HOWTO make NSURLConnection ignore bad certificates

I’m working on a demo application that uses Exchange Web Services from Cocoa, Apple’s object-oriented OS framework. Cocoa is a really interesting environment, with a lot of very cool capabilities. One thing it can’t do, though, is give your application a way to examine a returned certificate that the framework thinks is bad. The certificate might appear to be bad because it’s expired or invalid, or merely because it’s self-signed (or issued by another untrusted CA). Because many Exchange servers will have self-signed certificates, the demo app won’t work on them without a way to finesse this problem. Because it’s just a demo application, I didn’t want to require the user to add the self-signed certificate to their certificate trust list, and I didn’t want to turn off certificate checking completely (if that’s even possible).

The answer, which I found here, is to override a private, unsupported, category method, allowsAnyHTTPSCertificateForHost. Just call it with the FQDN of the host whose certificate errors you want to ignore and you’re golden.

2 Comments

Filed under General Tech Stuff

Final Salute (Sheeler)

I’ve read a fair number of books about the war in Iraq and Afghanistan. Some have been written by soldiers and Marines, others by analysts or journalists. Final Salute: A Story of Unfinished Lives is the most important book I have yet read. Written by the Rocky Mountain News‘ Jim Sheeler, Final Salute is a book-length expansion of a newspaper series by the same name. The original series netted Pulitzer Prizes for Sheeler and Todd Heisler, the photographer, but I hadn’t heard of it until recently.

Sheeler has written an incredibly powerful and moving book centering on perhaps the hardest job in the military: the casualty assistance calls officer whose job is to notify families that they have lost a loved one. Marine Major (now LtCol) Steve Beck had this role for Colorado and Wyoming, and the book chronicles his visits to a number of Marine and Navy corpsman families. Beck is totally committed to this job, and his dedication in support of the families is awe-inspiring.

We don’t get much of a sense of Beck as a person (apart from his obvious integrity and devotion to the Marine Corps and his country), but the same cannot be said of the families Sheeler interviews. Their anguish comes through clearly, but so do their love and pride, and even their esprit de corps. From Indian reservations to Denver suburbs, the families span a wide range of backgrounds and situations.

I admire the deft way in which Sheeler elicits their feelings without seeming intrusive or angering them, and I very much appreciate his political neutrality. This isn’t a book about leaders or government; it’s a book about leadership, principle, and sacrifice. Sheeler writes economically, without a lot of needless embellishment or soppy sentimentality. He’s not flowery, and that makes his prose hit all the harder. I’m not ashamed to say that I cried at several points during the book, but reading it simultaneously renewed my pride in the Marine Corps and in our remarkable nation.

Whatever your political affiliation, whatever your view on the war, I urge you to read this book to get an idea of the kinds of sacrifices that your fellow Americans are making on your behalf. Highly recommended.

Comments Off on Final Salute (Sheeler)

Filed under Reviews

Podcasting Kit for SharePoint goes live!

I’ve been wanting to blog about this for a while, but we had to keep the lid on until today. Microsoft just announced the Podcasting Kit for SharePoint (PKS), primarily developed by 3Sharp. PKS is a completely integrated kit that lets you use SharePoint as an enterprise-scale podcasting aggregator and management system. You can publish your own internal podcasts, plus you can catch and redistribute podcasts from other sources. Wherever their origin, the podcasts you manage with PKS can be rated by users, tagged using tag clouds, and played back using Silverlight so that you don’t need a separate podcasting device or application. We’ve already implemented PKS internally and will shortly be rolling out a PKS portal stuffed full of tasty IT Pro content– check our web site for updates.

Comments Off on Podcasting Kit for SharePoint goes live!

Filed under General Tech Stuff, UC&C

Great article on investigative reporter

Brooke Adams of the Salt Lake Tribune handles the polygamy beat for the paper. Yes, that’s right; the Trib has a dedicated reporter who researches and writes stories about polygamists. Because of her topical knowledge, she’s written some very interesting stories about the Texas polygamy case. Alone among her peers, Adams challenged the legality of Texas’ raid on the FLDS compound, pretty much from the start. This Poynter article has a great Q&A with Adams– well worth reading. How I wish we had more investigative reporters like her, and fewer like the kind we see on FoCNMSNBC.

Comments Off on Great article on investigative reporter

Filed under General Stuff

Amazon puts MP3 albums on sale

One of the record companies’ major beefs with Apple is that Apple won’t let them charge variable prices. One of the chief reasons that Amazon was able to get permission to sell non-DRM MP3 files is because they do in fact use variable pricing. That means, of course, that Amazon can offer things on sale from time to time. Today I picked up Weezer’s Pinkerton for $2 and Led Zeppelin’s Mothership for $5– significantly cheaper than buying the album, or the individual tracks, from iTunes. The only way I know of to get notified of these sales is to sign up for Amazon’s MP3 newsletter (or check slickdeals.net daily, which is what I do).

Comments Off on Amazon puts MP3 albums on sale

Filed under General Stuff, General Tech Stuff

HOWTO generate a fake Exchange UM message

When you get a voice mail message from an Exchange 2007 unified messaging server, it gets a unique message type that allows Outlook 2007 and OWA 2007 to represent it as a voice mail. In the UC Metro class I’m teaching in Toronto, someone asked me whether it was possible to create a “fake” voice mail message– in other words, is there some way to create a message from an external application that appears to be a voice message in Exchange UM-aware clients? His question made sense given that his company makes applications that already do voice integration for various things, so I did some digging (by which I mean “I asked some folks on the UM team”). Here’s the deal.

Outlook and OWA use the PidTagMessageClass property to help them decide whether a message is a voice mail. I never would have known this except for the Voice Mail and Fax Objects Protocol Specification, part of the massive spec dump Microsoft unleashed last month. Section 2.1.2.1 explains the possible values for PidTagMessageClass; subsequent sections describe how you must prepare and attach the actual audio content to the message. However, the spec doesn’t explain exactly how to set the message class in the first place; to do that you’ll need to either have mad MAPI skillz (translation: pay Dimitri and use Redemption) or set it yourself using Exchange Web Services and the attribute documentation that tells you which properties have which tags. (Update: For real voicemails, the properties are set by the store’s content conversion engine when the message is accepted at the recipient mailbox. I haven’t tested to see what happens if you submit a message that meets the spec by using SMTP; it would be interesting to know if the properties are correctly applied in that case.)

In a related note, if you’ve ever wondered where the Outlook audio notes field data is stored, check out the PidNameAudioNotes attribute.

Update: each UM user has to have an Exchange Enterprise CAL. That means that anyone to whom you send synthetic VMs to has to have the Enteprise CAL as well, even if they’re not otherwise using UM.

Comments Off on HOWTO generate a fake Exchange UM message

Filed under HOWTO, UC&C

BitLocker gets FIPS 140-2 certification

Good news for all you feds out there: Vista’s BitLocker Drive Encryption was just certified by NIST as meeting the FIPS 140-2 standard. If you don’t know what this means, you probably don’t care. If you do know, check out some of the other certificated products on that page– there’s some pretty neat stuff lurking there.

Comments Off on BitLocker gets FIPS 140-2 certification

Filed under Security

Random quote meme

So, Devin tagged me with the latest random meme circulating through the intertubes. Without further comment, here are my five quotes:

Bear Bryant’s devotional
Time is the one thing we can’t get any more of. How we choose to use our time says a lot about our self and our values.
I teach them correct principles, and they govern themselves“.
Joseph Smith, Junior, founder of the Church of Jesus Christ of Latter-day Saints, said this when asked how he managed the rapid early growth of the church. This is exactly the strategy Arlene and I are trying to follow with the boys, but some days I think it works better than others.
“It doesn’t matter how long you’ve been in the Corps; you’ll always be a boot to someone.”
My senior drill instructor, Staff Sergeant Taylor, told our platoon this one night at Parris Island. His point has stuck with me ever since: no matter how smart or skilled you are, there’s someone out there smarter and more skilled, so don’t get cocky.
“Don’t get stuck on stupid”.
Lt. Gen. Rusell Honoré said this during a press conference after Hurricane Katrina. Would that the national media had taken his advice. I try to take it daily. When you think you’re not stuck on stupid, that’s precisely when you need to double-check.
“What you do speaks so loud I cannot hear what you say.”
Ralph Waldo Emerson is the claimed originator of this quote. I have never been a big Emerson fan (even less so after reading Kim Stanley Robinson’s climate-change trilogy), but this quote neatly sums up the importance of trying to live in harmony with one’s beliefs.

In retaliation, I tag Arlene, Julie, Tim, and Ed.

Comments Off on Random quote meme

Filed under Friends & Family, General Stuff

Amazon drops Kindle price, gives me my $40 back

Excellent! Amazon dropped the price on the Amazon Kindle, which I’m still using quite a bit. (David has been trying to steal it to read that free Star Wars book I downloaded, too). The price is now $359, so I e-mailed them to ask for a price credit– which they promptly issued. That $40 will buy me at least four more books, O happy day.

Interestingly, the Kindle has drawn quite a few comments from people who have seen me using it. My waitress at breakfast wanted to know where she could buy one, and both of the flight attendants on my DTW-YYZ flight noticed it (and, sadly, made me turn it off for takeoff and landing).

Comments Off on Amazon drops Kindle price, gives me my $40 back

Filed under General Tech Stuff

New iPhone development book

This is very cool: Erica Sadun, a fellow Georgia Tech graduate, has a new book coming out on iPhone development: http://rcm.amazon.com/e/cm?t=robichaassocia&o=1&p=8&l=as1&asins=0321555457&fc1=000000&IS2=1&lt1=_blank&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr. She’s been very active in answering questions on the iPhone development mailing list, so I’m looking forward to seeing the book.

1 Comment

Filed under General Tech Stuff

My new favorite theme park

Everyone’s heard of “normal” theme parks like Walt Disney World and Six Flags. How about a theme park that lets you (and your kids!) drive heavy equipment like bulldozers and front-end loaders? I give you Diggerland. Time to start making those summer vacation travel plans (well, not really, as it’s in the UK… but still, it’d be worth the trip.)

Comments Off on My new favorite theme park

Filed under Travel

More England

I’m on the plane, headed home after a quite successful UC Metro event. A good time was had by all 🙂

While I was in Reading, I stayed at the Hilton St. Anne’s Manor, Bracknell (which is actually in Wokingham, go figure). It’s an old manor house that has been converted to a hotel, and quite nicely at that. The hotel sits on about 25 acres of land, including both wooded and open spaces. On arrival, the desk clerk upgraded me to a room in the “Buckhurst Club” area of the hotel; apparently that’s where they put HHonors members. My room was quite nice, with a small patio that looked out onto the (grass) tennis courts. When I arrived, there were three fat rabbits outside my patio, munching happily on the lawn. However, the air conditioner didn’t work. Normally this would not have been a problem, except that the kind souls who prepared my room had turned on two halogen lamps, apparently early that morning. Between that and the fact that the room faced south, the room temperature was about 85°. I slept on top of the covers with the door open; after an undistinguished hotel breakfast the next morning, I headed out, asking the clerk to fix the air conditioner during the day. I got back to the hotel about 11pm after visiting the local mall cinema to watch Iron Man (summary: it’s made of win!), but the air conditioner wasn’t fixed. The surly night clerk sent one of the housekeeping staff to look at it, and she concluded that–sure enough– it was broken. As a result, I moved to another room, just as nicely outfitted as the first but with working air (and, thankfully, no halogen lamps). The staff quality varied pretty widely, from ignorant and surly to helpful and pleasant, but the weather and grounds made up for that. In the photo below, if you look closely you can see my laptop on the table under the umbrella… sure a lot nicer than working in some drab office somewhere.

Hilton St Anne's Bracknell patio view

Tuesday was uneventful: I got up, went to work, taught, and went back to the hotel.

Wednesday I repeated the pattern, at least until the class was over. I had intended to stay at the London Temple accomodation center, but they close the doors at 7pm. By the time my class was over, I had to catch the 5:35 train to Gatwick, which put me there right about 7pm. Instead, I booked a room at the Hilton Gatwick: the last-minute rate was cheap, and I hoped that I’d be able to easily get to the terminal in the morning. It turns out to be quite a hike from the terminal to the hotel, but then the same is true of the Sofitel, so no big deal.

The Hilton itself was quite nice– just a basic airport hotel (albeit with terrible, fuzzy TV reception). They upgraded me to the “executive floor” (ha!), with a small lounge with a nice variety of drinks and snacks. I wanted a real dinner, though, so I roamed the airport shopping area, looking for food, and found a place to have a panini while watching the UEFA Cup final. I then discovered that Marks & Spencer had a small “Simply Food” convenience store, where I bought some snacks for the boys and… drum roll… a two-pack of scotch eggs.

Let me describe the joy of scotch eggs. First, you boil an egg. Then you wrap it in minced sausage (spicy is better, of course), bread it, and deep-fry it. Delicious! Unfortunately, the custom is to eat them cold; Simply Food keeps them in the cooler, and I didn’t have any way to heat them up. However, they were still delightful. I’m glad I finally got to try them. (I also had fish and chips while in Reading, but I understand they don’t really taste right unless you eat them out of wax paper at the seashore.)

At lunch on Wednesday, I told the class attendees that this was my first visit to the UK. This sparked a lively conversation about how my expectations matched up to the reality, and what surprised me. So, in no particular order, a few thoughts:

  • Everywhere I went, I saw electricity-saving devices like speed-sensitive escalators and individual light fixtures with motion sensors. However, nowhere did I see any water-saving devices like automatic faucets. (And speaking of faucets: for some odd reason, many of the restrooms I saw lacked dividers between urinals, but had floor-to-ceiling walls on the toilet stalls… a little TMI to brighten your day!)
  • At the hotels, airports, and shops, I was surprised to see how many jobs were taken by immigrants from Eastern Europe.
  • I loved the ubiquity and ease of public transport, although it seemed rather expensive. The office park where I was teaching had a free bus that ran between the offices and the town center (where the train station is), and the train system was easy to figure out and use.
  • Shops and businesses close much earlier than I had expected. For example, there’s a large mall near Gatwick (well, it’s in Croydon), but it closes at 5pm. Hard to get much shopping done on that kind of schedule.
  • In the mall, on the train, and on the street, women tend to dress better than they do in the US. Not so much for the men, however.
  • Over and over I heard how unusual the nice weather was. That’s a bit scary.
  • I was very surprised to find out that this is not only legal but widely available in England.

1 Comment

Filed under General Stuff, Travel

Kindle experience so far

Executive summary: I love, love, love this device.

It has been exceptionally useful to be able to read multiple things from the same device. When I bought an iPod, I was able to stop carrying multiple CDs around with me, and I was enchanted with the variety of musical choice that gave me, no matter where I was. I have the same feeling about the Kindle; now I can do exactly the same with books. I have probably 25 books and magazines loaded on it right now, and so everywhere I went– the plane, the train, the taxi, the hotel restaurant, the bus stop– I had something interesting to read, all in a single small package.

The screen quality is fantastic. It is extremely readable, and the ability to adjust font sizes is a nice bonus. The page-flicker effect is barely noticeable to me now.

As for content, I couldn’t buy anything from Amazon because there’s no Whispernet service in the UK. I was able to hit up manybooks.net, the Baen Free Library, and fictionwise.com to add a number of free and purchased items through the USB disk mode, though. While waiting for lunch, for example, I was reading the first part of Joe Haldeman’s new novel “Marsbound” in either Asimov’s or Analog (they run together in my mind).

Bad points: yes, there are a few. The device itself feels a little plasticy, and the “next page” button on the right edge of the Kindle feels downright flimsy. The included case is pretty much worthless, as the Kindle won’t really stay in it when it’s opened. I found to my dismay that trying to charge the Kindle via USB actually drains the battery. I also noticed that two titles I’d bought, Snow Crash and Count Zero, aren’t actually on the device– apparently they didn’t get downloaded yet, so I couldn’t read them.

Comments Off on Kindle experience so far

Filed under General Tech Stuff

Office 2008 Service Pack 1 released

Boom shaka laka! According to this press release, Microsoft is releasing SP1 for Office 2008 at noon PDT today. It should be up on Mactopia shortly.

Comments Off on Office 2008 Service Pack 1 released

Filed under General Tech Stuff, UC&C

Crispin Cowan has a blog

Nice to see that noted security guru Crispin Cowan has a blog.

Comments Off on Crispin Cowan has a blog

Filed under Security