Category Archives: Tech

Safari and login credentials

Leave a reply

Is there a good reason Apple decided they wouldn’t integrate Keychain with Safari so it remember passwords in web forms? Right now webserver-base passwords are remember and automatically used to authenticate, but not form-base ones. And unfortunately, most websites like banks and credit cards use form-base username/password authetication.

Almost all other browsers have this, I think Konqeuror, which is what Safari was based, integrates KWallet to do this (correct me if I’m wrong about this, I haven’t used Konqueror for more than a year, pretty much stopped using it since Firefox).

2-finger scrolling working again in Tiger

Leave a reply

So Daniel has fixed iScroll2, version 0.25 actually didn’t work out of the box for me, I emailed Daniel and he told me to try “restore to defaults”, it worked afterwards, something strange with Tiger that the settings don’t always reload after reboot… I’m gonna upgrade to 0.25e soon…

NewsForge | Windows rapidly approaching desktop usability

Leave a reply

NewsForge | Windows rapidly approaching desktop usability
Great article, I like this:

The improvement in Windows XP Home Edition over previous “ordinary user” versions of Windows — notably Windows ME and Windows 98 SE — is nothing short of magnificent. Once you get past the installation problems, you see a desktop that’s close enough to KDE (or Gnome) in general appearance and functionality that an experienced GNU/Linux user should only need a few hours worth of practice to make the switch.

Phishing

Leave a reply

I’m getting sick of phishing emails, I get about 5 different ones a day, they mostly target Amazon, eBay, and PayPal. All of them look pretty damn real, but it’s pretty obvious the hostnames or the IP addresses part of the URLs aren’t the real deal…

A lot of these phishing pages actually link to the real site to get the images, as they are too lazy to steal them and host them at their sites. It’s pretty easy to write software to identify images referred from phishing sites. It really shouldn’t be hard to identify them, and automatically perform a DDoS attack on that server, as most of these phishing sites probably aren’t that well protected themselves. But of course, this wouldn’t work if they download the images and host them on their servers themselves.

I guess ISP’s and the media ought to better educate the public on phishing emails, it’s pretty easy to go to sites like http://www.antiphishing.org to check if it’s a reported phishing attempt. Or just go to the sites directly to see if you really need to update something instead of clicking on the links in the emails.

SpamAssassin usually filters out stuff like this, I think the reason why I see them is because they usually forge legit from: email addresses. Like I have *@amazon.com and *@ebay.com on my whitelist, so they got through. If I start to get more than 10 a day then I’ll adjust my SpamAssassin settings. Now they are kindda entertaining to read at times…