu and click "Privacy Settings" from the list that appears. On the next page, click "Profile." This takes you to a page where you can configure who gets to see certain information on your profile.

Before making changes, think carefully about the sorts of things you want public and the things you want private. Should "everyone" get to see photos you're tagged in? Or would you like to limit this only to those you've specifically chosen as Facebook friends?

Underneath each section on this page (basic info, personal info, status, etc.), you can designate who gets to see that particular bit of information. For anyone not using custom lists (see step 1), the best thing to enter here is "Only Friends." Anything else opens up your profile information to people you may or may not know. For example, choosing "Everyone" makes that info public, "Friends of Friends" lets your friends' friends see it, "My Networks and Friends" opens up your info to anyone in your networks - that means anyone in your city, your high school, your college, a professional organization you listed, etc.

You can also block certain groups from seeing these sections, too. On any item that offers an "Edit Custom Settings" option, you can click that link to display a pop-up box where you can choose people or lists to block (see where it says "Except these people"). If you haven't made custom lists as explained in step 1 above, you can enter individual names here instead. (Sorry, mom, dad, boss - this is where you get blocked.)

Step 3: Who Can See Your Address and Phone Number

Did you list your address and phone number on Facebook? While that's a handy feature, you may not want everyone you friended to have this information. To access this configuration page, you follow the same steps as above in step 2 to display the Profile Privacy page. You'll notice that the page has two tabs at the top - click on the one that reads "Contact information."

As previously described above, you can again use the drop-down lists provided to designate who gets to see what and/or block certain people or lists from viewing this information. The sections on this page include "IM Screen Name," "Mobile Phone," "Other Phone," "Current Address," "Website," and your email.

Step 4: Change Who Can Find You on Facebook via Search

Sick of getting friend requests from old high school pals? While for some the beauty of Facebook is that it lets you reconnect with everyone you ever knew throughout your life, others find this intrusive and annoying. You're not friends with any of these people anymore for a reason, right?

As it turns out, you can still enjoy Facebook without some folks ever knowing or finding you thanks to the search privacy settings.

Click on the "Settings" menu on Facebook's homepage and then click "Search" on the following page. You'll be taken to a Search Privacy page where you can specify who gets to find you on Facebook. Want to be wide open? Change the "Search Visibility" drop-down box to "Everyone." Want to keep it a little more limited? Select "My Networks and Friends," "Friends of Friends," or "My Networks and Friends of Friends" instead. Don't want anyone finding you on Facebook? Change it to "Only Friends." That means only the people who you've already friended can find you in a Facebook search.

On this page, you can also configure what information displays when your info is returned as a search result (e.g. your profile picture, your friend list, etc.). In addition, you can check and uncheck the boxes for network-based searches too. For example, if you don't want anyone from high school to find you, uncheck the box next to "people in high school networks."

Step 5: Stop Sharing Personal Info with Unknown Applications

Remember when we told you about what Facebook quizzes know about you? Using Facebook's default settings, you're unknowingly sharing a plethora of personal information (and your friends' info too!) with various Facebook applications and the developers who created them. The problem is so bad that the ACLU recently created their own Facebook Quiz to demonstrate how much information an app has access to.

It's time to take back control! From the Facebook homepage, hover your mouse over the "Settings" menu and choose "Privacy Settings" from the drop-down list. On the next page, click "Applications" then click the tab that reads "Settings" which is next to the "Overview" tab. (Oh, and if you want to really be freaked out, read that overview!)

On this page, you can check and uncheck boxes next to your personal information (picture, education history, wall, religious views, etc.). This controls what the applications your friends are using can see about you. Yes, your friends' apps can see your personal info if you don't make this change! Believe it or not, you don't have the same control over your own apps. The best you can do is head over to the Applications page and delete the apps you're not using anymore. (Use the "X" to remove them.) You see, once you authorize an application, you're telling it that it's OK to access any information associated with your account that it requires to work. While some developers may only pull what's actually required, many others just pull in everything they can. Scary, isn't it?

Conclusion

While this is by no means a comprehensive guide to Facebook security and privacy, these five steps can help you get started in creating a safer, more secure, and more private environment on the social network.

However, if you choose not to take any precautions, then you'll only have yourself to blame when an errant wall post or naughty photo makes its way online and straight into Grandma's News Feed, or worse, your boss's. These days, it's better to be safe than sorry, so go ahead and delve into those settings!

Note to readers: We recently came across another invaluable resource for those interested in Facebook privacy. Check out MakeUseOf.com's "10 Solid Tips to Safeguard Your Facebook Privacy" for even more information on this subject.

]]>Discuss]]>
http://www.readwriteweb.com/archives/5_easy_steps_to_stay_safe_and_private_on_facebook.php http://www.readwriteweb.com/archives/5_easy_steps_to_stay_safe_and_private_on_facebook.php Facebook Wed, 16 Sep 2009 08:05:57 -0800 Sarah Perez
Apple Explains How to Use iPhone's New Anti-Phishing Feature Amid the hubbub over new iPods and iTunes' LPs announced at last week's annual Apple event, one feature that was a little under-hyped was the new "anti-phishing" protection built into the iPhone's Safari web browser. The added feature, available via an iPhone software update, warns users when visiting fraudulent websites using Safari. This sort of technology is already commonplace on the web, but is rarely seen on the mobile platform.

Unfortunately, there seemed to be a problem with the new security feature: it wasn't working...or at least, so it seemed. As it turns out, the problem was that users weren't informed as to how to properly activate the anti-phishing protection, an issue that points to a poor implementation of what could and should have been a major breakthrough in mobile computing technology.

]]>Sponsor

]]> The Problem: Anti-Phishing Protection Doesn't Appear to Function

Although Apple touted the anti-phishing protection back in March when they announced their 3.0 update, the new feature didn't actually materialize until this month when the company released the OS 3.1 iPhone/iPod Touch software. According to Apple, the anti-phishing protection feature will display an on-screen warning message when you attempt to visit a known malicious website.

Once the update was released, security researchers and other Apple enthusiasts began testing the new technology. The results were immediately disappointing. "I've not been able to get it to block anything," Michael Sutton, vice president of research at security firm Zscaler was quoted as saying. He had been testing the feature using known phishing websites identified by the anti-phishing database hosted at PhishTank. The Mac Security Blog also found after extensive testing that it simply "does not seem to work." MacWorld, however, found that the feature worked sometimes, but the inconsistency hinted that the technology was not "ready for public consumption," they reported.

What gives? Did Apple really release a broken feature? Were they even aware of the problem? Blogger Jim Dalrymple of The Loop decided to go straight to the source: he asked Apple.

Apple Says "You're Doing it Wrong"

Apparently, this was not a case of the anti-phishing technology being broken. It was a case of everyone simply "doing it wrong." As it turns out, in order for Safari's anti-phishing database to update, there are a few particular steps that need to be followed, explained an Apple spokesperson. After updating the phone to the OS 3.1 update, users need to do the following:

  1. Launch the Safari web browser.
  2. Connect to a Wi-Fi network.
  3. Charge the iPhone with the screen off.

The spokesperson added that for "most users" this process should happen automatically when they charge their phone. We would have to disagree. "Most users" don't launch the Safari browser prior to charging their device - if anything, they close down any open applications before plugging in the phone to charge.

Poorly Implemented, Poorly Explained

If you follow the above steps, the feature will work. However, most users will never know to do this unless they happen to closely follow technology news and blogs. The general mainstream population - the very demographic Apple so craftily attracts via their billion dollar marketing campaigns - expects things to "just work." That is the Apple promise, after all.

Yet even on Apple's own website where they detail the various new features in the OS 3.1 update, there is no mention as to how the anti-phishing protection should be utilized. It simply lists that the feature exists. A helpful link to a "how to" guide would seem appropriate here or, at the very least, a footnote.

Having to perform the somewhat unintuitive steps to get the anti-phishing protection feature to function properly seems like an unusual miss for a company who generally makes things simple and straightforward. Why does it need Wi-Fi, for example? Apple claims that the Wi-Fi connectivity is required so as not to incur any additional data fees for the end user. But launching the browser? We almost wonder if it wouldn't have made better sense for Apple to implement the feature in the new iTunes update instead. The desktop software could retrieve the updated anti-phishing database from the internet upon launch and could then sync it to the iPhone or iPod Touch the next time it was plugged in. That would also alleviate another common problem with the current implementation - if the phone isn't plugged in long enough, the update won't complete and users will only be partially protected. On the other hand, the inclusion of the database via a sync would have ensured that all the data was copied over to the phone.

In the end, though, Graham Cluley, a senior technology consultant at Sophos, reminds us that maybe we shouldn't be too hard on Apple. "Many other smartphones don't offer even the most elementary form of anti-phishing protection to their users," he says. That may be true but, unfortunately, the way Apple chose to deliver their anti-phishing protection feature means that most iPhone users won't be protected either.

]]>Discuss]]>
http://www.readwriteweb.com/archives/apple_explains_how_to_use_iphones_new_anti-phishing_feature.php http://www.readwriteweb.com/archives/apple_explains_how_to_use_iphones_new_anti-phishing_feature.php Apple Wed, 16 Sep 2009 06:24:15 -0800 Sarah Perez
How to Jailbreak your iPhone to OS 3.0 Now that iPhone's new OS 3.0 is available with all its nifty features like spotlight search, copy and paste, push notifications and maybe one day MMS and tethering, many users have happily upgraded their devices. For most people, upgrading to the new OS is as technical as they want to get. For others, however, a true upgrade isn't complete until the jailbreak is done.

After waiting for a few days, the fabulous iPhone dev team at last provided us with a new set of jailbreaking tools. If you're ready to dive in, you can use this guide to get going. And unlike some of the other guides on the net, we'll share our personal experience and tips so you know just what you're getting into...and what to avoid.

]]>Sponsor

]]> PwnageTool versus Redsn0w versus Ultrasn0w: What?!?

If you're new to jailbreaking, you might be confused by the names being tossed around out there: PwnageTool? Redsn0w? ultrasn0w? What are these people talking about?! Simply put, they're all tools that either jailbreak (allow you to install 3rd-party applications) or unlock (make the phone work on other GSM-based cellular networks) your device.

For expert hackers wanting to create their own custom firmware, the Mac OS X-only PwnageTool is the right one for the job. But if all you care about is jailbreaking, then you'll probably want the new tool called "redsn0w." Although you can certainly jailbreak using the PwnageTool (LifeHacker shows you how), Windows users have no choice but to use redsn0w - it's the only option.

Also of note, redsn0w is the replacement for the jailbreaking tool "QuickPwn," which in the past delivered similar functionality. Although the Dev Team didn't specifically come out and say so (besides this tweet), it looks like QuickPwn is no more.

Finally, Ultrasn0w is the tool that unlocks the iPhone to allow it to work on other cellular networks. (In the U.S., that means T-Mobile.) Before you can unlock the phone, though, you have to jailbreak it. Then you can follow the simple instructions here to complete the unlock process.

Jailbreaking 101

METHOD 1: FOR NEW JAILBREAKERS

Backup

Now you're ready to jailbreak your phone. Before doing this, you should make sure you have a recent iPhone backup just in case something goes horribly wrong (not likely, but better safe than sorry). Your iPhone is automatically backed up when you sync with iTunes - unless you're the impatient type who always cancels that step of the syncing process. In any case, do one more sync before starting your jailbreak.

Get Redsn0w

The next step is to obtain the software known as redsn0w. If you're familiar with using bittorrent software, the fastest way to get the download is through the torrent file. The Mac torrent is here and the Windows torrent is here. If you're not comfortable torrenting files, then you can head over to one of the mirror sites hosting the zip file. The Dev Team blog lists them all here at the bottom of the post. Make sure you get the correct one for your PC - either the one for Mac or the one for Windows.

After downloading the file, unzip its contents to a folder.

Jailbreak!

1) With your iPhone connected to your computer, you can now launch the redsn0w.exe application.

For Windows 7 users, take note: for best results you'll want to run the app in "compatibility mode." Right-click on the file, go to Properties, then click the "Compatibility" tab. Check the "run this program in compatibility mode for:" checkbox and choose Windows XP (Service Pack 2) from the list provided. Click "OK" to close the window. You may also want to run redsn0w as an Administrator (right-click, then choose "run as Administrator"). I didn't do this, but some users have reported this as necessary to keep the app from crashing.

2) On the first screen of the redsn0w application, you're prompted to browse for your IPSW (iPhone firmware) file. A lot of online tutorials first provide you with this file and make you place it in some sort of easy-to-find folder. That seems like a lot of extra steps considering that the IPSW is already on your computer. Why not just browse to it?

For Windows users, the file will be located in:

Windows XP: C:\Documents and Settings\<user name>\Application Data\Apple Computer\iTunes\iPhone Software Updates

Windows Vista or Windows 7: C:\Users\<user name>\AppData\Roaming\Apple Computer\iTunes\iPhone Software Updates

Note: replace <user name> with your username on the computer.

For Mac users, the file will be here: ~/Library/iTunes/iPhone Software Updates/

If multiple IPSW files are listed, make sure you grab the one with the most recent timestamp.

3) On the following screen, you're prompted to select your options. "Install Cydia" is already checked for you (Cydia is an app you use to download jailbroken apps). The other box, "Icy" (another app like Cydia) is not.

Unfortunately, I had to learn the hard way that it's best to NOT install Icy at this point. For me, doing so led to a lot of issues including problems installing jailbroken apps, tons of error messages, and even crazy flashing screens. I had to start my jailbreak all over again because of checking Icy, so don't risk it! You can always install Icy later (see bottom of post).

4) For the next step, you're told to power off your device. Hold down the button on the top of the phone until "Slide to Power off" appears. Once the device is completely off, click "Next."

5) OK, now for the fun part. The steps on this screen appear quickly, so you'll need to be prepared to follow the instructions.

  • The first step is to hold down the power button (the one at the top of the device) for the time specified. (The software will display a countdown next to each step.)

  • Next, while still holding the power button down, you'll press the "Home" button (the round button at the bottom) for the time specified.

  • While still holding the Home button down, release the power button for the time specified.

This will force your iPhone into a special mode which allows it to be jailbroken. Don't worry if you see the screen flash, it's all part of the process.

6) Assuming you did everything right, redsn0w will start the jailbreaking process. You'll see the status bar on the app moving and soon you'll be taken to a screen where you can finally click "Finish." However, your jailbreak isn't over yet.

Even though clicking "Finish" closes redsn0w, your jailbreak is likely still running at this point. You'll notice that on your iPhone's screen it says it's "downloading jailbreak data." You need to leave it alone until the phone reboots and returns you to the lock screen. Don't worry if this seems to be taking a while - it could take several minutes to finish - but it's not frozen, so let it do its thing.

FINISH!

After the phone reboots, you can use it as usual, except now you'll have a new app on your springboard for "Cydia" where you can find a treasure trove of jailbroken applications to install.

That's it! Congratulations, you're a jailbreaker!

Update Cydida, Install Icy from Cydia

For extra points, you'll want to now install the other app called "Icy," which, like Cydia, helps you locate apps for jailbroken phones. To do so, you'll first have to launch Cydia and update it. After telling Cydia what kind of user you are (I'm just a plain ol' end user - you probably are too), you'll be prompted to update the app. Choose "Upgrade Essential" and let Cydia download its updates.

When it's finished, return to the app and select "Manage" from the set of buttons at the bottom of the screen. Tap "Sources," "Edit," then "Add." Type in http://apt.ripdev.com and hit "Add Source" when done. Tap the "done" button and exit out of the "Manage" section.

Now, using the Search button, search for "Icy." A lot of results come up, but the one you want is simply called "Icy," nothing else. Install this application and you'll now have a second app on your screen for finding jailbroken programs. (Note: Icy replaces "Installer," the prior Cydia alternative).

METHOD 2: FOR KEEPING YOUR OLD JAILBREAK

Unfortunately, I didn't discover these steps until after I jailbroke my phone, so I was left re-installing all my apps. I can't verify these steps work, but if you've previously jailbroken your phone and want to keep it that way, it's certainly worth trying.

Basically, instead of "downloading and installing" the 3.0 firmware from iTunes, you just download it to your computer. Then you choose "Restore" in iTunes to set your device back to factory settings. (Remember to have a recent backup first!)

Next, close iTunes and run redsn0w as described above. Once the jailbreak is complete, re-open iTunes and choose "Restore from Backup." In theory, this should keep your jailbreak.

If those steps are accurate (or need tweaking), let me know and I'll update the post.

Either way you jailbreak, the end result is an iPhone that can do all sorts of new tricks like record video and upload it to YouTube, let you install custom themes, icon sets, and even different battery indicators, and, of course, tweak away at system preferences like nobody's business. Some people don't see the point of jailbreaking, but it's hard for true jailbreakers to imagine their phones without it. Maybe now, you'll feel that way too!

]]>Discuss]]>
http://www.readwriteweb.com/archives/how_to_jailbreak_your_iphone_to_os_30.php http://www.readwriteweb.com/archives/how_to_jailbreak_your_iphone_to_os_30.php Apple Tue, 23 Jun 2009 08:50:08 -0800 Sarah Perez
What Does that Hashtag Mean? New Service Tells You So you've joined Twitter and have finally started to get the hang of things. You know to put an "@" sign in front of usernames for public replies and you know how to send private messages with a "d." You filled out your profile and have mastered the art of TinyURLs. You even found some interesting people to follow and have started conversations with them. There's just one thing holding you back from complete Twittervana: those odd-looking abbreviations in people's tweets preceded by the pound sign (#). Congratulations, you've stumbled upon the Twitter hashtag, a tracking tool for Twitter topics. But what do they mean?

]]>Sponsor

]]>

If you're a pro Twitterer, skip ahead to details about the new hashtag resource.

About Hashtags

Hashtags in Twitter are a community-driven convention for adding metadata to your tweets. They were originally developed to create groups on Twitter for tracking a topic. Initially, they only worked in combination with a service from hashtags.org which provides real-time hashtag tracking. All you had to do was opt-in by following Twitter user @hashtags.

Now, with Twitter's purchase of search engine Summize, Twitter itself tracks hashtags at search.twitter.com. The engine can actually track keywords too, making hashtags not quite as necessary for trend tracking as they were in the past. However, hashtags still have their advantages - you know that anyone tagging their tweet with one of these acronyms means for it to get categorized within that topic. It also serves as a visual indicator to others following their Twitter stream that they're tweeting about a particular subject.

The basic structure of a hashtag is simple: it's the pound sign (#) followed by an acronym or word. For example, the hashtag #sxsw recently appeared for tracking the annual festival in Austin, Texas called South by Southwest.

But What Does that Hashtag Mean?

The problem for new Twitter users (and many old pros too) is that the use of hashtags has become so prevalent that it's hard to keep track of what they all stand for. And with new ones popping up every day for the most obscure of subjects, there's no way to guess at their meaning. Sometimes, even hot topics get tagged with odd hashtags that may leave you scratching your head. Did you know, for instance, that the tag #nSOTU is used for tracking any Presidential speech from Barack Obama that's Not the State of the Union address?

Although you can still look up a particular hashtag at hashtags.org, the site doesn't explain what the tag means. (It does, however, point you to photos, videos, and links in addition to tracking the stream.)

But if you just want to know what the heck people are talking about, a new resource may be a better option for you: Tagalus, a service that defines hashtags. Think of it as a hashtag dictionary. You can use Tagalus to understand what hashtags mean and see the latest tweets surrounding that subject.

How to Use Tagalus

Tagalus lets users vote on definitions for tags if there's more than one version. The definition with the most votes will be the one that defines the tag. As you invent new tags or if you just want to help build the resource, all you have to do is send a tweet to @tagalus to suggest a meaning for a tag. The format for doing so is as follows:

Example: @tagalus define mynewtag as a new tag that describes everything about me

If you want to know what a tag means, you can also ask @tagalus. The format for this is: @tagalus define ______.

Example: @tagalus define ip4

In this example, Tagalus would respond:

ip4 = Ignite Portland 4 - a "hipster event" according to KGW

The Tagalus API

The ProgrammableWeb blog also notes that Tagalus has an API which developers could use to build hashtag defining functionality into their Twitter client applications. That would make the service even more useful to the Twitter community, so we hope developers take notice and do just that.

]]>Discuss]]>
http://www.readwriteweb.com/archives/what_does_that_hashtag_mean_new_service_tells_you.php http://www.readwriteweb.com/archives/what_does_that_hashtag_mean_new_service_tells_you.php Products Fri, 20 Mar 2009 08:40:34 -0800 Sarah Perez
How to Friend Mom, Dad, and the Boss on Facebook...Safely Oh no! Your mom just joined Facebook and what's even worse, she wants to be your friend. More and more people are finding themselves in this situation today and unsure of what to do. Friending mom and dad, the boss, or other work colleagues opens up the details of your private life for the whole world to see - and you might not be entirely comfortable with that. What's to be done?

]]>Sponsor

]]> The Big Question: Should You Bare it All Online?

It's still up for debate how much personal information you should share with others on your Facebook profile. Some people would argue that the time for us to hide behind our masks is over. If we're professional, good employees at work and good sons and daughters at home, it shouldn't matter so much if a friend tags us in a photo which shows us tipping back beers at the weekend party. The fact is, everyone has a personal life and it shouldn't matter who sees it.

Others would say that those are precisely the sorts of photos that make it dangerous to use online social networks like Facebook for both personal and business networking. "Don't friend the boss," they would argue. It's just too risky.

Sharing Some Things, Not Others

The issue isn't really that black and white, though. You may feel it's OK for your colleagues to see some of your Facebook photos (like those from the conference you attended), but not others (like those from the party). You also may be a little uncomfortable with the boss reading your wall posts, especially if your friends have an odd sense of humor at times.

If you're not ready to expose everything about you to anyone who asks to be your online friend, it's time you learned how to use Facebook's friend lists.

A little over a year ago, Facebook launched a new feature called "Friend Lists." With lists, you can create groups of friends on Facebook, separating work from family and close friends. It's simple to use, but it's definitely an underutilized feature. In fact, most of the people who spend their days "Facebooking," never seem to take the time to worry about who's seeing what...until it's too late.

But now, as more older generations are going online and joining social networks, the "Should I Friend Mom/Dad/Boss?" issue is becoming more prevalent than ever.

How To Use Friend Lists

To get started with Facebook Lists, you first need to build one. You can do this from your Friends page. (Click "Friends" in the blue bar at the top). On the left side of the page, click the button "Make a New List." Give it a title.

new_fb_list.png

Now you'll have the option to add your friends to the list. You can either start typing in names one by one or click on "Select Multiple Friends" to add several people to the list all at once. (To add people, just click on their photos.) When you're finished, click the "Save List" button at the bottom.

add_friends_to_fb_list.png

Once you have some lists created, it's time to figure out who gets to see what. To edit your privacy settings, go to "Settings" at the top-right of the screen next to the search box. When you hover your mouse over the link, you'll see a menu appear; click "Privacy Settings"on this menu. On the following page, click "Profile," the top choice in the list of options.

On the profile privacy page, you have the option of customizing exactly who gets to see what. You can modify the following areas: Profile, Basic Info, Personal Info, Status Updates, Photos Tagged of You, Videos Tagged of You, Friends, Wall Posts, Education Info, and Work Info. If you're unsure of what any of those things are, click the "?" next to the item to read a definition.

fb_privacy_page.png

Using the drop-down boxes, you can customize who gets to see your info: "Only Friends," "Friends of Friends," or "My Network of Friends." To lock down your profile to friends only, you could set all these to "only friends." But since you have now created specialized lists, you'll want to use these instead.

To do so, click the fourth option from the drop-down box: "Customize." From here, you can add lists of people who should NOT be able to see this part of your profile. For example, if you wanted to block a list of work colleagues or those in your family from seeing your status updates, you could do so here - just type the name of your list in the box "Except these people" and save your changes.

Note: you can also block certain people individually just by typing in their names, but given the ever-growing number of Facebook users, you're probably going to need a Friend List at some point. We recommend biting the bullet and creating your lists now instead of treating everyone as a one-off. 

status_updates.png

After you've saved your changes, you're done. You'll have your privacy back without having to change the way you and your friends use Facebook. Of course, keep in mind that nothing is foolproof - determined hackers can gain access to your account as can anyone who guesses your password....so maybe you shouldn't use your dog's name.

When lists are finally in place, you can assign new friends to a list right when you're accepting their friend request - just look for the option "Add to Friend List" before you click "Accept."

It may seem like quite a bit of work to set up, but you'll thank yourself for doing this later...like every Monday morning when you go back to work after a great weekend...or the next time you need to borrow money from mom and dad. You get the idea. Better safe than sorry.

Image Credit: canyonjam

]]>Discuss]]>
http://www.readwriteweb.com/archives/how_to_friend_mom_dad_and_the.php http://www.readwriteweb.com/archives/how_to_friend_mom_dad_and_the.php Trends Fri, 30 Jan 2009 07:37:12 -0800 Sarah Perez
Finally - Get RSS Support for Google Chrome Although many of us have been enjoying the speedy new browser from Google, Google Chrome, it's far from perfect. Despite being released from beta status in December, the browser still lacks a handful of features that would make it more of a complete product. One such feature is the browser's lack of support for RSS feeds.

]]>Sponsor

]]> Along with lack of support for RSS, the Chrome browser's Mac version is still underway and there is not a good extension architecture in place. As we discovered earlier, the best way to use add-ons in Chrome is via browser bookmarklets. Along those same lines, there are now two new ways to work with RSS, also by employing the use of browser bookmarklets.

Auto-Detect RSS in Chrome

On the web page http://www.feeds.ramisp.org, there are two bookmarklets available: "View RSS Feed" and Auto-Detect RSS." Drag each of these bookmarklets to Chrome's bookmark bar. Then, whenever you're on a page that has an RSS feed, you just have to hit the "Auto-Detect RSS" button. This will take you to a page where the feed is displayed along with several auto-subscription links up at the top. Alternately, you can just hit "view RSS feed," if you want to see the RSS feed in the browser, but this option didn't always work in our tests.

One of the problems with the ramisp.org bookmarklets, though, is the limited choice of RSS readers they offer underneath the "Subscribe Now!" section. Currently, you have the option to subscribe using Google, Pageflakes, My Yahoo!, and Netvibes. Although that covers many of the popular readers, there are still several that were left out.

Luckily, a commenter on LifeHacker has modified the scripts to include a few more. If you use Newsgator, Podnova, or Odeo, you should grab his bookmarklet instead from http://savanttools.com/feedhelp-bookmarklet.asp.

For Google Reader Users, Google Bookmarklets are Best

However, for Google Reader fans, the best bookmarklets for subscribing to feeds still come from Google themselves. Unlike the above options, Google addresses the issue of sites offering more than one feed. Google provides two bookmarklets to choose from for simple RSS subscribing:

  • → Subscribe - View the first available feed in Google Reader.
  • → Show all feeds - Lists all feeds and links them to Google Reader.
  • Google also offers ways to note and share items using bookmarklets, too.

    As handy as all these options are, at best they are still a workaround for what should be a built-in feature. Why wouldn't Google at the very least include an RSS button in Chrome that integrates directly with their own RSS Reader? We don't understand the delay on this design decision - we just hope they are working on correcting this oversight.

    ]]>Discuss]]>
    http://www.readwriteweb.com/archives/finally_-_get_rss_support_for_google_chrome.php http://www.readwriteweb.com/archives/finally_-_get_rss_support_for_google_chrome.php Google Tue, 20 Jan 2009 07:06:54 -0800 Sarah Perez
    Weekend Project: Host Your Own Web Services self-hosting_logo.pngOne of the great things about the web today is that you can choose from hundreds of services that will host your blogs, lifestreams, photos, videos, and music. One disadvantage of this, however, is that you typically have very little control over the actual experience. You can't, for example, make changes to themes on Wordpress.com or customize the way your pictures are shown on Flickr. However, thanks to a large number of open source projects, you could do all of this if you hosted your own blog, photo gallery, or mixtape service. In this post, we will show you how to do that and which services we like to run on our own domains.

    ]]>Sponsor

    ]]> A lot of you probably already host your own blogs and know how to register a domain and transfer files with FTP. If that's the case, feel free to skip right to the second page of this post to see our suggestions for other worthwhile packages to install on your server.

    Aplus.net

    Tools and Information to Get Started

    tools_image_jan009.pngObviously, to tackle these projects, you will need a few tools and some space on a server to host your projects.

    Hosting

    You will need some space on a server and your own domain name if you don't have one already. There are virtually hundreds of providers out there, all of varying quality and at lots of different price points, but most will give the a similar set of tools. Most hosting services will also set up a domain name for you.

    Here are RWW, we host our site on MediaTemple, but their cheapest plan is $20 a month. Others, like GoDaddy, 1and1, or Dreamhost have plans that start at $4 or $5 a month. Obviously, to some degree, you get what you pay for, but to get started, almost every hosting service will do. Just make sure you sign up for a Linux package and not a Windows service, as most of the packages discussed below are meant to run on a Linux server.

    For some more in-depth discussion about how hosting works, have a look at this article.

    When you sign up with a host, also make sure your hosting package comes with PHP (a programming language almost all open source web projects use), MySQL (a database package to store your data), and the Apache web server.

    Most hosting services will give you more than enough space and bandwidth for your personal site (some give you more than 100GB for less than $5 a month). But make sure you look at the details before you sign up. 1GB is not nearly enough disk space if you want to host a photo sharing site.

    Moving Files Around: FTP client

    FTP stands for File Transfer Protocol and is the easiest method to get files from your desktop to your server. On Windows machines, we recommend Filezilla and SmartFTP (both are available for free). Our Mac users here at RWW like to use Fetch, Cyberduck, and transmit.

    Some More Information You Will Need

    You host will give you quite a lot of information about your account, but for our projects here, you really only need very little information: ftp username and password; database name, database username, database password. Every database has its own name - your host might give you only one database that all your programs can share (named something like db0212), or you can often add five or more separate databases. Every host does this differently, but usually they provide an easy to use user interface with all the relevant information and some also have very good tutorials.

    Installation: Almost Always the Same

    Most of the projects mentioned here have awesome tutorials that will get you through the install process. The first time you do this, it might be a bit intimidating, but after you have done it once, you will see that pretty much every installation follows the same pattern and asks for the same information (see above). Most of the time, you will have to edit a text document and enter your database information there. It's really just copy and paste. Some packages also just ask you for this information during the install process.

    Note: if you plan on installing more than one software package on your server, make sure you set up a separate directory or sub-domain for each of them!

    What to Install

    Mixtapes

    OpenTape

    opentape_logo_jan09.pngWant to host your own mixtapes? Give OpenTape a try. Installing OpenTape is a great first project, because you don't even need to configure anything. Download the latest version of the application from here. Unpack it. Upload it to your server with FTP - and that's it. You will set up a user name and password when you first surf to the site and after that, you can easily upload and play your songs.

    Blogging

    Wordpress

    wordpress_drupal_logo_jan09.pngWhen it comes to hosting your own blog, few packages can trump Wordpress. The install shouldn't take more than 10 minutes and because Wordpress is so popular, literally hundreds of developers are building extensions and themes for it. Make sure you have your database info at hand, as you will have to enter this info into a text file to install Wordpress.

    Drupal

    Another blogging tool that is more flexible than Wordpress, but also a bit harder to use, is Drupal. The installation, too, is very easy, and Drupal has a highly active developer community and hundreds of addons and themes. For most users, Wordpress does the trick, but if you want to experiment with different blogging platforms, Drupal is a good place to start.

    Photo Sharing

    Gallery

    gallery_logo_jan09.pngWe like to stay in control of our own photos, and our favorite application to host photos on our own sites is Menalto's Gallery (note, btw, that Wordpress now also has some good features for doing photo-blogs). Gallery is extremely flexible and powerful, but setting up your own page is actually quite easy (the install instructions make it look harder than it is). With Gallery, you can set up and modify your themes, control access to your photos, and thanks to the Gallery Remote, uploading pictures to it is extremely easy.

    Lifestream

    Sweetcron

    sweetcron_logo_jan09.pngWe love FriendFeed, but sometimes you don't want to host your own lifestream (it's your life, after all...). That's where Sweetcron comes in. Sweetcron (see an example here), can import your diggs, twitter messages, YouTube favorites, blog posts, etc. and lets you display them on your own site.

    Social Network

    elgg

    elgg_logo_jan09.pngWant to host your own social network for a club or class? Elgg is the way to go. While it's a powerful package, installation is as easy as installing Wordpress. Elgg comes with every feature you expect from a social network: profile pages, activity feeds, blogs, forums, bookmarks, etc.

    What do You Run On Your Servers?

    Do you have your own favorite software packages that you run on your servers? Maybe a wiki, a Digg clone, or a micro-blogging service? Let us know in the comments.

    CC-licensed picture of tools was used courtesy of Flickr user flattop341.

    ]]>Discuss]]>
    http://www.readwriteweb.com/archives/weekend_project_bring_web_20_t.php http://www.readwriteweb.com/archives/weekend_project_bring_web_20_t.php Products Fri, 16 Jan 2009 12:51:32 -0800 Frederic Lardinois
    Stack Overflow Hits 3m Unique Visitors in 4 Months; Plans IT Spin-Off Site Stack Overflow, the software developers' Q&A site created by rock star programmers Joel Spolsky and Jeff Atwood, saw 3 million unique visitors last month - just the 4th month the site has been live, according to Spolsky in the latest episode of the Stack Overflow podcast. Now the team plans to create a spin-off site serving what they believe is an even bigger audience, IT professionals.

    Traffic wise, the well constructed site appears to be an early and unqualified success. It's also a lot of fun to read. The people behind the long established but widely reviled paid Q&A site Experts Exchange must be struggling to control bodily functions.

    ]]>Sponsor

    ]]> stackpic.jpg

    Spolsky says, not entirely in jest, that the traffic numbers are likely inflated by a disproportionate number of programmers with their browsers set to reject cookies - but the numbers are awesome for such a young website none the less.

    What's Next?

    The IT spin-off site is as yet unnamed and conversations are still ongoing about what level of technical sophistication the target audience will have. The core product of Stack Overflow is incredibly well thought out and a pleasure to use, as we detailed in our original review of the site when it launched. The prospect of this same approach applied to a non-programming technical help site is appealing.

    Usability, clear market need, search engine friendly content and famous founders all combined to bring the site traffic that anyone would be envious of right out of the gate. Earlier this month the tiny new company made its first hire and we can't help but think with this kind of traffic there's money on the table that could be used to expand further at any time.

    Stack Overflow may or may not grow into a major technical publishing endeavor, but its founders already have reason to be very proud of its success so far. We wish them continued success and we look forward to seeing what they do next.

    ]]>Discuss]]>
    http://www.readwriteweb.com/archives/stack_overflow_hits_3m_uniques.php http://www.readwriteweb.com/archives/stack_overflow_hits_3m_uniques.php e-learning Fri, 16 Jan 2009 09:50:39 -0800 Marshall Kirkpatrick
    Why You Have To Jailbreak the iPhone If you own an iPhone and you're fairly technical, then you've no doubt gone through the steps necessary to "jailbreak" your iPhone - the process that opens up the phone to allow for the installation of unapproved third-party applications. However, for the non-technical consumers who are now purchasing the iPhone in droves, this final, critical step in making the device more usable is often unknown or overlooked.

    ]]>Sponsor

    ]]> Jailbreaking vs. Unlocking

    Simply put, "jailbreaking" is a straightforward process that allows you to install unapproved third-party applications on your device. It is sometimes confused with "unlocking" - the process that makes the phone capable of working on other carriers besides AT&T (in the U.S., that is).

    Although very different from each other, both processes are unapproved by Apple and will void your warranty. Still, a non-jailbroken phone is only half the phone it could be. The extra functionality it allows for makes it worth the risk. Besides, if you ever do need to return it for warranty repairs, you can always wipe it clean and reinstall the firmware. (Just call Apple tech support and have them walk you through the process, explaining that you're sending it in for repairs and are concerned about privacy. Ask them to help you reinstall it to its original, out-of-the-box state.)

    Why Jailbreak?

    Apple, in their infinite wisdom, locked down the iPhone in a number of ways, hampering its ability to do basic tasks like record video, zoom in when taking photos, or apply a theme to your homescreen. They may have been right to do so - many cell phone owners have had devices with this functionality for years, but could never understand how to access those functions. Those features made the phone "too confusing" to use, complained cell phones owners.

    However, for the most part, those who were struggling with the technicalities of recording a video on their phone were from an older generation - ones who didn't grow up with cell phones and their "new-fangled" capabilities. For everyone else, these types of features are somewhat expected in modern devices, especially those as advanced as the iPhone. And the fact that Apple's smartphone doesn't include these options is something that's often surprising to new owners.

    How To Jailbreak

    To learn to how to jailbreak your phone, you can simply do a web search, but the sites indexed are sometimes either out-of-date or a bit confusing for the less technical users. However, I personally found the steps at iphone-hacks.com very easy to follow thanks to the screenshots that accompanied the step-by-step directions. The full instructions are too detailed for a post like this, but you can follow the steps yourself using these provided links: Steps for Windows users / Steps for Mac users.

    The Best Jailbroken Apps

    Obviously, a list of the best apps for jailbroken phones is one that is entirely subjective. However the apps listed here are the ones that add functionality to the phone that we wish had been included out of the box.

    Record Video

    The iPhone is capable of recording video, but there is no way to do so without an "un-jailbroken" device. One such application that allows you to record video is the Cycorder application. It records videos formatted as QuickTime (.mov) files which are stored in the iPhone at /var/mobile/Media/Videos. To get the videos off the device, you'll need another application as described here, such as the iPhoneBrowser for Windows.

    Upload to YouTube

    If you upload all your videos to YouTube anyway, you may want to forgo Cycorder in favor of iPhone Video Recorder. There is both a 2G and 3G version of this application. With this app, you can record video, select your video mode (orientation/size), choose your encoder (MPEG-4 or MOV), and share the videos. Videos can either be uploaded directly to YouTube or shared via email.

    Record Video and Stream it Live

    Another video recording option is to stream live video directly to the internet. Two applications are available for this: Qik and Flixwagon. We've covered both of these applications before, including this "how-to" guide to using Qik. My personal preference is Qik, since I was already a member of the service. Qik also offers a higher resolution and frame rate.

    A Zoomable Camera

    The camera on the iPhone only does one thing: it takes pictures. Even though the iPhone camera is not the best, a few more options would be nice for those of us who are regular cameraphone photographers. An app called Snapture is a much better camera application. The free version adds 12 advanced camera features like gesture zoom, color modes, and multi-shot. A Premium version ($7.99) removes ads and enables an advanced QuickView System which allows you to sort through, delete, and email photos easily. Premium users also get access to the beta features first.

    Use A Modem

    If you're used to tethering your smartphone to your computer as a backup or emergency internet connection, the iPhone leaves you without the option because, by default, tethering is not permitted. The iPhoneModem is an application that can help. With this app installed, you can share your iPhone's internet connection with either your Mac or PC. It can even run in the background while you run other apps. If you make heavy use of this application, you'll want to also download the helper app that automatically configures your computer and then reconfigures it back when you disconnect.

    Add Themes

    If you like making things your own, you may be disappointed that the only customizations you can make with your iPhone are changing the background and reorganizing your apps. Out of the box, the iPhone background only displays when your phone is locked - it does not show up behind your applications like desktop wallpaper would. To really customize your iPhone, you need an application like WinterBoard or SummerBoard.

    We're not sure what's with the season-inspired names, but WinterBoard is definitely our favorite, as it replaces the apparently abandoned SummerBoard. With this app installed, you can change the entire theme for your iPhone including the homescreen's background, the icons themselves, and the status bar. There are tons of themes to choose from, from your favorite movie to a stylized bookshelf. (Hack that Phone shows some screenshots as does Apple iPhone School - also check their related links for more).

    Customize More

    An app called BossPrefs is a replacement for the preferences settings on the iPhone. One of the most useful settings the application provides is a quick way to shut off the iPhone's 3G service - a real battery drainer. With BossPrefs, it's only one tap away from the homescreen whereas the iPhone native Settings app has it buried several layers deep. The other key feature of BossPrefs is its ability to hide icons - even the ones that shipped with the phone. Not everyone wants "Stocks" for example, so it's nice to be able to clear some space for other apps you use instead. BossPrefs lets you configure a lot more, too, but we think those are the two best features it offers.

    Enjoy!

    We realize this guide is far from a comprehensive listing of apps, but these are just some of our personal favorites for making the iPhone more usable. Feel free to share your favorites with us, too.

    Image credit: Jailbroekn iPhone screen, Phil Campbell

    ]]>Discuss]]>
    http://www.readwriteweb.com/archives/why_you_have_to_jailbreak_the_iphone.php http://www.readwriteweb.com/archives/why_you_have_to_jailbreak_the_iphone.php Products Mon, 12 Jan 2009 10:31:55 -0800 Sarah Perez
    Howcast Brings Video Tutorials to the iPhone howcast_logo_nov08.pngHowcast, one of the leading video tutorial sites on the Internet, just released an iPhone application (iTunes link) that allows you to access their video content while on the go. Most of the videos on Howcasts have a very high production value and can teach you anything from how to cook eggnog to how to jump start your car. The app is very easy to use and allows you to search for videos, bookmark your favorites, or browse through the most popular content on the site.

    ]]>Sponsor

    ]]> One great feature of the Howcast web site that you lose when using the iPhone application is the great video player, which allows you to slow videos down, zoom in, or skip to different chapters in a tutorial. The iPhone obviously doesn't support Flash, so the Howcast app has to rely on the standard QuickTime iPhone video player.

    howcast_iphone.jpgAs Josh Lowensohn notes, the app also can't access the extensive written content from the Howcast Wiki Guides.

    If you don't know what you want to watch, the app will show a random video if you shake the phone, though this seems like more of a gimmick than a useful feature.

    The iPhone application feels a bit limited when compared to the Howcast web site, but given that most of the tutorials on Howcast are shorter than five minutes and that the production values of the videos is very high, using the service while sitting on a train or bus might just give you a chance to learn how to forage for wild edible plants or how to clean your iPod earbuds.

    ]]>Discuss]]>
    http://www.readwriteweb.com/archives/howcast_brings_video_tutorials.php http://www.readwriteweb.com/archives/howcast_brings_video_tutorials.php Products Fri, 14 Nov 2008 11:49:14 -0800 Frederic Lardinois
    How to Rock Flickr Like a Champ Yahoo's wildly popular photo sharing site Flickr is a lot of fun to use, but it really helps to take some time and learn how to use it well. We've recently engaged more seriously with Flickr and wanted to share some quick tips that we think will help you get more out of it, too.

    Some people want to know how to do marketing on Flickr or use Flickr in nonprofit organizations, but in this post we're going to talk about ways you can enjoy the Flickr more for any purpose.

    ]]>Sponsor

    ]]> Set Up Publishing By Phone

    The single biggest factor in changing our relationship with Flickr has been taking the time to set up publishing for photos taken by mobile phone. It's really quite easy. Just go to the email tab in your Flickr account and make note of the unique email address for you to post. Then pick up your phone, create a new contact named Flickr and enter that email for the contact.

    Now take a photo and send it by MMS (Multimedia Message Service) to your buddy Flickr. Like magic, that photo will be published to your Flickr account. The subject line of the email will be the title, any text in the body will be a description. Knock yourself out, it's super fun. I don't know why it took us so long to figure out how this works, but we're betting that many of you haven't yet either.

    Turn on Creative Commons Licensing

    It's easy to turn the default setting for new photos uploaded to Creative Commons Attribution (our favorite) by visiting the Privacy & Permissions tab in your account. Unfortunately there's not clear, working links from Flickr to an explanation of the different licenses. Here they are on the Creative Commons site.

    CC Attribution is a license that says other people can use it and change it, including in a commercial context, as long as they give you attribution as the creator. It greases the wheels for quick and easy media sharing. That's good and it would be nice if more quality media was licensed this way. We keep a link to the Creative Commons by Attribution search on Flickr in our browser toolbar and use it frequently for photos in posts. Those could be your photos we and others are using!

    Video about the theory of Creative Commons

    Take Even Better Photos

    Attendees of the Gnomedex conference this year (which was a huge home run, by the way) were treated to an opening session with photographer Kris Krug about how to take better photos. That session isn't available yet in video, but Krug is a fun guy to pay attention to. Other popular photography bloggers worth checking out for inspiration and occasional instruction include Thomas Hawk (see his January post Top 10 Hacks on Flickr), Scott Beale (one of our 10 favorite sources for finding wonderful things), Epic Edits (see their post Five Fantastic Flickr Photographers), Rebekka Guðleifsdóttir and Jeremy Cowart. We're sure readers here can share some more good ones.

    Those folks are all fancy pants, though, and many of us just want to have fun posting photos from our phones. Check out this handy 5 minute video from VideoJug about how to take better mobile phone photos. Thanks go to Amit Agarwal again for posting this one last year. We're excited to try out some of these tips.

    Share Screen Shots

    Another way we've been using Flickr lately has been to share screen shots of interesting things we find online. Some of us here at RWW use Jing for this, others use the beautiful Mac app Skitch.

    People like interesting screen shots and these apps make it really easy to shoot them up to your Flickr account with just a click. The reigning king of this practice right now is Chris Messina, but you don't have to be a super-early adopter to make screen shots on Flickr useful. Skitch makes annotation easy as well and sharing annotated screen shots is a great way to explain things to people.

    Video demonstration of Skitch.com.

    Turn on Your Grease Monkey

    We use a number of Grease Monkey scripts that enhance the Flickr experience. If you aren't familiar with Grease Monkey, you must learn about it because it's great. See our recent post How to Start Using GreaseMonkey in Under 5 Minutes. Specifically, we use:

    • FlickrPM puts links to viewing and profile options in all the right places, where they aren't right now on Flickr.

    • GreasedLightbox sets up real quick little image slide shows from almost any page. It can also be a pain to use when you're on Flickr, to tell the truth. It works better on Ffffound, which is another great site if you like imagery.

    • AutoPagerize lets you zip through page after page of Flickr photos with no clicking or page load delays.

    What are your favorite GreaseMonkey scripts for Flickr?

    Use a Bulk Uploader

    Grabbing a whole bunch of photos from your computer and putting them on Flickr is easier than you might think. We think Flickr's own bulk uploader is fun to use. Thomas Hawk prefers JUploadr.

    GeoTag Your Photos

    Did you know you can open a drop-down menu in the Flickr search box and search by location? You can also go directly to http://flickr.com/map and search by location. Flickr, all of Yahoo really, does a great job understanding location data - but you've got to play to win, you know? Many people (ourselves, for example) have never found geotagging on Flickr very easy to do.

    Enter this awesome bookmarklet from startup Loc.alize.us. It makes geotagging your photos super easy, if not downright fun. You can increase your discoverability, participate in the geotagging scene and feel smarter by grabbing that bookmarklet, renaming it in your browser toolbar and then going to town. Which town? You'll be surprised by the sophistication of Flickr's comprehension of location information.

    beachgeotag.jpg

    Follow the Flickr Blog To Keep Up to Date

    Flickr has a really active community and thriving forums, but subscribing to the company blog is a good idea to stay up to date with new features. If you don't want to read all the entries there, and some of them are more important than others, then consider subscribing to just the highly discussed posts from the company.

    Have Fun Off-site

    It's not just on Flickr itself that you can have fun with your posted photos.

    Last week Flickr released a handy slide show tool for embedding slide shows of your or any photos on a blog or social network.

    There are lots of great ways to visualize Flickr photos by tag, but Tag Galaxy will probably knock your socks off if you haven't seen it before.

    Turning on Flickr sharing in FriendFeed is a great way to bring more of your friends into the photo part of your life. You can hook up with the RWW staff's personal FriendFeed accounts here if you'd like to see our photos and other activities.

    RWWonFlickrFF.png

    Dave Winer's FlickrFan is a screen saver slide show of Flickr photos from you, your friends and some important international news agencies. It can be a little tricky to set up but it's a lot of fun to use.

    If you're coocoo for cocoa puffs over these kinds of tools in general, check out this long, long list of Flickr tools from QuickOnlineTips.com.

    How do You Like to Use Flickr?

    These are some of our favorite tips for using Flickr but we're sure many of our readers can suggest even more. Flickr is a canonical service in the Web 2.0 world. It's really worth spending some more time with. With less time than it took you to read this whole article, we think you can set up some systems that will make Flickr a much more enjoyable part of your life.

    ]]>Discuss]]>
    http://www.readwriteweb.com/archives/how_to_rock_flickr_like_a_cham.php http://www.readwriteweb.com/archives/how_to_rock_flickr_like_a_cham.php How To Thu, 28 Aug 2008 17:32:09 -0800 Marshall Kirkpatrick