2008-03-21

Google's New Gmail Code Solves Conflict with Safari 3.1

As we mentioned before, there was a painful conflict between the new Safari 3.1 and the older Gmail code (UI 1) still active for some users. Google is now pushing out the newer codebase, and it appears to solve the problem (at least for us).

As Google, says in their blog post:

How to access what's new:
Just sign in to Gmail. You'll know when you're in new version of Gmail when you see a link for "Older version" at the top right of the screen.
Links:
Gmail blog post - feature list


FYI-YMMV

2008-03-18

When Will Apple Require Code Signing in Mac OS X?

After reading Roughly Drafted's recent article on the iPhone SDK's code signing requirements, I began to think about how this might be applied to Mac OS X. Then, I remembered the new Application Firewall in Mac OS X 10.5 (Leopard).

Starting with 10.5, Mac OS X is able to differentiate between signed and unsigned applications and can provide different levels of access to each. This functionality is exposed now in the new application firewall. A related feature is obvious, when Leopard warns you the first time you run a downloaded application.

Here's Where Things Get Interesting
The same system of code signing used by Apple for the iPhone could be applied directly to the Mac too. And the same system of iTunes distribution could be used for the whole application or simply for purchasing and delivering license codes. Optionally, Apple's existing "Software Update" system could be used to delivery the actual application files.

What if Apple decided to take this next step in computer security to maintain it's lead over Microsoft. They could implement a partially optional code signing system for Mac OS X. Signed apps would have full security privileges. Unsigned apps might generate a warning similar to a recently downloaded application until silenced. Or at the user's option, unsigned applications might not be allowed to run, or might be heavily restricted.

This would make it virtually impossible for trojans and most malware to get installed. And if the warning for unsigned apps repeated (say, daily, weekly, or monthly), it might effectively disable some malware simply by repeatedly asking for permission.

Apple can restrict the security privileges of their own software so that even exploits based on buffer overflows or other issues can be limited to specific security rights in a "sandbox". And a third party application's signature could limit it in the same manner.

I think this could be an elegant way to extend security without creating too much additional user inconvenience.



Leopard Application Firewall background here at Geek Precis:


Apple Links:

Painful Conflict Between Safari 3.1 and Gmail (UI 1)

With the new release of Apple's Safari 3.1, it has become clear there is a conflict between it and Gmail for folks using version 1 of Gmail (which includes most Google Apps and some localized accounts). When trying to type in the rich text fields, the modifier keys cause the focus to change. Trying to type a capital "I" by pressing shift will cause the focus to leave the rich text field without every typing the "I".

To say this is annoying is a major understatement. It is maddening,

Workaround:
If you can, switch to the "new" version 2 Gmail. If the new version is not available, you might be able to switch from "rich text" to "plain text" to avoid the problem.

This has been a known issue through the development of Webkit, so I'm not sure how Apple and Google could have let this very annoying problem happen. Hopefully, they will get it fixed ASAP.

Apple Releases Safari 3.1 for Mac and Windows

Apple has released Safari 3.1 for both Mac and Windows. Apple has incorporated the latest WebKit changes. Here are some highlights from Apple's changelog:

  • Support for CSS 3 web fonts
  • Support for CSS transforms and transitions
  • Support for HTML 5
  • Support for offline storage for Web applications in SQL databases
  • Support for SVG images in elements and CSS images
  • Support for SVG advanced text
  • Improved stability and compatibility
  • Improved Security
  • Improved JavaScript performance
  • Developer features including an optional menu
  • Windows version fixes and improvements

2008-03-17

Great File Systems Article at Ars

Here's a great article on the history and features of various file systems at Ars Technica.



2008-03-04

A Fix for Slow WiFi 802.11 File Transfers under Mac OS X Leopard 10.5.2

While trying to transfer files from a wired iMac running 10.5.2 to a wireless MacBook Pro running 10.5.2, I ran into extremely slow transfers.

I was attempting to copy the free part of Nine Inch Nails' new album and decided to leave the slow transfer plodding along, while I researched the issue. It seems I was not the only one having this problem (Apple Support Discussion link).

It appears likely the problem has crept in with the 10.5.2 update, and it dramatically slows wireless transfers under some conditions. It seems to affect a variety of wireless Macs connecting through a variety of wireless router brands including Apple.

Based on some of the posts, it appears the problem is related to "silly window syndrome" which causes confusion with the normal packet acknowledgment process in TCP/IP. Due to this confusion (which may be caused by edge cases of transfer size and timing), both machines basically pause waiting for the other to say go. In the fast and furious world of TCP/IP, this shows itself as a dramtic slow down in large transfers, while it may not be so noticeable in smaller transfers.

But there is a fix (or at least a workaround). You can change your Mac's default ACK setting from 3 to 0 with the following Terminal command:

sysctl -w net.inet.tcp.delayed_ack=0

And you change it back to the default of 3 with:

sysctl -w net.inet.tcp.delayed_ack=3

Or you can simply check you existing setting with:

sysctl net.inet.tcp.delayed_ack

Note: You will likely need to preface any command changing these settings with "sudo" and enter your admin password to use your root account privileges.

Hopefully, Apple will roll out a more elegant and more permanent solution soon.



Additional Links:
Related Technical Paper
Script to make the ACK change on login
MacOSXHints

2008-03-02

Mac Backup Solutions

A while back, a friend of mine asked if I could help him recover his data and digital photos. His PC had had problems and the manufacturer's support team had recommended he use the "restore" disc that came with the PC. They said his data would be preserved, but it was not. He lost a great deal of important data and invaluable photos of children and family.

It convinced me I needed to become more serious about my own backups. While I have always maintained backups of my text and documents, digital photography and digital music have greatly increased the size of my own dataset. In working through the issues involved, I gathered a great deal of data I thought I would share.

Background
In the world of Mac backup solutions, I think most solutions differ in five generalized types of functionality:

Cloning vs. Snapshots
Solutions creating clones or duplicates help you maintain an exact copy of your most recent data. They do not help you maintain a history of snapshots or changes. By benefit of not keeping track of multiple versions of your files, they can be simpler and faster to deal with in a data loss situation. In short, if you have a clone of your disk, you can be back up and running quickly, in case of a disk failure. However, a clone probably will not help you find a file you deleted or changed a month ago.

A snapshotting solution will keep different time-based versions of your data. If you work on a single data file over the course of a month, a snapshot system will keep copies of different versions of that file at various points in its change history.

Onsite vs. Offsite/Internet
Onsite backups are stored at the same physical location as the original data. This is inherently dangerous. In case of a fire or flood, your backup would be lost along with the original data.

Offsite backup consist of backups stored at any location different than the location of the original data. At a bare minimum, it is desirable to move your backup away from your computer to help in case your equipment is stolen. At the other end of the offsite spectrum are enterprise backup solutions provided over the Internet. In that case, you data is likely stored far away in a secure and protected bunker.

The trade offs are fairly clear: the closer your backup is, the easier it is to use or lose. Internet services are good for data protection, but your ability to get your data to them will be limited by you upload speed to the Internet.

Manual vs. Automatic
Some backup solutions are automatic and go about their business without any human intervention, and some do absolutely nothing until told to do so. As humans are generally the least reliable part of a backup system, automatic is usually better than manual.

Backup Medium
While I am assuming your original data resides on a hard disk or disks, your backup could be in many different formats. Some people make backups of their data to optical disc such as CD or DVD or to a flash key. Many modern backup systems backup to hard disks or tapes, and Internet solutions are "black boxes" in that you don't really know (or care) how they store your data (although it is likely stored on hard disks in a SAN environment).

Full Backups vs. Differential
Most backup programs will back up your data in one of two ways: 1) a full backup that is a new and complete backup of your data, or 2) an differential or incremental backup consisting only of data that has changed or been added since the last backup. A full backup can take longer to backup because it must backup all your data, whether it has changed recently or not. However, a differential backup can take longer and be more difficult when restoring data, because you need all the differential backups to have all of your data.

While everyone would like to be dealing with full backups in a recovery situation, datasets are becoming so large as to become impractical in some cases to make frequent full backups.

Solutions
SuperDuper!
SuperDuper is an excellant cloning application. It can automatically maintain a bootable backup of your boot disk and/or maintain clones of your data disks. This functionality can invaluable, if downtime is your biggest fear. If you have maintained a bootable clone of you disk and have a failure, you could be back in business by simply booting from your clone.

It has recently been updated to v2.5 for Leopard (Mac OS X 10.5) and Time Machine compatibility. The basic functionality of manually cloning drives is free, and the full app is only US$27.95 .

iBackup and rsync
"rsync" is an open source utility providing file synchronization on many platforms. It provides for too many features to mention, but it is mainly used for cloning of particular datasets/folders and keeping them up-to-date by only overwriting the files that have changed. This makes it very efficient.

iBackup expands on and provides a GUI to rsync. It allows you to use the GUI to select what files you want to sync and to schedule the synchronization to occur automatically. It is free for non-commercial use and relatively inexpensive for business use.

Time Machine and Time Capsule
Time Machine is Apple's new backup solution in Leopard Mac OS X 10.5 providing snapshot-style backups of your data to a separate disk on an automatic basis. Once you have activated it, it checks for changes every hour and archives those changes. As Apple's web site says, "Time Machine saves the hourly backups for the past 24 hours, daily backups for the past month, and weekly backups for everything older than a month."

Time Capsule is Apple's combination of an Airport Extreme Base Station and a hard drive. It provides storage and is available for use by Time Machine over your wired or wireless B, G, or N network. This allows you to use Time Machine to backup all the Mac's on your network to one device, and it comes in Time Capsule (500GB) and Time Capsule (1TB) models.

ZFS
ZFS is Sun's open source files system which provides many useful features. I include it here, because it can provide many backup-like features, and Apple may be relying on it in future releases of Mac OS X. It can provide filesystem snapshotting and RAID features across different hard disks. Right now, it is probably too complex to use for most consumers.

While ZFS is not a backup solution per se, I have included it for completeness, and because it is interesting.

RAID
RAID is a redundant array of inexpensive disks. Various RAID configurations can be used to protect your data by redundantly storing it automatically on more than one disk during live use or used to speed data transfer by transferring data from more than one disk at a time during live use. Some RAID configurations offer a combination of increased speed and increased redundancy.

The most basic RAID configuration for our purposes is RAID 1 which consists of "mirroring" your data across two drives transparently. Basically, any time data is written to one disk it is also written to the other. If one disk fails, the other still has 100% of the data. This can be expensive, because two disks are holding data that would fit on one disk.

RAID is not really a backup solution, but the redundancy it can provide can improve your situation in case of a hardware failure.

.Mac Backup
Backup is Apple's (not very creatively) named backup program for .Mac subscribers. It can perform automatic differential backups to local disks, optical discs, and to your iDisk.

Mozy
Mozy is an online backup solution for PC and Mac users, and it is now owned by enterprise storage vendor, EMC. It is available for free for up to 2GB datasets and inexpensive for unlimited storage. in any case, Mozy will store your backup data going back 30 days. The Mozy client software allows you to select the files to be stored as well as a few other options.

As with any Internet-based service, Mozy will be limited by you Internet connection speed.

S3 and Jungle Disk
S3 is Amazon's Simple Storage Service, and it provides unlimited storage in a pay-as-you-go format. Once you have an account, Amazon will charge you a relatively small amount of money for the data you upload, download, or leave stored on their service. The storage is fairly free form, so it does not directly provide any backup features.

Jungle Disk is an application front-end for S3 and provide easy access to S3 features.

CrashPlan
CrashPlan is a slightly different animal. It is a software package that allows you to use another computer running CrashPlan software as a storage location. You and a friend could provide an agreed upon amount of backup space to each other, for example. It is a friend-to-friend (as opposed to anonymous P2P) solution providing offsite backup and working on Mac, Linux, and Windows platforms.


What are you using to backup your data?