yon Leveron blog

John's musings on the Interknot cowpath

Archive for September, 2010

A dang shame : the end of the Xmarks addon

Posted by John on 28th September 2010


End of the Road for Xmarks

Xmarks logo

As I write this, it’s a typical Sunday here at Xmarks. The synchronization service continues operating quietly, the servers chugging along syncing browser data for our 2 million users across their 5 million desktops. The day isn’t over yet, but we’re on track to add just under 3000 new accounts today.

Tomorrow, however, will hardly be anything but typical, for tomorrow one of our engineers will start a script that will email each of our users to notify them that we’ll be ceasing operations in around 90 days.

This post attempts to summarize the Xmarks story: how we got to be the most heavily used browser synchronization service in the world and yet still find ourselves pulling the plug.

The Beginning

In early 2006, I built a prototype bookmark synchronizer for Mitch Kapor. We were starting to work together again for the first time in many years, and he wanted me to help him: he was chairman of the Mozilla Foundation but stuck using Safari because there was no way on Firefox for him to keep his bookmarks synchronized across the 5 computers that he regularly used.

The prototype came together quickly and worked well enough for Mitch to suggest that we make it available to others. Curious to see whether it would prove as useful to others as it had to him, Mitch asked a colleague with a widely read blog to write about it, which he did. Hundreds of users showed up to kick the tires and many of them stayed. Some of them mentioned it to their friends. Others blogged about it. Pretty soon there were 5000 users. Of a prototype.

By early 2006, Wikipedia had really started to flourish, a marvel of what could be accomplished by crowdsourcing. It seemed like everyone was reading and digesting Coase’s Penguin to try to understand how an open source community could manage to build something like Wikipedia or Linux. Mitch had the idea that if we traded with our users the personal benefit of bookmark synchronization in return for use of their aggregate data, we might be able to build something useful: a crowdsourced Wikipedia of Websites, or maybe even a spam-free search engine based entirely on what users had bookmarked. We put together a privacy policy that acknowledged the kinds of things we were hoping to do, and set off to firm up operations and infrastructure with the anticipation of growing to hundreds of thousands of users. In October of 2006, we incorporated as Foxmarks, Inc. We had made the transition from pet project to startup.

The Middle

We spent much of 2007 dealing with the growing pains typical of many internet services. We built a team, including front-end and back-end developers, customer support, search, product management, and a VP of Engineering to manage them all. We replaced the off-the-shelf server we had opportunistically used to get started with a custom purpose-built server. As we continued to grow we focused on making the service more reliable and efficient, especially for users with large sets of bookmarks, who were particularly drawn to our offering. We learned a lot about the art and science of synchronization, and poured all of that knowledge into a new client and server which we launched simultaneously and disastrously around Christmas, effectively killing the service for most of our users as we scrambled to understand why the system that we had tested in the lab behaved so much worse in production. Angry users, deprived of the service that they had grown to depend on, demanded that we revert to the previous incarnation, which seemed perfectly adequate to them. We pressed on, and two weeks later the alarms finally stopped ringing.

One of the unseen benefits of the new system was that it enabled us to anonymize, extract, and aggregate bookmark data. So we dove into that and started looking at what products we might be able to deliver powered by the “corpus” of what would soon be 100 million bookmarks. The first thing we built was a search engine. It turned out amazing results, but only for certain types of queries. It was terrible at finding facts. But if you were looking for the websites in a particular category, the results were shockingly complete and entirely spam-free. Looking for the list of all auto manufacturers? Or presidential libraries? Or art supply sites? A casual comparison of our results with those of the major search engines would convince you that we were on to something. We recruited a group of non-technical subjects to do a usability test, and it flopped. Sit people in front of a search box and ask them to test it, and their first query is their own name. #FAIL. It turns out that with the exception of people doing market research, consumers using search are not typically looking for an authoritative list of sites within a category; they’re looking for an answer to a specific question. Undaunted, we tested some variants of the basic search idea, including a version where we inserted our results into the Google search results page. The verdict from users: too complicated.

In mid 2008, the synchronization service was still cranking along, growing at a sustained pace, and that pace ticked up notably with the introduction of Firefox 3. We crossed the million-users mark. Based on our momentum and despite the failure of our early efforts to find gold in the corpus, we secured venture capital funding and recruited James Joaquin as our CEO: “There’s a scalable business in here somewhere,” we told ourselves, and we were determined to find it. James pushed us to find a way to use use our bookmark corpus to enhance web search, an area with a proven Internet business model. We developed several prototpes, and after user testing, we settled on a simple-is-better scheme: we would add information to Google search results showing “bookmark rank” for sites, essentially tallying users’ bookmarks as votes of confidence.

Looking for more growth and a value proposition that could differentiate us from the built-in Firefox Sync that we knew was coming from Mozilla, we invested more heavily in our clients for Internet Explorer and Safari, pushing on the ability to sync seamlessly across these three major browsers. As part of that positioning, we realized we would have to shed the “Fox” naming association we had with Firefox. So at the DEMO conference in March 2009, we rebranded ourselves as Xmarks and introduced the “Smarter Search” feature, as well as a new Xmarks.com website where users could find the top sites across a huge range of topics.

Then we measured and observed user response. The initial behavior was truly encouraging. People using the new versions of our sync clients would occasionally see new “stuff” on their Google search results and click through on links to Xmarks.com. But the novelty quickly wore off and repeat usage after a week dropped off precipitously. We started a series of experiments and systematically arrived at a visual presentation that was more compelling. User engagement improved, but not by the order of magnitude we needed to build a scalable business.

We spent the next year turning over every conceivable rock looking for ways to use the data in our corpus that would prove compelling to our users and revenue-generating for us. Some of these ideas, like SearchTabs, saw the light of day; others never made it out of the lab. Our “SearchBoost“, service was an upsell to advertisers: pay us a fee and we’ll add a mark to your ad when it’s displayed to our users, showing the bookmark rank of your site. Our tests showed that we could boost ad click-through rates by 10%. We built it and it put it front of potential advertisers. Many were interested, but ultimately the feedback was negative: our user base was too small to be worth their time and attention.

The End

By Spring 2010, with money running tight and options fading, we started searching for potential buyers of the company. Over the past three months, we have been remarkably close to striking a deal, only to have the potential buyer get cold feet. We also considered refocusing Xmarks as a freemium sync business, but the prospects there are grim too: with the emergence of competent sync features built in to Mozilla Firefox and Google Chrome, it’s hard to see users paying for a service that they can now get for free. For four years we have offered the synchronization service for no charge, predicated on the hypothesis that a business model would emerge to support the free service. With that investment thesis thwarted, there is no way to pay expenses, primarily salary and hosting costs. Without the resources to keep the service going, we must shut it down. Our plan is to keep the service running for another 90+ days, after which the plug will be pulled.

The past four years have been a wild ride for us: growing something from nothing to substantial scale, providing a simple service that people love because it simplifies their lives. We’ve learned tons along the way, often by making big mistakes. We’re really sorry that this last lesson means that you’ll have to find an alternative to Xmarks, but the alternatives exist and you’ll have no problem finding them. (Start here for specific recommendations.)

I’d like to thank our investors, who stuck with us through uncertain times; my colleagues, who toiled long hours in search of a scalable business; our localizers, who made Xmarks available in 33 languages; and our users, for their unstinting support and willingness to tell us quickly and candidly when we misstepped. You will all be missed.

In the words of Douglas Adams, so long and thanks for all the fish.

Todd Agulnick
Co-Founder and CTO
Xmarks, Inc.

via http://blog.xmarks.com/?p=1886

A sad shame, but the economy is in a downturn for sure in our area.  This was one of my most useful FireFox addons, I was hoping their model would work.

—————-
Now playing: Johnny Cash – The Essential Johnny Cash 1955-1983 (Disc 2) – Ring Of Fire
via FoxyTunes

Technorati FavoritesShare

Tags: ,
Posted in General | No Comments »

Gmail adds integration with Google Voice

Posted by John on 13th September 2010


Make and receive calls in Gmail

Wednesday, August 25, 2010 | 9:40 AM

Google Voice lets you manage all your phone communications and seamlessly make and receive calls on any of your existing phones. But what if you don’t have your phone with you? Or what if you’re in a place with poor cell phone reception, or you’re travelling internationally and don’t want to incur expensive roaming charges? Wouldn’t it be great if you could use your computer to make or receive calls?

Starting today you can use Gmail to receive or place Google Voice calls.

To get started, check the box next to Google Chat in your list of forwarding phones and the next time someone calls your Google Voice number, Gmail will notify you of an incoming call. You can take the call or even listen in as the caller leaves a message, in a single step right from your computer.

To make a call, just click the Call phone link in Gmail and enter any number or name from your address book.

All calls made from Gmail will display your Google Voice phone number as the outbound caller ID and all international calls will use your Google Voice calling credit and are offered at the same low Google Voice rates. We took great care to make sure that our rates are as low as possible. For those of you not as familiar with international calling rates, check out our comparison table.

Finally, check out this video:

We’re rolling out this feature to U.S. based Gmail users over the next few days, so you’ll be ready to get started once “Call Phones” shows up in your chat list (you will need to install the voice and video plug-in if you haven’t already). If you’re using Google Apps for your school or business, then you won’t see it quite yet. We’re working on making this available more broadly – so stay tuned!

For more information, visit gmail.com/call.

Update (8/26): This has now been rolled out to everyone in the U.S. If you don’t see the feature yet, try logging out of Gmail and signing back in.

—————-
Now playing: Grateful Dead – In The Dark [Expanded] – Touch Of Grey [Studio Rehearsal]
via FoxyTunes

Technorati FavoritesShare

Tags: ,
Posted in General, Tech | No Comments »

TrueCrypt 7.0a launched

Posted by John on 6th September 2010

via http://www.truecrypt.org/docs/?s=version-history and new download @ http://www.truecrypt.org/downloads

7.0a

September 6, 2010

Improvements:

  • Workaround for a bug in some custom (non-Microsoft) drivers for storage device controllers that caused a system crash when initiating hibernation on TrueCrypt-encrypted operating systems.  (Windows 7/Vista/2008/2008R2)
  • Other minor improvements  (Windows, Mac OS X, and Linux)

Bug fixes:

  • Minor bug fixes  (Windows, Mac OS X, and Linux)

7.0


July 19, 2010

New features:

  • Hardware-accelerated AES (for more information, see the chapter Hardware Acceleration).Note: If you want to disable hardware acceleration, select Settings > Performance and disable the option ‘Accelerate AES encryption/decryption by using the AES instructions of the processor‘.
  • A volume can now be configured to be automatically mounted whenever its host device gets connected to the computer (provided that the correct password and/or keyfiles are supplied).  (Windows)Note: For example, if you have a TrueCrypt container on a USB flash drive and you want to configure TrueCrypt to mount it automatically whenever you insert the USB flash drive into the USB port, follow these steps: 1. Mount the volume. 2. Right-click the mounted volume in the drive list in the main TrueCrypt window and select ‘Add to Favorites‘. 3. The Favorites Organizer window should appear. In it, enable the option ‘Mount selected volume when its host device gets connected‘ and click OK.Also note that TrueCrypt will not prompt you for a password if you have enabled caching of the pre-boot authentication password (Settings > ‘System Encryption‘) and the volume uses the same password as the system partition/drive. The same applies to cached non-system volume passwords.
  • Partition/device-hosted volumes can now be created on drives that use a sector size of 4096, 2048, or 1024 bytes (Windows, Linux).  Note: Previously only file-hosted volumes were supported on such drives.
  • Favorite Volumes Organizer (Favorites > ‘Organize Favorite Volumes‘ or ‘Organize System Favorite Volumes‘), which allows you to set various options for each favorite volume. For example, any of them can be mounted upon logon, as read-only or removable medium, can be assigned a special label (which is shown within the user interface instead of the volume path), excluded from hotkey mount, etc. The order in which favorite volumes are displayed in the Favorites Organizer window can be changed and it is the order in which the volumes are mounted (e.g. when Windows starts or by pressing the ‘Mount Favorite Volumes‘ hotkey). For more information, see the chapters Favorite Volumes and System Favorite Volumes.  (Windows)
  • The Favorites menu now contains a list of your non-system favorite volumes. When you select a volume from the list, you are asked for its password (and/or keyfiles) (unless it is cached) and if it is correct, the volume is mounted. (Windows)

Security improvements:

  • In response to our public complaint regarding the missing API for encryption of Windows hibernation files, Microsoft began providing a public API for encryption of hibernation files on Windows Vista and later versions of Windows (for more information, see the section TrueCrypt 5.1a in this version history). Starting with this version 7.0, TrueCrypt uses this API to encrypt hibernation and crash dump files in a safe documented way. (Windows 7/Vista/2008/2008R2)Note: As Windows XP and Windows 2003 do not provide any API for encryption of hibernation files, TrueCrypt has to modify undocumented components of Windows XP/2003 in order to allow users to encrypt hibernation files. Therefore, TrueCrypt cannot guarantee that Windows XP/2003 hibernation files will always be encrypted. Therefore, if you use Windows XP/2003 and want the hibernation file to be safely encrypted, we strongly recommend that you upgrade to Windows Vista or later and to TrueCrypt 7.0 or later. For more information, see the section Hibernation File.

Improvements:

  • Many minor improvements.  (Windows, Mac OS X, and Linux)

Bug fixes:

  • Minor bug fixes.  (Windows, Mac OS X, and Linux)

Removed features:

  • TrueCrypt no longer supports device-hosted volumes located on floppy disks. Note: You can still create file-hosted TrueCrypt volumes on floppy disks.

6.3a

November 23, 2009

Improvements and bug fixes:

  • Minor improvements and bug fixes.  (Windows, Mac OS X, and Linux)

6.3

October 21, 2009

Improvements, bug fixes:

  • Full support for Windows 7.
  • Full support for Mac OS X 10.6 Snow Leopard.
  • The ability to configure selected volumes as ‘system favorite volumes’. This is useful, for example, when you have volumes that need to be mounted before system and application services start and before users start logging on. It is also useful when there are network-shared folders located on a TrueCrypt volume and you need to ensure that the network shares will be restored by the system each time it is restarted. For more information, see the chapter System Favorite Volumes.  (Windows)

Improvements and bug fixes:

  • ‘Favorite’ volumes residing within partitions or dynamic volumes will no longer be affected by changes in disk device numbers, which may occur, e.g., when a drive is removed or added. Note: If you use a favorite volume list saved by TrueCrypt 6.2a or earlier and you want to take advantage of this improvement, you need to resave the list using TrueCrypt 6.3.  (Windows)
  • Many other minor improvements and bug fixes.  (Windows, Mac OS X, and Linux)

6.2a

June 15, 2009

Improvements and bug fixes:

  • Improved file container creation speed on systems having issues with write block sizes greater than 64 KB.  (Windows)
  • The ‘Device not ready’ error will no longer occur when the process of decryption of a system partition/drive is finished.  (Windows)
  • Other minor improvements and bug fixes.  (Windows, Mac OS X, and Linux)

6.2

May 11, 2009

New features:

  • The I/O pipeline now uses read-ahead buffering, which improves read performance especially on solid-state drives, typically by 30-50%.  (Windows)

Improvements, bug fixes, and security enhancements:

  • The boot loader now supports motherboards with BIOSes that reserve large amounts of base memory (typically for onboard RAID controllers). Note: In order to be able to take advantage of this improvement under Windows Vista, you will have to install Service Pack 1 or higher first. Service Pack 1 for Windows Vista resolved an issue causing a shortage of free base memory during system boot.  (Windows Vista/XP/2008/2003)
  • Mounting using the ‘Auto-Mount Devices‘ feature may take significantly less time as partitions containing unencrypted filesystems are now skipped.  (Windows)
  • When volumes that are mounted as read-only or removable are saved as favorite volumes, they are mounted as read-only and/or removable when ‘Mount Favorite Volumes‘ is used.
  • When a multiple-pass wipe algorithm is selected when performing in-place encryption of a non-system volume, the header areas will be wiped before the encrypted headers are written to the disk. Note: On an existing volume, you can perform such an operation by changing its password and/or keyfiles.  (Windows Vista/2008)
  • Many other minor improvements, bug fixes and security enhancements.  (Windows, Mac OS X, and Linux)

6.1a

December 1, 2008

Improvements, bug fixes, and security enhancements:

  • Minor improvements, bug fixes, and security enhancements.  (Windows, Mac OS X, and Linux)

6.1

October 31, 2008

New features:

  • Ability to encrypt a non-system partition without losing existing data on the partition. (Windows Vista/2008)Note: To encrypt a non-system partition in place, click ‘Create Volume‘ > ‘Encrypt a non-system partition‘ > ‘Standard volume‘ > ‘Select Device‘ > ‘Encrypt partition in place‘ and then follow the instructions in the wizard. Please note that this is not supported on Windows XP/2000/2003 as these versions of Windows do not natively support shrinking of a filesystem (the filesystem needs to be shrunk to make space for the volume header and backup header).
  • Support for security tokens and smart cards (for more information, see section Security Tokens and Smart Cards in chapter Keyfiles).
  • The TrueCrypt boot loader can be prevented from displaying any texts (by selecting Settings > System Encryption and enabling the option ‘Do not show any texts in the pre-boot authentication screen’).
  • The TrueCrypt boot loader can now display a custom message (select Settings > System Encryption and enter the message in the corresponding field) either without any other texts or along with the standard TrueCrypt boot loader texts.
  • Pre-boot authentication passwords can now be cached in the driver memory, which allows them to be used for mounting of non-system TrueCrypt volumes (select Settings > System Encryption and enable the option ‘Cache pre-boot authentication password‘).
  • Linux and Mac OS X versions: The ability to mount a Windows system partition encrypted by TrueCrypt and to mount a partition located on a Windows system drive that is fully encrypted by a Windows version of TrueCrypt.

Improvements:

  • Protection against memory corruption caused by bugs in certain versions of some BIOSes, which prevented the TrueCrypt boot loader from working properly. (Windows Vista/XP/2008/2003)
  • During the process of creation of a hidden operating system, TrueCrypt now securely erases the entire content of the partition where the original system resides after the hidden system has been created. The user is then prompted to install a new system on the partition and encrypt it using TrueCrypt (thus the decoy system is created).Note: Although we are not aware of any security issues (connected with decoy systems) affecting the previous versions of TrueCrypt, we have implemented this change to prevent any such undiscovered security issues (if there are any). Otherwise, in the future, a vulnerability might be discovered that could allow an attacker to find out that the TrueCrypt wizard was used in the hidden-system-creation mode (which might indicate the existence of a hidden operating system on the computer) e.g. by analyzing files, such as log files created by Windows, on the partition where the original system (of which the hidden system is a clone) resides. In addition, due to this change, it is no longer required that the paging file is disabled and hibernation prevented when creating a hidden operating system.
  • Many other improvements.  (Windows, Mac OS X, and Linux)

Bug fixes:

  • Many minor bug fixes and security improvements.  (Windows, Mac OS X, and Linux)

6.0a

July 8, 2008

Resolved incompatibilities / bug fixes:

  • On systems where certain inappropriately designed chipset drivers were installed, it was impossible to encrypt the system partition/drive. This will no longer occur.
    (Windows Vista/XP/2008/2003)
  • Other minor bug fixes.  (Windows, Mac OS X, and Linux)

6.0

July 4, 2008

New features:

  • Parallelized encryption/decryption on multi-core processors (or multi-processor systems). Increase in encryption/decryption speed is directly proportional to the number of cores and/or processors.For example, if your computer has a quad-core processor, encryption and decryption will be four times faster than on a single-core processor with equivalent specifications (likewise, it will be twice faster on dual-core processors, etc.)[View benchmark results]
  • Ability to create and run an encrypted hidden operating system whose existence should be impossible to prove (provided that certain guidelines are followed).  For more information, see the section Hidden Operating System.   (Windows Vista/XP/2008/2003)For security reasons, when a hidden operating system is running, TrueCrypt ensures that all local unencrypted filesystems and non-hidden TrueCrypt volumes are read-only. (Data is allowed to be written to filesystems within hidden TrueCrypt volumes.)Note: We recommend that hidden volumes are mounted only when a hidden operating system is running. For more information, see the subsection Security Requirements and Precautions Pertaining to Hidden Volumes.
  • On Windows Vista and Windows 2008, it is now possible to encrypt an entire system drive even if it contains extended/logical partitions. (Note that on Windows XP you can encrypt an entire system drive too, but it must contain only primary partitions.)
  • New volume format that increases reliability, performance and expandability:
    • Each volume created by this or later versions of TrueCrypt will contain an embedded backup header (located at the end of the volume). Note that it is impossible to mount a volume when its header is damaged (the header contains an encrypted master key). Therefore, embedded backup headers significantly reduce this risk. Also note that a backup header is not a copy of the original volume header because it is encrypted with a different header key derived using a different salt. For more information, see the subsection Tools > Restore Volume Header.Note: If the user fails to supply the correct password (and/or keyfiles) twice in a row when trying to mount a volume, TrueCrypt will automatically try to mount the volume using the embedded backup header (in addition to trying to mount it using the primary header) each subsequent time that the user attempts to mount the volume (until he or she clicks Cancel). If TrueCrypt fails to decrypt the primary header but it successfully decrypts the embedded backup header at the same time, the volume is mounted and the user is warned that the volume header is damaged (and informed as to how to repair it).
    • The size of the volume header area has been increased to 128 KB. This will allow implementation of new features and improvements in future versions and ensures that performance will not be impaired when a TrueCrypt volume is stored on a file system or device that uses a sector size greater than 512 bytes (the start of the data area will always be aligned with the start of a host-filesystem/physical sector).

    For more information about the new volume format, see the section TrueCrypt Volume Format Specification.

    Note: Volumes created by previous versions of TrueCrypt can be mounted using this version of TrueCrypt.

  • Parallelized header key derivation on multi-core processors (one algorithm per core/thread). As a result, mounting is several times faster on multi-core processors.  (Windows)
  • Ability to create hidden volumes under Mac OS X and Linux.
  • On Linux, TrueCrypt now uses native kernel cryptographic services (by default) for volumes encrypted in XTS mode. This increases read/write speed in most cases. However, the FUSE driver must still be used when the volume is encrypted in a deprecated mode of operation (LRW or CBC), or when mounting an outer volume with hidden-volume protection, or when using an old version of the Linux kernel that does not support XTS mode.

Improvements:

  • Up to 20% faster resuming from hibernation when the system partition/drive is encrypted. (Windows Vista/XP/2008/2003)
  • Many other improvements.  (Windows, Mac OS X, and Linux)

Removed features:

  • Encrypted system partitions/drives can no longer be permanently decrypted using the TrueCrypt Boot Loader (however, it is still possible using the TrueCrypt Rescue Disk). (Windows Vista/XP/2008/2003)Note: This was done in order to reduce the memory requirements for the TrueCrypt Boot Loader, which was necessary to enable the implementation of support for hidden operating systems.

Bug fixes:

  • When Windows XP was installed on a FAT16 or FAT32 partition (as opposed to an NTFS partition) and the user attempted to encrypt the system partition (or system drive), the system encryption pretest failed. This will no longer occur.
  • Many other minor bug fixes and security improvements (preventing e.g. denial-of-service attacks). (Windows, Mac OS X, and Linux)

5.1a

March 17, 2008

Improvements:

  • Faster booting when the system partition/drive is encrypted (typically by 10%).   (Windows Vista/XP/2008/2003)
  • Other minor improvements.  (Windows, Mac OS X, and Linux)

Resolved incompatibilities:

  • On computers with certain hardware configurations, resuming from hibernation failed when the system partition was encrypted. Note: If you encountered this problem, the content of RAM may have been saved unencrypted to the hibernation file. You can erase such data, for example, by decrypting the system partition/drive (select System > Permanently Decrypt System Partition/Drive) and then encrypting it again.  (Windows Vista/XP/2008/2003)Remark: As Microsoft does not provide any API for handling hibernation, non-Microsoft developers of disk encryption software are forced to modify undocumented components of Windows in order to allow users to encrypt hibernation files. Therefore, no disk encryption software (except for Microsoft’s BitLocker) can guarantee that hibernation files will always be encrypted. At anytime, Microsoft can arbitrarily modify components of Windows (using the auto-update feature of Windows) that are not publicly documented or accessible via a public API. Any such change, or the use of an untypical or custom storage device driver, may cause any non-Microsoft disk encryption software to fail to encrypt the hibernation file. We plan to file a complaint with Microsoft (and if rejected, with the European Commission) about this issue, also due to the fact that Microsoft’s disk encryption software, BitLocker, is not disadvantaged by this.[Update 2008-04-02: Although we have not filed any complaint with Microsoft yet, we were contacted (on March 27) by Scott Field, a lead Architect in the Windows Client Operating System Division at Microsoft, who stated that he would like to investigate our requirements and look at possible solutions. We responded on March 31 providing details of the issues and suggested solutions.][Update 2009-05-10: Since April 2008, we have been working with Microsoft to explore possible ways to solve this issue. We have private access to a draft version of a document specifying the future API, which should allow us to solve the issue on Windows Vista and later versions of Windows. Note: We have been asked not to disclose the content of the document to any third parties, so please do not ask us to send you a copy of the document.]

    [Update 2010-07-19: Microsoft began providing a public API for encryption of hibernation files on Windows Vista and later versions of Windows. Since version 7.0, TrueCrypt has used this API and therefore has been able to safely encrypt hibernation files under Windows Vista and later versions of Windows. Therefore, if you use Windows XP/2003 and want the hibernation file to be safely encrypted, we strongly recommend that you upgrade to Windows Vista or later and to TrueCrypt 7.0 or later.]

  • Workaround for a bug in the BIOS of some Apple computers that prevented users from entering pre-boot authentication passwords and controlling the TrueCrypt Boot Loader.   (Windows Vista/XP/2008/2003)

Bug fixes:

  • When the system partition/drive is decrypted under Windows, the original partition table will not be restored. Note: This issue affected users who repartitioned an encrypted system drive and then decrypted it under Windows.   (Windows Vista/XP/2008/2003)
  • Other minor bug fixes.  (Windows, Mac OS X, and Linux)

5.1

March 10, 2008

New features:

  • Support for hibernation on computers where the system partition is encrypted (previous versions of TrueCrypt prevented the system from hibernating when the system partition was encrypted). (Windows Vista/XP/2008/2003)
  • Ability to mount a partition that is within the key scope of system encryption without pre-boot authentication (for example, a partition located on the encrypted system drive of another operating system that is not running).   (Windows Vista/XP/2008/2003)Note: This can be useful e.g. when there is a need to back up or repair an operating system encrypted by TrueCrypt (from within another operating system).
  • Command line options for creating new volumes.  (Linux and Mac OS X)

Improvements:

  • Increased speed of AES encryption/decryption (depending on the hardware platform, by 30-140%).    (Windows)
  • Faster booting when the system partition/drive is encrypted.   (Windows Vista/XP/2008/2003)
  • When the system partition/drive is encrypted, the TrueCrypt Boot Loader is now stored in a compressed form and is, therefore, smaller. If a non-cascade encryption algorithm is used (i.e., AES, Serpent, or Twofish), the TrueCrypt Boot Loader is now small enough so that a backup of the TrueCrypt Boot Loader can be (and is) stored in the first drive track. Whenever the TrueCrypt Boot Loader is damaged, its backup copy is run automatically instead.As a result of this improvement, the following problem will no longer occur: Certain inappropriately designed activation software (used for activation of some third-party software) writes data to the first drive track, thus damaging the TrueCrypt Boot Loader. The affected users had to use the TrueCrypt Rescue Disk to repair the TrueCrypt Boot Loader. This will no longer be necessary after upgrading to this version of TrueCrypt (provided that the system partition/drive is encrypted using a non-cascade encryption algorithm, i.e., AES, Serpent, or Twofish).Note: If your system partition/drive is currently encrypted using a non-cascade encryption algorithm (i.e., AES, Serpent, or Twofish), a backup copy of the TrueCrypt Boot Loader will be automatically stored in the first drive track when you upgrade to this version of TrueCrypt.
  • The minimum memory requirements for the TrueCrypt Boot Loader (AES) have been reduced from 42 KB to 27 KB (twenty-seven kilobytes). This allows users to encrypt system partitions/drives on computers where the BIOS reserves a large amount of memory (provided that the AES encryption algorithm is used).  (Windows Vista/XP/2008/2003)
  • Many other minor improvements.  (Windows, Mac OS X, and Linux)

Resolved incompatibilities:

  • On some computers, when performing the system encryption pretest, Windows failed to display the log-on screen. This will no longer occur.   (Windows Vista/XP/2008/2003)

Bug fixes:

  • On some systems, drive letters were not correctly assigned to newly mounted non-system volumes. This will no longer occur.  (Windows)
  • Many other minor bug fixes.  (Windows, Mac OS X, and Linux)

5.0a

February 12, 2008

Improvements:

  • The memory requirements for the TrueCrypt Boot Loader have been reduced by 18 KB (eighteen kilobytes). As a result of this improvement, the following problem will no longer occur on most of the affected computers: The memory requirements of the TrueCrypt Boot Loader 5.0 prevented users of some computers from encrypting system partitions/drives (when performing the system encryption pretest, the TrueCrypt Boot Loader displayed the following error message: Insufficient memory for encryption).

Bug fixes:

  • On computers equipped with certain brands of audio cards, when performing the system encryption pretest or when the system partition/drive is encrypted, the sound card drivers failed to load. This will no longer occur.   (Windows Vista/XP/2003)
  • It is possible to access mounted TrueCrypt volumes over a network.   (Windows)
  • TrueCrypt Rescue Disks created by the previous version could not be booted on some computers. This will no longer occur.  (Windows Vista/XP/2003)Note: If your TrueCrypt Rescue Disk created by TrueCrypt 5.0 cannot be booted on your computer, please upgrade to this version of TrueCrypt and then create a new TrueCrypt Rescue Disk (select ‘System‘ > ‘Create Rescue Disk‘).
  • Many other minor bug fixes.  (Windows, Mac OS X, and Linux)

5.0

February 5, 2008

New features:

  • Ability to encrypt a system partition/drive (i.e. a partition/drive where Windows is installed) with pre-boot authentication (anyone who wants to gain access and use the system, read and write files, etc., needs to enter the correct password each time before the system starts). For more information, see the chapter System Encryption.   (Windows Vista/XP/2003)
  • Pipelined operations increasing read/write speed by up to 100%   (Windows)
  • Mac OS X version
  • Graphical user interface for the Linux version of TrueCrypt
  • The TrueCrypt Volume Creation Wizard now allows creation of hidden volumes within NTFS volumes.  (Windows Vista/XP/2003/2008)
  • XTS mode of operation, which was designed by Phillip Rogaway in 2003 and which was recently approved as the IEEE 1619 standard for cryptographic protection of data on block-oriented storage devices. XTS is faster and more secure than LRW mode (for more information on XTS mode, see the section Modes of Operation).Note: New volumes created by this version of TrueCrypt can be encrypted only in XTS mode. However, volumes created by previous versions of TrueCrypt can still be mounted using this version of TrueCrypt.
  • SHA-512 hash algorithm (replacing SHA-1, which is no longer available when creating new volumes).Note: To re-encrypt the header of an existing volume with a header key derived using HMAC-SHA-512 (PRF), select ‘Volumes‘ > ‘Set Header Key Derivation Algorithm‘.


Improvements, bug fixes, and security enhancements:

  • The Linux version of TrueCrypt has been redesigned so that it will no longer be affected by changes to the Linux kernel (kernel upgrades/updates).
  • Many other minor improvements, bug fixes, and security enhancements.  (Windows and Linux)If you are using an older version of TrueCrypt, it is strongly recommended that you upgrade to this version.

What was new in older versions >>

—————-
Now playing: Pink Floyd – Wish You Were Here – Shine On You Crazy Diamond (Part I-V)
via FoxyTunes

Technorati FavoritesShare

Tags:
Posted in Security - Crypto | No Comments »

Gmail : Priority Inbox feature

Posted by John on 4th September 2010

New stuffs ;)

———- Forwarded message ———-
From: Gmail Team <mail-noreply@google.com>
Date: Sat, Sep 4, 2010 at 22:41
Subject: Get through your email faster with Gmail Priority Inbox

sections Gmail

Priority InboxBeta

Welcome to Priority Inbox! By automatically separating out your most important messages, Priority Inbox makes it easy for you to read and respond to the messages that matter.

Get through your email faster

sections Try reading and replying to the messages in the “Important and Unread” section first. Mark anything that requires follow-up with a star, then go through the “Everything Else” section. If you leave Priority Inbox, you can return to it by clicking the link next to Inbox on the side navigation of Gmail.

How it works

Gmail’s servers look at several types of information to identify the email that’s important to you, including who you email and chat with most, how often you email with these people, and which keywords appear frequently in the emails you read.

Train Priority Inbox

If Priority Inbox makes a mistake, you can use the Mark important Mark not important buttons to correctly mark a conversation as important or not important, and Priority Inbox will quickly learn what you care about most.

sections

And more…

  • Customize Priority Inbox: You can change what type of email you see in each section (like switching the “Important and Unread” section to just “Important”). Just click on the section headers or visit the Priority Inbox tab under Settings and choose to “customize inbox groups.”
  • Use filters to guarantee importance: If you want to be absolutely sure that some messages are always marked as important (like email from your boss), you can set up a filter and choose “Always mark it as important.”
  • Search by importance: If you want to see all the messages that have been marked as important, both read and unread, do a Gmail search for “is:important.”
  • Switching back to your old inbox: If Priority Inbox isn’t for you, you can easily switch back to your normal inbox by clicking “Inbox” on the left or hide Priority Inbox altogether from Gmail Settings.

To learn more about managing your email with Priority Inbox, check out the Gmail Help Center.

- The Gmail Team

Google, Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
—————-
Now playing: Pink Floyd – Atom Heart Mother – Fat Old Sun
via FoxyTunes

Technorati FavoritesShare

Tags:
Posted in General | No Comments »

bitlet – a very cool web browser based BitTorrent client, via java applet

Posted by John on 3rd September 2010

Can’t believe I didn’t see this gem sooner : this will be very handy for a number of projects in deploying legal content, in a shared / load balanced manner.

http://www.bitlet.org/ & their blog at  http://feeds.feedburner.com/bitlet

as well as a Facebook page @ http://www.facebook.com/pages/BitLetorg/18147948185

To steal a bit directly from their pages :

bitlet web browser based bittorrent client

Bitlet also appears to be used by several search engines, as well as famous legitimate torrent sites such as http://www.clearbits.net/ as one means of distribution.

Very impressive work, that also has streaming video as well as streaming music implications.  Another win for legal torrent distribution, as it sure helps share the bandwidth costs for small non-profit organizations trying to put documentaries out there !
—————-
Now playing: Rush – Caress Of Steel – Lakeside Park
via FoxyTunes

Technorati FavoritesShare

Tags: , , , ,
Posted in General | No Comments »