bert

Opera on iPhone proxies all request (privacy fail)

Yes, the very fast Opera browser on the iPhone proxies all request! In normal language, every webpage you visit from your iPhone with the opera browser is send towards Opera. Thereby, they get al the information from you. If you submit a form, it is send to Opera. If you search in Google, it is send to opera. If you login to a website, your password is send to Opera!

They wil claim the need to do this because of the prorpietary way they handle images and HTML to speed up a website. And it is a speedy browser:

I think part of the speed comes form the fact that they proxy all traffic and some funky stuff with preloading images. However, it is absurd that a browser gets /all/ the data I send, all the websites I visit, all the passwords I submit, all the search queries I do. It might not be spyware but sure gets close to this.

How did I found out?

I visitied Facebook on Opera and got this message from facebook:
Facebook security

Then I visited Facebook form my iMac and saw:

Opera on iPhone proxies via Norway?!

Then I did a test on my own host and grepped the logging:

Opera on iPhone proxyes all request!

Ans here is the code:

pimsbb2@newborn:~$ sudo tail -f /var/log/apache2/access.log | grep -i test
[sudo] password for pimsbb2:
94.246.126.161 - - [17/Apr/2010:21:05:24 +0200] "GET /test HTTP/1.1" 404 500 "-" "Opera/9.80 (iPhone; Opera Mini/5.0.0176/764; U; en) Presto/2.4.15"
^C
pimsbb2@newborn:~$ whois 94.246.126.161
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '94.246.126.0 - 94.246.127.255'

inetnum: 94.246.126.0 - 94.246.127.255
netname: IPO-OPERA
descr: Opera Software ASA

I am not the first person to finds out about it, see for example pcworld.com. But I am the person to tell you that you should be aware that you send all your data cleartext towards Opera when using the app (https is fine however). And I am the person to tell you I will not use the app anymore. Bad Opera! Bad! No cookie.

DrupalJam 6 in Amsterdam

1st Drupaljam 2007 - Hilversum NLFriday March 19 (9:00-18:00 CET) the Dutch Drupal community will organise the 6th "DrupalJam".

A DrupalJam is a place where anyone interested in Drupal can get together to discuss about one of the best Open Source CMS-es out there. A friendly palce where users, coders, business people as well as people interested in web technologies. This time the Jam will be helded at the StayOkay hotel in Amsterdam, Timorplein 21. More information about the StayOkay location can be found on Maps as well. We expect over 200 people (up to 300!) visiting the DrupalJam and we will have attendees form over four countries.

IMG_3891

It only seemed like yesterday.. The first DrupalJam I co-organised was in a basement with 50 or so people (top left). Not unlike the second DrupalCon, held in Amsterdam (right).

And now, 6 editions later we have reached the scale of the third DrupalCon in Brussels as can be seen on Dries' site. And this is a global trends. While DrupalCons get bigger and bigger, there is also a trend to localise DrupalCon's that are reaching the same scale as DrupalCon's were only a a few editions ago. And with that the global DrupalCon problems get local as wel, continuity, professionalism en sponsors.

I am proud to say -not meant to toot my own horn- that the organisers of the DrupalJam so far did an excellent job. The very healthy ecoshere around Drupal in the Netherlands made that we have the following premium sponsors; Microsoft, Radio Radio Netherlands Worldwide, Dutch Open Projects, Internet Unlimited, KPN, NCRV, OneShoe and Sogeti. Other sponsors include VLC (gold), Lucius, Acquia, Synetic, Wizzlern (silver) and Merge (bronze). Looking at this list there are at least two key things to note. The first one is a classic one, the distribution is skewed to the left meaning we made the premium sponsorship to cheap.

The second one is more important. The ecoshere around Drupal grew and outgrew the standard Drupal implementers. KPN (fortune 500, telephone, mobile, ADSL, high end webhosting), NCRV (public broadcaster using Drupal a lot), Radio Netherlands Worldwide (public broadcaster using Drupal, see Dries' site) and Microsoft are not the "standard" sponsors of an Open Source project. It shows that the market around Drupal is maturing and that parties that have an indirect stake are willing to invest and give back. And we do thank them for that, as well as thank our other sponsors!

Brecht RockstarDries once told me he wanted to have local DrupalCamps in every city around the world. We are not there yet. But I do think there is a (bi-)yearly DrupalCamp in every free country around the world right now. And when these will become too big, there will be a DrupaCamp in every major city around the world by 2015 for sure.

Drupal is coming home in 2015, your home! But if you can not wait that long, sign up for the DrupalJam in Amsterdam, look the sessions and propose a session (login required). Please do contact me or Bart Feenstra if you have any questions. DrupalJam will rock!

Whats next? EyeTV, Plex and twitter integration?

EyeTV and Plex integration!!">

As you might know, I am a big fan of using EyeTV as well as Plex on my mac mini hooked to my telly. Plex is the best mediacentre for the mac, EyeTV a way to view live TV on your Mac with EPG and much more.

Sometime ago I posted about integrating them, watching live or timeshifted TV on your mac within Plex on this post. Though the code is very rough and far from finished and seems to be orphaned already, I would like to suggest a cool feature.

Wath EyeTV in Plex and have Plex look in to the EGP and searches for tweets about the program you are watching, live or timeshifted. I do not watch much TV let alone live TV, but part of the joy of watching TV is seeing what others have to say about this via twitter. And watching this on a TV with live tweets updates about the program you are watching sure sounds something that TV's will have in half a decade.

BTW: follow me on twitter on @bertboerland.

Bert Boerland is een top 25 twitter gebruiker in Nederland


Ondanks dat elke celeb nu 100.000 volgers heeft op zijn twitter account dat ge spook-vult wordt door een stagiaire en elke krant een rss-to-twitter account heeft met 10.000enden gelovigen, ben ik nog steeds on top :-).

In 2008 top 20 gebruiker in Nederland op Twitter, in 2007, in de top 30. En ook in 2009 was ik in de top25, volgens deze lijst van Jeroen althans. again: kiss my ego, stelletje youpen!

Drupal at FOSDEM 2010


( source flickr, copyright faerie)

Next weekend on Sunday, February 7, we'll have a full day of Drupal talks at the 10th edition of FOSDEM, Europe's biggest, free-est and open-est software conference.

FOSDEM, is a free and non-commercial event organized by the community, for the community. Its goal is to provide Free and Open Source developers a place to meet. The Drupal project was granted a developer room at FOSDEM to do exactly that: to share knowledge about Drupal.

The presentations schedule for the devroom was published a week ago on http://groups.drupal.org/fosdem. It features interesting speakers such as Robert Douglass, Károly Négyesi, Roel de Meester and Kristof van
Tomme and even more interesting subjects as mobile device design, AHAH, eID and Views 3. Everyone is invited to attend the presentations.

On Friday the giantesque beer event kicks off the conference. For Drupalistas there is a sprint on Saturday in Zaventem.

Please join, I have been to a couple of FOSDEM's and if you ever attended an Oreilly or Gartner con, you are in for a surprise :-)

FOSDEM takes place at ULB Campus Solbosch in Brussels.

XML feed