All posts by Tim Anderson

New Sony PlayStation Network hack: not as bad as you may have heard

Sony’s Chief Security Officer Philip Reitinger has reported a new attack on the PlayStation network leading to headlines stating Sony hacked again. Has the company not learned from the incidents earlier this year?

Actually, it probably has; the new hacking attempt does not exploit any weakness in Sony’s network unless you consider any system reliant on username/password to be weak – not an unreasonable opinion, but given that the likes of Apple and Amazon and PayPal still use it, hardly fair to single out Sony.

If you read the statement carefully, it says that somebody obtained a large list of username/password pairs and ran them against Sony’s network. Further:

given that … the overwhelming majority of the pairs resulted in failed matching attempts, it is likely the data came from another source and not from our Networks

Because of the large number of PlayStation users, there were still 93,000 successful matches, which to its credit Sony says it detected – presumably there was a pattern to the attack, such as a limited range of source IP numbers or other evidence of automated log-in attempts.

If Sony is right, and the list of passwords came from another source, there is no reason why the hacker might not try the same list against other targets and this is not evidence of a weakness in the PlayStation network itself.

As Reitinger notes:

We want to take this opportunity to remind our consumers about the increasingly common threat of fraudulent activity online, as well as the importance of having a strong password and having a username/password combination that is not associated with other online services or sites. We encourage you to choose unique, hard-to-guess passwords and always look for unusual activity in your account.

It is good advice, though can be impractical if you have a very large number of online accounts. Something like PasswordSafe or Keypass is near-essential for managing them, if you are serious about maintaining numerous different combinations.

From what we know so far though, this is not evidence of continued weakness in the PlayStation network; rather, it is evidence of the continued prevalence of hacking attempts. Kudos to Sony for its open reporting.

Amazon Silk: fast cloud-powered browser, or a new way to mine your data?

Amazon announced its new range of Kindle devices today and the web is buzzing with debate about the impact of the new Android-based Kindle Fire tablet on Apple and others.

Amazon knows how to pile high and sell cheap, and can make money from content even if it gives away the hardware, so it is a strong contender in this space.

The real innovation announced today though was in the web browser. Amazon announced Silk, which splits the browser between your Kindle Fire and EC2 (Elastic Compute Cloud).

image

Amazon’s point: it can hold a massive cache of web content on EC2, as well as performing common-sense optimizations like scaling images to an appropriate size before sending them to your device.

Is this really new? Much of it sounds familiar, if you know about caching and proxies. Nevertheless, Amazon is in a strong position with its large cloud resource, and can design the web browser specifically for its cloud proxy. In addition, it knows the exact size and capability of the device. And perhaps its smart engineers have come up with better ways to cache. One feature is predictive caching – sending down the page it things you will visit next, before you actually go there.

There are some hard problems, as I have found in trying to optimize my own web site. Caching dynamic content, so that PHP script does not get executed by every browser request, is an obvious thing to do; but web pages draw content from multiple sources, including scripts that serve ad content that is meant to be targeted for the specific viewer. Optimizing that is harder.

It does also occur to me that a side-effect of Silk is that every single bit of browsing you do will go through Amazon and could potentially be mined for data about your browsing habits. Amazon, naturally, is well-placed to send you related ads from its own retail site. Amazon has not mentioned this aspect, but I am sure it has been thought about.

An ugly dialog from Spotify

I am a big fan of Spotify, mainly because it works so well. Search is near instant, playback is near instant.

I understood when, under pressure from the music industry, it limited the value of the free version by restricting the hours of play and the number of times you can play a specific track.

This is ugly though:

image

Spotify says:

From today, all new Spotify users will need to have a Facebook account to join Spotify. Think of it as like a virtual ‘passport’, designed to make the experience smoother and easier, with one less username and password to remember. You don’t need to connect to Facebook and if you do decide to, you can always control what you share and don’t share by changing your Spotify settings at any time.

Why care? Privacy? Because you might want Spotify but not Facebook?

I would put it another way. I am wary of putting Facebook at the centre of my Internet identity. If others follow Spotify’s example and the Web were to become useless unless you are logged into Facebook, that would give Facebook more power that I would like.

If for some reason you want to withdraw from Facebook, why should that affect your relationship with Spotify? It is an ugly dependency, and I hope that Spotify reconsiders.

See also Cloud is identity management says Kim Cameron, now ex-Microsoft.

Android tablets ahead of Apple iPad on Amazon

Following Gartner’s report on the expected dominance of Apple’s iPad2 in the tablet market throughout 2011 I took a quick look at Amazon’s sales and user ratings.

My guess is that Apple stores and direct sales online account for a large proportion of iPad sales, so no doubt the iPad is ahead overall. Even so, I was interested to find  the iPad at number 7 on Amazon.co.uk, not only below three cheap 7” cheapies from little-known brands, but also below the Asus EeePad Transformer and the Samsung Galaxy Tab 10.1, both of which are at iPad-like prices.

image

Buyers on Amazon.com seem to have less enthusiasm for the cheapies. At the time of writing, bargain prices have pushed HP’s discontinued TouchPad to number 1, followed by the EeePad and the Motorola XOOM. Apple iPad is at 4, with Galaxy Tab 10.1 at 5 and 6.

When you see nearly 500 user reviews and a four star average rating, as for the Eee Pad, it shows that these things really are selling and being enjoyed.

Of these I have only properly tried the TouchPad and the iPad. I did not much like the TouchPad, though apparently firmware updates have considerably improved it.

The closest I got to Windows on ARM at Microsoft BUILD 2011

A couple of the stands in the exhibition at Microsoft’s BUILD conference last week were showing Windows on ARM. This one was on the NVIDIA stand and was most likely running its Tegra 2 SoC (System on a Chip) though Tegra 3 (code-name Kal-El) is apparently now in production. The tablet was displayed under a plastic shroud which could only be lifted when someone from Microsoft was present, though I was able to get this snap of the machine sans shroud. I was not permitted to handle the machine.

image

I have blanked out part of the background because it was black on black.

My main observation: it looks just like the Intel version. This screen shows a Metro app running side by side with the Windows desktop, and showing the “charms” on the right.

Gartner reports that Apple will have the tablet market almost to itself in 2011 (73.4% market share). I believe Windows on ARM is critical to Microsoft’s strategy to compete. In principle, it should be cheaper and more efficient than an Intel device, and one that is more locked-down in the style to which Apple has made us accustomed.

If Microsoft and its hardware partners can get the size, weight and design details right, I suspect I would rather have a Windows 8 tablet than an iPad. One advantage is the ability to have two apps side by side. Microsoft’s new user interface works really well with touch. I will expect to find a Windows remote desktop client there by default, and better support for Microsoft Office and SharePoint than I find in the iPad.

By the time Windows 8 comes out though, we will likely have iPad 3 with who-knows-what improvements; Apple has all the apps; and breaking into this market will not be easy.

Why I miss pinball machines

I’m just back from Microsoft’s BUILD conference in Anaheim, California, where I had little time to do much other than attend sessions, write, eat and sleep (a little).

I did have a quick look round the exhibition though, and was pleased to find four pinball machines. Unfortunately I never got a go, except on one that proved to be slightly broken. Another was so broken that it was switched off.

image

That’s one of the reasons you don’t see many pinball machines these days. They are high-maintenance, with many moving parts that get pounded constantly by one or more heavy silver balls, plus the occasional thump from the player as he bangs or shifts the machine just enough to affect the ball’s motion without causing, he hopes, a tilt.

Another reason for the game’s decline is that a good player can play for ages on a single quarter – or 50c, which seems to be the going rate now. It is a game of skill where accurate shooting gets you both long games and frequent extra balls and replays.

Neither of these characteristics is good for arcades, which like high income and low maintenance.

I love the game though. It offers tactile, physical pleasure that will never be captured by video simulations. The machines themselves are pure delight, every one different, often with gorgeous artwork and amazing gameplay with loops and tunnels and mini-play areas and fantastic contraptions that enable themselves if you get the right sequence of targets.

Most latter-day machines have a multi-ball mode, which is a lot of fun and surprisingly difficult. Watching several balls at once is a great deal harder than keeping your eye on just one.

I am not sure that pinball machines are made any more, though enthusiasts seem to be able to keep the old ones going. Sadly a lot of the machines you encounter in dusty corners of cafés and arcades are not in good order, the bumpers do not bump as they should, some features do not quite work, and they are disappointing.

The best one at BUILD was called Pirates of the Caribbean and seemed pretty good, though I never got a game.

Most of the time I have to make do with computer simulations. The best I have come across are the Pro Pinball series for the PC (don’t get the Xbox version which is a poor port). I was on a forum once with one of the developers, who explained how he hated scrolling on pinball simulations. I agree – how you can shoot accurately with the play area is scrolling all time? There is also an amazing open source project which lets you load actual machine ROMs for authentic simulation, though this is of uncertain legality.

I am more interested in simulations than pinball-ish games that you could never build. One of the great features of Pro Pinball is that you can go into a maintenance mode and tune it as you would a real machine.

Unfortunately none of these are anything like as much fun as the real thing, though they do save on quarters or your local equivalent.

Review: Verbatim’s USB audio bar – simple, well made, good sound

If you are in the habit of watching video or listening to music on a laptop, you will know that the average laptop has poor sound quality. That is partly because most laptop speakers are an afterthought, and partly because it is not easy to fit speakers of any quality into a laptop case.

External speakers are the answer, but while there are plenty to choose from, they can get in the way.

The Verbatim 49095 Portable USB Audio Bar Speaker is a neat solution. It is designed to fit on top of a laptop screen.

image

While that may sound precarious, the unit is cleverly designed with tabs at the front and a twist-down peg at the back which means it fits well on almost any laptop screen.

image

I was impressed with the sound, considering the modest price of this product, which retails at £14.99 or less. It is a vast improvement on the built-in speakers in the Dell laptop I tried. No, it is not as good as two separate loudspeakers positioned either side of the laptop; but the audio bar takes up almost no extra space and would easily tuck into most laptop bags when not in use.

Unfortunately you do need a laptop – running Windows 7, Vista, XP, or Mac OS X 10.1 or higher. Apple’s iPad has no USB port, and there is not an option to use an audio cable instead.

The unit is well made, works with USB 2.0 or 3.0, and claims output power of 2 watts RMS.

Recommended.

Review: Audéo Perfect Fit earphones

Audéo Perfect Fit earphones are designed to replace the set you got bundled with your smartphone or music player. The earphone set includes a microphone and a standard multi-function button, so that on an iPhone or many other phones you can answer or decline calls, pause and resume music, or skip to the next track.

image

There are a few unusual features. One is the shape of the earbuds, which have a distinctive “leg”. In order to fit them you first attach one of a range of silicone or foam ear tips. Then you place them in your ear with the legs pointing up and forward, and the cable draped over the back of the ears. It sounds fiddly, but it is easy enough in practice, and gets you a secure and comfortable fit.

image

The supplied manual does an excellent job of explaining fitting. There is also an optional ear guide which adds a shaped cable clip that hooks over your ears. This was not supplied with my review package, the PFE 02x, but does come with the more expensive PFE 12x or can be purchased separately. I found the fit was fine even without the clip.

The extra accessories, including the audio filters described below, are a point of confusion, as the manual in the PFE 02x lists them under “Package contents” even though they are not supplied. No doubt some customers complain that parts are missing; I would have done the same, except that I checked the product web site and external packaging which correctly shows that the only accessories in the PFE 02x pack are the silicone ear tips.

The next special feature is that each earbud is fitted with a passive audio filter, which can be changed according to preference. The PFE 02x comes with a single green filter, which you can see in the picture above, while the PFE 12x comes with gray and black filters and fitting tool.

The colours are significant. The black filters are said to amplify bass and high frequencies (what audiophiles call boom and tizz). The gray filters are meant to emphasize mid-range frequencies, while green are described as offering “perfect bass”.

According to Audeo:

In-house studies have shown that, when headphones exactly reproduce the response curve of the unobstructed ear, most people hear the sound as being very aggressive.

The response curve of Audéo PFE in-ear earphones is a compromise between a frequency range that compensates for the curve of the unobstructed ear and one that emphasizes bass and high-frequency sounds. This is what most people prefer.

In order to cover the widest possible range of user preferences we offer three audio filters.

Unfortunately the only filter I have tried is the green one supplied with the PFE 02x. However I am a little doubtful about the above explanation. The goal of hi-fi reproduction is neutrality, so that you hear whatever the musicians and engineers who created the sound intended. I appreciate though that when it comes to earbuds used on the move in all sorts of noisy environments, it does not makes sense to be purist about such things. Further, it is not realistic to expect earbuds to deliver the kind of bass you can get from full-range loudspeakers or even from high quality over-the-ear headphones, and indeed this is not the case with the Audéo. Still, what you care about is not the theory but the sound. How is it?

I carried out extensive listening tests with the Audéo earphones, comparing them to a high quality Shure earbuds as well as to a standard Apple set. My first observation is that the Audéo earphones do fit more snugly and securely than either of the others I tried, when fitted correctly, and that this close fit goes a long way towards obtaining a better and more consistent sound.

Second, I soon identified a certain character to the Audéo sound. In comparison to the Shure, the Perfect Fit earphones are slightly softer and less bright. On some music this was a good thing. I played My Jamaican Guy by Grace Jones, which has a funky beat and bright percussion. On the Shure the track was a little harsh, whereas the Audéo tamed the brightness while still letting you hear every detail. With Love over Gold by Dire Straits though, which is already a mellow track, I preferred the Shure which delivered beautiful clarity and separation, whereas the Audéo (while still sounding good) was less crisp. Daniel Barenboim playing solo piano sounded delightful though with slightly rolled off treble.

I did feel that both the Audéo and the Shure improved substantially on the Apple-supplied earphones, as they should considering their price, though even the bundled earphones are not that bad.

The strength of the Perfect Fit earphones is that they never sound bright or harsh; I found them consistently smooth and enjoyable. The sound is also clean and well extended, considering that they are earbuds. Isolation from external sounds is excellent, which is important if you are a frequent traveller.

The weakness is that they do in my opinion slightly soften and recess the sound.

That said, it may be that the other filters give the earphones a different character, and if you have the pack with a choice of filters it would be worth trying the variations to see which you prefer.

I may have been imagining it, but I felt that the earphones sounded particularly good with Apple’s iPhone.

Conclusion: a good choice, especially if you like a slightly mellow and polite presentation. If possible I recommend that you get the more expensive packs that include a case as well as alternative filters and the optional ear clips.

   

Kingston Wi-Drive: portable storage expansion for iPad and iPhone

Kingston has announced availability of the Wi-Drive. This product addresses an annoying limitation of the Apple iPhone and iPad: no USB port for external storage devices.

The Wi-Drive overcomes this by connecting wirelessly. It offers 16GB or 32GB of solid-state storage, with USB for charging and for access to the files from a PC or Mac. When you are on the go, you can put the Wi-Drive into your pocket. A free app on the iPhone, iPad or iTouch lets you access the files. The use of a network bridging means you can still access the internet. Battery life is said to be up to 4 hours, so I hope you can switch it off when not needed. You can also share the drive with up to three other users.

Example prices are £89.99 for the 16GB or £124.98 for the 32GB version.

It is a clever solution. That said, I have a couple of reservations. One is that the price is high compared to a simple USB device of the same capacity. That is not unreasonable given the extra technology needed, but it means it will only sell to users who really need it.

And do you need it? If you are on the internet, you could use a file synchronization service like Dropbox, or Apple’s own iDisk or forthcoming iCloud, to extend storage instead.

A second problem is that iOS does not expose its file system to the user. This means that external storage is less convenient on iOS than on other systems. Want to save a Pages document from iOS to the Wi-Drive? You probably cannot do so directly; there is no way to save direction to Dropbox either.

The Wi-Drive only exists because of Apple’s desire to control and supposedly simplify the operating system. It is a workaround, but not a perfect one, although that is not the fault of Kingston.

That said, I have not yet tried a Wi-Drive; I hope to bring you a proper review in due course.

An iOS security tip: tap and hold links in emails to preview links

Today I was using an iPad and received a fake email designed to look as if it were from Facebook. It was a good imitation of the Facebook style.

image

In particular, the links for sign in look OK.

Outlook on Windows displays the actual link when you hover the mouse pointer over the link. As you can see, in this case it is nothing to do with Facebook:

image

How do you do this on iOS? There is no mouse hover (though it could be down with a proximity sensor) but if you tap and hold on the link, iOS pops up a dialog revealing the scam:

image

Worth mentioning as tapping and holding a link to inspect it is not obvious and some users may not be aware of this feature.

The iPad is still worse than Outlook for email security. Outlook does not download images by default. Downloading the image tells the spammer that you have opened the message:

image

The iPad mail client downloads all images.

image

In mitigation, most malware on web sites will not run on iOS. However you could still give away your password or other information if you are tricked by a deceptive web page or fake login.

Hiding links is a feature built into HTML. The designers of HTML figured out that we would rather see a friendly plain English link than a long URL. Unfortunately this feature, and related ones like the ability to make an image a link, play into the hands of the scammers and it is necessary to look at the real link before you follow it.

A better solution would be authenticated email, so that fake Facebook emails would be detected before they are displayed. Unfortunately we are still a long way from using authenticated emails as the norm.