Comments on: MobileCast BETA source for Installer.App http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/ A blog on MobileCast, the iphone & podcasting Sat, 22 Nov 2008 05:13:12 +0000 http://wordpress.org/?v=2.6.1 By: Frank Lynch http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-118 Frank Lynch Fri, 31 Oct 2008 15:54:43 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-118 @Scott Kollarik Thanks for pointing this out. I've taken the following measures to correct the security issue you've pointed out: 1) Passwords are no longer transmitted in plain text. A oneway hash (SHA-1) of the password is computed in the client browser and submitted via the register/login form. 2) HTTP POST is now used in place of GET. It would be nice to run podgrove as a fully secure site (https), but that would require the purchase of a certificate etc. I offer podgrove.com as a free service to support a free iphone app (mobilecast). While I take every effort to protect user data, I do recommend that folks use caution on the internet and avoid using the same user-id & password with multiple sites. I am also working on an open-id based login system which offers a secure method of reusing the same password on multiple websites. @Scott Kollarik
Thanks for pointing this out. I’ve taken the following measures to correct the security issue you’ve pointed out:
1) Passwords are no longer transmitted in plain text.
A oneway hash (SHA-1) of the password is computed in the client browser and submitted via the register/login form.
2) HTTP POST is now used in place of GET.

It would be nice to run podgrove as a fully secure site (https), but that would require the purchase of a certificate etc. I offer podgrove.com as a free service to support a free iphone app (mobilecast).

While I take every effort to protect user data, I do recommend that folks use caution on the internet and avoid using the same user-id & password with multiple sites.

I am also working on an open-id based login system which offers a secure method of reusing the same password on multiple websites.

]]> By: Scott Kollarik http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-117 Scott Kollarik Fri, 31 Oct 2008 04:30:11 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-117 Beware the PodGrove.com signup. Use a password you don't use for other websites, as it uses a GET request during sign up process, passing your email address as well as your password (and password confirmation) in cleartext on a non-SSL channel. This is a pretty flagrant security issue. Beware the PodGrove.com signup. Use a password you don’t use for other websites, as it uses a GET request during sign up process, passing your email address as well as your password (and password confirmation) in cleartext on a non-SSL channel. This is a pretty flagrant security issue.

]]> By: Frank Lynch http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-91 Frank Lynch Wed, 24 Sep 2008 13:03:38 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-91 @Philippe thats a known issue[1], your best bet is to use the hardware volume buttons. If your on a touch I believe you can double tap the home button to bring up a working volume control. This is a non-issue in MobileCast 3.0 a beta of which should be out really soon (within 48 hours). [1] http://code.google.com/p/mobilecast/issues/detail?id=74 @Philippe thats a known issue[1], your best bet is to use the hardware volume buttons. If your on a touch I believe you can double tap the home button to bring up a working volume control.
This is a non-issue in MobileCast 3.0 a beta of which should be out really soon (within 48 hours).

[1]
http://code.google.com/p/mobilecast/issues/detail?id=74

]]> By: Philippe http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-90 Philippe Wed, 24 Sep 2008 11:21:12 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-90 I cannot adjust volume on video feeds. works perfectly on audio feeds. any idea why. I have just downloaded 2.2.4 Beta-136 to see if it makes a difference, but it does not! Any ideas? Thanks for a great app! I cannot adjust volume on video feeds. works perfectly on audio feeds. any idea why. I have just downloaded 2.2.4 Beta-136 to see if it makes a difference, but it does not! Any ideas?
Thanks for a great app!

]]> By: Frank Lynch http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-51 Frank Lynch Fri, 18 Apr 2008 03:02:11 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-51 ok, so the codec must exist then, I'll do a bit more investigation. ok, so the codec must exist then, I’ll do a bit more investigation.

]]> By: Frankie http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-50 Frankie Fri, 18 Apr 2008 02:31:45 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-50 I can view the videos in ipodtouch by transferring from itunes... Anyway, thanks for your effort! f I can view the videos in ipodtouch by transferring from itunes…

Anyway, thanks for your effort!

f

]]> By: Frank Lynch http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-49 Frank Lynch Fri, 18 Apr 2008 01:52:04 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-49 hmmm... looks like the video is a divx, thats probably the problem. I don't think the iphone or itouch has the codecs available to playback divx movies. --Frank hmmm… looks like the video is a divx, thats probably the problem. I don’t think the iphone or itouch has the codecs available to playback divx movies.
–Frank

]]> By: Frank Lynch http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-48 Frank Lynch Fri, 18 Apr 2008 01:48:40 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-48 thanks, I'll take a look... btw does this work if you add this feed to the ipod.app? cheers, --Frank thanks, I’ll take a look… btw does this work if you add this feed to the ipod.app?
cheers,
–Frank

]]> By: Frankie http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-47 Frankie Fri, 18 Apr 2008 01:32:34 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-47 the links : http://podcast.rthk.org.hk/podcast/videonews.xml (Hong Kong Video News in Chinese) I hv tried previous version 2.2.3, also not work. Thanks!!! :) F the links : http://podcast.rthk.org.hk/podcast/videonews.xml (Hong Kong Video News in Chinese)

I hv tried previous version 2.2.3, also not work. Thanks!!! :)

F

]]> By: Frank Lynch http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-46 Frank Lynch Thu, 17 Apr 2008 18:38:18 +0000 http://blog.podgrove.com/2008/03/16/mobilecast-beta-source-for-installerapp/#comment-46 Frankie: could you post a link to the feed for the video that is causing this problem? Did this video work with any previous versions of mobilecast? PS - the best place to post questions & get help on mobile cast is on the google group: http://groups.google.com/group/mobilecast/topics cheers, --Frank Frankie: could you post a link to the feed for the video that is causing this problem?
Did this video work with any previous versions of mobilecast?

PS - the best place to post questions & get help on mobile cast is on the google group:
http://groups.google.com/group/mobilecast/topics
cheers,
–Frank

]]>