Archive for September, 2019

So What Is This Security Flaw In iOS 13 That Everyone Is Talking About? Here Are The Details.

Posted in Commentary with tags on September 20, 2019 by itnerd

Last night I wrote that Apple had released iOS 13 despite the fact that a security flaw was present and unpatched that allowed someone with physical access to the phone to bypass the lock screen and get access to contact info on an iPhone. What’s worse was that this was reported in July but Apple didn’t bother fixing it in iOS 13 before it shipped yesterday. But the only good news is that it is fixed in iOS 13.1 which is due for release next Tuesday. Which every user of iOS should immediately update to the second that it becomes available.

So, how do you pull this off? Here’s a video that shows the process:

In short, what this guy did is start a FaceTime call and then accessed the voiceover feature from Siri to enable access to the contact list. You can then obtain email addresses, phone numbers, address information, and more from the list of contacts. I have replicated this on an iPhone running iOS 13 and it is very easy to do.

It’s also very easy to protect yourself. You just need to go to Face ID & Passcode settings -> Allow access when locked and toggle off the Reply with Message option. If you’ve already updated to iOS 13, you should go do that now to protect yourself. As in right now.

Advertisements

iPhone 11 Now Available At TELUS

Posted in Commentary with tags on September 20, 2019 by itnerd

Apple’s latest products are now available at TELUS stores nationwide and online including iPhone 11 Pro and iPhone 11 Pro Max, a new pro line for iPhone, as well as the new dual-camera iPhone 11 and the Apple Watch Series 5 with Always-On Retina display. The new seventh-generation iPad will be available on Monday, September 30.

Value-added services such as AppleCare+ are available at TELUS with flexible payment options, in-store diagnostics and replacements. TELUS customers who visit in-store will receive one-on-one support from dedicated personal representatives, while also being able to take advantage of personalized one-on-one TELUS Learning Centre sessions lead by our Apple Masters.

Customers can take advantage of the Bring-It-Back program and receive up to $780 off depending on the device, when they agree to return it in good working condition to TELUS at the end of their two-year term. Additionally, TELUS Easy Payment device financing allows customers to get any smartphone in their lineup for as little as $0 upfront, combined with new Peace of Mind rate plans that offer endless data without having to worry about overage charges.

For more details on pricing and data plans, please visit telus.com/iphone.

Review: 2019 Mazda CX-5D Signature – Part 5

Posted in Products with tags on September 20, 2019 by itnerd

So I’ve come to the end of my week long review of the Mazda CX-5D Signature. My final fuel economy was 8 L/100KM’s which I got in a mix of city roads and highways, not to mention a lot of rush hour traffic. I am pretty sure that I could have gotten better as I know that the diesel engine is capable of getting better fuel economy. Still it did better than the numbers that Mazda said that I should get. Thus I am not complaining and neither will anyone who buys this vehicle.

The closest competitors to the CX-5D Signature were hard to come by as there aren’t a lot of diesel vehicles left in the Canadian marketplace. But here’s the short list that I came up with:

  • Land Rover Discovery
  • GMC Terrain
  • Chevrolet Equinox

Now one of those vehicles is a luxury vehicle, which may make you think about why I put it on the list. Here’s the thing. With the interior that the CX-5D has, it deserves to be on that list as it is simply a class above the GMC and Chevy. And easily competitive with the Land Rover as long as you don’t go for something uber upscale. Like leather from some sort of sacred cow or something which would cost your right arm. Even if you didn’t you’re going to pay thousands less for the Mazda.

Speaking of dollars and cents, the CX-5D Signature goes for $45,950 before freight and taxes. That’s a $5000 premium over the CX-5 Signature with the 2.5 L turbo engine that I reviewed earlier this year. But you do get 2 years/32000 KM of scheduled maintenance as part of the deal. Plus on top of that you get a $300 CDN accessory credit as well. Both of those will sweeten the pot to make you want to jump to the CX-5D.

For it to be worth it to you, I’d say you’d have to do a lot of highway driving as that’s where this engine shines. Or you have to be someone who has had a diesel in the past and you want something new. If you fit either use case, I would say that you have to run to your Mazda dealer and test drive the CX-5D Signature today.

 

If You Haven’t Updated To iOS 13 Yet, DON’T UPDATE

Posted in Commentary with tags on September 20, 2019 by itnerd

I’ll get to the point. iOS 13 which was released yesterday is a hot mess. While it is typical for new software releases to have issues, the scale and breadth of issues found in iOS 13 is above and beyond anything that iOS users are used to. And then there’s that security issue that Apple never bothered to fix in iOS 13 despite knowing about it in July.

The major issues that are being reported are:

  • In Mail the name of whoever sent a message is replaced by the words “No Sender.” That can usually be fixed by restarting your iOS device.
  • Apps crashing on launch
  • AirDrop working sporadically
  • Cell signal problems

But there are others. This is one that I discovered:

And that is on top of the fact that Apple pulled promised features from iOS 13 such as automation functionality and the Maps ETA functionality.  I could go on, but I think you get the point. Apple clearly rushed iOS 13 out the door. Likely so that they can make the ship date for the iPhone 11 which goes on sale today.

That would never have happened under Steve Jobs.

Thus my advice is that unless you really need to upgrade to iOS 13, wait until next Tuesday for iOS 13.1. That according to those I know who run the public betas as well as the developer betas is far more stable than iOS 13 which one developer that I know described it at “lacking the polish of typical Apple betas.” That tells you all you need to know.

Mark your calendars for next Tuesday at 1PM EST/10AM PST.

Dero Now Offers Easy Bike Storage Access via Smartphone

Posted in Commentary with tags on September 19, 2019 by itnerd

Dero is excited to offer easy bicycle storage access via smartphone for its Dero Single Locker™, Dero Double Locker™, Vertical Locker, and Two-Tier Locker. Dero has partnered with Movatic to offer Bluetooth locking capabilities to these bike lockers. Using Android or iOS smartphones, bicyclists can instantly find, rent, unlock, and pay for bike parking.

vcsPRAsset_1159860_120784_bdb09437-7ec2-4835-8bef-105cf8f8d518_0.jpg

Transit agencies, municipalities, universities, and private businesses can easily setup and manage private or public systems using Movatic’s powerful set of admin tools with access via admin, email, or password authorization. This automated system makes it so administrators can focus on offering bike parking facilities to bicyclists rather than the headache of micro-managing them. The software is intuitive and makes it simple to charge and control access.

Programs can also choose to customize in-app branding and upload logos, brand colors, and banner images. Movatic’s admin app and website are designed to easily manage programs and respond to user issues, set pricing, and track the system’s performance. Its seamless payment software lets programs set rates, issue refunds, reconcile transactions, and receive deposits automatically. Coupons and memberships are supported.

 

Martello Showcases IT Operations Analytics Technology Used by City of Ottawa in Economic Mission to the Netherlands

Posted in Commentary with tags on September 19, 2019 by itnerd

Martello Technologies Group Inc. announced today that its IT operations analytics software is helping the City of Ottawa to visualize and manage the performance of its IT infrastructure with simple service-oriented dashboards. The solution will be demonstrated today during a site visit to Martello’s Amsterdam location, as part of an economic mission to the Netherlands led by Ottawa Mayor Jim Watson.

Running an IT infrastructure across hundreds of locations serving close to a million residents can be challenging, and Martello’s software makes IT service delivery more efficient for government organizations like the City of Ottawa. Martello provides a simple, clear overview of the performance of applications like System Center Operations Manager (SCOM), Office 365 and Azure, with service-oriented dashboards. The software also reduces alert noise and helps manage application license inventory.

Martello acquired Amsterdam-based Savision in November 2018, and the Company’s Amsterdam office is now its European sales hub. Year over year, Martello’s European  revenues have increased by 198%, and the Company counts many leading Netherlands businesses as customers, including Onepoint, Leiden University Medical Center and KPMG Netherlands.

Martello’s solutions have been widely acclaimed in the industry. In September 2018, Martello received a Frost & Sullivan Leadership Award for NPM (Network Performance Management) and ranked as Ottawa’s Fastest Growing Company, at No. 28 on the Growth 500 list of Canada’s Fastest Growing Companies. In June 2019, Martello was recognized for the second consecutive year on the widely respected Branham300 listing of Canada’s top ICT (Information and Communications Technology) companies.

iOS 13 Gets Released…. And If You Upgraded You Could Get Pwned

Posted in Commentary with tags on September 19, 2019 by itnerd

iOS 13 was released today. And before the release I put up a post that said this:

One other thing before I go, Apple has announced that iOS 13.1 will be released two weeks from today. Early reports from beta testers say that it has additional features and significant bug fixes and stability improvements versus what is in iOS 13. Thus you may want to consider not upgrading to iOS 13 and instead wait for iOS 13.1 to hit the streets before you upgrade.

Well, it seems that iOS 13.1 will be out next Tuesday, and here’s why

A flaw in iOS 13, the new iPhone operating system Apple released Thursday, exposes contact details stored in iPhones without requiring a passcode or biometric identification. And Apple (AAPL) has known about the flaw since July, a person who reported the bug to Apple told CNN Business.

A hacker would need physical access to a target’s phone to complete the hack — but once it is in their possession they could bypass Apple’s standard security features like facial I.D. Once they have done so, they can access the phone’s address book and see information for contacts stored on the phone, as well as indications of the most recent contacts with whom the phone’s owner had been communicating.

This flaw, which is pretty bad, is on top of the fact that iOS 13 is as expected, buggy. And Apple didn’t fix this so the guy who found this went public.

#EpicFail

But the good news is that iOS 13.1 which is far more stable and doesn’t have this flaw is being released on Tuesday. But Apple should have fixed it in iOS 13 given that they had two months to do it. You have to wonder if Apple really takes software quality and security seriously because it seems that they don’t and haven’t taken it seriously for a while.