Heartbleed: Romantic Name for a Potentially Catastrophic Security Flaw

By: Jerome Auza I normally stay away from affairs of the heart but someone in the computing industry gave a quite romantic name to a potentially catastrophic flaw in a security system we trust: Heartbleed.  The flaw is described in detail using almost layman’s terms at www.heartbleed.com. In a nutshell, the bug allows any unauthorized user to query a server and capture unencrypted data using OpenSSL, a popular open source implementation of the SSL protocol.  SSL protocol is used in many applications requiring encrypted data traffic between a user’s computer and a server.  Examples would be HTTPS, or the secure HTTP protocol commonly used in most applications requiring encryption such as online banking, Facebook and other social networking sites, webmail systems and many more. The flaw existed for about two years but was just discovered earlier in April 2014.  In fairness to the programmer and peer reviewers, the bug is a subtle bug that don’t really become obvious as a bug until it is in production and many users are using it.  It was discovered independently by a team of security engineers (Riku, Antti and Matti) at Codenomicon and Neel Mehta of Google Security. It is called Heartbleed because the bug existed in OpenSSLs implementation of  the SSL protocol’s heartbeat extension.  In computer applications, heartbeat is the general term of the method done by an application to inform other applications or users of that application that the application is still running.  When the heartbeat data exchange it done, it is possible for an unauthorized user to fake the length of the data that it needs and the server simply return that...

Google confab set in Cebu

GOOGLE’S GdayX conference will finally be held in Cebu on April 12 at the Lakwatsa Resto Lounge in Mandaue City. This was announced by Google Business Groups (GBG) – Cebu which is organizing the local event. GdayX conferences are also being organized by other GBG chapters around the world for tech developers, enthusiasts, and entrepreneurs in Asia, Africa, Latin America, and the Middle East. Google Business Group-Cebu is inviting everybody to this first-ever GdayX Cebu conference and “unconference” which brings together entrepreneurs, tech experts, professionals and community leaders who will discuss the latest developments in business technologies and Google innovations that can improve the industries in the locality. The GdayX Cebu event is divided into two parts: conference and unconference. The conference will feature some of the country’s best speakers and experts, including Ryan Morales of Google Philippines, who will share their insights on business and technology. Google community managers from Cagayan de Oro and San Juan are among the resource people also expected to fly in for GdayX Cebu and talk about how to manage sustainability in the communities to facilitate business growth and how to use Google Tools in organizing events and activities. In the unconference part of GdayX Cebu, the audience will be the speakers themselves as GBG-Cebu facilitators will guide the attendees into focus group discussions for interaction and internal learning. The organizing GBG-Cebu is holding the “unconference” phase as it believes that the success of learning is when the community begins to be an integral part of the learning process. The GdayX Cebu host is looking forward to a fun Googley day of networking, discussion, and demonstrations that will leave the participants full...

Auza.Net Releases iPhone App for DYRD-AM Worldwide

By: Jerome Auza Auza.Net and DYRD-AM has released today the mobile app for the iOS platform developed for DYRD-AM Worldwide on Apple App Store.  The mobile app enables the listener to quickly listen to the live broadcast from iOS devices such as iPhones and iPads.  It also has the capability to submit comments which are received by the radio station together with the TxtKlamo text messages.  The app was developed by the software development team at Auza.Net.  The Android version was released in July 2012. Listeners of DYRD-AM can now conveniently listen to their favorite programs in a couple of taps anywhere in the world using their iPhones or iPads.  And if they want to interact with the anchors of certain programs, they can send their comments using the app.  The comments will be visible on the TxtKlamo system at the station and will be read on-air during programs like “Inyong Alagad” and “Tagbilaran By Night”. Boholanos around the world are encouraged to download the DYRD-AM app on their iOS or Android devices so that they can listen to the live broadcast wherever they may be. To download the DYRD-AM Worldwide App, go to the iOS App Store or to Google Play...