| ← Декабрь 2010 → | ||||||
|
2
|
4
|
5
|
||||
|---|---|---|---|---|---|---|
|
7
|
9
|
11
|
12
|
|||
|
14
|
16
|
18
|
19
|
|||
|
21
|
23
|
25
|
26
|
|||
|
28
|
30
|
|||||
За последние 60 дней 2 выпусков (1-2 раза в 2 месяца)
Сайт рассылки:
http://lotusnotes.wordpress.com
Открыта:
28-03-2008
Статистика
+1 за неделю
Toolbars de-selected after upgrading Notes 6.5.x/7.x to 8.5 Basic Configuration
Рассылку ведет: Программист на Lotus NotesLotus CoderВыпуск No 427 от 2010-12-15
рассылка о программировании на Lotus Notes/Domino Обсуждения на форумах, блогах. Примеры программного кода на LotusScript,@formula, Java рассылка:выпускархивлентаблогсайт Бюллетень "Lotus Notes CodeStore" Выпуск 13 от 21.04.2008comp.soft.prog.lotuscodesrore
|
CodeStore. Примеры кодов
Форумы.Свежи темы и обсуждения
Tips. Советы
| Site | Email Address/login | Password |
| Online Banking, PayPal etc | Something @ a domain I own | Strongest |
| IBM.com, Adobe.com, Twitter etc | jakehowlett@ a free email domain | Medium |
| Sites I have little interest in but have no choice but to register for | Free email address I have access to but never check | Lowest |
Although I rarely remembered exactly which combo worked on which site it never took much guessing to gain access. As time went on though I found myself in situations where the medium-strength password was used on sites like Amazon.co.uk, which remembers my credit card details for me. So I found myself changing the payment-linked sites to use the strong password as well as on sites like LinkedIn.com and Twitter.com which I considered "important".
Before long my strongest password was being used all over the place. Anybody who could find it out for one site could access them all (as well as my email accounts). This made me uneasy. Especially as the password I call my "strong" one would be rated medium by most password generators.
Another down-side to this approach is that I've ended up with so many email accounts I now rely on. The idea was once that I'd give out address like @Yahoo so that, should they fall victim to over-spamming, I could move elsewhere. Nice idea, but once you give out that Yahoo address to dozens of sites, letting it go isn't quite so simple.
The New Approach
Now that email to codestore.net, rockalldesign.com and jakehowlett.com is all sent to Gmail I no longer need to worry about spam, as it does such a good job of handling it. It's time to let go of the free email accounts for everything but testing email during development and for sites I don't trust.
As for passwords, the new approach hinges on the fact that most of my online activity takes place from one PC (my laptop). It's very, very rare that I login to the likes of Amazon, Ebay or whatever from anywhere but my laptop. With this in mind I realised I don't need to use the same password but can use software like 1Password to generate and store ultra-strong passwords.
So, I've started changing passwords on all sites, starting with those that I consider important and/or those that have my card details stored. These new password are generated using 1Password and look like the following:
rv2s7sdlgNorN, 9uJWLg53!/-/J, o53k/=b>w2Maj (these aren't my actual passwords ;-)
Each site I am a member of has a different password. The fact I have no hope of remembering them doesn't matter as 1Password does that for me. The only password I need to remember is the master password to get in to 1Password's vault and the password for the email accounts registered with each service.
If ever I really, really had to login to one of these sites from outside the house then all I need is access to my email inbox so I can use the "Forgot Password" reminder process to gain access.
It's going to be a long drawn-out process reviewing every site I've ever registered with. By the end of 2011 I hope to no longer be using my free email accounts day-to-day. If by the end of next year I've not had an email from or cause to login to a website then I'll consider it no longer necessary. By then I will no longer be using the old "strong" password
I know what you're thinking. What if my laptop gets stolen? Well, the password are encrypted and the the master password is what I'd consider unguessable by anything but a sustained attack. But what about losing my passwords? Well, 1Password does a daily backup to my NAS server, so that's covered.
I'd be interested to hear what your approach is and if you think the above approach is in any way flawed?
The quest for a simple life online continues...
Read | Permalink
Read | Permalink
Read | Permalink
Read | Permalink
There's been a ripple of interest since my article in August discussing the state of the Notes application development space. I'm not alone in the view that Notes still has a lot to give to so many organisations.
Damien DuBos wrote:
I am one of those high priced developers you refer to. Been doing it since V3. Although I have some impressive apps under my belt, the best ones are the simple ones. Often I am with a customer on one project when they mention a problem they are having with another process. I tell them I can have something for them the same day or the next and they are blown away. Granted its simple stuff, but it solves so many mundane tasks.
Others commented on how they're able to crank out well-formed and well-received Notes and Domino apps, only to have "upper management" pull the plug on future application development with Notes.
Yet others explained how the whole process of getting applications deployed now takes a great deal of time and effort, so much, that often the immediacy of the application need is lost.
This gets me wondering again where it's all going?
Are we building the right applications? Are we doing it the right way? Has the corporate IT model moved away from what Notes can do?
Let's discuss some of these points, and see what we can do about it all.
Tap here and Mick will take you through his thinking. It's good stuff, well worth the read.
EXPORT RICH TEXT TO WORD
Let us know how we can assist you with your migration.
- Do you have Rich Text Fields that need to be exported?
- Do you wish to combine main documents with their response documents and put them or store them together?
- Do you wish for metadata to be combined with your documents?
- Do you have multi-value fields?
- Do you wish to enhance and clean up the data while exporting?
Download our 15 day trial by registering on the Integra for Notes website.
Following the security review I mentioned yesterday I now feel considerably more relaxed about my online existence.
When I was writing yesterday's post I had no idea the Gawker thing was about to kick off. Talk about timing. Not that I had a Gawker account but who knows who else Gnosis might pick on!?
The same password is no longer used on more than one of the services I use.
More importantly, none of my logins use the same email/password combination as used for the inbox for that email account. School boy error!
Until yesterday my Apple ID's password was the same as for the GMail account to which it was tied. You'd like to think you could trust both parties implicitly but I prefer to treat all websites as having an equal potential for being compromised.
It's nice to know everything is backed up and in one central repository. And it's not just website logins I've registered. I've also covered all the SSH and RDC passwords to servers I host. Also the FTP and SQL passwords for websites I host. And then there's the passwords for my hardware - routers etc. Until you write them all down you don't realise just how complicated it all is.
Big sigh of relief!
Although one thing still troubles me. As good as all these ultra-high-strength passwords are there's still a single point of failure -- all sites have a "Forgot my password" process.
All you need to do is know things like "the name of my first pet" and I'm compromised. If the website email you a new password then this is all fine, but what if they ask you a "secret" question and then let you reset the password there and then? Bad, bad, bad.
My approach to "secret answers" has been to use the same non-word answer for all them. That way I always know what the answer should be and nobody ought to be able to guess it. Any flaws in that approach?
And Finally
The prize for the dumbest approach to password management goes to... ...Screwfix.com who convert your password to all lower-case, without telling you. In some perverse way this may have made sense to the developer at the time, but you try and work out why you can't get in!
That aside, yesterday I changed my (all lower case) Screwfix password to a new one generated by 1Password. But, like an idiot, I forgot to copy what I'd submitted. Never mind, they must have a password retrieval process, right? Yes, they do, but it doesn't help. All it does it email you your sefl-set "hint". If, as in my case, your hint doesn't help then you're snookered.
I Tweeted the Screwfix people about this and all I got in return was a stock "Call our support team on this number and they will help" response. They completely missed the point, which is that they've made it impossible for me (a customer) to give them (a business) my money.
As part of this on-going online security review I closed the PayPal account I've been using for years and year now. Perhaps I'm overly-paranoid but it always made my uneasy that they had Direct Debit access to both my personal and business bank accounts.
Until a couple of years ago it was a just a normal PayPal account, but then a customer insisted on paying me via PayPal, which meant converting it to a business-related account. Since then I've been accidentally buying things like kids pirate dressing up costumes off eBay through my company bank account. Not good. I'm hoping my accountant is going to write them off somehow or other.
So, now I've cancelled the account and logged in to both my personal and business bank accounts to cancel the Direct Debit arrangements as well.
I had no solid grounds for concern and have never been wronged by PayPal but I feel a whole lot safer now.
At the time I closed it I'd not purchased on eBay for a while and hadn't done any work for the PayPal-loving customer for a year or more, so it seemed ok to do so. But the very next day I bought a replacement laptop part and had to create a new PayPal account. Doh. This time though without linking it my actual bank account!
Блоги. Что обсуждают и пишут
Tags: book proposals was db2 how to
Idea:
- How to achieve failover (does DB2 have clustering like Domino has clustering?)
- How to set up data replication between sites, even continents (Connection documents, anyone?)
- How to tweak a .properties xml file like it's notes.ini or a Configuration doc
- NAB vs LDAP
- How to see what's running, and when, like you can on your server console
- How to deploy product 2 (eg Connections) into an environment built for product 1 (eg Sametime)
- Where are the logs, and how do you read them?
Tags: book proposals
Idea:
Tags: book proposals development
Idea:
Tags: linux foundation domino small Office Server book proposal
Idea:
Tags: book proposals linux desktop lotus notes for Linux
Idea:
Tags: connections book proposals
Idea:
Tags: book proposals
Idea:
Tags: book proposals tivoli TDI
Idea:
Tags: twitter tweet
Idea:
Tags: book proposals ui design oneui
Idea:
Tags: linux extension manager CAPI adminp
Idea:
Tags: native os fields disabled
Idea:
Статьи и Документация
| Ссылки | Утилиты и программы | Сайты о Lotus Notes |
| В избранное | ||
