Travel Best Practices for Using Mobile Phones, Tablets, Computers + Keeping Travel Blogs, Photos...

I have a lot in my head about how to travel and use electronics, so I thought I would put some of my thoughts down and back those with links to more information.  The travel issues are:

• Safety
• Expense
• Convenience
• Efficiency; ie, how to keep your blogs and photo commentary current without becoming obsessive and running your vacation.

Safety:  

Wifi Safety

What I am seeing is that a significant percentage of people get "hacked" when they go overseas.   The "visible result" are messages like this:

Hello,

I am sorry for reaching you rather too late due to the situation of things right now.My family and I had a trip visiting Manila Philippines,everything was going on fine until last night when we got attacked by some unknown gunmen. All our money,phones and credit cards was stolen away including some valuable items, It was a terrible experience but the good thing is that they didn't hurt anyone or made away with our passports.  
         
        We have reported the incident to the local authorities and the consulate but their response was too casual, we were ask to come back in 2 weeks time for investigations to be made proper,But the truth is we can't wait till then as we have just got our return flight booked and is leaving in few hours from now but presently having problems sorting out our  bills here and also getting a cab down to the airport, Right now we're financially strapped due to the unexpected robbery attack, Wondering if you can help us with a quick loan to sort out our bills and get back home. All we need is (3,000 $ )  I promise to refund you in full as soon as I return home hopefully tomorrow or next. write back now to let me know what you can do.

Thank You.

The basic best practice is to to use https: to communicate or, better yet, VPN.  

Another fundamental aspect of safety that applies whether traveling or not is to be able to both find your phone and to disable it when you can't find it.  

References

• Google "wifi safety overseas"  Pick articles
• How to Use Wifi Safely While Traveling

Expense:

There are two most important things to remember:

1. Keep your phone in airport mode and turn data off. The most common expense problem is that you leave your phone on and you are near a ship or hotel that charges a very large fee per minute.  The phone jumps on their service and you have a huge bill, not only for phone calls but for data usage.
2. If you are traveling overseas, your phone may not work.  This is because there are different communication standards; you phone doesn't support those standards.  

Cell Phone Communication Standards

Sim Cards

References

• SIM card primer

I will continue this as time permits, but I thought I would put this out as is because this is will be useful even when incomplete.   Add comments at any time.  Thanks, 

Lousy DSL Service in our neighborhood?

I've been to several houses that have been experiencing "bad" internet response.  I have also experienced that.  In fact, I did some research on the signal and I tried some techniques to make it better.

First, the data:

time	Action	Ping	Jitter	Pkt Loss	IP	up	down
12:18	reset router	31	0	0
12:25	restart ooma	404	144	0
12:26	select new server	390	149	0
12:28	pull plug on Ooma	415	94	0
12:32	ran again	337	94	0
	ooma disconnected for next tests
12:35	reset router	44	25	0	74.248.232.157
12:37	retest	376	65	0
12:38	retest new server	37	1	0	picked same one
12:41	retest	37	1	0
12:42	retest	36	1	0		0.43	6.5
12:44	retest	40	8	0
12:48	retest	37	1	0
	ooma reconnected
12:49	retest	461	65	0
12:50	retest	37	1	0
12:51	retest

 
What does this mean?

The column headings mean:

• time- the time when I ran the test
• Action- what I did before running the test
• Ping- tests the time it takes for a round drip of the signal from my computer to some server on the internet
• Jitter- tests how much noise is on the network- a noisy network means you can't have good audio or video performance (eg Skype or internet based phone- VOIP)
• Pkt loss- tests the number of packets (the fundamental group of bytes of your message transmitted over the internet)
• IP- Address of the computer I am using to receive the test signals
• up- the upload speed in Mbps
• down- the download speed in Mbps

A good signal has numbers similar to the times from 12:38 through 12:48.  A bad signal is like the times from 12:25 to 12:37.

You can see that the signal is unreliable.  I tried disconnection our VOIP machine (OOMA) because our bad phone connection alerted me to the problem.  The tests show that the OOMA machine was not contributing to the noise.

It seems that what worked was to unplug the modem, and router, turn all the equipment off, and then plug in router, then modem, then VOIP machine, then other equipment.  However, as you can see, that did not guarantee a good signal. You can also see that any changes to the network, such as plugging or unplugging equipment, results in a bad network signal for some period of time.

My advice to you is to test your line whenever things seem slow.  You do this by going to two web sites:  http://www.pingtest.net to test the ping, jitter, and package loss, and http://www.speedtest.net to test the upload and download speeds.

Let me know when you get bad results and, if I am on line, I'll run the tests myself to determine if there is an ATT systemic problem.

An Example of How Your Personal Information Can Be Compromised

The following article on Web Servers came from this web page.  Apache is one configuration of a host web server.  Let me say it another way.  For most of you, your computer is either Microsoft or Mac OS based.  Servers have different bases; eg, Apache (on a Unix operating system) or IIS (on a Microsoft operating system).  Apache and other Unix-based web servers account for some 80% of all web servers.   (See this article for some current information on which operating environments are used for web servers.)

I am copying a portion of the web page here so you can see how malicious attacks make there way into servers, undetected by the host company, and from there they impact you.  The words are techie, but I can make the point:  You are at the mercy of companies that host web sites- the individuals that support the servers MUST know security, must correctly and intelligently configure the servers, and they must keep the software up-to-date.  I'm betting a large number of people in many hosting companies don't meet best practice criteria.  Be especially careful of offshore hosting sites and the websites residing on those hosts.

So read this as an example of best practices for hosting companies.

The latest high-profile attack aimed at Apache was uncovered by researchers at security firms ESET and Sucuri. Attackers managed to work a backdoor into Apache that redirected Web traffic to malicious websites, where visitors would be infected by the Blackhole exploit kit. This attack underlined the need for organizations to enact Apache security best practices and highlighted the serious fallout that can be caused by insecure Apache Web servers.

In this tip, we'll provide the best practices needed to secure Apache servers against modern attacks.

Apache security basics

In many cases, Apache server compromises are the result of outdated modules, configurations or even Web code hosted by the Web server. To combat these problems, the most recent versions of both Apache HTTP and its add-ons should be used; keeping the HTTP server up to date is absolutely critical. However, the current trend among attackers is to focus on external component frameworks, modules and add-ons that open up Apache HTTP to attacks to which it would not otherwise succumb. Keeping track of these new components is half the battle; the other half is ensuring that these packages are updated with patches and new versions as they become available. As always, remember to double check the source of a download when updating; clever attacks often try to disguise malware as a benign software update.

Beyond ensuring that updates are applied, organizations should also configure Apache HTTP Server to minimize the attack surface. While this may sound simple, there are dozens of considerations that only the system administrator can make (usually in collaboration with the Web developer). For example, a current trend with distributed denial-of-service attacks is to consume system resources while using the least amount of traffic possible. The effect of such an attack can be minimized by configuring parameters such asRequestReadTimeout, TimeOut, KeepAliveTimeout and MaxRequestWorkers to values that cut down on resource consumption. (More information about this can be found on Apache's website.) Other considerations for system administrators should include the following:

• Run HTTPd using an account with restricted privileges. Doing this will minimize the impact to the overall system, should an attacker manage to compromise the daemon itself.
• Deny the use of .htaccess files by configuring the AllowOverride parameter to None. This will ensure that htaccess files cannot be used.
• Configure mods such as mod_python and mod_php to use safe mode. Use this where it makes sense, but it may not be necessary in newer versions.
• Lock down the file system so that only root can overwrite the Apache binary. Doing this will prevent the httpd binary from being replaced with a malicious version.

Monitoring for Apache attacks

High-risk Web servers also have the most to gain from enabling mod_security, though all systems can gain some benefit. This module opens the door to a variety of tools that can be utilized to both detect and prevent attacks. You can choose to integrate this into your existing enterprise security model through IPS, IDS, NIDS and SIEM systems. mod_securityhas the ability to act like a Web application firewall, which is invaluable when serving Web applications that may not have the best input filtering.Even after putting protections in place to defend Apache servers, organizations must still be wary of attacks slipping through the cracks and wreaking havoc.To ensure that attacks don't go unnoticed, organizations should monitor their logs closely for signs of compromise. Enable a level of logging that makes sense both for HTTPd at a system level and with the Web daemon internally. A bash or python script can be easily constructed that will search the logs for certain terms, or the built-in syslogd command can be used to alert admins to potential errors or attacks. Effective monitoring and alerting requires a firm understanding of the content being served. Some content, such as use of LDAP for authentication, may behave in ways that would cause a less dynamic Web server to generate alerts. If your server is trying to use LDAP while the Web application is designed to use local authentication, there may be cause for alarm. Disabling mod_phpmay allow organizations to exclude attacks of that type from alerts, thus making real alerts that much more meaningful. For Web servers facing a high risk of attack, consider enablingmod_log_forensic to get an even more in-depth view of client requests.

Remain aware

By enacting these basic measures, it is possible to confidently secure Apache HTTP server and serve content with minimal risk of compromise. One of the most important parts of operating a secure system is keeping abreast of the latest security risks and software releases. Doing this, along with practicing diligent monitoring, will go a long way toward keeping your Apache instances secure.

About the author:Brad Causey is an active member of the security and forensics community world­wide and tends to focus his time on Web application security as it applies to global and enterprise arenas. He is a member of the OWASP Global Projects Committee and the President of the International Information Systems Forensics Association chapter in Alabama. Brad is an avid author and writer with hundreds of publications and several books. Brad also holds dozens of industry recognized certificates such as CISSP, MCSE, C|EH, CIFI and CGSP.

ATT is increasing DSL Rates

See this article for background.  The meat of the email they sent:

Dear AT&T High Speed Internet Member,

At AT&T, we value your business and strive to provide you with the best possible Internet experience. 
We're writing to let you know about a change in price for your AT&T High Speed Internet service. In an effort to continue providing you with the high level of quality, service, and features you've come to expect from AT&T, starting with your August 2013 bill¹, the monthly rate for your AT&T High Speed Internet FastAccess DSL Xtreme Direct 6.0 plan which you are currently enrolled in will increase from $48.00 to $51.00 per month.² If you meet the bundle qualifications, you will receive a bundle discount of $5/mo on the wireless portion of your combined bill for AT&T High Speed Internet Direct and AT&T Wireless.³ 

Which Computer Is Right for Me?

Suppose your old desktop went belly up today.  You need a replacement.  Or do you?  Which computer should you get?

To a techie, this is a challenging question.  Why?  Because there are so many assumptions and requirements that go into a decision, and I want to make all of them explicit.  My personality wants to make a flow chart that pulls out all the assumptions, considers all the technical possibilities as well as the financial issues, and, when used, recommends just the right "computer"  (desktop, laptop, netbook, iPad, tablet, smart phone, camera, microwave oven, or whatever).  However, I do realize that by the time I finished the flowchart, it would be out of date.  By the time you had gone a couple of steps, you would be saying "what is this guy doing?  Good grief!"  Or words to that effect.

So, I'm going to take some shortcuts by stating some basic assumptions and then giving you a couple of choices that are reasonable, though perhaps not the absolute best, if all options were considered.

Assumptions on Usage:

• eMail
• Browsing the web
• Some business documents
• Photo storage, but not fancy photo editing
• Some video streaming, but not video editing
• (optional) music storage, some listening, but no intense audio and no editing
• Some book reading using a PC/Mac app
• Taxes and home business
• Skype or similar
• Simple games, like solitaire; no high intensity interactive games

Quality:  It used to be computers were manufactured for around a 10 year life span, though individual components might fail.  Some computer brands might strive for that today, but the majority seem to be designed to last through the warranty period.  Realistically, figure that a computer has a expected life span of 3 years.  Why the drop in quality?  My background is computer design and manufacture.  The short answer has two parts.  First, we are dealing with China as the primary manufacturer.  They will cut corners and use inferior materials whenever they can get away with it.   Both by specification and by culture, they will pass up the kinds of tests that weed out those computers that will fail early (called early life failures).  Second, the technology continues to change at a high rate and margins are shrinking.  So they figure customers should and will buy a computer every three years.

Recommendations:  First, type "home desktop reviews" in your search engine and visit a couple of sites.  Here is one.  Second, look for "home desktop quality repair" to find something recent on quality.  My own experience is that HP has the poorest quality.  Dell comes next.  Lenovo and Asus seem to have the best quality, but you have to be careful there to make sure the mother board has been properly tested.  (See quality discussion.  I'll have to write another article on how to tell at a later time.  For now just assume they are OK.)  All the rest are in the middle, changing positions depending on the article.  Oh, Macs... most articles will rate Macs highest in quality.  Of course they cost more for what you get.  On the other hand, my experience on Mac quality is mixed.

Features you will need:

• i5 Processor.  There are several speeds and several models.  Get the latest generation (4) if it is in your budget range.  Read some background here.
• 1TB hard drive should be enough
• 8 GB RAM  (if you can spring for 16GB, the more the better)
• ethernet port 10/100/1000... make sure the 1000 is there
• At least 2 USB 3.0 ports and some 2.0 ports.  You'll need the 3.0 ports for the newer flash drives and plug ins.  3.0 is much faster. 
• At least 1 HDMI port.  If you want to run 2 monitors at once, make sure there are 2 digital video outputs  (the white video outs or HDMI).  Here you have to make some decisions on your monitor.  Most of the older monitors only have an analog port.  (that 15 pin \   / shame).  Link to explanation of video output types. You'll need to move away from that.  
• Video should support HD (1080p)  (Explanations)
• Audio doesn't make that much difference given the assumptions.  
• A DVD reader/writer.  Blue ray if you think you will watch blue ray
• Microphone input
• Bluetooth can substitute for some USB ports, especially for laptops

Note that I did not include one of those devices where you can plug different kinds of flash cards into the computer.  That isn't necessary given the assumptions.  I assume you can plug any phone or camera into your computer using a USB cable.

Regarding operating system... For Apple you have one choice.  For a PC, you can have Windows 7, Windows 8, Google, or some Linux variant, such as Ubuntu.  Discussion of these is beyond the scope of this post.  Though Windows 8 reviews tend to be hysterically on the negative side, I haven't found a problem with it.  But you would need for me to show you how to use it in a way that feels familiar to you- kinda works like Windows XP.  If you just don't want to deal with it, you can usually get Windows 7, but that will be less and less true.

Some miscellaneous comments:

• All in ones, where the screen and computer are combined... They tend to be hard to service and can run hot. It is up to you but I wouldn't get one.
• The small desktops.  These run from about a foot tall to hockey puck size.  The latter doesn't have the features.  The former may have the features, but my experience is that they don't have adequate heat management and, therefore, tend to fail earlier.
• Laptops instead of desktops:  whatever you want- do the cost tradeoff.  Remember, you can use a separate keyboard, mouse, and monitor.  

Now, some suggestions on models.  I will keep to under $700 (I will add to these in the next couple of days):

• ASUS CM6730-US010S 
• I wasn't able to find a comparable in a Lenovo... it doesn't appear they are in the standard size tower business for the specs I gave above. 
• Lenovo IdeaPad G780 Brushed Metal Laptop Intel Core i5-3230M 2.6GHz (a laptop- look at Costco site)  The screen isn't super good, but you can always get another monitor

Ultrabooks- light and many hours on a battery charge

Ultrabooks are light laptops that can be both fast and have long battery life.  For many people, including me- this is a design point that is very attractive.  There are tons of articles on individual ultrabooks, aggregate ultrabook reviews, and tips on buying them.  I'm not going to recommend any particular brand or size, but I'll  list my desired design points:

1. less than 3 lbs
2. i5 processor (not i3)
3. Windows 8 or Linux (Ubuntu)
4. Full HD 1080p
5. At least 1 3.0 USB and a total of 3 USB
6. digital video output (usually HDMI).  I would use a second monitor for work at home
7. At least 6 continuous hrs battery life- this means the flash storage needs to be fairly large:  at least 64 Gig.
8. The flash drive or SSD drive, may be all you get.  Remember that flash drives have a limited lifetime (about 10K changes to an individual bit.).  The drives are designed to minimize changes per bit, but this is still a consideration.  My best design point would be a machine that allows SSD only operation in power saver mode but it has a regular hard drive that can run when in a higher power mode.  Otherwise, be sure you back up everything of interest or importance.  When the drive goes, replace it.
9. Screen size- this is driven by #1- weight.  Also, if you want to use this in a plane, then stick with the smaller screens
10. Keyboard:  I like a touch keyboard, which means chicket keys are harder to use.  Test the computer before you buy.

I haven't said which brand, but Apple certainly has good characteristics.  However, it is way more expensive than some others.  Most of you know that I have been down on Apple because the quality seems to be less than stellar.  Having been in computer manufacturing for most of my career, I know the Apple markup is large- my guess is 35-40%.  Apple is also harder to integrate into a home network.  eMail can be a problem, especially when you try to use ATT with the Apple Mail program.

Any questions.

Sometimes you can't play HD TV shows and movies. Why not?

Many people use video streaming to watch TV shows and movies.  Video streaming is where the show or movie contents is sent over the internet and displayed on your TV or computer monitor.  One key requirement for streaming is that your internet connection is fast enough that the information needed to display the screen images arrives at your TV faster than your TV displays the images.  Otherwise, your show will lurch- start and stop- as the TV waits for the streaming information to be delivered.  I imagine most of you have experienced this.

Popular sources of streamed video include YouTube, Netflix, and Amazon.

I wanted to make you aware of one particular problem with streaming.  It has to do with viewing HD shows.  Sometimes, even though you have a fast internet connection and a monitor or TV that can display HD, you still can't see HD.  The following is a not I got from Amazon regarding this issue:

"At this time, playback for HD movies is not supported on the devices like Wii / Wii U GamePad / PC / Mac / Google TV / iPad / iPhone / iPod touch. 

However I've forwarded your feedback to our development team. They will work on it in next improvements. Customer feedback like yours is very important in helping us continue to improve the experience of using our digital video service. 

You can watch HD Movies and TV shows on the following devices: 

-- Wii U TV monitor. (The Wii U GamePad supports standard definitions video.) 
-- TiVo Series 3, HD, Premiere & XL 
-- Roku 2HD, 2XD, 2XS, LT, XD, HD-Streaming, HD Player 
-- Xbox 360 
-- PlayStation 3 
-- Kindle Fire HD models 
-- Certain HDTVs and Blu-Ray players from LG, Samsung, Vizio, Panasonic, and Sony 

If you attempt playback on a device that does not support HD, we'll automatically provide a standard definition version of the video to watch on that device. While HD movies cannot currently be accessed on a Mac or PC, you do have the option to stream HD TV shows. You can also stream HD TV shows on Google TV. 

To learn more about Amazon Instant Video compatible devices, visit: 

http://www.amazon.com/gp/video/ontv/devices "