>

Buy Microsoft Office Ultimate 2007!

October 18, 2007

Gawker Media does it again.

LifeHacker/Consumerist are again promoting the use of a product without fully disclosing the risks of it. They are announcing that Mint.com is now out of beta and available for public use. See my blog post ere about the dangers of Mint.com

Don't, get me wrong. I love both Life Hacker and the Consumerist, and they usually have great articles and products. But to not inform users of the inherit risks of "putting all your eggs in a single basket" is just irresponsible.

Edit:

My mistake, they are not out of beta, they are 4 weeks into their public beta.

Bookmark this post:
StumpleUpon DiggIt! Del.icio.us Yahoo Technorati Reddit Google

October 14, 2007

Life hacker is now promoting trash.

There was a recently a post on Life Hacker about a service called "Verify Email Address". Please do not use this service as it is most likely a ploy to harvest email addresses. Not only is in inaccurate (it cannot verify the info if your mail server is set up to block the requests it sends...which it should be) but it is also owned by Email Marketing Pro. In addition to this, the "contact us" link on their website is broken (never a good sign when you can't contact a company), and they offer no guarantee that they will not collect or share the email addresses you enter. Please be careful with who you give email addresses to, I hate getting spam, and I'm sure you do to, so lets help stop it rather than help spread it.

From LifeHacker.com
"UPDATE: As several readers point out in the comments, it's very possible this site is a spam trap, so we're removing the link. Our apologies for not being more skeptical!"

It looks like they took down the link.

Bookmark this post:
StumpleUpon DiggIt! Del.icio.us Yahoo Technorati Reddit Google

October 12, 2007

Staying Sane - tips to keep you going in a crazy world.

My name is Jordan, and I am a workaholic. I am 22 years old, I work 2 full time jobs, and am in college. Life is crazy, and time is limited, but this is how I have kept it under control.


  1. Manage your time: Take an hour or 2 to look at your time commitments for the week and month. Every Monday, I sit down, open Outlook Calendar and plan my week. I first create broad categories. So I block out the time for my 2 jobs and school. Within those blocks I created sub-sections for the meetings I have planned. Then I block out any time I know I'll need to work on projects. Next I block out time for social engagements I have scheduled. Don't forget to schedule in time for commuting if you are traveling. Then set up some "buffer" time between meetings/projects so you don't fall behind when something "urgent" pops up. (In my field, something urgent always pops up) This in it self will make life run much smoother, I carry my smart phone with me all the time so I know when I have time to goof off and when I need to be headed to a meeting.

  2. Find something that relaxes you: Find something that you know will relax you when things get tough. For me, its music. I know that when I'm getting stressed out, or when I'm falling way behind schedule and am starting to worry my self I can pop in my ear phones and play some music and it will calm me down. Be stressed is bad for efficiency. You don't think clear and you waste time because you make more mistakes. So find something that you can do in your office (or close by) and do that when you get stressed. for some its meditation, others its taking a short walk. Find what suites you.

  3. Eat Right: I have a horrible habit of eating out a lot. I'm always running around and its just so much easier than to worry about carrying a lunch. But fast food and junk food slow you down. When I pack my lunch and bring nice healthy snacks I function better, I don't feel sluggish, and am in the mood to just keep working. You wouldn't put "regular" gas in your Ferrari would you? Of course not, so be sure you are filling yourself with "premium"

  4. Exercise: After a long stressful day, I'm usually exhausted. But going to lift weights helps me relieve that stress, and usually energizes me. Working out gives you more energy, and has been proven to make people happier. Exercising on a regular basis also provides some stability in your schedule so it helps you relax because its a little more control over your life.

  5. Be Social:Hang out with friends, go on dates (this includes people who are married or have a girlfriend/boyfriend.) After working so much, your friends, family and significant others miss you and probably would love some time with you. MAKE time for them. Its relaxing and great for your self-esteem.

  6. Make Time for Yourself: Make some time for yourself. Take this time to do what ever you want, take a nap, go fishing, read a book. It doesn't matter. Just don't work. This will help you center yourself and disconnect from everything for a little bit.

  7. Get Some Sleep: You need sleep. Period. I don't believe that everyone needs 8 hours of sleep (I know I don't) so sleep as much as you need to. I like to sleep for around 5 hours a night, and take an hour nap during the day (when I have time). At times I only get around 3 hours a sleep a night, and this is OK for a week or so, but after that I need to recharge some and go back to getting my 5 or 6 hours. Find a sleep patter that suites you, then stick with it. Your body likes stability and routine, it makes life easier.

Bookmark this post:
StumpleUpon DiggIt! Del.icio.us Yahoo Technorati Reddit Google

October 10, 2007

Mint.com: Great concept, bad execution.

There is a new service out that allows you the convenience of only having to visit a single place to view all of your financial data. You can see the balanced of all of your credit cards, see how much money you have in each of your banking accounts, and schedule reminders so you don't make any payments late. It sounds like a wonderful tool. Heck, they even claim to be secure! Lets take a look at their "How we keep you safe" section and determine just how secure they are.

From Mint.com (text in red are my comments)

"Mint works quite literally every day to make your data secure. Here's how:"

  • All data storage is encrypted. Not only are our hard-drives encrypted, our servers are in a secure facility protected by biometrics palm scanners and 24/7 security guards.

    I have worked with and visited several of these types of secure facilities. And yes, they do have palm scanners and 24/7 security. The problem is all the server racks are in a open area, in little lockers secured by combination locks. So as long as you are a customer of the facility, you have physical access to the lockers that have the servers. Breaking into a combo lock isnt all that difficult, and neither is becoming a customer of these facilities.

  • SSL prevents eavesdropping. Communication between your browser and Mint occurs using 128-bit SSL, the highest industry standard. This prevents hackers from being able to listen-in on or "tap" a conversation. Data is delivered to you and you alone.

    This is misleading. It does not prevent "hackers" from listening in on the conversation. What it does is make the data they collect look like garble because it needs to run through the encryption algorithms.

  • Bank-level standards are used. This includes encryption, auditing, logging, backups, and safe-guarding data.

    "Bank-level Standards" sounds great right? unfortunately Ive worked with a bank or two and their standards aren't that high, especially smaller credit unions. But backups don't protect your data, neither does logging or auditing. Logging shows things after the fact (so they can trace what was done) backups just save a copy of your info to another place (FYI: most backup servers are less secure than the live ones, so they are a target for people looking to exploit a company)

  • We hack our own site. Mint runs thousands of tests on its own software to ensure security. We scan our ports, test for SQL injection, and protect against cross-site scripting. We also update and patch our software all the time.

    Good, they do penetration testing. So assuming they have the best hackers in the world (they don't) and an army of them (they don't) they might find all the holes. (they wont)

  • Mint uses industry standard secure account aggregation. Mint uses Yodlee to connect to your financial institutions. This is the same back-end aggregation system used by Bank of America, Fidelity, and Microsoft Money. Yodlee’s security practices have been audited by the NSA, Visa, Mastercard, and numerous major banks.

    They are using a secure back end, which is a good thing. I have nothing bad to say about this. Although, this assumes they have it configured properly (which I think is a good assumption) and the rest of the server is configured securely.

  • Mint is independently verified secure. You don't have to take our word for it. Mint has been audited by Verisign, as following the industry security practices.

    It is good to know that they have out-side auditors looking at them, but even that doesn't guarantee the security, it helps, but companies like verisign can only test for flaws they know about. The good hackers look for flaws that people don't know about.



The main problem I have with Mint.com is that it's users are "putting all there eggs in a single basket". You are trusting a single company with all of your credit cards, all of your bank information, all of the user names/passwords for these accounts. Even if there security is flawless (which it wont be) this still has the potential for an employee of that "secure building" they leave there servers in walking out with a hard drive with all your data. Or one of Mint.com's employees taking it all. Online banking is a huge convenience, I do it, but if one of my accounts is compromised, then its just that one, its not all of them. The likely hood that my 3 banks, and my credit card companies all get hacked at the same time is next to nothing. But because Mint.com is this central point for all this information, they will be a target. And one little breach could mean all of your financial data is now in the hands of someone else. To top it all off, Mint.com is inherently less secure than most bank websites, because it needs to not only save your user name and password, it needs to then retransmit that info to different banks. So the normal 1-way hashes that have been the standard for password authentication wont work because they need to encrypt the data, then unencrypt it before sending it out. (yes they re-encrypt it before sending, but it still means that it is possible to get your real username/password)

Mint is offering a huge convenience (and a good product if you ignore the glaring security flaws), and it will get better. But is spending a little less time (heck even a lot less time) looking at your financial worth the risk of having all of that data stolen from a single location? I know I wont be using it.

UPDATE:
I'm glad to say I'm not the only one with these concerns. Check out nobosh.com's review

I'm also waiting on a reply from Mint.com directly to see if we can get some of this addressed. I will post any info I don't think is complete fluff here to keep folks updated.

I never heard back from them.

More info on their security and general practices can be found on the Mint.com Forums

Bookmark this post:
StumpleUpon DiggIt! Del.icio.us Yahoo Technorati Reddit Google

October 8, 2007

Should you buy an Extended Warranty?

Anyone who has shopped in an electronics store has almost certainly been offered an "Extended Warranty" or a "Extended Service Plan" of some sort. The salesmen will happily tell you all the wonderful benefits of these services ranging from protecting your shiny new computer if the screen breaks, to curing cancer! So what is the real deal behind the warranties?

First, lets just clarify that a company will almost NEVER do something just to benefit their customers. Companies are there to make money. That is not to say that the products they offer have no value, but you need to realize that they have more value to the company then they probably do to you. So lets talk about some of these services and just how much value they add to the product you just bought.

Typically there are 2 kinds of extended warranties. 1 is a replacement plan (usually for smaller items like mp3 players, printers, etc) and repair plans for this like laptops. Lets talk about the repair plans first.

Repair Plans:

Depending on the company you go to, the terms are going to be different for the repair plan you buy, but in general this is what they will cover:

  • Defects in hardware
  • Defects in labor
  • Technical support for the product and all components included with it at the time of purchase
Thats it. Some more expensive ones will cover the following:
  • Software support
  • Accidental damage
  • Physical damage to the screen (if it has one)
  • In-home repair
  • Replacement of consumables (like bulbs in projection TVs and Projectors)
For those things you pay about a third of the price of the product (some times more some times less)

So for an additional 30% you are given the assurance that your product will continue working for the life of your warranty, without the hassle of dealing with a manufacturer, and usually for longer than the manufacturer will support it. But is it worth it? The answer is maybe, but in most cases no.

The truth is, the amount you pay for the warranty would cover most small repairs that may be needed once out of the manufacturers warranty. The times an extended warranty are really helpful are when you need expensive parts replaced, like the screen on the laptop or the bulb in a projector. These items in them selves cost more than the warranty usually doe so they are worth it. But for most desktop, they really aren't. Of course, if the assurance that down the line you wont have to pay more is something you want, this is may be something you want. In reality you should be thinking of these things like more of an insurance. Because thats what it really is, chances are you wont need it, and you should hope you don't need it, but without it, your going to be pissed that one day when you pay the $400 for a new screen.

Replacement Plans:

Replacement plans are a good deal in my opinion. I buy them on most of my gadgets. The great thing about a replacement plan is at the end of the term, you can make up some generic "intermittent" issue and have them replace your item with a new one. Most places will give you a credit in the amount of the item if they don't have it, so for the last several years I would buy replacements plans on my mp3 Player, when a new one that I liked came out id take it in say it was busted, get a credit for the amount I paid for the mp3 player then use it to buy the one I wanted. The wonderful thing about electronics is the price on them either drops, or their functionality goes up. So when I originally bought that 1 GB mp3 player for 200 bucks, I have eventually traded up for my iPod . Same thing for my PDAs, LCD monitors, and just about anything else that you can buy a replacement plan for. This is why I think replacement plans are worth it, as long as you remember to do that exchange.


But before you buy any plan (replacement or repair) be sure you know the terms and conditions. Unless a plan specifically says it covers physical or accidental damage, it will not cover it. Most plans do NOT cover you damaging the product or damage caused by misuse. Heck, most places will not do the repair if there are signs of misuse, even if it isn't the cause of the problem.

Example:
If you spill water or some other liquid on an electronic, it will usually cause some discoloration on the circuit board in side of it. Even if this spill did not cause the problem, the warranty will usually be void.

So be sure you know the terms and conditions. It really bothers me getting calls from people who have left the store I work for and then ask "what is this warranty I bought, what does it cover?" I just can't comprehend how someone spends several hundred dollars on something when they don't know what it is. Don't be that person.

Bookmark this post:
StumpleUpon DiggIt! Del.icio.us Yahoo Technorati Reddit Google