Friday, May 29, 2015

One password to rule them all or not.

A friend recently told me she uses the same password for everything. After nearly shocking to death from this horrible confession. I told this heathen she had many options. This post is for you, master of the P@55w0rd.

There are may password managers applications and software available. Here's my comparison of (what I believe are) the most popular choices.

KeePass Password Safe is a free, open source and it's OSI certified. Cross platform. There are many mobile apps. I tried these for iOS and Android. But the choice is yours.


PROS
  • Open-source. Currently there are two versions
  • Mobile apps available
  • Lots of plug-ins
  • Portable (optional)
  • Syncs with Dropbox
  • Lightweight
CONS
  • Very manual compared to others.
  • Not an official mobile app
  • Many of the apps have poor support or lack features (mainly iOS)
  • Confusing which is the better options/choices of add-ons and mobile apps

#2 LastPass
Lastpass is one of the cheapest password managers available for about $12 a year or $1 a month. They have apps for Android, IOSWindows phone and Blackberry (yes, blackberry still a thing). It also works on Linux, PC and OS.


PROS
  • Works everywhere (Syncs with multiple devices and platforms)
  • Has plugins for many browsers (Chrome, Firefox, Opera and Safari)
  • Ask to save new usernames and passwords as you log in (if not in database)
  • Backup your password on their servers
  • Passwords are encrypted locally
  • Create as many entries
CONS
  • The mobile app feels unpolished (Android and iOS)
  • Support E-mail only
  • Passwords are kept on their servers

1Password is a multi-platformfreemium proprietary software password manager. And one of the most polished options in the market. It is feature packed and user friendly.


PROS
  • Mobile app for Android and iOS with *finger print unlock. *(Feature coming soon for Android)
  • Can sync with Dropbox, WIFI, iCloud
  • Constant updates to both mobile app and computer program
  • Great costumer support
  • Many mobile apps support form-filling from within the log in menu
CONS
  • NO Windows Phone or Blackberry apps
  • Pricey, a separate license has to be purchase for mobile, OSX or Windows to unlock all features
  • If you change you Master Password it does not change on all synced devices


Conlusion
I haven't even scratch the surface when it comes to password managers, your options and their features. These are the programs I find most useful for the most users. I personally use one of the ones I mentioned here. Password manager programs are not for everyone. Some people prefer to have their log in information written down. In reality not one method is better than the other. It's more about convenience and a sense of security.

Thursday, May 28, 2015

iOS bug: CoreText. How a single line of text can turn off your device.

A user on the popular Reddit platform posted about a phenomenon that occurred, when a text message was received with a specific set of characters. As seen on the original post here:

 Um... Can someone explain this phenomenon??

But is this a new type of bug, is everyone at risk?
If you remember iOS 6 had a similar bug. A specific sequence of Arabic characters would create a fatal error on any application using WebKit engine in iOS and Mac OS.

What is this new bug?
When you receive this specific characters in iMessage, your device tries to decode the (unicode) message. Sending your device into a loop. It's using all of the available memory until it becomes overwhelmed, and then it blocks itself (in the sense that you can't do anything about it while it happens) and turns it off/rebbots. You don't even have to open the  notification center. It can happen as well in the lock screen, the device would reboot. That also includes when the device is locked.

Thomas Finch a jailbreak developer provided a crash-log, which blamed CoreText as the reason for the crash. Shortly after developer Mokhlas Hussein what posted that he had created a fix. as well as developer Karen AKA angelXwind. Some users have reported that these 'fixes' DO NOT fix the issue if you're on iOS 6.

If you're one of those users on iOS 6. There's a fix that works, thanks to developer Fillipo Bigarella. This particular iOS 6 bug is not the same as the new one. However the patch works.

Open source fixes:

GlyphPatch fix for iOS 6

AntiEffevtive fix for iOS 7-8