David G. Shrock's Blog, page 7

Two-step Verification for Apple ID

Recently Apple began offering a new security option with two-step verification using a phone or registered Apple mobile device. Two-step verification means when making purchases or changing user information, a code is sent to the registered device to be used in addition to the normal password. This method improves security by adding a layer of protection. This is a welcome option those using an Apple ID for iTunes purchases or iCloud and have one or more mobile devices.

An Apple ID provides access to information and potentially dangerous abilities including remotely wiping out the contents of a device as one reporter learned after a hacker used social engineering to gain access to his account (Mashable.) If someone gains access to your Apple account, that person can make purchases and remote lock your devices. An intruder using social engineering and some detective work can potentially gain access to everything through your login or by calling Apple support for a password reset. Two-step verification helps protect against social engineering by replacing pass phrases along with an authentication code.

Using two-step verification with an Apple ID requires at least one device supporting SMS or the Find my iPhone app for iPhone or iPad using iCloud. This is the device that will receive a four-digit code after entering the normal password when purchasing or changing account information. As a backup if the device is lost, there is an authentication key. Learn more at support.apple.com.

Keep the authentication code in a very safe place away from your devices such as in a safe or locked cabinet. If your registered device is lost, remove it from the list of registered devices as soon as possible.

 

Writing progress

Taking advantage of time and state of mind, I have been working on my novel. I’ve written over 27,000 words in the last two weeks which feels slow since my brain likes to charge ahead.

Standing Tall for Desk Work

In my 2010 post, “Get Off Your Butt,” I addressed the problem of working at a desk for long hours increasing risk of heart problems, obesity, and general fatigue. After four years at a desk job, I had realized that commuting to work on a bicycle was not enough to compensate for eight or more hours sitting at a desk. From my original post:

“Study Finds that Sitting May Increase Risk of Disease” (2007) stating, “Only 28 percent of Americans are getting the minimal amount of recommended exercise” and “exercising, even for an hour a day, was not sufficient to reverse the effect [of physical inactivity.]“

After two years of using a standing desk (a drafting table), I now realize how detrimental to my health hours of sitting had been the previous four years. Standing for part of the work day has helped recover much of my health. I’ve also noticed that when I’m trying to solve difficult problems, my brain prefers it when I stand. Humans think better on their feet. Of course standing in one place for too long isn’t good, either, so I upgraded my office with a GeekDesk.

GeekDesk at standing position

The purple light against the wall helps reduce eyestrain (like a lamp on the desk.) Light sources above or behind create reflections on the monitor, so I positioned my desk with the window to my left and my lamp is on my right. On cloudy days, I turn on the purple light behind the monitor.

My desk, GeekDesk Max, set at the standing height is nice when I just want to quickly do something on the computer. I don’t have to bother with sitting. When I’m writing stories, writing software, or working on something challenging I prefer to stand. If I’m doing something more relaxed or need to switch positions, I touch the button on the GeekDesk controller to lower the desk. The movement is smooth, and takes about six seconds to reach the programmed height.

GeekDesk at sitting position

The GeekDesk controller has up and down buttons plus four memory positions. I’ve set my sitting and standing heights perfect for proper ergonomic keyboard touch typing. Switching positions is nice. It’s good for the body, and for the brain as well.

GeekDesk controller

The GeekDesk is a sturdy, stable design. Smaller frames are available, and GeekDesk offers the frame only for those that already have a suitable top—a wood desktop able to take self-drilling screws. Assembling the desk took only a few minutes. I ended up attaching my cable modem to the frame so could use a shorter cable.

Modem attached to frame

The frame includes cables (disconnected in photo below) running through the brace with plenty of room to run wires for devices. The top comes with three ports for wires to cross underneath keeping the top less cluttered.

GeekDesk frame without top

Now, it’s time to stand up and write.

Windows 8 Upgrade: Watch Your Step

Naturally, the Windows 8 Pro upgrade is for upgrading from an existing version of Windows. There’s even an Upgrade Assistant to verify that you’re ready to go. The upgrade software allows you to do a clean install, but unlike older versions of Windows it does not ask to see an installation disc of a previous version. Not until everything is running will the problem reveal itself: one cannot activate an upgrade from a clean install.

Watch your step!

If something goes wrong during upgrading requiring formatting the drive, or if later one loses a drive, the user may need to re-install their older copy of Windows first. The product key for an upgrade cannot be used to activate a clean install. The installation software never asks to see evidence of previous Windows installation, or warns that the key entered at the beginning cannot be used for a clean install. It’s a bit of a let-down to get through the entire installation only to be met with the message that you can’t continue using your OS unless you purchase another copy.

It appears that a number have discovered this problem (see comments at ghacks.net, “Windows 8 Upgrade: clean install possible?” and answers.microsoft) leaving some to wonder what happened to good user experience? This is Microsoft, remember, user experience isn’t a priority. According to Microsoft, “Why Can’t I Activate Windows,” the procedure is to first re-install an older Windows and then upgrade to Windows 8—or call technical support.

There’s another way to activate: edit the registry. The answer is the same as Windows 7. You can find it near the bottom of the article, at ghacks.net, “Windows 8 Upgrade: clean install possible?”

Why doesn’t the software warn the user about entering an upgrade product key before performing a clean install? Why doesn’t it ask for the product key—before or after installation—of your older version of Windows? Of course, that would require Microsoft to consider the user experience.

Personal experience: The Windows 8 Preview installed and ran flawlessly for months, but the Windows 8 Pro upgrade lost itself on the first reboot, and I’ve encountered the same glitches after two installations (concerning stuck themes.) It seems ironic I had OS X up and running on a test machine (my “Hackintosh Test“) in less time with fewer problems.

Note, I’m a Windows .NET developer and formerly a Windows NT/2000 technical support consultant. For the last three years I’ve been using a Mac, but naturally I’m more familiar with the guts of Windows.

 

Brief review of The Mockingjay

Found over at Goodreads: http://www.goodreads.com/review/show/438285131

A fast, fun read. There are some beautiful moments with splendid descriptions, and we get to learn more details about the past. There’s too much indecision, which didn’t seem to fit the Katniss I met in the first book, or at least too much time spent on her indecisions. This could be part of her breaking, but other characters still showed strong loyalty and behaved as if she was still the decisive person as always. The ending re-unites the beginning with a common theme told in many stories, but the journey getting there gives us a strong perspective from the within-it’s also a theme worth exploring.

I like the poetry between the song, her father’s memory, the war, her sister, and Peeta all tied together with pieces from the first two books told in beautiful segments. After the hardship of the games, the war, we’re left with a bit of hope. For me, the trilogy is about the journey, and I enjoyed taking it with Katniss.

Password Tips

Thanks to pre-built software, password cracking keeps getting easier, and many users still don’t care. Even if you have nothing worth stealing, using strong passwords prevents attackers from social engineering to get something that is worth taking. Attackers can glean parts of secret information from different sites, or hints from your Facebook profile, to get something valuable. Sophisticated tools also make it easier to use the simple passwords to crack other passwords. See “Why passwords have never been weaker—and crackers have never been stronger” at Ars Technica and take a look at some of the worst passwords in “10 of the worst passwords exposed by LinkedIn hack.”

Password dumping—public display of encrypted (and later possibly cracked) lists—has become more common allowing both security professionals and thieves learn more about password habits. Thieves may automate re-using your name-password login on other sites. A short list of recent dumps from Ars:

“More passwords dumped, this time from alleged billabong.com hack“
“eHarmony confirmed its members’ passwords were posted online, too“
“8 million passwords leaked connected to LinkedIn, dating website“
“Sony hacked yet again, plain text passwords, emails, DOB posted“

What these dumps reveal is that many users still choose simple passwords, a real word usually with a capital letter at the beginning and ending in a number. Cracking software try this pattern first starting with the most popular. Slightly tougher passwords use a real word with two or more capitals somewhere in the middle broken by a number or two. Better, play the license plate game to make a memorable password.

Tips

length should be at least 8 characters
use one or more capital letters in the middle
use numbers, but not just at the end
use at least one symbol if site allows
use a password generator
never use same password twice

Passwords are easier to remember if you type them every time instead letting your browser remember for you. Also, you may try a secure password organizer to store passwords (and other info) like 1Password available for Mac, iPhone, and iPad.

 

Dee Count update 1.5

Dee Count updated to v1.5 for iOS6 changes. Now also requires minimum of iOS5.1.

Updating Dee Count

Making minor updates to Dee Count for improved iOS6 compatibility.

Skyrim Mage

Tip: Play at master difficulty. Good perk planning makes the game too easy. For more challenge, choose less combative skills.

Elder Scrolls V: Skyrim provides a variety of magic user options and fun gameplay. Enchanting is my favorite skill, but can make the character overpowered—not necessarily a bad thing. Building a mixed-class character (mage-fighter or mage-rogue) tended to capture me in previous Elder Scrolls, but a pure mage in Skyrim can enjoy the role of fighter or rogue at higher levels.

Mage decapitates foe in Skyrim

Reisha (Nord) is a pure wizard employed as an assassin. She’s adept at sneaking and one-hand combat, but with minimal perk training in those areas—minimum in 1-hand to get decapitation and only first rank in stealth bonus plus perks to get to Assasin’s Blade. Magic and enchantment turns her into a stealthy assassin.

Tip: Practice enchantment and find a magic item that reduces casting cost in your top wizard skill. Every few levels make new set of apparel (head gear, clothing, necklace, ring) that reduces casting cost.

Practicing primarily in Destruction and Alteration schools of magic, Reisha set out to be a combative wizard. On the side, she also trained in Illusion for better stealth (Muffle and Quiet Casting) and Conjuration to supply something to take hits (plus I love necromancy.) Reisha joined the Dark Brotherhood early in her career and later a vampire clan.

Tip: The Lord Stone (+50 armor, 25% magic resistance) is great for wizard survival or anyone refusing to wear armor.

Casting Thunderbolt in Skyrim

Tip: For combat, pick a school of magic (Destruction, Illusion, or Conjuration) and work it like crazy. In Destruction you want dual-casting and impact perks as soon as possible. Illusion can replace Destruction by being a less combative wizard—get the enemy to fight each other.

After mastering Enchantment, Reisha created the following as her primary gear:

Reisha’s Black Dress: Destruction and Conjuration 25% less to cast.
Reisha’s Gold Diamond Ring: Destruction and Conjuration 25% less to cast.
Reisha’s Emerald Circlet: Destruction and Conjuration 25% less to cast.
Reisha’s Ruby Necklace: Destruction and Conjuration 25% less to cast.
Reisha’s Vampire Boots: 37% fire resistance, +40% one-hand damage
Reisha’s Blades Sword (Legendary): absorb 19 health, target takes 18 points shock and 9 points magicka damage.

Her apparel gives her free casting in Destruction and Conjuration for endless combat. Note that lower casting cost is much more important than magic recovery speed since combat uses magic very fast with little time to recover.

Note: magicka recovery rate may appear slower during combat, but it’s the same rate—notice the clock: time passes slower during combat (or faster when traveling) to balance gameplay (since the world is not real-time.)

Imperial soldier decapitation in Skyrim

The only reason for fire resistance is to offset her vampiric nature, otherwise magic resistance or another combat bonus might be more effective. She also has alternate attire for sword fighting (more bonuses to one-hand combat and Alteration cost reduction instead of Destruction.)

I chose female for this wizard because previous Elder Scrolls games (Morrowind) offered a few alternate quest-line choices and different dialogues. I’ve found none in Skyrim besides the pronoun switch.

Screenshots are from the game without alterations. Game details are set to High with the high-resolution texture pack. Click on a screenshot for full resolution at 2560×1440.

Skyrim Distance Drawing

One annoying feature of Elder Scrolls V: Skyrim by Bethesda Softworks is the scenery popping into place—which is to say the high resolution textures replacing the low resolution textures—worst of all the appearance of frozen waterfalls. Sometimes it seems one has to get awfully close to the waterfall before the gorgeous animated water appears. The fish leap up the ugly block of water without a care. Setting distance sliders to maximum doesn’t help the waterfalls. If the artists had created nicer looking low-resolution waterfalls, this might not be as much a bother.

I’m not the only one concerned. Players found a solution within weeks of Skyrim’s release. Read the details on Skyrim Ivarstead, x=7

Why didn’t Bethesda Softworks increase the uGrids value in the higher details presets? My guess is stability. The game had some texture loading issues in the early versions, and apparently they could not find a workable solution if the player decides to lower their detail preset without corrupting the saved-game file. Maybe a future patch will fix things.