<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>A Geek&#039;s Life ™ &#187; Security</title>
	<atom:link href="http://ageekslife.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://ageekslife.com</link>
	<description>Life in the key of Geek</description>
	<lastBuildDate>Thu, 01 Jul 2010 19:54:54 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Where&#039;s (isn&#039;t) Waldo?</title>
		<link>http://ageekslife.com/2008/05/wheres-isnt-waldo/</link>
		<comments>http://ageekslife.com/2008/05/wheres-isnt-waldo/#comments</comments>
		<pubDate>Wed, 14 May 2008 13:55:44 +0000</pubDate>
		<dc:creator>Michael Gaines</dc:creator>
				<category><![CDATA[Geek Stuff]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Social Media]]></category>

		<guid isPermaLink="false">http://www.geekfridge.com/?p=189</guid>
		<description><![CDATA[About a year or so ago, my aunt and uncle wanted to have a new carpet installed in their home. They worked with the installers to determine a time that they can come over to install the carpet based on their work schedule. They said that looking back, they apparently gave too much information about [...]]]></description>
			<content:encoded><![CDATA[<p>About a year or so ago, my aunt and uncle wanted to have a new carpet installed in their home. They worked with the installers to determine a time that they can come over to install the carpet based on their work schedule. They said that looking back, they apparently gave too much information about when they won&#8217;t be home and a few days later, were robbed clean. Everything.</p>
<p>When I started working on my &#8220;better Twitter&#8221;, one of the coolest ideas I had was to marry GPS with your message, so that you can say &#8220;I&#8217;m having a beer&#8221; and you could also geotag your location to show which bar you were at. This was the idea that motivated me into working on the project until I had one sobering moment:</p>
<p>Saying where you are might be cool, but it&#8217;s also saying where you&#8217;re NOT.</p>
<p>Maybe I have a streak of paranoia in me, but I wasn&#8217;t sure if I wanted to be the one responsible for creating  a system that allowed others to track people. Dare I use the word &#8220;stalk&#8221;?</p>
<p>A system like that would be excellent for finding friends, which is actually what <a href="http://www.brightkite.com" target="_blank">Brightkite </a>does now. If you&#8217;re at Yankee Stadium, you can see if someone on your friends list is also there. You would also be able to perhaps meet up with people that you may have only seen on Twitter or Seesmic.</p>
<p>I decided to create some tips for people that may help in at least minimizing any fear they may have.</p>
<ul>
<li>Only allow trusted friends to see where you are.</li>
<li>Keep your list of trusted friends small.</li>
<li>Don&#8217;t broadcast your location on Twitter.</li>
<li>Make sure that the system will be able to delete where you&#8217;ve been if you request it.</li>
<li>If you feel the need to talk about your day, mention it while on your way back.</li>
<li>Don&#8217;t mark someone as a trusted friend if you haven&#8217;t actually spoken to them.</li>
</ul>
<p>I&#8217;d also like to suggest that the system offering such information about a person&#8217;s location should log the IP address of any computer used to access that information.</p>
<p>I can see in the very near future that people will be sending their positions on a regular basis, I&#8217;m just hoping that anyone looking at that information will do so responsibly.</p>
]]></content:encoded>
			<wfw:commentRss>http://ageekslife.com/2008/05/wheres-isnt-waldo/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Leopard file sharing warning</title>
		<link>http://ageekslife.com/2007/10/leopard-file-sharing-warning/</link>
		<comments>http://ageekslife.com/2007/10/leopard-file-sharing-warning/#comments</comments>
		<pubDate>Tue, 30 Oct 2007 17:58:23 +0000</pubDate>
		<dc:creator>Michael Gaines</dc:creator>
				<category><![CDATA[Mac Stuff]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.geekfridge.com/?p=162</guid>
		<description><![CDATA[There are times when I need to access files from home. With Leopard&#8217;s new Back to my Mac, I&#8217;m finally able to do screen sharing and file sharing. However, there are security concerns I have with it. By default, the first sharable folder is your public folder. Apple then adds three entries into the list [...]]]></description>
			<content:encoded><![CDATA[<p>There are times when I need to access files from home. With Leopard&#8217;s new Back to my Mac, I&#8217;m finally able to do screen sharing and file sharing. However, there are security concerns I have with it.</p>
<p>By default, the first sharable folder is your public folder. Apple then adds three entries into the list of users that have access to it: you, with read and write access, and &#8220;Unknown&#8221; and &#8220;Everyone&#8221; with read-only access. You can remove &#8220;Unknown&#8221; and change the access for &#8220;Everyone&#8221; to &#8220;No Access&#8221;. That&#8217;s fine.</p>
<p>However, there&#8217;s an entire drive I wanted to share that only I had access to. So I added the drive, deleted &#8220;Unknown&#8221;, but when it came to removing access for &#8220;Everyone&#8221;, this is what I got:</p>
<p><img src="http://www.warpfactorzero.com/wp-content/uploads/2007/10/accesslist.png" alt="accesslist.png" /></p>
<p>That&#8217;s right. I can&#8217;t set it to &#8220;No Access&#8221;! I tried it using Guest access under Apple File Protocol and sure enough, I had full read-only access to my private data.This is completely unacceptable. Sure, I can get around it with file permissions, but that&#8217;s not the point. Apple put this in place with drop-down menus so that I have full, easy control over who sees what. Disallowing &#8220;No Access&#8221; to a shared folder is wrong, and Apple needs to fix this ASAP.</p>
<p>The solution? You need to do a &#8220;Get Info&#8221; on the drive. Then you get this dialog:</p>
<p><img src="http://www.warpfactorzero.com/wp-content/uploads/2007/10/getinfo.png" alt="getinfo.png" /></p>
<p>You click the lock to unlock the dialog, change the preferences there, close the Get Info dialog and then you&#8217;ll get this in the Sharing dialog:</p>
<p><img src="http://www.warpfactorzero.com/wp-content/uploads/2007/10/updatedaccesslist.png" alt="updatedaccesslist.png" /></p>
<p>Now everything is good.</p>
<p>I&#8217;m still worried that most user&#8217;s will either not notice this, or not know how to fix the problem. Worse, Apple gives a false sense of the ability to change this setting in the Sharing dialog by offering a drop-down menu for options the user can&#8217;t set from there.</p>
]]></content:encoded>
			<wfw:commentRss>http://ageekslife.com/2007/10/leopard-file-sharing-warning/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

