Tag Info

Hot answers tagged

31

I like my iPhone. There are some nice sysadmin apps. But besides the obvious email/calendar/contacts clients with Exchange integration, I primarily use it for note taking (EverNote), which is also very important in our job. The web browsing experience is great if you had to research something and last, but not least for my personal education: reading RSS ...


19

I like my Nokia N810. Not really a phone, but has big screen (800x480) linux inside SSH, RDP client, VNC network tools like nmap and tcpdump cut-down firefox browser comms like skype, gtalk, SIP phone wifi or you can connect through a bluetooth onto a 3G cellphone. good battery life - couple of days from a charge fits in your pocket good sized ...


16

I'm sorry to get here so late, but there is a book from Ilya Grigorik called "High Performance Browser Networking" that answers exactly this. There is a whole chapter (7th) dedicated to mobile networks. The book states that the problem with high performance is almost always tied to latency, we usually have plenty of bandwidth but the protocols gets in the ...


14

Are you in a hurry? Google says at least 18 Android phones will be on the market by the end of the year, and most US carriers have announced they will carry one or more. There is a good market for apps, the current one (T-Mobile G1) has a nice keyboard, my wife is fairly happy with it, but I don't know how well it fits into what you need. I would be ...


11

If you are using self-signed ssl then,While generating self-signed ssl certificate in server side,generate identity.p12 certificate and this certificate you need to use in identity section of IPCU. These few lines you can use to generate the idendtity.p12 //Creating the device Identity key and certificate request openssl genrsa 2048 > identity.key ...


7

Considering a sysadmin's level of access, there's very little attention paid here to security other than SSL as a minimum standard. The device is far more likely to be compromised than the data path. Phones get misplaced and stolen. A 4-digit pin is pretty weak security, and even that is sometimes not used. Are the data encrypted on the device, and can ...


7

System Center Mobile Device Manager will do this as far as I can tell but I'm not sure how good the cert enroller's are on WM5, most of the cert features are only properly supported on WM6 (I think). There is a limited cert deployment capability built in to Activesync from version 5 that will automatically deploy user certs onto the device for e-mail if you ...


6

I use the iPhone. TouchTerm is a great SSH app. It supports both password and key authentication. Most monitoring programs can be tweaked to display an iPhone friendly web interface. I've also written a couple of web interfaces to our bandwidth graphs. No reason to use an app for it - the web browser is easy to write for. The keyboard is OK for typing - ...


6

If you have a Citrix installation, the iPhone just recently became a must-buy. I can log in to work's Citrix install from anywhere in the US, and anywhere outside the US if I have wifi there. The interface is even surprisingly usable and responsive, with intuitive right-click support etc. The keyboard hasn't been an issue for me, I've been using TouchTerm ...


6

Blackberry is kind of "the usual". midpssh is an absolute crap SSH client by any reasonable standard, but it'll do for emergencies. Where Blackberry usually wins is its Exchange integration.


6

If you have a new enough version of nginx (0.9.6+), you could accomplish this with a map: map $http_user_agent $myindex { default /browser_index.html; ~iPhone /mobile_index.html; } server { listen 80; root /var/www; location = / { rewrite ^ $myindex; } } If you don't need an internal redirect (which you probably don't if you're just serving ...


6

Generally speaking, this is most likely done by inspecting the HTTP-User-Agent that is sent in the HTTP request. http://en.wikipedia.org/wiki/User_agent has more information. Mobile safari sends a different string that the web page can investigate (via js/php/etc), and then serve different content, or change the stylesheet, or send them to a different page. ...


5

In addition to disk encryption, a policy to not allow any sensitive data to be left on the laptop may be helpful. Instead require the laptop to VPN & RDP to a secured machine back at the office. With this approach you will lose the ability to work offline, but depending on how sensitive the data is, this might be the best option. You can also use some ...


5

To answer your first question mobile/cell-phone IP addresses are handed out using DHCP like any other client device. To answer your second questions, well yes, through NAT - that's what NAT does, it allows multiple 'inside' devices to get IP services through a NAT gateway - external IP services will not be able to identify individual internal devices like ...


4

I'm using an AT&T Tilt - HTC 8925. Slightly begrudgingly adopted Windows Mobile, but find that there are a lot of applications available. Nice slide-out keyboard. Using putty for SSH.


4

What about data? According to this page, the TSA can take a copy of all your data for any reason without suspicion of wrongdoing when crossing the US border. The data may be shared with other agencies. If you are shipping servers around, are you carrying commercially sensitive data that could harm your business if it got into the hands of your competitors?


4

iPhone get's my vote, especially now that they are legally allowing tethering for most users (sorry AT&T) Not anymore, please see http://danmacs.blogspot.com/2009/06/o2-iphone-3gs-wtf.html for reasons why. It basically boils down to not allowing upgrades, charging an extortionate amount for "legitimate" tethering (with restrictions on this) ...


4

I found that my iPod Touch works quite well too. Can connect to a VPN, and there's quite an array of SSH and VNC apps.


4

I personally love my BlackBerry Storm. It has a big screen, the browser is fast, it is good for tethering and thank god for the tactile feedback of the touch screen. I have the following capabilities: SSH RDP (With file access) VNC FTP Plus it quickly allows you to setup custom alerts with nice loud sounds when I receive a mail about a server failure ...


4

My guess is they are some sort of encapsulated IP packet. 0x0800 == the Ethernet type for IP 0x45 == IPv4 with 5*4=20 byte header 0x00 == Type of Service 0x00d0 == length 0x4d58 == ID 0x0000 == offset 0x40 == TTL (64) 0x06 == protocol (TCP) Interesting links: NetBSD's ip.h header NetBSD's tcp.h header NetBSD's udp.h header btw, I don't suppose ...


4

Truecrypt : http://www.truecrypt.org/ will encrypt mobile, internal drives completely, you can even encrypt the whole system partition on the fly and then set a boot loader password - gives you more security on laptops. and its opensource - free. http://4sysops.com/archives/system-drive-encryption-truecrypt-5-vs-bitlocker/ Bitlocker is good too, but due ...


4

With Evil Maid (EM) attack tools now available for TrueCrypt, I'd go for BitLocker if I had the budget, because EM-like attacks are quite more complicated, and it integrates better with AD etc as Oskar Duveborn stated. I suggest you read the articles of Joanna Rutkowska on both products : ...


4

So, i'm a little confused by what you are looking for here. When a customer calls in to an 800 or 888 number, have the ability to charge the customer on his phone bill call by call So am I reading this right that you want to charge the calling party, not the called party on an 8xx number? Or are you reselling your service such that the Calling party ...


4

One option is to use geolocation in the browser. Not many devices support it however. Ultimately, GeoIP is an unreliable hack.


4

You should be able to use a condition in your IIS rewrite rule. <rule name="MobileBrowser" stopProcessing="true"> <match url=".*" /> <conditions logicalGrouping="MatchAll"> <add input="{HTTP_COOKIE}" pattern="nomobile" ignoreCase="true" negate="true" /> <add input="{REQUEST_URI}" pattern="/mobile.*" negate="true" /> ...


4

man tcp - look for tcp_retries[1,2] for Linux machines. I have no idea what to do for Android and given Apples attitude to system-level tweaking there is probably absolutely no way to do this on iOS except when you jailbreak. TCP socket timeouts put aside, most applications will implement their own timeouts which are probably considerably shorter than the ...


4

It's not possible. The way to solve this problem is with a layer on top of the TCP layer that provides the semantics you need. This layer would have to add an identifier to each message, implement message acknowledgements, re-establish the TCP connection if it broken, and re-send all unacknowledged messages.


4

Well it has to be 1 of 3 things. Something changed in the AD account, something changed in the Exchange account or something changed on the phone itself. Can you enable debugging on the phone to ascertain why exactly the phone is throwing an error. Follow these steps to enable debugging: 1. On the android phone go to menu -> email. You will need to have ...


4

AirWatch has an MS Exchange client for iOS and Android. They support encryption and have a number of other security features as well. http://www.air-watch.com/solutions/apple-ios


4

The Surface Pro isn't any different than a Windows laptop in this example. You probably don't have Windows 8 or 8.1 patches synchronized to WSUS, so there are no updates for them on your server.



Only top voted, non community-wiki answers of a minimum length are eligible