All posts by onlyconnect

Xamarin acquires LessPainful, announces Test Cloud for mobile apps

Xamarin, a company which provides tools for cross-platform development in C#, has announced its acquisition of LessPainful and the creation of cloud-based testing for mobile apps based on LessPainful’s technology and the Calabash scripting language it created.

The Test Cloud will perform automated user-interface tests on real devices, hosted by Xamarin, will provide detailed reports in the event of test failures, and will support Continuous Integration so that bugs are caught as early as possible.

image

“After you’ve conquered the cross-platform mobile development problem, testing is the next large pain point” says Xamarin CEO Nat Friedman. “You can’t just get by with manual testing. There’s a need for the same level of tools and processes in mobile testing that you have in desktop and web testing.”

“Quality is actually more important on mobile than in other places. Mobile sessions are very short. People are really intolerant of low quality on mobile. The release cycles are shorter too. People are revving more frequently, and testing is a bigger challenge.”

Another issue with mobile testing is the number of devices out there, especially if you throw cross-platform into the mix. “You have on Android all these manufacturers who customise the OS in different ways, you have multiple different versions that are in use, and you have multiple different form factors and device capabilities. The testing permutation matrix is huge.”

“Automated UI testing is the only kind of testing that can ensure that the app does what it is supposed to do.”

Friedman says that the Xamarin UI tests are more robust than competing UI test frameworks because they do not depend on UI image recognition. “The right answer is object-based, you identify user interface elements on the screen by object IDs”.”

How does testing on real devices work? If you have 50 developers testing on 27 devices in Xamarin’s cloud, will there be racks and racks of devices to support them?  “That’s what it looks like at our end, racks and racks of devices,” confirmed Friedman. “The service is going to be built based on device/hour usage. We’ll be able to scale up to match what people need.

“We talk to developers who spend $8,000 a month just to get new devices. That’s not counting the labour and everything else they need to do, to set up their own testing infrastructure. It’s a giant pain point.”

Xamarin’s Test Cloud will offer plug-ins for Jenkins, TeamCity, and Microsoft’s Team Foundation Server, to support Continuous Integration.

The scripting language for the Test Cloud is either Calabash , or C# scripting which is under development by Xamarin.

The Test Cloud is not just for applications developed using Xamarin’s C# framework, but also supports other frameworks including those written in native iOS Objective C. However, only iOS and Android are supported.

Availability is set for the third quarter of 2013.

Xamarin’s Evolve conference is currently under way in Austin, Texas, with around 600 developers in attendance. Friedman says the company is growing fast. 1000 developers a day download the tools, there are over 15,000 paid developers, and the company now has 65 employees.

More information on the Xamarin Test Cloud is here.

Intel fights back against iOS with free tools for HTML5 cross-platform mobile development

Today at its Software Conference in Paris Intel presented its HTML5 development tools.

image

There are several components, starting with the XDK, a cross-platform development kit based on HTML5, CSS and JavaScript designed to be packaged as mobile apps using Cordova, the open source variant of PhoneGap.

There is an intriguing comment here:

The XDK is fully compatible with the PhoneGap HTML5 cross platform development project, providing many features that are missing from the open source project.

PhoneGap is Adobe’s commercial variant of Cordova. It looks as if Intel is doing its own implementation of features which are in PhoneGap but not Cordova, which might not please Adobe. Apparently code that Intel adds will be fed back into Cordova in due course.

Intel has its own JavaScript app framework, formerly called jqMobi and now called Intel’s App Framework. This is an open source framework hosted on Github.

There are also developer tools which run as an extension to Google Chrome, and a cloud-based build service which targets the following platforms:

  • Apple App Store
  • Google Play
  • Nook Store
  • Amazon Appstore for Android
  • Windows 8 Store
  • Windows Phone 8

And web applications:

  • Facebook
  • Intel AppUp
  • Chrome Store
  • Self-hosted

The build service lets you compile and deploy for these platforms without requiring a local install of the various mobile SDKs. It is free and according to Intel’s Thomas Zipplies there are no plans to charge in future. The build service is Intel’s own, and not related to Adobe’s PhoneGap Build, other than the fact that both share common source in Cordova. This also is unlikely to please Adobe.

You can start a new app in the browser, using a wizard.

image

Intel also has an iOS to HTML5 porting tool in beta, called the App Porter Tool. The aim is to convert Objective C to JavaScript automatically, and while the tool will not convert all the code successfully it should be able to port most of it, reducing the overall porting effort.

Given that the XDK supports Windows 8 modern apps and Windows Phone 8, this is also a route to porting from iOS to those platforms.

Why is Intel doing this, especially on a non-commercial basis? According to Zipplies, it is a reaction to “walled garden” development platforms, which while not specified must include Apple iOS and to some extent Google Android.

Note that both iOS and almost all Android devices run on ARM, so another way of looking at this is that Intel would rather have developers work on cross-platform apps than have them develop exclusively for ARM devices.

Zipplies also says that Intel can optimise the libraries in the XDK to improve performance on its processors.

You can access the HTML5 development tools here.

The PC puzzle: does the sales drop implicate or justify Windows 8?

Gartner has joined IDC in releasing figures showing a steep drop in PC sales for the first quarter of 2013.

Worldwide PC shipments totalled 79.2 million units in the first quarter of 2013, an 11.2 per cent decline from the first quarter of 2012, according to preliminary results by Gartner, Inc. Global PC shipments went below 80 million units for the first time since the second quarter of 2009. All regions showed a decrease in shipments, with the EMEA region experiencing the steepest decline.

says the release. In EMEA the decline was 16%. In the US, the decline was only 9.6%, but marked the 6 consecutive quarter of decline.

Gartner does not give worldwide figures for Apple, but says that its shipments grew by 7.4% in the US, which is a particularly strong market for Apple, giving it an 11.6% market share.

One bright spot for Microsoft:

Unlike the consumer PC segment, the professional PC market, which accounts for about half of overall PC shipments, has seen growth, driven by continuing PC refreshes.

That will please the folk at the event I am attending right now, the Microsoft Management Summit in Las Vegas, which is about managing servers, PCs and other devices in the enterprise. The consumerisation of IT is real, and so is Bring Your Own Device, but never underestimate the extent to which Windows is embedded in business.

Still, does the overall decline prove that Windows 8 was a huge mistake, and that Windows/Microsoft is now set for long-term decline?

image

Not necessarily. There is another way to look at these figures, which is that Microsoft was correct to conclude, back when Windows 8 was planned, that tablets and touch devices would erode the traditional PC market, and that it had to take the risk of reshaping its desktop operating system accordingly.

It is plausible, even likely, that PC sales would not have declined so fast if Windows 8 had been less radical. On the other hand, the long term cost of not reshaping the Windows UI for touch, nor introducing the app store model of software deployment, would probably be greater.

Put another way, the Windows 8 experiment means that PC sales may eventually stop declining, whereas without it they would continue to trend download, even though the curve for this last quarter might be less shocking.

Even if you accept this reasoning, you can still argue that the Windows 8 tablet personality is so poorly executed that it cannot compete with iOS and Android devices. Most Windows 8 users live on the desktop, even those with touch screens and tablets. I am seeing a lot of Surface Pro here in Vegas, with users loving its portability, performance, and elegant keyboard cover, but I see it being used like a laptop, not like a tablet.

Microsoft undoubtedly made mistakes in the initial release of Windows 8, the biggest problem being that the Windows Runtime side, which supports the tablet personality, was rushed out and is really not finished. Creating excellent and good-looking apps is harder than it should be, which is one reason why there are so few.

  • The Windows 8 experience for new users, especially those with long familiarity with earlier versions, is so poor that many prefer to stick with Windows 7. A few tweaks and compromises would have made this easier.
  • Windows RT, the ARM based edition which runs only “Modern” apps and Office, is spoilt by poor performance as well as the lack of good apps. The absence of Outlook from Office in Windows RT spoils its for the business market, where it is potentially attractive as a cost-effective, secure tablet operating system.
  • Microsoft’s OEM and retail partners do not seem to know how to sell Windows 8.

When I put these points to some Microsoft folk informally here at MMS the answer I got was “Blue will make you happy.” Blue, according to these guys, is not the code name for a new version of Windows. Rather, it is a process of incremental updates which users will get automatically. It is well-known of course that significant Windows 8 updates are on the way, and builds have been leaked.

Windows 8 has made a bad start, but it is not all bad. The desktop side (which is what most of us use most of the time) improves on Windows 7, and it is plausible that a combination of user learning along with updates that make the transition to the new Start screen less jarring will make adoption easier.

Equally, the Windows Runtime side will get better. I expect to see new and improved components for developers building apps, and better reliability and performance. Outlook is rumoured to be coming to Windows RT, and at some point we may also see versions of Office applications appear in the Modern UI.

Windows RT will have a tough fight with Intel-based tablets, but users will win either way, since next-generation ARM chipsets are much faster and Intel is making great strides with low-power, high-performance chipsets of its own.

Incidentally, Windows RT is not quite dead. I heard a questioner here at MMS ask questions about how to deploy their forthcoming purchase of a “large quantity” of RT devices.

Microsoft is at times a stumbling giant, but it is stumbling in the right direction with Windows 8, and it may yet work out. Even if by then it is called Windows 9.

Microsoft takes aim at VMware, talks cloud and mobile device management at MMS 2013

I am attending the Microsoft Management Summit in Las Vegas (between 5 and 6,000 attendees I was told), where Brad Anderson, corporate vice president of Windows Server & System Center, gave the opening keynote this morning.

image

There was not a lot of news as such, but a few things struck me as notable.

Virtualisation rival VMware was never mentioned by name, but frequently referenced by Anderson as “the other guys”. Several case studies from companies that had switched from “the other guys” were mentioned, with improved density and lower costs claimed as you would expect. The most colourful story concerned Dominos (pizza delivery) which apparently manages 15,000 servers across 5,000 stores using System Center and has switched to Hyper-V in 750 of them. The results:

  • 28% faster hard drive writes
  • 36% faster memory speeds
  • 99% reduction in virtualisation helpdesk calls

That last figure is astonishing but needs more context before you can take it seriously. Nevertheless, there is momentum behind Hyper-V. Microsoft says it is now optimising products like Exchange and SQL Server specifically for running on virtual machines (that is, Hyper-V) and it now looks like a safe choice, as well as being conveniently built into Windows Server 2012.

I also noticed how Microsoft is now letting drop some statistics about use of its cloud offerings, Azure and Office 365. The first few years of Azure were notable in that the company never talked about the numbers, which is reason to suppose that they were poor. Today we were told that Azure storage is doubling in capacity every six to nine months, that 420,000 domains are now managed in Azure Active Directory (also used by Office 365), and that Office 365 is now used in some measure by over 20% of enterprises worldwide. Nothing dramatic, but this is evidence of growth.

Back in October 2012 Microsoft acquired a company called StorSimple which specialises in integrating cloud and on-premise storage. There are backup and archiving services as you would expect, but the most innovative piece is called Cloud Integrated Storage (CiS) and lets you access storage via the standard iSCSI protocol that is partly on-premise and partly in the cloud. There was a short StorSimple demo this morning which showed how how you could use CiS for a standard Windows disk volume. Despite the inherent latency of cloud storage performance can be good thanks to data tiering, which puts the most active data on the fastest storage, and the least active data in the cloud. From the white paper (find it here):

CiS systems use three different types of storage: performance-oriented flash SSDs, capacity- oriented SAS disk drives and cloud storage. Data is moved from one type of storage to another according to its relative activity level and customer-chosen policies. Data that becomes more active is moved to a faster type of storage and data that becomes less active is moved to a higher capacity type of storage. 

CiS also uses compression and de-duplication for maximum efficiency.

This is a powerful concept and could be just the thing for admins coping with increased demands for storage. I can also foresee this technology becoming part of Windows server, integrated into Storage Spaces for example.

A third topic in the keynote was mobile device management. When Microsoft released service pack 1 of Configuration Manager (part of System Center) it added the ability to integrate with InTune for cloud management of mobile devices, provided that the devices are iOS, Android, Windows RT, or Windows Phone 8. A later conversation with product manager Andrew Conway confirmed that InTune rather than EAS (Exchange ActiveSync) policies is Microsoft’s strategic direction for mobile device management, though EAS is still used for Android. “Modern devices should be managed from the cloud” was the line from the keynote. InTune includes policy management as well as a company portal where users can install corporate apps.

What if you have a BlackBerry 10 device? Back to EAS. A Windows Mobile 6.x device? System Center Configuration Manager can manage those. There is still some inconsistency then, but with iOS and Android covered InTune does support a large part of what is needed.

Office 2013 Home and Business requires a Microsoft account to activate, a nuisance for Office 365 users

A small business contacted me with a perplexing problem related to Office 2013 and Office 365. The scenario looks like this:

  • All their staff have Office 365 E1 accounts (for small and midsize businesses)
  • They normally buy laptops with Microsoft Office. That would normally be the OEM version or more recently the Product Key Card (PKC) equivalent. This is licensed only for the PC on which it is first installed.
  • Since they already have Office, purchasing the more expensive Office 365 subscription (£9.80 vs £5.20, or £55.20 extra per user per year) which includes desktop Office is poor value (update: see comments for more notes on this option).

With me so far? Now comes the moment when a new member of staff joins, for whom a new laptop is purchased. They buy with it the closest equivalent to the Office 2010 Product Key Card, which is Home and Business 2013, this guy:

image

Note the designation Home and Business, indicating that it is fine for business use.

Next, they set up the laptop for Office 365 and install their new Office 2013. Only there is a problem. Office Home and Business cannot be activated without a “Microsoft account”. You might think that an Office 365 subscription counts as a “Microsoft account” but it is the wrong kind: it is an “organizational” account in Microsoft’s jargon, which is a subtly different creature. The Office 2013 purchase is then tied in to some extent to that account.

Specifically, the normal way to install is to go to http://www.office.com/setup. When you do, you enter the supplied product key, following which the unavoidable next step is to sign in with a Microsoft account.

Another feature of Office Home and Business 2013 (again different from Office 2010) is that there is no way (that I know of) to install it other than via Click and Run, which uses application virtualisation. Personally I prefer the non-virtualised install, after experiencing problems with previous versions of Click and Run. Maybe these are fixed now, maybe not, but this choice has been removed.

You can also install from a DVD as discussed here, if you download the DVD image from Microsoft. Unfortunately this is still a click-to-run install, and still requires a Microsoft account. You can enter the product key when invited to activate, but the process will not complete without logging in online. If you sign into Office 365 instead, you get an error. I also spotted this message:

image

It says, “You’re currently signed in with an organizational account. To view or manage any consumer subscriptions you may have purchased, please sign in with your Microsoft account.” This intrigues me, since if you have purchased a perpetual product called “Home and Business” you might imagine that is it neither consumer, nor a subscription.

There are a couple of problems with the requirement for a Microsoft account. One is that the business does not want the employee to start using features like Skydrive which are attached to any Microsoft account other than Office 365. Another is that the employee may leave, and the laptop transferred to somebody new. With the old Office 2010 PKC, which did not require a hook to a Microsoft account, that was a smooth transition. Office is licensed for the laptop, not the individual. The new Office 2013 is still licensed only for one laptop, but also has some sort of relationship to an individual Microsoft account, which will be a nuisance if that person leaves the company.

You can overcome these problems by purchasing a volume license for Office 2013 instead. The ideal product is Office Professional Plus. You can install it without using click-to-run and it does not require a Microsoft account to activate. But you guessed: this costs more than double the cost of Home and Business 2013. The approximate ex-VAT cost in the UK is £150 for Home and Business, versus £375 for Professional Plus.

The dependency on a Microsoft account is not clear on Microsoft’s site. The specifications for Office Home and Business are here. It says:

Certain online functionality requires a Microsoft account.

True; but in this case the product cannot be activated at all without a Microsoft account. It is useless without it.

The workaround is to give in and create a Microsoft account just for the purpose of activating Office. Of course you need an email address for this, though apparently (taking this from the above referenced discussion) you can activate up to 10 Office 2013 installs with one Microsoft account.

Once activated, there is no problem that I am aware of with using the product with Office 365.

It is still messy, since that Office install is forever linked with the Microsoft account you use, even though it is intended for use with Office 365.

Taking a wider perspective, it also seems to be that there may be purchasers who want to use Microsoft Office in part because (unlike, say, Google apps) it does not require online sign-in. They may prefer not to have a Microsoft account. With Office 2010 that was easy, but not with this new edition, and I am not seeing this spelt out in the product descriptions. Once you get it home, you will spot this on the packaging:

image

Considering the complications of using Home and Business 2013 with Office 365, it looks like the best option is to upgrade to the Office 365 subscription type which includes desktop Office, but that is a heavy financial penalty for a business that has already purchased Office for all its laptops.

Google forks WebKit into Blink: what are the implications?

Yesterday Google announced that it is forking WebKit to create Blink, a new rendering engine to be used in its Chrome browser:

Chromium uses a different multi-process architecture than other WebKit-based browsers, and supporting multiple architectures over the years has led to increasing complexity for both the WebKit and Chromium projects. This has slowed down the collective pace of innovation – so today, we are introducing Blink, a new open source rendering engine based on WebKit.

Odd that not long ago we were debating the likelihood and merits of WebKit becoming the de facto standard for HTML. Now Google itself is arguing against such a thing:

… we believe that having multiple rendering engines—similar to having multiple browsers—will spur innovation and over time improve the health of the entire open web ecosystem.

Together with the announcement from Mozilla and Samsung of a new Android browser which, one assumes, may become the default browser on Samsung Android phones, there is now significant diversity/competition/fragmentation in the browser market (if you can call it a market when everything is free).

The stated reason for the split concerns multi-process architecture, with claims that Google was unwilling to assist with integrating Chromium’s multi-process code into WebKit:

Before we wrote a single line of what would become WebKit2 we directly asked Google folks if they would be willing to contribute their multiprocess support back to WebKit, so that we could build on it. They said no.

At that point, our choices were to do a hostile fork of Chromium into the WebKit tree, write our own process model, or live with being single-process forever. (At the time, there wasn’t really an API-stable layer of the Chromium stack that packaged the process support.)

Writing our own seemed like the least bad approach.

Or maybe it was the other way around and Apple wanted to increase its control over WebKit and optimize it for the OSX and iOS rather than for multiple platforms (which would be the Apple way).

It matters little. Either way, it is unsurprising that Apple and Google find it difficult to cooperate when Android is the biggest threat to the iPhone and iPad.

The new reality is that WebKit, instead of being a de facto standard for the Web, will now be primarily an Apple rendering engine. Chrome/Chromium will be all Google, making it less attractive for others to adopt.

That said, several third parties have already adopted Chromium, thanks to the attractions of the Chromium Embedded Framework which makes it easy to use the engine in other projects. This includes Opera, which is now a Blink partner, and Adobe, which uses Chromium for its Brackets code editor and associated products in the Adobe Edge family.

The benefit of Blink is that diverse implementations promote the importance of standards. The risk of Blink is that if Google further increases the market share of Chrome, on desktop and mobile, to the point where it dominates, then it is in a strong position to dictate de-facto standards according to its own preferences, as suggested by this cynical take on the news.

The browser wars are back.

Twilio integrates with Google App Engine for cloud telephony applications

Cloud telephony company Twilio has announced a partnership with Google to integrate its API with App Engine, Google’s platform for cloud applications. Google has a clear explanation of what this enables here. You can have your application respond to incoming SMS texts or voice calls, and send an SMS back, or for voice, play messages, record the call, or ask for further digits to be pressed to route the call appropriately. You can also use the API to initiate calls or send texts.

If you look here there are how-to examples (generic to Twilio, not specific to App Engine) for some of the things you do with Twilio:

  • Automated reminder calls
  • Click to call on your web site
  • Company directory
  • IVR (Interactive Voice Response) for automated support
  • Conferencing
  • Phone polls
  • Voice mail
  • Voice transcription

and more of course. Help desk applications and other kinds of support are the most obvious applications, but there are no limits: if you want to build voice calls or SMS messaging into your app, Twilio is the obvious solution.

The relationship with Google is not exclusive. Twilio already has integration with Windows Azure, Microsoft’s cloud platform. Google has one-upped Microsoft though. The Azure promotion gets you free credit for 1000 texts or minutes for Azure, while there are free 2000 texts or minutes for Google App Engine customers.

You can also use Twilio on any platform that can use a REST API. There is a module for Node.js, and libraries for PHP, Python, Ruby, C#, Java and Apex (used by Salesforce.com).

Microsoft’s growth areas: Azure, Server with Hyper-V, Office 365, Windows Phone

Microsoft has left slip a few figures in posts from PR VP Frank Shaw and platform evangelist Steve Guggenheimer.

Observers have tended to focus on Windows “Blue” and what is happening with Microsoft’s core client operating system, but what caught my eye was a few figures on progress in other areas.

  • Windows Azure compute usage doubled in six months
  • Windows Azure revenue growing 3X
  • Office 365 paid seats tripled year on year last quarter
  • Server 2012 Datacenter edition licenses grown 80%

A notable feature of these figures is that they are relative, not absolute. Office 365 is a relatively new product, and Windows Azure (from what I can tell, since Microsoft did not release numbers) performed rather badly until its renaissance in early 2011 under Satya Nadella, Scott Guthrie and others – see here for more about this). It is easy to post big multiples if you are starting from a small base.

This is real progress though and my guess is that growth will continue to be strong. I base this not on Microsoft’s PR statements, but on my opinion of Office 365 and Windows Azure, both of which make a lot of sense for Microsoft-platforms organisations migrating to the cloud.

Why the growth in Server 2012 Datacenter? This one is easy. Datacenter comes with unlimited licenses for Windows Server running in Hyper-V virtual machines on that server, so it is the best value if you want to the freedom to run a lot of VMs, especially if some of those VMs are lightly used and you can afford to overcommit the processors (you need a new license for every two physical processors you install).

Here’s another figure that Shaw puts out:

Windows Phone has reached 10 percent market share in a number of countries, and according to IDC’s latest report, has shipped more than Blackberry in 26 markets and more than iPhone in seven.

Spin, of course. This February report from IDC gives Windows Phone just a 2.6% market share in the 4th quarter of 2012. Still, it did grow by 150% year on year, thanks no doubt to Nokia’s entry into the market.

My personal view is that Windows Phone will also continue to grow. I base this on several things:

  • I see more Windows Phones on the high street and in people’s hands, than was the case a year ago.
  • Windows Phone 8 is decent and the user interface is more logical and coherent than Android, which mitigates a lack of apps.
  • Nokia is bringing down the price for Windows Phone devices so they compare well with Android in the mid-market below Apple and the premium Android devices.
  • There is some momentum in Windows Phone apps, more so than for Windows 8. Guggenheimer notes that downloads from the Phone Store now exceed 1 billion.

The context of the above is not so good for Microsoft. It is coming from behind in both cloud and mobile and the interesting question would what kind of market share it is likely to have in a few years time: bigger than today, perhaps, but still small relative to Amazon in cloud and Apple and Android in mobile.

There is also the Windows 8 problem. Many prefer Windows 7, and those who use Windows 8, use it like Windows 7, mostly ignoring the tablet features and new Windows Runtime personality.

How will Microsoft fix that? Along with leaked builds of Windows Blue, Microsoft has announced the next Build conference, which will be in San Francisco June 26-28, 2013 (I am glad this will not be on the Microsoft campus again, since this venue has not worked well). There is a lot to do.

image

What is mobile security? And do we need it?

I attended Mobile World Congress in Barcelona, where (among many other things) numerous security vendors were presenting their latest mobile products. I took the opportunity to quiz them. Why do smartphone users need to worry about security software, which many users were glad to leave behind with their PC? I observed that whereas I have often heard of friends or contacts suffering from PC malware, I have yet to hear anyone complain about a virus on their mobile or tablet.

I got diverse answers. NQ Mobile, for example, told me that while mobile malware is relatively uncommon in the USA and Europe, it is different in China where the company has a strong base. In China and some other territories, there are many Android-based mobiles for which the main source of apps is not the official Google Play store, but downloads from elsewhere, and malware is common.

Do you have an Android phone? Have you checked that option to “allow installation of non-Market apps”? One mobile gaming controller I received for review recently came with a free game. Guess what – to install the game you have to check that option, as noted in the documentation.

image

When you allow non-Market apps, you are disabling a key Android security feature, that apps can only be installed from the official store which, you hope, has some level of quality checking from Google, and the likelihood that malware that does slip through will be quickly removed. But what will users do, install the game, or refuse to disable the feature? I am reminded of those installation manuals for PC devices which include instructions to ignore the warnings about unsigned drivers. Most of us shrug and go ahead.

Nevertheless, for those of us not in China mobile malware is either uncommon, or so stealthy that few of us notice it (an alarming thought). Most of the responses I received from the security vendors were more along the lines that PC-style malware is only one of many mobile security concerns. Privacy is another one high on the list. When you install an app, you see a list of the permissions it is demanding, and sometimes the extent of them is puzzling. How do we know whether an app is grabbing more data than it should, for unknown purposes (but probably to do with ad targeting)?

Some of the mobile security products attempt to address this problem. Bitdefender Mobile Security includes an application audit which keeps track of what apps are doing. Norton Mobile Security scans for apps with “unusual permissions”.

Web site checking is another common feature. Software will attempt to detect phishing sites or those compromised with malware.

Perhaps the biggest issue though is what happens to your lost or stolen device. Most of the mobile security products include device tracking, remote lock and remote wipe (of course, some smartphones come with some of this built-in, like iOS and Find My iPhone).

If you do lose your phone, an immediate worry is the security of the data on it, or even worse, on an SD card that can be removed and inspected. Your contacts? Compromising photos? Company data? Remote wipe is a great feature, but could a smart thief disable it before you are able to use it?

Some products offer additional protection. NQ mobile offers a Mobile Vault for data security. It has a nice feature: it takes a photo of anyone who enters a wrong passcode. Again though, note that some smartphones have device encryption built-in, and it is just a matter of enabling it.

Windows Phone 8 is an interesting case. It includes strong Bitlocker encryption, but end users cannot easily enable it. It is enabled via Exchange ActiveSync policies, set through the Exchange Management Console or via PowerShell:

image

Why not let users set encryption themselves, if required, as you can on some Android phones? On Apple iOS, data encryption is automatic and can be further protected by a passcode, with an option to wipe all data after 10 failed attempts.

Encryption will not save you of course if a rogue app is accessing your data and sending it off somewhere.

Mobile security can feels like a phoney war (ha!). We know the risks are real, that smartphones are just small computers and equally vulnerable to malware as large ones, and that their portability makes them more likely to go astray, but most of us do not experience malware and mainly worry about loss or theft.

Businesses are the opposite and may care more about protecting data than about losing a device, hence the popularity of mobile device management solutions. The fact is though: some of that data is on the device and being taken everywhere, and it is hard to eliminate the risk.

Is mobile security a real problem? I hardly need to say this: yes, it is huge. Do you need anti-virus software on your phone? That is harder to answer, but unless you are particularly experimental with the apps you install, I am not yet convinced.

The frustrating part is that modern smartphones come with integrated security features many of which are ignored by most users, who find even a simple passcode lock too inconvenient to bother with (or perhaps nobody told them how to set it). It is hard to understand why more smartphones and tablets are not secure by default, at least for the easy things like passcodes and encryption.

App and privacy issues are harder to address, though maintaining properly curated app stores and only installing apps from there or from other trusted sources is a good start.

NVIDIA’s Visual Computing Appliance: high-end virtual graphics power on tap

NVIDIA CEO Jen-Hsun Huang has announced the Grid Visual Computing Appliance (VCA). Install one of these, and users anywhere on the network can run graphically-demanding applications on their Mac, PC or tablet. The Grid VCA is based on remote graphics technology announced at last year’s GPU Technology Conference. This year’s event is currently under way in San Jose.

The Grid VCA is a 4U rack-mounted server.

image_thumb[14]

Inside are up to 2 Xeon CPUs each supporting 16 threads, and up to 8 Grid GPU boards each containing 2 Kepler GPUs each with 4GB GPU memory. There is up to 384GB of system RAM.

image_thumb[16]

There is a built-in hypervisor (I am not sure which hypervisor NVIDIA is using) which supports 16 virtual machines and therefore up to 16 concurrent users.

NVIDIA supplies a Grid client for Mac, Windows or Android (no mention of Apple iOS).

During the announcement, NVIDIA demonstrated a Mac running several simultaneous Grid sessions. The virtual machines were running Windows with applications including Autodesk 3D Studio Max and Adobe Premier. This looks like a great way to run Windows on a Mac.

image_thumb[17]

The Grid VCA is currently in beta, and when available will cost from $24,900 plus $2,400/yr software licenses. It looks as if the software licenses are priced at $300 per concurrent user, since the price doubles to $4,800/Yr for the box which supports 16 concurrent users.

image_thumb[18]

Businesses will need to do the arithmetic and see if this makes sense for them. Conceptually it strikes me as excellent, enabling one centralised GPU server to provide high-end graphics to anyone on the network, subject to the concurrent user limitation. It also enables graphically demanding Windows-only applications to run well on Macs.

The Grid VCA is part of the NVIDIA GRID Enterprise Ecosystem, which the company says is supported by partners including Citrix, Dell, Cisco, Microsoft, VMWare, IBM and HP.

image_thumb[13]