Google PageSpeed Insights hates Google Analytics

By Robert Ellison. Updated on Wednesday, February 22, 2017.

Is it safe to open securedoc.html (Cisco Registered Envelope)?

By Robert Ellison. Updated on Monday, July 15, 2024.

Cisco's insane securedoc HTML attachment

I last got one of these in 2010 and assumed it must have died by now, but no, otherwise sensible organisations are still training their customers to fall victim to phishing attacks by asking them to open dodgy email attachments.

The product in question is Cisco Registered Envelope and it deals with the lack of security in email by sending you an encrypted HTML file. Opening this file sends you off to register on some website and then runs a Java app to decrypt the message. This is insane. The HTML attachment in insane and the Java applet is insane.

The latest email I got in this format was an appointment reminder from UCSF. I'm sure there is some HIPPA requirement that they can't just send medical information in a plain text email. But they could send an email that lets you know you should login to your account to see the appointment. It's not like the securedoc.html method is magic, you still have to create an account on a website to use it so it buys you literally nothing.

UCSF, shame on you. Look after your patients digital health as well as their physical health. Out of self interest if nothing else, nobody can pay you if their bank accounts have been emptied after falling victim to a real phishing attack.

Cisco, shame on you. This product is so wrong headed it's impossible to believe that you're doing anything right.

​(previously)

Add your comment...

Related Posts

(All Etc Posts)

(Published to the Fediverse as: Is it safe to open securedoc.html (Cisco Registered Envelope)? #etc #securedoc #cisco #phishing​ #ucsf #hippa Securedoc.html looks like a phishing/malware attack but isn't. Here's why it's dangerous anyway. )

LEGO Management

By Robert Ellison. Updated on Wednesday, February 22, 2017.

LEGO Management

Good HBR article on LEGO and girls: LEGO’s Girl Problem Starts with Management, depressing conclusion:

"Don’t hold your breath, though. Despite its first-day sold-out success, LEGO has decided not to continue the Research Institute line. It was only a “limited edition.” So girls, back to the pool. The guys in this boardroom don’t seem to want to give you any ideas… let alone seats at the table."

(previously, previously)

Add your comment...

Related Posts

(All Etc Posts)

(Published to the Fediverse as: LEGO Management #etc #lego #girls More on LEGO's girl problem (it starts with management). )

Tedious Feed Update

By Robert Ellison. Updated on Wednesday, February 22, 2017.

Tedious Feed Update

If you subscribe to I Thought He Came With You via RSS please switch to this new feed and delete the old one.

Longer version... this blog has used FeedBurner for ever but I managed to get locked out a couple of years ago. I upgraded to Google Apps for Domains and part of the process was transitioning various services over to a temporary account and then back to the new one. Most of them made it over but FeedBurner got orphaned somehow.

I've emailed, left forum posts etc but no luck. Google doesn't really do customer service so despite actually paying them I seem to be out of luck. Also, Google hates RSS so FeedBurner probably isn't the right long term tool even if I could get back into my account.

I've been meaning to do something about this for a while but as it was working it wasn't a top priority. This changed when my blog got hacked a couple of times in a row - I'm not sure if it was the software (I'd been using BlogEngine.net) or my hosting provider but it's painful to fix and I decided I needed a change. I Thought I Came From You is now running on a home grown platform. It should be more stable, faster (some quick benchmarking suggests twice as fast so far) and not get hacked quite so often.

So switch to http://ithoughthecamewithyou.com/syndication.axd for updates (I can't recommend Feedly highly enough) and delete the old feed. If you have any problems leave a comment below or send me an email.

Add your comment...

Related Posts

(All Etc Posts)

(Published to the Fediverse as: Tedious Feed Update #etc #rss #feed #google #feedburner The I Thought He Came With You RSS feed has moved. Get the new RSS feed here. )

Skype for Android - Getting Closer

By Robert Ellison. Updated on Sunday, November 6, 2022.

Skype for Android - Getting Closer

Skype for Android is finally getting there. Push support means that it is now useful for more than conditioning your battery. Conversation read status is mostly synced between different client instances which is a big time saver. I'm actually starting to use it.

There is one horrible usability crime. When you open the app you get a list of unread conversations. Your set your finger in flight to the first one and then notice an ad sliding down from the top of the screen. With horror you realize it's too late to change course and you hit the ad instead of the conversation.

I'm not complaining about Skype being ad supported here, but if you were going to try and design a UI to trick people into clicking ads you really couldn't do better than this. I expect better from Microsoft.

Other than this the only real complaint is that new posts to group messages sometimes make it through to the notification bar and sometimes don't. You have to run the app periodically to see if there is something new.

(previously, previously)

Add your comment...

Related Posts

(All Etc Posts)

Fitbit on a bike

By Robert Ellison. Updated on Thursday, November 12, 2015.

Fitbit on a bike

My company bought everyone a Fitbit for Christmas and now we're in a Battle Royale to get the most steps. I'm at a disadvantage as I often cycle to work and Fitbit does not track this accurately.

A couple of people suggested that clipping the Fitbit to your shoe would help. So over the last week I conducted an experiment. My ride from home to the office is 6.5 miles. With the Fitbit clipped into my hip pocket it registers 2,362 steps. Perched precariously on my shoe I get 2,389 steps. You can't cheat Fitbit this way.

How far off is 2,300 steps? If I was walking the same distance I'd get 13,000 steps. But I  wouldn't be coasting down any hills so that isn't right either.

For my weight relaxed walking should be around 155 calories a mile, cycling at around 10 miles per hour is 78 calories a mile. This is about a 2:1 exchange rate so those 2,300 steps should be 4,600 or so.

Fitbit does have some options to manually add activities that it doesn't register correctly. This sounds too much like hard work though, it's difficult enough to remember not to put the poor device in the washing machine. I'm also 234,037 steps behind the current leader for January so I'd need to cycle home for lunch as well to stand any chance of catching up...

Add your comment...

Related Posts

(All Etc Posts)

(Published to the Fediverse as: Fitbit on a bike #etc #fitbit #bike Can you use a Fitbit to track exercise on a bike? Results from an experiment. )

Don't show this to me again

By Robert Ellison. Updated on Sunday, October 23, 2022.

etc, htc

How does Hulu manage to suck so badly and the missing app for cord cutting

By Robert Ellison. Updated on Thursday, November 12, 2015.

How does Hulu manage to suck so badly and the missing app for cord cutting

Hulu Plus has turned out to be a bit of a disaster.

The app (I use it on a TiVo) is ugly and clumsy. I checked last night and it took 15 clicks to watch the next episode of a series I'd watched the previous night. You'd think this would be about the most basic use case and it's something that everyone else gets right.

And then it plays a couple of ads flawlessly before complaining that there is a problem with the connection. You're then bombed out to the menu and sit through the pre-roll ads again before the show starts.

I'm not stoked about being forced to watch ads on a paid service at all. If you believe the CPM estimates on Quora Hulu could charge me another $6 per month for an ad-free service that doesn't suck. Hulu ads are particularly awful because they're not embedded in the stream. This means when it's ad time everything grinds to a halt while the app switches from program mode to ad mode and then back again. You could make a cup of tea in the time it takes Hulu to figure this out. Adding insult to injury only three companies appear to have bought ads so you're stuck watching the same ones repeatedly.

All this is if the program you added to your queue still exists. Different shows seem to have different windows of availability so when you sit down to watch something you've been saving up you might find that half the episodes have been yanked away.

There is an opportunity here for a brave entrepreneur (or at least one operating somewhere with no extradition treaty with the US). What we need is an app (or service) that is the TiVo equivalent for the brave streaming cord-cutting future. You feed in the credentials for all the services you subscribe to and the programs you want to watch. The app records everything and spits out video files you can watch (and fast forward through) at your leisure.

Add your comment...

Related Posts

(All Etc Posts)

(Published to the Fediverse as: How does Hulu manage to suck so badly and the missing app for cord cutting #etc #hulu #tivo We need a DVR company for streaming video to get back to cord cutting nirvana. )

CI Dream

By Robert Ellison. Updated on Sunday, November 6, 2022.

CI Dream

I have an old Ambient Orb hooked up to our build server at work. It glows green when everything is working and red when a build fails. It's nice but not visible enough. My dream is to fit every developer box with a second generation blink (small USB LED indicator) or two so if things go pear shaped the whole office lights up red.

Add your comment...

Related Posts

(All Etc Posts)

Staying Chrome?

By Robert Ellison. Updated on Saturday, February 12, 2022.

Staying Chrome?

I've been using my Samsung Chromebook at work for around ten months now. It's not my main computer but it's a meeting survival powerhouse for email, instant messaging and note taking. The battery lasts approximately forever, it boots immediately and the decent keyboard and trackpad are just miles ahead of fumbling around on a tablet.

There are two problems for me with the Chrome universe. One will probably get fixed, one could be a deal breaker.

The first issue is VPN support. Apparently we use some sort of old, fiddly Cisco VPN that ChromeOS simply won't talk to. I filed Issue 261241 in the Chromium bug tracker and hopefully it will get fixed soon. If you're struggling with the same thing please star the bug report.

I can work around the VPN problem by using LogMeIn or Chrome Remote Desktop. But I can't live long without Skype. Actually I'd be perfectly happy to never use Skype again but my company runs on about fifty thousand Skype chats. I used Imo.IM for a while but they were forced to drop Skype support. Right now I'm using IM+ which as far as I'm aware is the only working Skype option for a Chromebook (please tell me if I'm wrong) but it's buggy and can't restore a connection between sessions. I either need to find a way to kill Skype at work or wait for (or write) a better web-only client.

Probably worth sticking it out, Gartner reports a 8.6% fall in PC sales but predicts Chromebooks growing to over 12 million units by 2016.

(Image by he4rtofcourage, CC).

Add your comment...

Read the full Chromebook Adventure

(All Etc Posts)

(Published to the Fediverse as: Staying Chrome? #etc #chromebook #google Can I use a Chromebook for work? I'm blocked by the lack of comprehensive VPN support and the lack of a decent Skype client. )