No, Mahmoud, You Can’t Design a Nuke on Your iPhone

Interesting item from iPhone J.D.’s analysis of the App Store end-user license agreement:

17. No nukes. You cannot use an iPhone app to design nuclear weapons, so don’t even think about it, buddy. “You also agree that you will not use these products for any purposes prohibited by United States law, including, without limitation, the development, design, manufacture or production of nuclear, missiles, or chemical or biological weapons.”

Three Decent Improvements in iPhone 3.1

The headline features (Genius, ringtones, app organization via iTunes), don’t excite me that much. I use Spotlight to find apps, rarely use any special ringtone (let alone one I have paid for), and I used the Genius once in iTunes and forgot about it. I’m somewhat disappointed at the lack of an Energy Saver settings page, but at least the following features seem useful.

Remotely lock iPhone with a passcode via MobileMe

I guess this means that you don’t need to put a passcode on your phone before you lose it. Maybe you can push a passcode to the phone after you lose it, so you don’t have to deal with the hassle of unlocking the phone all the time. We’ll have to see what this is like in practice.

Use Voice Control on iPhone 3GS with Bluetooth headsets

It’s not clear how Voice Control would be invoked in this situation. If you have to hold the home button on the iPhone, then you still need to fish it out of your pocket or purse. If, on the other hand, you can push a button on the headset, this could be great.

Paste phone numbers into the keypad

I just tried doing this the other day and was surprised it didn’t work. Now it will.

Full details on the update at Apple.

Pain is Good for Athletes, and NSAIDs Can be Bad

Taking ibuprofen before intense exercise generally does not help, and may actually hurt you in the long run, according to the British Journal of Sports Medicine. NSAIDs interfere with the body’s ability to repair itself and may ultimately make you more prone to injury.

The New York Times cites a study that found that athletes were not even getting pain relief out of the deal. Athletes in an ultramarathon who did not use ibuprofen reported that they were no more sore than the ones who had.

Wait until you hurt so much you can’t stand it. Then take the drugs.

Personally, I like a little soreness. Let’s me know my body is responding to my exercise. If I don’t get sore, I didn’t work hard enough.

GSM About to be Cracked

CNET says the 15-year-old encryption technology used to secure voice communications on GSM cellular networks (like AT&T’s) will be cracked wide open in a few months. Skype, which encrypts voice communications using a variety of standards-based technologies, avoids this problem, at least for Skype-to-Skype calls.

Multitasking Doesn’t Work

So says a recent Stanford University study. Your brain is not engineered to do more than one conscious thing at once. The apparent efficiency of multitasking is an illusion. You are actually dividing your attention into tiny slices and adding to your workload the complex task of deciding which piece of incoming information to pay attention to, then refocusing your attention. Of heavy multitaskers, one professor said, “Everything distracts them.” Said another, “”We kept looking for what they’re better at, and we didn’t find it.”

Multitaskers are bad at the tasks they are doing, bad at remembering, and even bad at switching tasks, despite all the practice they get.

Just cut it out already. You are hooked on overstimulation and trying to rationalize it. Quit bragging about it and get some help.

iPhone Soon to be Usable on Washington DC Subway

Twenty of the busier underground Metro stations, including major transfer points Metro Center, L’Enfant Plaza and Gallery Place, will soon get improved wireless service from all the major carriers: AT&T, Sprint Nextel, T-Mobile and Verizon. Since 1993, Metro has given Verizon the exclusive right to subterranean cell service, so this will be a big improvement for all those iPhone users on Metro (some Sprint phones were allowed to roam on Verizon’s network, so Pre users may already be surfing the tunnels).

The enhanced service begins October 16, 2009. The remaining 27 underground stations should be wired up by 2012. Metro says phone, text and internet services will be available.

Service will be based in stations, so surfing the web on the train when traveling between stations is likely to be spotty.

Money made it happen, Metro says:

Verizon Wireless, Sprint Nextel, AT&T and T-Mobile will build, operate, maintain and own the new wireless network that is currently being installed. The firms also will build a second wireless network, which Metro will own, operate and maintain for Metro’s own public safety and operational communications. The second network will support future plans to launch The Metro Channel, which will provide riders with rail and bus service information, news and advertising via monitors in stations, trains and buses.

The wireless contract will generate a minimum of nearly $25 million during the initial 15-year term and an additional $27 million during the five, two-year renewal terms. Other FCC licensed and unlicensed carriers may gain access to the networks either through entering into agreements with Metro or the group of carriers, which would produce additional revenue for the transit agency.

Make Your Own iPhone App

A new company called Swebapps promises to make an iPhone app for your business for $250-$450, plus a monthly $25-$35 fee. You choose, Chinese-menu style, from numerous possible “buttons,” which essentially serve as bookmarks for content stored on Swebapps’ servers. More buttons cost more money. The idea seems to be to make a mini-website in the form of an iPhone app.

I guess clients might think it is cool that I have an iPhone app even though they could get the same info by surfing to my website. But my prediction is that almost all clients would use such an app exactly once. On the other hand, do I care? Once I make an impression as “the guy with the iPhone app — so cool!” does it matter whether the client actually uses the app? Then again, this thing looks awfully plain (bordering on ugly) so maybe I would become “the guy with the lame iPhone app.”

The price is fairly modest if you have an actual revenue-generating business, but the pain in the ass of coordinating yet another web presence may be the biggest cost.

Mysterious Vanishing Disk Space — Solved

If you ever find that your Mac is mysteriously losing gobs of internal disk space, try this:

1. We are about to do some serious deleting, so take precautions. Unmount and eject any external hard drives, CDs, DVDs, network drive shares, etc. Physically remove the discs/disks or disconnect them from your Mac so you can be sure that you won’t inadvertently lose any files. To be extra safe, consider turning off WiFi momentarily or disconnecting your Ethernet connection.
2. In the Finder, choose Go to Folder… from the Go menu (or press command-shift-g).
3. In the dialog box, type /Volumes and press return or click OK.
4. You should be looking at a Finder listing of all mounted volumes on your computer. If you see a folder with the name of a disk that is not mounted, you can be pretty sure that OS X has surreptitiously copied all or part of an external drive to your internal drive.
5. Move the suspect folder to the trash.
6. Empty the trash.

I just recovered about 30 gigabytes of space this way.

Completely Impractical Smartphone SMS Attack Panics Nation.

[Edited August 5 to add]  There were some important details that the San Francisco Chronicle left out or got wrong. The attack actually seems to be much worse than the original story suggested.  First, the “invisible” messages, which the story described as “text” or “SMS” messages, seem to be control messages.  As cNet makes more clear, control messages are not necessarily seen by the user, which makes this attack far easier to pull off.   The Chronicle’s story said you could delete any one of the 512 incoming messages to foil the attack.  Obviously that is not possible if the user can’t see the messages.  So the Chronicle blew it, presenting a jumble of true and incorrect information, and I will know better than to rely on it in the future.

Perhaps the most shocking thing about the exploit is that ordinary Joes who have nothing to do with the phone company or Apple can send control messages to cell phones and, according to the cNet story, any iPhone can be reprogrammed to do so. 

A huge buzz preceded the presentation by Charlie Miller and Collin Mulliner at the famous “Black Hat” cybersecurity conference in Las Vegas. The pair claim to have discovered a way to take over a smartphone, such as an iPhone or Windows Mobile phone, using nothing more than SMS. According to the San Francisco Chronicle, “A pair of security experts have found a vulnerability in the iPhone that allows a hacker to take control of an iPhone through a text-message attack.”

Even scarier, the attack uses “a series of mostly invisible SMS . . . bursts,” the Chronicle said.

Here are the real facts:

1. Yes, in theory, a hacker could take over your smartphone. Could be an iPhone, as the Chronicle’s lead paragraph and headline said. Could be a Windows Mobile phone.
2. There is no such thing as a “mostly invisible” SMS text message. You would receive a normal-seeming SMS text message that should show up on your phone just like any other, accompanied by some control messages that you may or may not see.
3. You would know you are being hacked because you will receive SMS text messages that contain empty square characters (I guess this is what the Chronicle means by “mostly invisible”; by that standard, the letter o is mostly invisble). If at that point you delete the messages or turn off your phone or go into Airplane mode, the attack will not succeed.
4. The attack requires 512 SMS messages, presumably delivered rapid-fire. That makes an attack against a single victim fairly noticeable and possibly expensive. An attack against more than a small number of smartphone users would be cost-prohibitive. Even “unlimited” SMS plans have their limits.
5. The attacker needs the phone numbers of enough smartphones to make this worth his while. Sending the attack to landlines or regular cellphones would merely run up his costs and raise his profile. This effectively limits the attack to “whales.”
6. The 512 SMS messages must all survive until all of them have been received by the victim. If the victim deletes even one of these messages, the exploit fails.
7. Cell phone companies actually care about SMS spam and have countermeasures in place. Leaky, lousy countermeasures, to be sure, but they would be foolish to allow their networks to be take over by zombie phones. Surely they could filter out all “mostly invisible” messages.

It is disturbing that this attack is possible, even given these constraints. You just don’t think of SMS as a security hole. Thank goodness Apple has already patched against this exploit. But get a grip, people.

iPhone Needs Energy Saver Preferences Pane

Apple has extensive tips about extending battery life on the iPhone. But the iPhone does not have the equivalent of the Energy Saver control panel on the Mac. It would be so handy to have a simple slider to say, “This is how much I care about battery life right now,” or a single gathering place to see/set all energy-relevant settings. Ideally, you would have presets for Home (turn on WiFi, turn off Bluetooth), In The Car (turn on Bluetooth and the equalizer, turn off WiFi), Traveling (turn off everything but push e-mail), etc.

Instead, to turn off or adjust power-hungry preferences, you are forced to go to hither and yon through the Settings app:

Only one of these settings — Airplane Mode — can be reached through the main screen of the Settings app.

It would be nice if there were a third-party app that could do this, but I would be surprised if non-Apple programmers had access to all of those settings.