Ars Technica: The Art of Technology
Ph: 1329423933

Google to strip Chrome of SSL revocation checking

Google's Chrome browser will stop relying on a decades-old method for ensuring secure sockets layer certificates are valid after one of the company's top engineers compared it to seat belts that break when they are needed most.

The browser will stop querying CRL, or certificate revocation lists, and databases that rely on OCSP, or online certificate status protocol, Google researcher Adam Langley said in a blog post published on Sunday. He said the services, which browsers are supposed to query before trusting a credential for an SSL-protected address, don't make end users safer because Chrome and most other browsers establish the connection even when the services aren't able to ensure a certificate hasn't been tampered with.

"So soft-fail revocation checks are like a seat-belt that snaps when you crash," Langley wrote. "Even though it works 99% of the time, it's worthless because it only works when you don't need it."

SSL critics have long complained that the revocation checks are mostly useless. Attackers who have the ability to spoof the websites and certificates of Gmail and other trusted websites typically have the ability to replace warnings that the credential is no longer valid with a response that says the server is temporarily down. Indeed, Moxie Marlinspike's SSL Strip hacking tool automatically supplies such messages, effectively bypassing the measure.

"While the benefits of online revocation checking are hard to find, the costs are clear: online revocation checks are slow and compromise privacy," Langley added. That's because the checks add a median time of 300 milliseconds and a mean of almost 1 second to page loads, making many websites reluctant to use SSL. Marlinspike and others have also complained that the services allow certificate authorities to compile logs of user IP addresses and the sites they visit over time.

Chrome will instead rely on its automatic update mechanism to maintain a list of certificates that have been revoked for security reasons. Langley called on certificate authorities to provide a list of revoked certificates that Google bots can automatically fetch. The time frame for the Chrome changes to go into effect are "on the order of months," a Google spokesman said.

Lion's FileVault 2 and disk restore: caveat encryptor

Lion's FileVault 2 and disk restore: caveat encryptor

When Mac OS X 10.7 Lion introduced full disk encryption, called FileVault 2, it was a huge improvement over the original FileVault, which only encrypts a user's home folder. And because of the "creative" way FileVault was implemented, there were numerous incompatibilities, gotchas, and caveats to its use. FileVault 2 on the other hand, encrypts individual disk blocks so the encryption is invisible to the file system and really doesn't get in the way of normal use. Adding to this is another new feature in Lion: the recovery partition and the network recovery system introduced in last year's hardware.

In almost all cases, these new features will work together without trouble. Still, there are a few things you should know, especially if you use encrypted Time Machine backups and if you can't depend on fast Internet connectivity to be available should your boot drive fail.

( More … )

Ars Technica system guide: December 2011

Ars Technica system guide: December 2011
feature

After a fairly dull year for new hardware releases, this fall's flood-related hard disk production damage in Thailand made things more "interesting." Toss in AMD's new CPU, Bulldozer, along with cheaper and cheaper SSDs, and your computer build options can be confusing. We're here to sort them out.

The bottom line remains the same as it always does—the System Guide builds get faster and cheaper.

( More … 3 pages )

Ars Technica's 2011 holiday gift guide extravaganza

Ars Technica's 2011 holiday gift guide extravaganza
feature

Every holiday session, millions of geeks suffer at the hands of poorly thought-out gifts: USB flash drives in Hello Kitty shapes. T-shirts that detect Wi-Fi signals. Your second, third, and fourth copies of Arkham City.

No more, friends. This year, buy the tech-savvy friends and family in your life something they actually want—or something they don't know they want until you, insightful person that you are, give it to them. Fortified with eggnog and holiday cheer, the Ars staff picked out a few of our favorite things to make your gift-giving (and gift-asking) easier.

( More … 4 pages )

Can the iPhone 4S replace a "real" digital camera? Ars investigates

Can the iPhone 4S replace a "real" digital camera? Ars investigates
feature

When Apple announced the iPhone 4S, the company certainly talked up the improvements made to the smartphone's integrated camera hardware. With 8 megapixels of resolution, a redesigned lens, and enhancements to its software, it certainly meets or exceeds the needs of most casual shooters.

Still, we here at Ars have received plenty of questions to the effect of, "can the iPhone 4S replace a 'real' camera?" That's actually a hard question to answer, because individual needs vary widely. Would a professional photographer replace her trusty DSLR with an iPhone 4S? No. But, might a casual snap shooter replace a pocket camera with an iPhone 4S? It's pretty likely.

( More … 4 pages )

Hands on with the iPhone Micro USB plug and third-party chargers

Hands on with the iPhone Micro USB plug and third-party chargers

Last month, an "iPhone Micro USB Adapter" popped up on Apple's British online store. Since then, the little plug has made its way across Europe—but not beyond its borders—and it's not hard to connect the dots between this adapter and the earlier European agreement to make all smartphones use the same Micro USB port for charging. So far, it doesn't look like Apple is going to stop including a power adapter with its iPhones in Europe, but even at Apple's prices (£8 in the UK, €9 elsewhere) the Micro USB plug could be a somewhat cheaper alternative to buying a an additional charger or cable for those who already own one or more third-party chargers.

( More … )

iTunes Match: your questions answered

iTunes Match: your questions answered

Apple launched iTunes Match on Monday this week, making the service available to public users five months after its introduction and a few weeks later than expected. The service, meant to sync an entire music library over iCloud for easy access on other devices, has already thrown some users for a loop—Apple had to stop taking new subscribers yesterday thanks to too-high launch volume, and others were frustrated by Apple's limit of 25,000 non-iTunes-bought tracks.

The service seems to be back up and accepting new signups again, however, and plenty of users are finally getting the ball rolling on matching their iTunes libraries in the cloud. But the service isn't necessarily as straightforward as it seems, and there are plenty of questions floating around about how, exactly, Apple determines which songs to "match," which to upload, and which to leave behind. We put together the answers to some of the most common questions and problems we've seen so far in hopes of clearing up confusion about how iTunes Match does and doesn't work.

( More … )

Facebook friends open source hardware for data centers

Facebook friends open source hardware for data centers

The term “open source server” just took on a whole new meaning. This morning at an event in New York, Facebook director of hardware design and supply chain Frank Frankovsky announced the creation of a foundation to guide the Open Compute Project (OCP)—an effort initiated by Facebook engineers to bring the benefits of an open-source community to the problems faced in building efficient “Web-scale” data centers. Facebook, Intel, AMD, and Asus also have contributed intellectual property to the project, including motherboard and blade server specifications.

The OCP was launched by engineers at Facebook as a result of their experience in trying to build a highly efficient data center in Prineville, Oregon. The Prineville data center is the most efficient in the world in terms of power consumption, using 38 percent less energy than Facebook’s existing data centers and costing 24 percent less. With a power usage effectiveness (PUE) rating of 1.07, only seven percent of the power brought into the facility is used in the data center’s overhead and cooling. But getting there required Facebook’s engineers to custom-design servers, power supplies, battery backup systems, and server racks to accommodate a simplified power distribution system—using 480 volt distribution to reduce loss, rather than stepping it down—and minimize cooling requirements.

( More … )

How to secure your e-mail under Mac OS X and iOS 5 with S/MIME

How to secure your e-mail under Mac OS X and iOS 5 with S/MIME

As one of the oldest applications of the Internet, e-mail has never been known for having top-notch security. This reputation isn't completely undeserved: even today, anyone who knows how to bring up the preferences of a mail program can send out messages with any "From:" address they please. Ironically, such forged messages may travel to and from mail servers over encrypted connections. This helps make sure that nosy types with big WiFi antennas don't get to see your mail or passwords, but it doesn't keep your mail safe from equally nosy mail server admins—or subpoenas by nosy governments.

( More … )

Tutorial: OS X automation with MacRuby and the Scripting Bridge

Tutorial: OS X automation with MacRuby and the Scripting Bridge
feature

Mac OS X provides rich scripting and automation tools that can simplify everyday tasks—if you know how to use them. The roster includes the venerable command line, the graphical Automator utility, and the traditional AppleScript natural-language scripting environment. Although these tools all have value in certain situations, they each have some real limitations.

For instance, AppleScript benefits from extremely tight platform integration and powerful support for manipulating user interface elements, but its eccentric syntax and limited functionality constrain the scope of its applicability. AppleScript simply isn't designed to serve as a general-purpose scripting language.

( More … 2 pages )

How-to: run new media center software on your original Apple TV

How-to: run new media center software on your original Apple TV
feature

For me, acquiring new gadgets is painfully easy; offloading old ones is more difficult. The predictable result: a closet, garage, or basement full of aging but not quite obsolete tech. As an Ars reader, you can probably relate.

I recently ran into my first-generation Apple TV during a spelunking expedition into the depths of my home office closet. After upgrading to a second-gen Apple TV last year, I had actually forgotten the old one was in there. The rediscovery piqued my curiosity. Though I have long avoided performing jailbreaks on my Apple products, the old Apple TV gave me a chance to find out what else I could watch on this thing besides iTunes content.

You can actually watch all manner of other content on an old Apple TV if you're willing to tinker. The two most popular software interfaces are a version of Boxee and a version of XBMC, both designed for the original Apple TV. Here, I offer you a chronicle of my own experiences setting up these both solutions, and show you how to do the same.

( More … 2 pages )

How to speed up an aging MacBook with a solid state drive

How to speed up an aging MacBook with a solid state drive
feature

When we recently detailed how to boost the storage space in a MacBook Air with a replacement solid state drive module, some readers asked what it would be like to swap the hard drive in an older MacBook with a similarly speedy SSD. We decided to investigate, and as it turns out, thanks to a common 2.5" drive size and widely available external enclosures, the swap is quicker, easier, and cheaper than the one for a MacBook Air.

Depending on the age of your machine and in some cases BTO drive options, the amount of the speedup will vary. Still, even our old original Intel MacBook—which, as we'll explain later, actually represents a worst case scenario—went from just barely usable to actually productive in just a few hours. Here, we'll tell you how to perform the same upgrade.

( More … 3 pages )

Which company is biggest? A primer on corporate valuation

Which company is biggest? A primer on corporate valuation

Update: When the markets closed on August 10, 2011, Apple ended up as the company with the largest market capitalization in the world ($337.17 billion), surpassing Exxon Mobil ($330.88 billion). This generated a new flurry of discussion about what "market cap" really means, so we felt it appropriate to re-publish our primer from earlier this year on the different ways to judge corporate valuation. Please note that we have not updated the data in this feature (originally published in February 2011), but we think the principles discussed in the piece are worth highlighting.

So the order came down from the Orbiting HQ, and I'm here to make it happen:

Make people a little more smarter than "DURR HUGE MARKET CAP DURRR!"

The data that follows was culled from Capital IQ, a division of Standard & Poors, is current as of February 4, 2011, and reflects results over the last 12 months unless otherwise noted. Let's start with the simplest metrics.

( More … 3 pages )

Ask Ars: how do I know the best time to buy smartphones, PCs, and TVs?

Ask Ars: how do I know the best time to buy smartphones, PCs, and TVs?

Everyone has that friend (or is that friend) whose gadget-buying timing is always so far behind the curve that their purchases fall just hours before the new version is announced. Not all these people care about riding atop the refresh wave, but as many as not are crestfallen when their new gadget is no longer the new hotness days after buying it.

It's fine to fall on this side of the product-buying bell curve if you're looking for, and getting, a great deal on an previous-generation product. If not, there are new habits to be learned.

( More … )

State of the PC in 2015: An Ars Technica Quarterly Report

State of the PC in 2015: An Ars Technica Quarterly Report
feature

Our last quarterly special report looked at the PC industry in 2011; this one jumps into the future to discuss where we'll be in 2015. The complete 6,500 word report is available in PDF and e-book formats, but it's only for Ars Technica subscribers. Sign up today!

In an earlier report, we surveyed the state of the PC, circa the first quarter of 2011. While not the primary focus of that piece, we also touched on some of the long term trends affecting the future of that cherished platform. In this followup, we take a more forward-looking perspective—what will PC hardware look like in 2015?

Four years is an eternity in the semiconductor and PC industry—companies have been started, grown, and collapsed in less time—so any attempt to look this far is prone to uncertainty. This report therefore doesn't aim for crystalline precision but rather approximate accuracy. Our analysis starts by examining semiconductor manufacturing in 2015, then moves to general integration trends and specific expectations for the three key vendors—AMD, Intel, and Nvidia. Finally, we conclude with a look at the major sub-markets for the PC—client systems, discrete GPUs and servers.

Let's step into the time machine.

Manufacturing context

Since the PC ecosystem is so closely tied to the semiconductor industry, it's a natural first step to examine manufacturing in 2015. Intel's schedule for process technology is fairly clear; they are still on a two-year cadence and have not expressed any interest in slowing. 22nm will debut at the end of 2011, after which Intel will shift to the so-called 'half nodes.' If history is any guide, 14nm will be Intel's high volume option in 2015, with 10nm coming online at the end of the year.

There's no doubt that fabs like Global Foundries and TSMC will continue to lag Intel's manufacturing. Traditionally, the gap has been 12-16 months, but there are strong suggestions that this disparity will widen, rather than narrow, over time. Recent AMD roadmaps indicate that their products will lag a full 2 years behind Intel, with 14nm chips going into production at the end of 2015. Comments from TSMC also suggest a similar time frame for 14nm production.

Taken together, the most likely scenario for 2015 is that Intel will be in high volume production of 14nm chips while the rest of the industry is shipping 20nm products. The density advantage is a given, but performance is unclear. If Intel moves to fully depleted silicon-on-insulator or tri-gate transistors, the performance delta could be substantial. But if Intel continues with a more traditional process, then the difference will be much less pronounced. Either way, this means that chips inside a PC will have roughly 4x the available transistors that they do today, giving architects plenty of room for improvement.

( More … 3 pages )

Ask Ars: Do I have to use the Mac App Store to reinstall Lion?

Ask Ars: Do I have to use the Mac App Store to reinstall Lion?

In 1998, Ask Ars was an early feature of the newly launched Ars Technica. Now, as then, it's all about your questions and our community's answers. Each week, we'll dig into our question bag, provide our own take, then tap the wisdom of our readers. To submit your own question, see our helpful tips page.

Q: Are there other ways I can install Lion besides the Mac App Store? How can I reinstall Lion if something goes wrong?

Apple has drawn the line in the sand: optical discs are out, and digital distribution is the future for Mac OS X updates. Lion is now available via the Mac App Store, but at nearly 4GB, the hefty download can take quite some time to move all the bits from Apple's data center to your Mac—especially if you have a less-than-stellar broadband connection.

( More … )

After Final Cut Pro debacle, does Apple still care about creative pros?

After Final Cut Pro debacle, does Apple still care about creative pros?
feature

So, Michael Jackson is dead and Final Cut Pro X is out, and most people prefer the older versions of each. Most can also agree on Michael Jackson's fate—making a lot more albums from beyond the grave—but people aren't so sure about Final Cut Pro's future.

The FCP X launch, and the discontent surrounding the new product, fed into a larger anxiety about Apple's intentions for the pro Mac market. Was FCP X just a single, poorly handled event or was it an indication of Apple's direction from now on, media pros be damned? With all this talk of bringing iOS features "back to the Mac," is OS X about to lose its luster for content creation? Is the Mac Pro going the way of the XServe?

Apple doesn't answer such questions about future plans, but it's not hard to read Apple's palms if you look hard enough. The company won't ditch creative pros—but that doesn't mean there won't be serious rough spots ahead.

( More … 3 pages )

Yes to Lion, no to cruft: get a clean start with manual Mac migration

Yes to Lion, no to cruft: get a clean start with manual Mac migration
feature

I got my first Mac, an iBook, in 2002. It ran Mac OS 10.2 Jaguar. Since then, I've migrated my electronic life to new hardware three times and to a new OS version four times. I'm sure the Migration Assistant can assist me in moving from my MacBook running 10.6 to a new MacBook Air running 10.7 without trouble. But after almost a decade, I'm ready to make a clean break and start from scratch, only migrating my data—no applications, libraries, or the cruft that has built up in nooks and crannies of the system.

Although all of this is inspired by the imminent arrival of Mac OS 10.7 Lion, the information here is not Lion-specific; I have tested the various migration tactics on Snow Leopard. However, most of them are more application- than OS-specific.

( More … 4 pages )

Ask Ars: are dual-band 802.11n routers worth the extra cost?

Ask Ars: are dual-band 802.11n routers worth the extra cost?

In 1998, Ask Ars was an early feature of the newly launched Ars Technica. Now, as then, it's all about your questions and our community's answers. Each week, we'll dig into our question bag, provide our own take, then tap the wisdom of our readers. To submit your own question, see our helpful tips page.

Q: I'm thinking of buying a new wireless router, and can't decide between a cheap 802.11N router and the more expensive dual-band versions. Are they worth the extra cost?

Like most other commodity devices, wireless routers have seen their prices pushed inexorably downward, with the exception being when new technology—the G and N protocols—has come onto the market. It's been a while since the N standard was introduced, so you might predict that even top-of-the-line routers would be sitting in the $50 range. They're not. Instead, prices from most manufacturers still top out at well over $100. How can they get away with that? The secret to the new high end is (primarily) the use of what's called dual-band technology, along with a sprinkling of other features that are nice, but not essential. We'll take a look at what dual band brings to the table, and whether paying more for the additional features is likely to be worth your while.

When it comes to WiFi, there are a total of four protocols and two frequencies. The initial flavor of WiFi, 802.11b, occupied the 2.4GHz area of the spectrum, which was also used by the enhanced, higher throughput G version. This tends to give it decent range, penetration, and omnidirectionality (a single antenna provides good signal in three dimensions), but the spectrum around 2.4GHz is a bit more prone to interference from other devices. As time has gone on, it has also gotten very, very crowded. If you live in a dense urban environment, it's possible to end up with so many WiFi devices trying to find space in this area of the spectrum that your router may end up dropping connections.

( More … )

iCloud without Apple: your platform-agnostic alternatives

iCloud without Apple: your platform-agnostic alternatives
feature

Apple unveiled its new iCloud remote storage and synchronization service during a keynote presentation this week at the company's annual Worldwide Developer Conference (WWDC). The service brings tight cloud integration to Apple's mobile and desktop operating systems and delivers a much-needed replacement for the company's soon-to-be-defunct MobileMe offering.

But what if you want similar service on different platforms? Can iCloud's features be hacked together from other existing offerings on the Web?

( More … 2 pages )

Video Ask Ars: Why should I get a battery backup, and how do I pick one?

Video Ask Ars: Why should I get a battery backup, and how do I pick one?

In 1998, Ask Ars was an early feature of the newly launched Ars Technica. Now, as then, it's all about your questions and our community's answers. Each week, we'll dig into our question bag, provide our own take, then tap the wisdom of our readers. To submit your own question, see our helpful tips page.

The recent severe weather in the US has got me thinking about going above and beyond surge protectors to protect my computer. I'm thinking about getting a battery backup, but I don't know what I need to look for in an uninterruptible power supply.

If you are looking to protect your electronics—particularly your computer—from the bigger power anomalies in life, the run-of-the-mill surge protector just won't cut it. Surge protectors cover only one of the two common types of damaging power conditions, while an uninterruptible power supply can cover both.

Surge protectors are meant for over-voltage scenarios, when there's suddenly a surplus of power from a lightning strike or surge from your electric grid. Without at least a surge protector, surges and spikes can cause damage to your hardware; your computer or monitor might not die outright, but a sudden jump in voltage can be like a punch in the kidney.

( More … )

How to build your own computer: Ask Ars DIY Series, Part III—cases

How to build your own computer: Ask Ars DIY Series, Part III—cases
feature

In 1998, Ask Ars was an early feature of the newly launched Ars Technica. Now, as then, it's all about your questions and our community's answers. Each week, we'll dig into our question bag, provide our own take, then tap the wisdom of our readers. To submit your own question, see our helpful tips page.

Are you ready to build your own system? After looking at hardware and software, in Part III of our Ask Ars DIY series, we look at cases. What are the factors you need to consider when deciding on a case? There is a lot more than good looks to consider—things like airflow, cooling, space, and even the drive mounts. Be sure to read this before you buy a case.

Computer parts don't need to live in a plain, boring box that keeps your parts off the ground and dust-free. A good computer case—or chassis—has to keep its contents cool, but not be too noisy. It also has to be the right size, while fitting your budget.

These are tall orders: with enough money, anyone can have a very nice chassis. For the God Box, it's easy to justify spending a couple hundred bucks on a nice case with the right fans and layout. For the Budget Box, that same case would be half the cost of the entire box. So you've got to be flexible. 

Case considerations can be boiled down to size (external and internal), cooling, noise, and cost. Looks matter, too, but who wants a sharp-looking, cramped, noisy case?

( More … 3 pages )

How to build your own computer: Ask Ars DIY Series, Part II—software

How to build your own computer: Ask Ars DIY Series, Part II—software
feature

In 1998, Ask Ars was an early feature of the newly launched Ars Technica. Now, as then, it's all about your questions and our community's answers. Each week, we'll dig into our question bag, provide our own take, then tap the wisdom of our readers. To submit your own question, see our helpful tips page.

Instead of replying to a reader's question on Ask Ars, we've got Part II of new PC-building guide, complete with informative (and entertaining) video clips that both inform and entertain. Last week we were all about hardware assembly. Today, we're picking up where we left off, covering first boot and software tweaking. If you're in the process of building your own PC and are wondering what to do now that the hardware is in place, read on.

( More … 2 pages )

How to build your own computer: Ask Ars DIY Series, Part I—hardware

How to build your own computer: Ask Ars DIY Series, Part I—hardware
feature

In 1998, Ask Ars was an early feature of the newly launched Ars Technica. Now, as then, it's all about your questions and our community's answers. Each week, we'll dig into our question bag, provide our own take, then tap the wisdom of our readers. To submit your own question, see our helpful tips page.

For Ask Ars, we typically respond to a reader question about some specific tech quandary, but this time around we've got something special. We've put together a new PC-building guide, complete with video selections that both inform and entertain. Our original guide hasn't been updated since the Celeron overclocking era, and many readers wrote in to let us know that it was long in the tooth. So if you've been thinking about building your own, or you're curious about what goes into the build process, this Ask Ars is for you.

This guide is aimed at people who have not built a PC before, but who know the basic ins and outs of DIY life.

In recent years, building your own computer has become more of a niche technophile activity than it was in the earlier part of the decade. Few people see the benefits of expending the effort to figure out how all the different components of a PC fit, screw, and plug together when you can just as easily fill out a customization form at any number of online retailers and have your own custom build arrive in just a matter of weeks.

But we know that there are still good reasons to go the do-it-yourself route. Our System Guides continue to see amazing traffic, and staff members (some, but not all) are still exercising their Type A personalities and building their own PCs. Ars has a long history of supporting PC builders, and this guide is designed to bring first-time and relatively green builders into the fold.

( More … 4 pages )
etc

Novatel looks set to debut a WiMAX 4G-compatible MiFi in the US soon, judging from a recent FCC filing.

Ars Technica News
Powered by the Parse.ly Publisher Platform (P3).


You are viewing a mobilized version of this site...
View original page here

Mobilized by Mowser Mowser