5 second video freezes / locks up iPhone on iOS10 iOS9

Really strange bug was found inside of iOS 10 (and tested on iOS 9). If you run a short 5 second video it will run like any other normal video. The video has sound, and lasts 5 seconds. You can even close the video after you view it, or leave it open in the background. It does not make a difference. About 5-10 seconds later after viewing the video, you will notice your phone simply slow down and eventually it will lock up / freeze. The only way out of it is a hard reboot. After reboot everything seems to be back to normal. This works on any device such as iPad, iPhone, iTouch running on iOS 10 and iOS 9. I haven’t had the opportunity to try earlier versions of the iOS

What is it? Memory leak? Virus? Not sure as of yet, please use caution before running the video. Due note that the video did NOT affect Android devices

5 Second Crash Video

How to hard reboot:

iPhone 7 = hold down power and down sound rocker

All others = hold down home button and power button.

Edit: I found an old iPod touch running iOS 8.4. And the video above had no issues locking it up. I wonder how far does this go?

Edit (December 3, 2016): The above has been patched on iOS 10.2b. It appeared to be a memory leak.

iPhone stuck in reboot loop (iOS9)

I installed BiteSMS (for iOS 7) by accident. And my iPhone got stuck in the infamous reboot loop. You will notice your phone reboot, and you will see Apple logo, and eventually after 60 seconds it will reboot again and so on. Here are suggested solutions that I have attempted:

1. Hard Reset – Holding power and home button. Result: same Apple reboot cycle.

2. ReiBoot – Excellent software that lets you Enter and Exit Recovery mode. Result: same Apple reboot cycle.

I was running out of ideas. Then I read somewhere that you can by-pass Cydia substrate by holding Volume UP until you actually see your phones lock screen. Result: SUCCESS

Once I was in, I was able to get into Cydia, and I unstainstalled BiteSMS. Then I held the power button and shutdown and rebooted thereafter. All was back to normal.

I hope this helps someone who wants to preserve their jailbreak. This was performed on iOS 9.0.2.

App attempts to access privacy sensitive data

During process of uploading an app to the AppStore you might run into an issue where you will receive an email indicating that your application needs further keys inserted in your info.plist file.

The two keys that I was required to add were: NSCalendarsUsageDescription and NSBluetoothPeripheralUsageDescription. Both do require a string explaining to the user how the app uses this data. Without the two, you are trapped and your application will fail Apple’s approval each and every time.

The solution is fairly simple, open your info.plist file and add the following:

NSCalendarsUsageDescription

NSCalendarsUsageDescription
$(PRODUCT_NAME) calendars use.

NSBluetoothPeripheralUsageDescription

NSBluetoothPeripheralUsageDescription
$(PRODUCT_NAME) bluetooth use.

Resubmit your binary and your application should/will pass Apple’s quality assurance.

How to leverage browser caching

What is browser caching?

Every time a browser loads a webpage it has to download all the web files to properly display the page. This includes all the HTML, CSS, JavaScript and images.

Some pages might only consist of a few files and be small in size – maybe a couple of kilobytes. For others however there may be a lot of files, and these may add up to be several megabytes large. Twitter.com for example is 3 MB+.

The issue is two fold.

These large files take longer to load and can be especially painful if you’re on a slow internet connection (or a mobile device). Each file makes a separate request to the server. The more requests your server gets simultaneously the more work it needs to do, only further reducing your page speed.

Browser caching can help by storing some of these files locally in the user’s browser. Their first visit to your site will take the same time to load, however when that user revisits your website, refreshes the page, or even moves to a different page of your site, they already have some of the files they need locally.

This means the amount of data the user’s browser has to download is less, and fewer requests need to be made to your server. The result? Decreased page load times.

Here’s something you can add to your apache htaccess file and see if it improves loading times for you:

 

##EXPIRES CACHING
ExpiresActive On
ExpiresByType image/jpg “access 1 month”
ExpiresByType image/jpeg “access 1 month”
ExpiresByType image/gif “access 1 month”
ExpiresByType image/png “access 1 month”
ExpiresByType text/css “access 1 month”
ExpiresByType application/pdf “access 1 month”
ExpiresByType text/x-javascript “access 1 month”
ExpiresByType application/javascript “access 1 month”
ExpiresByType image/x-icon “access 1 year”
ExpiresDefault “access 1 week”
##EXPIRES CACHING

Let us know what you think?

EDIT: Its actually ##EXPIRES CACHING no need to have # after caching.

Case and Tempered Glass

iPhone 6S Plus tampered glass protector + case (both cheap) – 1 year later

When I purchased my iPhone 6S Plus I decided to purchase tempered glass protector and case. There was many choices that I had. I ended up going with:

Leesentec iPhone 6s/6 Plus Case Transparent Protective Case for iPhone 6 Plus 5.5” Soft Crystal TPU Case [Ultra-Slim] (Crystal Black)
– CA$6.99

And

Y&M(TM)iphone Tempered Glass,9H Hardness Ultra Thin Scratch-resistant Tempered Glass Screen Protector Protective Front Film For iphone 6 Plus/6s Plus (iphone 6 Plus/6s Plus)
– CA$6.99

Grand total for the order was CA$13.98. Pretty cheap investment, but how would it hold up 1 year later?

The results were pretty darn good for such a cheap investment. Tempered glass took most of the beating and did have issues, whereas the case did its job without any noticeable damage on the phone or the case itself.

Here’s the image of the tempered glass:

Tempered Glass

 

Let me explain the yellow circles. The circle on the left hand side at the top is an air bubble. I have no idea how it got there. It occurred about 6 months after use. There is also another small air bubble which I didn’t circle. It is located in the same area as the large air bubble (top left).

The circle just below large air bubble, was a drop via pavement. There was no damage on the body or the screen, but the tempered glass did damage fairly well. You can say that it did its job.

Last but not least is the bottom right corner circle. That occurred about 6 months after use as well. There was no drop invovled it just simply started to chip away.

In summary, I would definitely recommend a tempered glass and some sort of a case. You can cheap out just as I did, however if you do encounter MANY drops, I would HIGHLY recommend a better quality tempered glass and case.

 

 

Microsoft Outlook ActiveSync 14.0 and your cell phone

When you connect your cell phone to Outlook.com email service, do you ever wonder what sort of information Microsoft has on your cell phone? You can actually check and see, by going to your OPTIONS > MOBILE DEVICES under your outlook.com account. You should get a screen similar to the one below:

 

Mobile Devices

Now before we go any further. I do have 4 devices hooked up, 2 are cell phones, and other 2 are applications (located on the tablet+desktop). Let’s concentrate on the 2 cell phones. I have a BlackBerry and an iPhone. Let’s see what they have logged on those two devices.

You might already be surprised that BlackBerry actually reveals your full phone number to Microsoft. Online they only show last 4 digits, but believe me…Microsoft has your full phone number, whether you like it or not. iPhone surprisingly does not gives your number out to Microsoft. 1-0 for iPhone.

I have selected BlackBerry (highlighted) and all you we need to do is click on the little pencil to see additional information. Let’s see what information they have on the BlackBerry:

BlackBerry Details

I have removed last 4 digits of my phone number, Device ID and Device IMEI. Microsoft had the entire identity of my phone. EVERYTHING!. If you are keeping count, that’s iPhone 4 and BlackBerry 0.

Let’s look at the iPhone:

iPhone Mobile Device Details

iPhone did not reveal everything, as a matter of fact they have shown limited information. The only thing I had removed is Device ID. I probably could have left it, as I don’t see that same ID listed anywhere on the box or on the device. Final Score: iPhone 4 and BlackBerry 1.

Is BlackBerry truly a privacy oriented company? From what we had observed here, no they are not. As a matter of fact they didn’t keep anything private from Microsoft (Outlook client).

Thanks for reading.

Benefits of dedicated IP vs. shared IP

Large business and corporations don’t really have to decide if they should be obtaining a dedicated IP or shared IP. Most of the larger enterprises end up obtaining a dedicated server which of course comes with dedicated IP’s. However, start-ups, and small-businesses do have to make that choice sometime during their venture if they should remain shared or simply get a dedicated IP.

Advantages of a dedicated IP address:

  • You can access your server before pointing any domain to your server’s IP address in DNS
  • You can access your server in case of a DNS error or failure
  • You can point any and as many domains as you like to the IP address of your server, and unlimited subdomains of those domains as well. You will not have to “declare” these by using the “add-on domain” function of a control panel — everything can be done at the DNS level. The disposition of requests to those domains is entirely your choice as well; You can map them into the filespace of the server in any way you like (using mod_rewrite on Apache, for example).
  • It is beneficial for email sender’s reputation. Establish and be accountable for one’s own IP reputation. In simple sense, your emails won’t get grouped with other less diligent senders and therefore ensures better Inbox placement.
  • It is good for a business identity.
  • It is “sometimes” required for particular third-party applications/scripts.
  • Your site is high traffic and needs dedicated resources to maintain performance.

If any of the bullet points are important to you, then it is time to get your own dedicated IP.

WordPress Malware (PHP.Trojan.Uploader & Php.Trojan.StopPost)

WordPress as a platform is fantastic, and usually its a fairly secure. However, plugins that you use might be a different story. Some plugins are updated on weekly basis, and then there are those that are updated monthly, annually or sometimes are never updated again.

One of our clients runs a very active and informational website. The client had refused to do any updates because they were afraid that it might “break” something on their website. Which is totally understandable. For those of you who do updates on daily basis, sometimes its not a smooth progression and you spend more time troubleshooting the issue than anything else.

Client was hosted on a shared web server, and our firewall had alerted us that the website had been sending a large amount of SPAM. Approximately 200-300 emails per minute. We had immediately disabled the website and had ran a scan on the entire server.

As it turns out their website had been compromised via plugin and had injected itself authorizing use of the server’s mail resources. Upon further investigation the server had not been compromised just the clients website.

Here’s the complete log of what had been infected:

{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-includes/ID3/header.php.suspected
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-includes/images/smilies/options.php.suspected
{HEX}php.base64.v23au.184 : /home/user/web/website.com/public_htmlx/wp-includes/images/wlw/object.php
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/themes/twentyfourteen/inc/inc.php.suspected
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/uploads/2015/ajax.php.suspected
{HEX}php.cmdshell.unclassed.358 : /home/user/web/website.com/public_htmlx/wp-content/uploads/phpini.php
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/tinymce-advanced/css/test.php.suspected
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/eventON/assets/js/javascript.php.suspected
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/eventON/assets/css/test.php.suspected
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/display-widgets/session.php.suspected
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/shortcodes-ultimate/inc/core/general.php.suspected
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/shortcodes-ultimate/assets/images/player/view.php.suspected
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/business-directory-plugin/vendors/anet_php_sdk/lib/ssl/include.php
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/business-directory/business-directory-plugin/vendors/anet_php_sdk/tests/AuthorizeNetDPM_Test.php
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/wordpress-seo/model.php.suspected
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/wordpress-seo/vendor/yoast/api-libs/google/service/Google_BatchRequest.php
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/wordpress-seo/vendor/yoast/api-libs/class-api-libs.php
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/wordpress-seo/vendor/yoast/license-manager/samples/sample-theme-functions.php
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/stop-auto-update/dump.php.suspected
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/search.php.suspected
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/validation/object.php
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/css.php
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_basic_album/module.nextgen_basic_album.php
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_pagination/view.php
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/fs/package.module.fs.php
{CAV}PHP.Trojan.Uploader : /home/user/web/website.com/public_htmlx/wp-content/plugins/seo-image/javascripts/css.php.suspected
{CAV}Php.Trojan.StopPost : /home/user/web/website.com/public_htmlx/wp-content/gallery/gal1/thumbs/ajax.php.suspected

Unfortunately, the best we could do is restore from previous backup and perform a plugin update along with wordpress.

Moral of the story is, update your plugins people. And if the plugin is old, we wouldn’t recommend using it.

Rogers SureTap Wallet Review

Paying by tapping your phone instead of your credit card seems like a great idea. The technology has been around ever since NFC came out, and there are a few banks that have applications that are capable with it. Now Rogers is getting into the banking game. Since they are a telecom the process should be easy? Right? What’s required:

1) NFC capable phone
2) NFC Sim card
3) Application that will tie all this together
4) A card that’s compatible with the application

Lots of requirements are required, not to mention there are some phones that are NFC capable however are not included with the application which automatically excludes the user. At the time of writing these are the handsets that are compatible with the Rogers SureTap Wallet App:

Samsung GALAXY Alpha™
Samsung GALAXY Note 4™
Samsung GALAXY Note 3™
Samsung GALAXY Note II™
Samsung GALAXY S4™
Samsung GALAXY S III™
Samsung GALAXY S5™
HTC One™
HTC One (M8)
LG G3
LG G Flex
LG G2
LG Optimus G
BlackBerry® Z10
Sony Xperia® Z3
BlackBerry® Z3
Samsung Core LTE
BlackBerry® Z30
BlackBerry® Q10

I went to the Rogers store and picked up a NFC sim card listed at $9.99+tax at the time of purchase. Rogers (over the phone) was offering free NFC sim cards, however I wanted a NANO sim card and I had a feeling because I was testing it with Z10 that Rogers would mail me Micro sim card instead.

Swapping current nano sim card to NFC nano card was fairly easy on Rogers.com My Account. The change was instant, took less than 2-3 minutes to do.

Next was to download the application. Since I was using a BlackBerry Z10 I went to the BlackBerry World app and download Rogers SureTap Wallet. I registered and apparently during the registration process there is additional information that is burned on the NFC sim card. The process was easy and I had my Rogers SureTap Wallet successfully installed. The security involved is a 4 pin password requirement along with two security questions.

Now to add a card, at the time of posting Rogers was offering their branded Rogers MasterCard with additional credit included. I added the card and this process did take a bit for the card to be downloaded (approximately 2 hours). Once that was done I was set. Time to test.

Here’s the list of merchants that is successfully worked:

  • Metro
  • McDondals
  • Tim Horton’s
  • Pizza Pizza
  • Harveys
  • LCBO

The list of merchants that did not accept suretap (seem to accept only swipe or chip insertion):

  • Target
  • Walmart
  • Wendy’s

How to get SureTap to work:

When the merchant tells you the total, and asks you how you are paying. Simply say Master Card. The merchant will usually tell you “go ahead when ready”. On your phone click on the SureTap Wallet app, type in your 4 digit password, click on your Rogers MasterCard and click on Pay Now. Place your handset over the terminal (rest it on top of it if you can). Wait for the “beep”, and leave it for additional 2-3 seconds. That is. The coin term “TAP”, does not work. I find it that the transaction would initiate, however time-out after the beep.

Please note that I had the application pre-loaded each time with my 4 digit code entered, the only step left was to click on Pay Now. I found that on Z10 it took a while to do it from scratch, and one of the merchants cash register actually timed out while I was trying to load the application. For full proof use, load it ahead of time while the merchant is scanning the merchandize.

Security:

The most common scenario is that people will end up switching phones, or wipe the phone clean (format it). What happens to the SureTap Wallet then? Also what if I wanted to run SureTap from a backup, was it possible? Here we go.

First test was, I backed up my Z10. I grabbed my BlackBerry Passport and tried to restore SureTap Wallet to it. Keep in mind that Passport is not on the accepted list of phones. The restore was successful, however the application would get stuck on the splash screen. SureTap wins this one.

Next, I wiped the Z10 clean and performed a restore of just the SureTap Wallet application. When I loaded the application I received strange errors, that the proper sim card wasn’t inserted, etc. SureTap wins this round as well.

Next, I wiped the Z10 one more time, and freshly installed SureTap Wallet application. It asked me for my 4 digit password. I entered it, and all of a sudden it presented me with the 1st security question (please note that you are only asked the 4 digit code when you setup) that I created a month ago. The odd part was that I actually forgot. Not to mention that the responses were case sensitive. I got my first response wrong, and then I was presented with a second security question. Needless to say, I typed that one wrong as well.  The application locked me out. SureTap wins. I was asked to call Rogers for them to unlock the application.

I phoned Rogers, and the rep unlocked it. A temporary 4 digit password was sent. However, here’s the kicker, when I entered the 4 digit temporary password, it said that the code was wrong. I typed in my own 4 digit and it accepted. Strange. First flaw in the SureTap system. What would happen if I forgot my 4 digit password?

Next, I had to guess if my 2 security words were case sensitive or not. I got the first security question wrong, the second one “I think” I got right, however I got stuck on verification for good 20 minutes. The verification eventually timed out and booted me back to my 4 digit password. After I typed in my 4 digit password, I managed to guess my first security word. The security verification passed and it went to this screen that I haven’t seen as of yet:

Updating Rogers Suretap Wallet

However, after about 5-10 seconds I receive the screen below(tested with LTE, 3G, EDGE and WIFI)

Rogers Suretap Wallet Try Again

After you click on “Try Again”, it takes you back to your 4 digit password. The process and the cycle are in the never ending loop. I tried reinstalled the application, reloading the operating system. Nothing worked.

I reached out on twitter to @RogersHelps (Really helpful staff at Rogers). The rep refreshed my account, and tried a few things out, however nothing really changed. The issue was escalated and it could take 10 days to fix.

Final Words (Review):

Rogers Suretap Wallet seems to work, I do find it slow on my Z10 (hence I had to have it pre-loaded while the cashier scans the product). I found it NOT to be a TAP solution, more like HOLD and WAIT to pay.

Word of warning, there doesn’t seem to be any contingency plan if you forget your 4 digit number. The temporary 4 digit number that was sent via text by Rogers never worked. And according to the SureTap Rogers rep the two security words if you forget them completely it is a pain to recover. I personally think that you are SOL if you forget the two security words. Kiss your wallet goodbye.

I’m curious how they will fix my problem, I have the 4 digit password and the security words. It seems to me that there might be a additional layer of security that has blacklisted my sim card or my IMEI. Unfortunately, I don’t have another approved device to try and test if the situation would change with a different IMEI.

I have to wait 10 days for them to fix the issue. When you think about it, 10 days is unacceptable, especially when money/paying is involved. I will keep you updated if my Wallet gets sorted.

UPDATE (January 14, 2015): Nothing from Rogers yet. However, I did mess around with the application a bit more. My intention was to lock myself out on purpose and give Rogers a call. I inputted wrong responses and got locked out. But I was able to get back into the application each time. Please note that the original lock-out, I was not able to get back into the application. This time around, I can get back into it each time. I didn’t want to mess with my 4 digit number though, that might be next if Rogers doesn’t solve this issue.

UPDATE (January 22, 2015): I called Rogers SureTap Wallet 1-855-640-7914 phone number. The rep I got told me that they no longer have access to accounts as of Monday. And that the back office team is working on the issues. My ticket has also not been viewed yet. Therefore, who knows how long until I see my SureTap Wallet again.

Please do note that I did try to access SureTap Wallet and the connection kept timing out. I got a new JAVA error which I’ll post later.

UPDATED (March 2, 2016): Rogers has officially decided to pull the plug with SureTap as of April 30, 2016. If you have funds, try to spend them or request a refund: https://suretap.com/refund/

It was a very promising project that failed at launch. Too many different handsets, and every handset had some sort of an “App” issue. Its a shame. RIP Rogers SureTap

4 Operating Systems in 1 year (Review)

I took it upon myself to treat 2014 as a testing tool of trying out 4 different operating systems in 1 year. The idea was to try out each operating system for 3 months in everyday use without taking the SIM out and putting it back to my preferred phone (which was iPhone at the time). Therefore, do note that I “was” the biggest proponent of iOS. I was one of those users that jumped on iPhone early, having the 2G, 3G, 3GS, 4, 4S and last but not least 5. Therefore I was opposed to any other operating system.  My least favorite at the time was BlackBerry BB10 OS, I had hate for it without even trying the OS out.

Prior to testing my uneducated, unscientific tests, this is how I thought they would rank up:

1. iOS
2. Android
3. BlackBerry
4. Windows (I thought because it was new, it would have lots of flaws)

The handsets I picked up were as follows:

1. iPhone 5
2. Samsung Note 2
3. BlackBerry Z10
4. Nokia Lumia 1520

The applications that I used on everyday basis are: email, contacts, SMS, Calendar, taking photos, voice notes, notepad (small notes), minor editing and emailing of Excel and Word, and of course phone calls. The only entertainment I have used is audio streaming, some youtube watching, and that’s about it. Therefore, you can consider myself a business user. I’m by no means a gamer. Take that into consideration as you read my final results.

My final rankings with a brief explanation:

1. BlackBerry Z10 – BB10 as an operating system is by far the easiest, and fastest to get the job done if you are planning to do business only tools. I found the keyboard to be the best and easiest to use, and navigating between the tasks required no effort or waste of time. Yes I was a hater, absolutely didn’t want to open my eyes to see a BB. However BB10 operating system changed my way of thinking.

2. Nokia Lumia 1520 – Windows Phone 8.1 is superb. It actually surpassed all of my expectations. It might have scored high because of Excel and Word editing (on a 6″ screen). However, I was able to do all of my tasks without a worry.  The OS is missing a few minor things, but overall it did the job.

3. iPhone 5 – When I was testing the phone I was transitioning from iOS 6 to iOS7. iOS6 was solid operating system, with the addition of iOS7 and since I used it mostly on iOS7 it scored low on my personal chart. For some reason it took significant amount of time to do things versus the top 2. I’ve become a lover of the iOS to a hater by trying out other operating systems. How the heck did that happen? In all seriousness, iOS is a great choice if you are planning to do business and entertainment. It would score #1 on my list if that was the case. But as I mentioned, I don’t do any entertainment/gaming. As a business device, it just doesn’t do the job as BB10 and WP8.1 did. At least for me.

4. Samsung Note 2 – Please take note that I’m not bashing the actual hardware. Samsung Note 2 is a beautiful handset, with amazing piece of hardware. The operating system is the worst piece of you know what. Wow! I think I found myself fixing things on it then getting the job done. If you are a business person, stay away from Android. If you want to play games and waste time, Android is the OS for you. If you are looking for just entertainment, I would say Android would score #1 on my list. Other then that, stay away.

Of course the rating above is a personal preference. However, I think people need to try other operating systems and not be committed to one. It might open up your eyes, like they have been opened up for me.