shit-happens 3964801 Books about redhead girl….

Concept: Call a toll free number, yammer, get back an email with an mp3 and a transcription of what you said… just talk really fast I picked up on a Jott reference over at VOIP IP TELEPHONY that includes links to a video interview with the peo…

Too bad it doesn’t work in Canada…

I wrote a post on a bunch of other techniques for taking note on the go.

http://www.gearfire.net/4-ways.....our-phone/

Have you ever had an important thought or task that you wanted to remember later, but you weren’t near a computer or paper? If you are familiar with GTD, you probably understand the importance of writing tasks down, so you can clear your mind and dea…

What do you capture? The CONTENT (brands, interests, features, numbers, ages, schools, products…) and the associated TELEPHONE NUMBERS (voice & SMS) and EMAIL ADDRESSES linked to URLs on MYSPACE.COM and FACEBOOK.COM. Creates dead-on targeting for advertising (things Google) directed ACROSS media (mail, email, SMS, voice, Web).

With enough funding for cheap, open-source HW/SW, this could be one of the US market’s best marketing tools (vacuum cleaners) in history.

you cannot see a market for simple, convenient voice dictation, any time any place, that works.

you walk into the public library or local coffee bar and see a poster for a program of interest in 6 weeks. you call jott and send yourself a simple email with date, time, place. back at the office you drag the email in Outlook to your calendar and you have calendered, hands free

or, you have an idea about a project–you call Jott and it sends you an email you drag in Outlook to Notes or Tasks or Journal

Or, you write a letter and block and paste, when back at the office.

This is a killer app.

What this means: I can break into your Pinger and Snapvine phone accounts. I can listen to your messages. I can send out messages as you.

How do I do this? Easy. I mask / spoof CALLER ID / ANI. Anyone can do this, amateur hacks, etc.

Well, there are others, but suffice to say that these companies are doing new things with social networking sites and phones that help to connect people.

The problem is that these companies have a scalability problem based on inbound calling.

You see, if you have hundreds of thousands or millions of users, you can’t give everyone a unique dial in phone number.

SECURITY PROBLEM

What these companies have done is based user identification on Caller ID / ANI – meaning that you call their service, and their systems recognize your phone via Caller ID.

The problem is that Caller ID is highly insecure and can be faked.

The problem that these “dial in” companies are trying to solve is one of scalability. They simply cannot have enough dial in numbers for each user.

Therefore, they have architected a way to recognize each caller by Caller ID and to base the entire user authentication system on this insecure method.

This can easily be hacked.

SOLUTION

The solution is funny – both Pinger and SnapVine make you enter in a PIN CODE when you dial in without validating your phone.

After you validate your phone, you no longer need to enter the PIN CODE.

So in effect, when you validate your phone, you make your account INSECURE.

What Pinger and SnapVine need to do is always require the PIN CODE.

Pinger and Snapvine are highly INSECURE!!!!

What this means: I can break into your Pinger and Snapvine phone accounts. I can listen to your messages. I can send out messages as you.

How do I do this? Easy. I mask / spoof CALLER ID / ANI. Anyone can do this, amateur hacks, etc.

Well, there are others, but suffice to say that these companies are doing new things with social networking sites and phones that help to connect people.

The problem is that these companies have a scalability problem based on inbound calling.

You see, if you have hundreds of thousands or millions of users, you can’t give everyone a unique dial in phone number.

SECURITY PROBLEM

What these companies have done is based user identification on Caller ID / ANI – meaning that you call their service, and their systems recognize your phone via Caller ID.

The problem is that Caller ID is highly insecure and can be faked.

The problem that these “dial in” companies are trying to solve is one of scalability. They simply cannot have enough dial in numbers for each user.

Therefore, they have architected a way to recognize each caller by Caller ID and to base the entire user authentication system on this insecure method.

This can easily be hacked.

SOLUTION

The solution is funny – both Pinger and SnapVine make you enter in a PIN CODE when you dial in without validating your phone.

After you validate your phone, you no longer need to enter the PIN CODE.

So in effect, when you validate your phone, you make your account INSECURE.

What Pinger and SnapVine need to do is always require the PIN CODE.

If they can get that going faster, I’ll be back - the convinience was great!