Shrapnel

Late Night Links – Sunday November 16th, 2014

It’s that time of the week again, and we’re still behind from the six weeks I took off. Let’s just get going right away, then. Post-haste, if you will. Quickly.

And that’s it for another week! Until next time, then.

Blog

A couple of weeks ago, the Moto 360 went  on sale here in Canada. I got up at 5am and hit the internet. My intent was to reserve one in a local store so that I could go and pick it up later that day, but I was out of luck there. Instead I ordered one from Telus.com and it arrived in the mail two days later.

I’m not a tech reviewer – not much of a writer either, for that matter – but I wanted to post to talk about my first impressions during the week and a half I’ve had this thing on my wrist.

When you take the device out of the box and fire it up it takes you through a few brief setup steps, a quick usage tutorial, and then that’s really it. If I had to describe my first 10 minutes with this $280 device in a single word then I’d go with “underwhelming.”

It doesn’t take long, however, to figure out that’s the beauty of the 360 (and, I would assume, all Android Wear devices): this is, first and foremost, a watch. It doesn’t try to be a computer on your wrist, and nor should it.

Aside from telling the time, the functionality my watch provides is more or less just another screen on which to view my Google Now cards and Android notifications, but in practice this is more useful than I ever thought it would be, and I am a huge fan as a result.

When I get a text or an email, or even a Lync message, a quick glance at my wrist is all it takes for me to decide if it’s something important enough for me to take my phone out of my pocket (or maybe even sit down in front of my computer), or if it’s something that can wait. If I want to open the message (or whatever) on my phone then a quick swipe left and a tap is all it takes – when I get my phone out, the relevant content is already on the screen.

If a quick (one or two word) reply is all that’s needed then I can just talk into my watch. I don’t know that I’d do this in public necessarily, but it is actually a useful function despite my knee-jerk initial opinion about it.

The watch face itself is configurable and there are several designs to choose from. I’ve gone for “classic,” a simple watch face that displays free/busy information from my calendar in a subtle, unobtrusive way.

Talking of my calendar, this is yet another killer feature for me. Being able to see details of my next meeting at a glance (and being able to swipe to see the upcoming stuff that follows it) is hugely useful (although again, I didn’t realize how use useful it would be until I had it).

Battery life has been a talking point in early Moto 360 reviews, but I have no concerns in this area. I have ambient mode turned on, and when take my watch off at the end of the day it usually has 30%-40% battery remaining. It certainly requires charging every day, but that’s fine by me.

So should you get one? Well I love mine and I’m glad I bought it. I recognize that this is a first-generation device though. It will be followed, no doubt, by versions with improved functionality, better displays, better battery life… in a year or so there will probably be smartwatches available that make my watch look like a relic of time gone by. If you’re not OK with that then wait until version 2 hits the shelves. For me, I’ll consider upgrading when that happens but the functionality I get from this model is worth the money to me, even if it turns out that I change to a newer model in 18 months time. If you think in the same (geeky) way as me, get your chequebook out and snap one of these things up. I’d recommend it to anybody.

Let me know in the comments if you have questions about it! I’d be happy to answer them.

Blog

A couple of weeks ago, the Moto 360 went  on sale here in Canada. I got up at 5am and hit the internet. My intent was to reserve one in a local store so that I could go and pick it up later that day, but I was out of luck there. Instead I ordered one from Telus.com and it arrived in the mail two days later.

I’m not a tech reviewer – not much of a writer either, for that matter – but I wanted to post to talk about my first impressions during the week and a half I’ve had this thing on my wrist.

When you take the device out of the box and fire it up it takes you through a few brief setup steps, a quick usage tutorial, and then that’s really it. If I had to describe my first 10 minutes with this $280 device in a single word then I’d go with “underwhelming.”

It doesn’t take long, however, to figure out that’s the beauty of the 360 (and, I would assume, all Android Wear devices): this is, first and foremost, a watch. It doesn’t try to be a computer on your wrist, and nor should it.

Aside from telling the time, the functionality my watch provides is more or less just another screen on which to view my Google Now cards and Android notifications, but in practice this is more useful than I ever thought it would be, and I am a huge fan as a result.

When I get a text or an email, or even a Lync message, a quick glance at my wrist is all it takes for me to decide if it’s something important enough for me to take my phone out of my pocket (or maybe even sit down in front of my computer), or if it’s something that can wait. If I want to open the message (or whatever) on my phone then a quick swipe left and a tap is all it takes – when I get my phone out, the relevant content is already on the screen.

If a quick (one or two word) reply is all that’s needed then I can just talk into my watch. I don’t know that I’d do this in public necessarily, but it is actually a useful function despite my knee-jerk initial opinion about it.

The watch face itself is configurable and there are several designs to choose from. I’ve gone for “classic,” a simple watch face that displays free/busy information from my calendar in a subtle, unobtrusive way.

Talking of my calendar, this is yet another killer feature for me. Being able to see details of my next meeting at a glance (and being able to swipe to see the upcoming stuff that follows it) is hugely useful (although again, I didn’t realize how use useful it would be until I had it).

Battery life has been a talking point in early Moto 360 reviews, but I have no concerns in this area. I have ambient mode turned on, and when take my watch off at the end of the day it usually has 30%-40% battery remaining. It certainly requires charging every day, but that’s fine by me.

So should you get one? Well I love mine and I’m glad I bought it. I recognize that this is a first-generation device though. It will be followed, no doubt, by versions with improved functionality, better displays, better battery life… in a year or so there will probably be smartwatches available that make my watch look like a relic of time gone by. If you’re not OK with that then wait until version 2 hits the shelves. For me, I’ll consider upgrading when that happens but the functionality I get from this model is worth the money to me, even if it turns out that I change to a newer model in 18 months time. If you think in the same (geeky) way as me, get your chequebook out and snap one of these things up. I’d recommend it to anybody.

Let me know in the comments if you have questions about it! I’d be happy to answer them.

Blog

CloudFlare Adds SSL To All Customers In Advance Of Google’s Focus On Security

I’ve written recently about SSL and how you can enable it on your website without spending a lot of (or even any) money. I’m a big fan of Cloudflare and their free service offering, and this feature just makes it better still.

CloudFlare Adds SSL To All Customers In Advance Of Google’s Focus On Security

Shrapnel

List of sovereign states and dependent territories by population density – Wikipedia, the free encyclopedia

I was reading a book just now that led me to look up this information, and it’s fascinating. There’s a nugget of information from it below.

On average, per square mile:

  • Canada has 9.28 people.
  • The United States has 84.09.
  • The United Kingdom has 679.
  • The Macau region of China tops the list 54,882

List of sovereign states and dependent territories by population density – Wikipedia, the free encyclopedia

Shrapnel

Late Night Links – Sunday November 9th, 2014

Well, I did warn you in my last late night links post that it would be a while until my next post. Six weeks have virtually flown by, but I’m now firmly back in real-life after my vacation. We’re probably not going to get through everything from that time tonight, but let’s at least get started, shall we?

That was a lot to take in, congrats on making it all the way to the end. I’m not done with my list of flagged articles from while I’ve been away, but we’ll pick this up next week, same time, same place. See you there!

Blog

Publicly Trusted SSL on the Cheap

Last week I wrote about how to create a self-signed SSL certificate for your website. It turned out to be one of my popular posts, and the process turned out to be remarkably easy: you run one single command, make a quick change to your webserver configuration and you’re done.

Our self-signed certificate worked great for encrypting the connection between our browser and the webserver, but as I mentioned that’s only half the SSL story. Our certificate wasn’t trusted by our operating system, which means it couldn’t be used by our browser to confirm the identity of the server we’d connected to, which in turns means that visitors to our website are greeted with a big, bold “your connection is not secure” error message.

Our browser knows whether or not it can trust a given SSL certificate through a hierarchical structure. I’m glossing over some details, but essentially our operating system comes with a listed of trusted “root” certificates. The owners of these root certificates can produce certificates for their customers much as I produced one for myself last week. The difference is that there’s a mechanism for traceability here – the certificates they produce are trusted, because our browser can trace things back to the root certificate that it already knows to be good.

image

I’m not suggesting there’s some kind of conspiracy at play here, but it seems to me the owners of these root certificates have a metaphorical license to print money. They can create something out of nothing with, in essence, a single command, and sell it for a value they determine. I might be OK with that if they hadn’t determined that the value is so insanely high.

Luckily for us there are market forces at play in this whole story, and we don’t have to pony up the $1,500 Symantec are asking to secure our website traffic. We’re going to do it for free. Read on!

SSL Certificates and Their Value

Unfortunately, budget-minded certificate providers are few and far between, and the trend appears to be that their either disappearing or eliminating their lowest-cost options in favour of “better,” higher-priced ones. NameCheap is a good option if you’re looking to minimize costs, with certificates starting at around $10 at the time of writing.

But here’s the question: If you can get an SSL certificate from them for $10, why are Symantec charging $1,500. Is their option 150x better?

Here’s my answer: No.

Symantec would likely argue that point though, as you might imagine. They’d mention that they put their customers through a more stringent identification process in order to provide an increased level of confidence in their product. They know their customers, and they know they’re only issuing certificates to trustworthy sites. They’d argue they provide a warranty with their certificates that provides their customers with legal protection against a losses caused by a security breach.

This is all well and good, of course, but does the typical internet user care? I’d propose that the average site visitor – at best – notices the green padlock icon in the address bar and proceeds with confidence upon seeing it. How much you, as a site owner, pay to get that padlock icon really makes no difference to the vast majority of your visitors.

That all being said, it of course depends on what your site does. If you’re a bank, this is not an area you should be trying to save money in. Take the expensive certificate with the warranty and the legal protection. If you run an e-commerce site and your livelihood depends on your website then maybe don’t spend $1,500, but don’t accept the reputational risk of using a product with no warranty and limited support. If you’re me, though? Whatever, just spend as little money as possible.

Getting a Free SSL Certificate

Enter our new best friends at StartSSL. They offer single-site SSL certificates for the extremely reasonable price of free. There are some caveats as you might expect, but none of them are a show-stopper for my purposes. Nevertheless the biggest thing you should consider is that although they’ll issue the certificate for free, you will have to pay if you ever need to revoke it. If you ever suffer a security breach and suspect that your certificate file has fallen into the wrong hands (I’m talking about the equivalent of the server.pem file we created for ourselves last week), it should be revoked to prevent some nefarious person setting up a site that masquerades as yours. If there’s ever another vulnerability similar to the heartbleed bug then the certificate should likewise be revoked.

In a nutshell, this is a risk tolerance question. By taking the free certificate you’re betting that nothing bad will happen during the 12-month life of your certificate or that if it does you’ll be prepared to accept a whole host of new risks.

Since I was OK with the many drawbacks of using a self-signed certificate, I laugh in the face of risks like the ones mentioned above. If you’re different then do your homework and make sure you’re getting a product that’s right for you, but if you’re like me then tune in next week when I walk through the steps of getting a free certificate issued to me and install it on my server.

image

Blog

When It Comes To Facebook Scale, You Can Throw Out The Rulebook | TechCrunch

I read this techcrunch article this week about hardware engineering at Facebook. The nitty gritty details are only mildly interesting to me, but listen to what Facebook are saying about the culture they’ve created.

“We do it this way because this is the way we’ve always done it?”

Not at Facebook you don’t.

What’s the BPR equivalence? Can I achieve similar results through being a continual advocate for Kaizen as a process improvement methodology, or is this a cultural thing at FB that I can’t replicate on my own?

Get in touch or leave a comment to let me know!

When It Comes To Facebook Scale, You Can Throw Out The Rulebook | TechCrunch

Shrapnel

Late Night Links – Sunday September 28th, 2014

It’s that time of the week again, and you should make the most of it too because in all likelihood late night links will be taking a few weeks off after today, seeing as I too am taking a few weeks off.

And that’s it! I’ll be back with more in a few weeks.