"Russian billionaire Roman Abramovich has a rather curious new addition built in to his latest oversized yacht. The 557-foot boat Eclipse, the price tag of which has almost doubled since original plans were drawn to almost $1.2 billion, set sail this week with a slew of show-off features, from two helipads, two swimming pools and six-foot movie screens in all guest cabins, to a mini-submarine and missile-proof windows to combat piracy. It might not seem like somebody with such ostentatious tastes would crave privacy, but along with these expensive toys, Ambramovich has installed an anti-paparazzi “shield”. Lasers sweep the surroundings and when they detect a CCD, they fire a bolt of light right at the camera to obliterate any photograph. According to the Times, these don’t run all the time, so friends and guests should still be able to grab snaps. Instead, they will be activated when guards spot the scourge of professional photography, paparazzi, loitering nearby."
- Thomas Hawk
from Bookmarklet
Take a one sided mirror with the mirrored side facing the yacht. Place the camera behind the mirror. Viola.
- Roberto Bonini
These are fairly common on larger yachts. The CCD-detectors are new to me but many yachts have special light fittings that distort photos. There's a current military project that basically scratches any lens within a short radius, could eventually be used in civilian applications.
- Steven Cains
Guy seems pretty rich. Lego should contact this guy and see how much he'd pay for a life sized lego replica of his boat.
- Thomas Hawk
Interesting, the mail UX is one of the main reason I hate the site, their inbox is of no use to me!
- Dobromir Hadzhiev
I'm sure I'm being dense here, but what's the benefit for me as a user?
- LogEx
Logical the benefit is that you'll soon be able to manage your Facebook messages in clients such as Seesmic, similar to how you do DMs
- Jesse Stay
from iPhone
Isn't it only one way? I thought i read that somewhere...
- Frankie Warren
Yeah, hopefully we can just manage it through an email account instead. I can get them in my email but I have to log into the site to respond. We should be able to just reply to the email, a la friendfeed. then i don't have to use their interface...
- Bill Kinney
Frankie, as I said in my post, yes, you can only read inboxes, not post to them currently. That doesn't stop you from including a link back to Facebook to let them post though.
- Jesse Stay
So ... I'm going to get a notification in my Gmail account that I have a Facebook email?
- dkb
dkb you can do that already - just set it up in your privacy settings on Facebook
- Jesse Stay
Riiight. I guess I'll have to wait and see it in action. Doesn't make sense to me, but I could be missing something.
- dkb
E-trade offers them for $25 https://us.etrade.com/e.... The way it works is that this keychain thing spits out a new number every minute, and you include that number with your password at login. Even if someone gets your password (due to a keylogger or the like), it will quickly be invalid.
- Paul Buchheit
Blizzard almost never has them in stock. Whenever they get a batch they sell out in a few hours. Apparently they work. lol
- Heather
I do not know how reliable they are now but a few years ago, the quartz in this would get out of sync for a non trivial percentage of users, which resulted in a lot of customer support issues.
- Edwin Khodabakchian
bought one for the hubby's warcraft account. he hasn't been hacked since. (nearly once every couple weeks prior to that)
- Nathalie, Dreamer of FF
I would pay for this option also and being that I run GApps at work, would also do it for all staff.
- Travis Koger
from iPhone
What would keep someone from writing this as an iPhone/Android app?
- Matt Cutts
It would need to hook into the Google auth system Matt. (or automatically change my password every minute, which would probably trigger some abuse system inside google)
- Paul Buchheit
Matt: Nothing, as demonstrated by Blizzard's implementation of it as a free iPhone app already. :)
- Stephen Mack
I wish this could end phishing, but it can't, because "it will quickly be invalid" doesn't help much if it's used to generate a session token the very moment it's entered. Perhaps the key should ask you what OS/browser you're using, how recently you logged in on that machine, etc. -- facts known to Google and associated with your browser session -- and generate different numbers depending on your answers. Tricky business.
- Daniel Dulitz
It doesn't solve all problems Daniel, but it does solve some. The twitter hack for example was apparently due to a guessed password or something (though I'm not up-to-date on the news, so maybe that's no longer the story).
- Paul Buchheit
Frankly, I want an RFID-like chip in my cell phone + ubiquitous RFID readers. The cell phone would also require you to type a password or PIN, so it's something you have + something you know. And there's a fake PIN that looks like it worked but causes a lockdown behind the scenes, so if you get mugged you tell people the PIN is 5555 when your PIN is really 2343.
- Matt Cutts
Paul, it's just a lot easier to make this happen if it solves the _biggest_ problem. :-)
- Daniel Dulitz
I think the biggest problem is that people want absolute convenience and absolute security. I have never had any personal information stolen or accounts hacked. It might be because I'm a boring person not worth stealing from, but it could also be that I don't put information all over the place. I only use my phone to make calls, I only download from well known sites, I don't allow porn...
more...
- Heather
I disagree with that reasoning Daniel. The phishing problem is real, but today's Twitter problem for example does not appear to have been phishing related, and probably would have been prevented by a device such as this -- is that not sufficient evidence that this solvable problem is worth solving? It also prevents people from using bad passwords, using the same password on multiple accounts, etc, which is very useful in the apps-for-your-domain context.
- Paul Buchheit
As soon as PayPal offered theirs I bought it immediately and like many others, I'm in line to get one for our two WoW accounts. I loved these as a Systems Admin where we required them to get past the firewalls if you were a remote worker.
- bear (aka Mike Taylor)
+1 Paul, I've been a SecureID user many years at work, and with ETrade, so I've got two, so far, but it makes you wonder if every account you used required SecureID, you'll eventually need a REALLY BIG keychain. ;)
- .LAG liked that
There is no reason why the same SecureID fob can't be used with more than one site.
- Jauder Ho
Matt Cutts: BlackBerry (maybe only BES) has had "password under duress" for a while. When enabled you swap the first and last characters of your handset password, it unlocks but also triggers admin side alerts. Quite cool, but I suspect the only people that use it will be the military :)
- Alex Lomas
jh: yeah, RSA should probably offer this as a service; get one SecurID from them, and you can register it with any site that supports it.
- Tudor Bosman
Paul, no, I don't think the fact that some hacks would be prevented by a method is sufficient reason to implement that method. Apps has supported SAML for quite a while, see http://code.google.com/apis... , so Apps admins can use auth methods of their choice including this one. If I'm going to take your $25 for a token, I'd like to make it more...
more...
- Daniel Dulitz
@jh, @Tudor: yeah it would be great if one SecureID could service multiple accounts for the owner, but i think each key fob is unique to the account holder and service they're issued for; some foreknowledge of the site/account the fobs will be used for is required. with the one I use at work, I signed some paperwork, sent it to Tech, and then got the fob few days later. Sounds like a potential customer-service nightmare for RSA if they when that route.
- .LAG liked that
They'd probably pick up more paid accounts. Just the concept would probably convince numerous new users.
- Charlie Anzman
Great idea! It's also a great way of branding the name if it's on a key chain of something else cool. Verisign offers it as a second layer of security on their OpenID accounts. They were charging before, but I just checked and it's free now. I'll have to get it for my account. Two-factor identification should be standard everywhere, especially on bank accounts.
- Michael Fidler
I'm waiting for Google to handle all my Internet passwords, all encrypted behind a master Google accounts password and a security calculator/keychain type of mechanism. I wouldn't perhaps need to use that physical extra security code each time I log in. It could be set to once a day, and secure login can be reset at any time during the day (if you don't feel confortable using public web terminal at a netcafe, you can simply activate secure login for any activity done after you logout.
- Charbax
Also, I believe Google should easily show me a complete log of all activities on my Google account, this way I could find out if something fishy is going on. If one is paranoid while using a public terminal, there should be a "monitor in realtime all activity" window so you can see if anything weird is going on while you are logged in and you should imediately be able to cancel/restore/logout in realtime once any of that fishy activity has been detected.
- Charbax
For $25 -- that's worth the peace of mind.
- CarolAnnB
Matt, regarding RFID: I've seen applications using bluetooth for a similar purpose. If a specific phone comes within range, the computer unlocks/wakes up/launches the missiles/etc. I'm not sure that RFID adds much, though I'm unfamiliar with how easy it is to spoof the identity of either bluetooth or RFID.
- DGentry
in case you weren't aware, there are other options for SecurID other than the fob - like the mobile app http://www.rsa.com/node... or software token (RSA is an EMC company, my employer)
- Stuart Miniman
I have my paypal key, I feel secure because of it. And it only cost me $5.
- Luis
The future of security is going to include some strong password/identity tools. Agreed on the value of the rsa key, could our smart phones generate similar sequences without risking theft?
- Mark Essel
from iPhone
@Charbax: Gmail (and possibly other apps?) does show you when someone else is logged in at the same time as you are, as well as their IP. Not precisely what you're suggesting, but is still quite helpful.
- Joel Webber
surprised these things are still popular. Years ago we used them at GE and perhaps they still do... But wouldn't it be more convenient to add a dynamic part to a password with a question like your wife's age + XX, or day first child was born + XX or year this picture was taken + XX. The variation of lets say 5 questions plus a random addition or subtraction would add enough variation and security no ? curious to see this your comments.
- Bart LePoole
I have the Paypal one, and one for my BofA account. I would definitely get one for Google and for my Amazon account. *HINT*
- ha3rvey (just a friend)
Why would I want one for every account? Why can't I use the same one for all my accounts?
- Gabe
paul, that's a great idea for a start-up (btw user should have *one* item for all accounts)
- Massimo MaxKava Cavazzini
Stuart: thanks cool that rsa is proactive about it. It also looks like Matt suggested mobile devices take on this responsibility earlier in the thread
- Mark Essel
from iPhone
These tokens are mostly based on OTP solutions. Google also must consider the other options; PKI - for maksimum security (e-signatures) - And also, Google's application must be supported with most tokens regarding to its support (PKCS etc.)
- Zafer Yılmaz
"Windows/Mac/Linux: VLC Media Player, the open-source solution to media players that can't play your media files, reaches the 1.0 milestone today. What's new? Support for HD and other new formats, finer speed controls, customizable toolbars, AirTunes streaming, and much more." -Kevin Purdy, Lifehacker
- DeWitt Clinton
from Bookmarklet
VLC is wonderful. Just looking at the video output formats and noticed the ASCII art option. I wonder if it would be possible to create a streaming Javascript/Canvas output option.. solve the codec problem for ever :)
- Nick Lothian
If the Pre works as fast in practice as it does in that demo--I am IN! I am sick of waiting on my (slow) iPhone all the time ( a geeky complaint perhaps--but true.)
- Rob Michael (Atmos Trio)
If the demo was of the data, I would have my doubts, but it's the calendar. I'm optimistic, since information is goign to be stored in the cloud as opposed to locally (like the iPhone). I can't WAIT.
- Mona Nomura
from IM
For me--the Calendar is a very big deal. Palm was always great at it--my biggest iPhone gripe has been the slow (local) calendar.
- Rob Michael (Atmos Trio)
Did you see the accordion like motions? I like it more than uber scrolling like on the iPhone.
- Mona Nomura
from IM
Mona, agreed--Palm totally 'gets' calendars--and the whole PDA thing in general.
- Rob Michael (Atmos Trio)
Jeez, I should hope so - they've been in the business forever haha! RIM should be worried, not Apple.
- Mona Nomura
yeah, thats pretty retarded stuff. love the dragging on the calender. nice improvement over iphone. this thing is really well thought out...
- tommy payne
from twhirl
Dragging appointments on a palm device--a great feature that Palm has had for YEARS.
- Rob Michael (Atmos Trio)
LOVE that - makes life so much simpler. Right now I'm using Google calendar because I REFUSE to use MobileMe. GoogleCalendar (love Google) but the unintuitiveness makes me want to Hulk Smash my screen. And can you imagine? No more cables. No more synching. Omg, I am getting excited.
- Mona Nomura
from IM
I love how ex-Apple employees are kicking Apple's ass in it's own game. These guys should start an Industrial Design school. They could teach the world a thing or two. Like I said earlier - http://is.gd/jF31 - Pre/Nova UI > iPhone UI.
- vijay
this really shows you what's the value of running multiple apps at the same time. The home button UI on the iphone sucks for multitasking.
- Davide D'Incau
Mona: when you say "since information is going to be stored in the cloud" where is it stored? At Palm? Your Google Calendar?
- Benjamin Golub
after watching this video it made me wonder why nobody has incorporated flight status into calendars? if we can bring in real time weather, why cant we check on flight status and make the necessary adjustments automatically?
- Chad Stoller
When that guy was typing "andr" I immediately thought of Android
- Alfredo
Benjamin: For the Pre, it would be Palm. @Chad - That is a very good question.
- Mona Nomura
While the Palm intrigues me, I'm more interested to see WebOS on a multitude of Palm devices. A Centro or Treo Pro-type device? A horizontal as opposed to portrait QWERTY? WebOS has some real potential behind it.
- Mike Nayyar
Exactly, Mike - I've been saying this from day one. I am excited for Nova, not inclusive to the Pre. If you look at Palm's job search site, they have tons of hardware related engineering opportunities - http://www.palm.com/us... I can't wait to see the next form factor!
- Mona Nomura
from IM
They could even put WebOS on a netbook and call it Foleo 2 ;-)
- Ken Sheppardson
Ken, idea: Asus is releasing a touchscreen EeePC, right? Put WebOS on that...whoo nelly.
- Mike Nayyar
I'm a fan of both the Pre and iPhone, but note that part of the Pre's performance comes from the significantly faster CPU and more system RAM. They're the same specs the new iPhone runs, so they can both be quite snappy. That said, AnandTech did some real benchmarks and the Pre needs some optimization. The iPhone outclasses a bit in web surfing, but a LOT when it comes to app startup times.
- David Chartier