<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="http://feeds.feedburner.com/~d/styles/rss2full.xsl" type="text/xsl" media="screen"?><?xml-stylesheet href="http://feeds.feedburner.com/~d/styles/itemcontent.css" type="text/css" media="screen"?><rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0" version="2.0">

<channel>
	<title>Waves</title>
	
	<link>http://www.aswinanand.com/blog</link>
	<description />
	<pubDate>Thu, 20 Nov 2008 03:39:35 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
	<language>en</language>
			<atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" href="http://feeds.feedburner.com/Waves" type="application/rss+xml" /><feedburner:emailServiceId>142567</feedburner:emailServiceId><feedburner:feedburnerHostname>http://www.feedburner.com</feedburner:feedburnerHostname><feedburner:browserFriendly>This is an XML content feed. It is intended to be viewed in a newsreader or syndicated to another site, subject to copyright and fair use.</feedburner:browserFriendly><item>
		<title>Themes in Gmail</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/459127453/</link>
		<comments>http://www.aswinanand.com/blog/2008/11/themes-in-gmail/#comments</comments>
		<pubDate>Thu, 20 Nov 2008 03:39:35 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[Casually Speaking ...]]></category>

		<category><![CDATA[google]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=228</guid>
		<description><![CDATA[Today morning I logged in to Gmail and was pleasently surprised to see a yellow information announcing Themes in Gmail. Looks like Google is enabling themes on a step by step basis for everyone. If themes have been enabled in your account, go to this link.
This is how the themes UI looks like. Click on [...]]]></description>
			<content:encoded><![CDATA[<p>Today morning I logged in to Gmail and was pleasently surprised to see a yellow information announcing Themes in Gmail. Looks like Google is enabling themes on a step by step basis for everyone. If themes have been enabled in your account, <a title="Gmail Themes" href="https://mail.google.com/mail/?shva=1#settings/themes" target="_blank">go to this link</a>.</p>
<p>This is how the themes UI looks like. Click on the image for a bigger view. Has it been enabled for you?</p>
<p><a href="http://www.aswinanand.com/wp-content/uploads/2008/11/themes.jpg"><img class="alignnone size-medium wp-image-229" title="Gmail Themes" src="http://www.aswinanand.com/wp-content/uploads/2008/11/themes-300x202.jpg" border="0" alt="Gmail Themes" width="300" height="202" /></a></p>
<p> </p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/459127453" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/11/themes-in-gmail/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/11/themes-in-gmail/</feedburner:origLink></item>
		<item>
		<title>Night Driving Lessons on ECR</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/441822465/</link>
		<comments>http://www.aswinanand.com/blog/2008/11/night-driving-lessons-on-ecr/#comments</comments>
		<pubDate>Mon, 03 Nov 2008 02:54:31 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[Casually Speaking ...]]></category>

		<category><![CDATA[tour]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=227</guid>
		<description><![CDATA[Update: My friend Sriram, who accompanied us during the trip has written a very good post. Please check it out here.
East Coast Road is an amazing stretch of road from Chennai to Cuddalore. The road is very smooth and long with plenty of instructions along the way on how to drive (with redundant bright boards). [...]]]></description>
			<content:encoded><![CDATA[<p><em><strong>Update:</strong> My friend Sriram, who accompanied us during the trip has written a very good post. </em><a title="The Pondicherry Trip" href="http://rubberneck.wordpress.com/2008/03/09/dark-green-trip/" target="_blank"><em>Please check it out here</em></a><em>.</em></p>
<p>East Coast Road is an amazing stretch of road from Chennai to Cuddalore. The road is very smooth and long with plenty of instructions along the way on how to drive (with redundant bright boards). So much that you just can&#8217;t miss any of them.</p>
<p>So, on Sunday (02-Nov-2008), Nagarajan, Siddharth, Sriram and yours truly decided to drive to Pondy by bike along the ECR. Its about 150 kms from Chennai. If you drive non-stop, you can reach Pondy in two and half hours. I will blog about the Pondy trip in another post &#8216;cos I&#8217;m waiting for the photos to get ready.</p>
<p>This post is about the driving lessons I learnt when we were driving along the ECR for the first time. This post would be useful to you if you are driving along the ECR.</p>
<p><strong><span style="color: #ff5c00;">Day Time Driving - Until Mahabalipuram</span></strong></p>
<p>Though many consider day time driving to be fairly easy, it is not. Until Mahabalipuram, you will encounter lots of villages where dogs&#8217; favourite playground is the middle of the road (or) one crazy dog would have seen a calf or rat on the other side of the road &amp; they would form small packs to hunt them down. I witnessed a medium sized dog being brutally run over by a bus. But then, nothing can be done. If it were a biker who ran over, he would have surely fallen down and broken his bones.</p>
<p>Please follow the instructions along the road. There are many places where there are sign posts with &#8220;speed limits&#8221;. That&#8217;s an amazing guidance. There are also lots of sign posts which announce &#8220;accident zones&#8221; and more importantly &#8220;cattle zones&#8221; where livestock is bound to cross the road and tend to become deadstock. So, drive carefully. Until Mahabalipuram, driving through villages is very risky if you overspeed.</p>
<p><strong><span style="color: #ff5c00;">Day Time Driving - After Mahabalipuram</span></strong></p>
<p>After Mahabalipuram, there are back waters of the sea on both sides of the road for most part. Hence, there are not much villages. So there are no cattle/humans/fighting-dogs waiting to be hit by you. Actually in most places, you have to drive at a minimum of 80 kmph <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> . That&#8217;s a boon for racing freaks. But be careful &#8216;cos the 100km stretch after Mahabalipuram is full of wild twists, turns and bridges. Most medium and heavy vehicles such as cars and busses turn without even honking. So, the safest bet is to travel at 60kmph on the left side of the road. But if you are a bit adventurous like me, you may want to experiment carefully and do turns at 85 kmph <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> with a Toyota Innova overtaking you at an even greater speed.</p>
<p>There are quite a few places where there are 4-5 km straight stretches without no villages in between. The road is clearly visible. You can go at full speed your bike allows. I touched 100 kmph along such stretches &amp; its pretty much safe.</p>
<p>Oh! You must bring down your helmet&#8217;s visor. Otherwise, your eyes can&#8217;t stand direct dragon fly hits.</p>
<p><strong><span style="color: #ff5c00;">Night Driving</span></strong></p>
<p>I loved it. Driving during the nights on highways like ECR is a superb experience.</p>
<p>Nothing can be more wrong if you say night driving is dangerous along ECR. Its actually safe. For all its bend and curves, if a vehicle is turning along from the opposite direction, its headlight gives away that something is coming. That will give you enough time to adjust your speed and balance. All along the curves, the sign boards illuminate beautifully when light is showered on them. Even the road&#8217;s medians light up very well along the drive way. So you always know where you are driving.</p>
<p>Always dip-dim-dip your headlights when you see a vehicle coming in the opposite direction. When you are overtaking another vehicle from its right side, switch on your left side indicator before completing the overtake.</p>
<p><strong><span style="color: #ff5c00;">Night Driving - Good, Fair and Ugly</span></strong></p>
<p>On the way to Chennai during night travel, you will encounter lot of insects which will hit you. Putting on the helmet visor is a problem because light from the opposite direction will disperse and will make it tough for you to see. So, follow a big vehicle from a safe distance.</p>
<p>Siddharth did just that. For nearly 30 kilometers, he followed a Chennai bound bus at a safe 10m distance. The bus took all of the glare of the vehicles from the opposite direction, all insects don&#8217;t reach you and most importantly, you are shielded from dangerous overtakes. Wherever the bus overtakes, you also do the same. Wherever the bus stops, you also stop and the wherever the bus goes fast, you also go fast. It will be safe, fast and secure.</p>
<p>Second best thing is to follow another medium sized vehicle. I did this. Most cars travel at not less than 90 kmph. So, you can actually wear your helmet visor, shielding yourself from insects and you can also drive very fast. Chill wind kissing your body is a superb feeling <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>All the villages along the ECR after Mahabalipuram (towards Chennai) sleeps early. So, no cattle/dog torture in nights. This enabled us to cover the 55 km stretch from Mahabalipuram to Chennai in 30 minutes flat <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>Hope these instructions will be useful when you drive along the ECR. If so, do let me know. Definitely give importance &amp; follow all of the sign boards along the road. That will ensure a very safe dirve. All in all, it was an awesome driving experience. Pics of Pondy coming in the next blog post.</p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/441822465" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/11/night-driving-lessons-on-ecr/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/11/night-driving-lessons-on-ecr/</feedburner:origLink></item>
		<item>
		<title>Barcamp Chennai 2 - Interesting!</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/425548270/</link>
		<comments>http://www.aswinanand.com/blog/2008/10/barcamp-chennai-2-interesting/#comments</comments>
		<pubDate>Sun, 19 Oct 2008 15:34:29 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[BCC2]]></category>

		<category><![CDATA[BarcampChennai]]></category>

		<category><![CDATA[Casually Speaking ...]]></category>

		<category><![CDATA[Technology]]></category>

		<category><![CDATA[events]]></category>

		<category><![CDATA[the knowledge foundation]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=222</guid>
		<description><![CDATA[Hello friends! Barcamp Chennai 2 was superb! It was 2 days of fun. What was surprising this time is the sheer number of new faces in the crowd and the number of non-tech sessions. The non-tech sessions were high this time, though the tech sessions were pretty basic ones. Lots of networking happened this time [...]]]></description>
			<content:encoded><![CDATA[<p>Hello friends! Barcamp Chennai 2 was superb! It was 2 days of fun. What was surprising this time is the sheer number of new faces in the crowd and the number of non-tech sessions. The non-tech sessions were high this time, though the tech sessions were pretty basic ones. Lots of networking happened this time and I came across a really cool bunch of people with whom I will be in touch.</p>
<p><strong><span style="color: #ff5c00;">Day 1</span></strong></p>
<p>Yesterday morning, I attended a session on Git, by Sreeni from ThoughtWorks. Its a source control system which was developed by Linus Torvalds. I recently signed up at GitHub to host the <a title="Free SMS Web Service" href="http://www.aswinanand.com/blog/2008/07/send-free-sms-web-service/">SMS Web Service program</a> &amp; this session was really very helpful in getting me started. Next session was intro to Ruby on Rails by Prakash from ThoughtWorks (this was in a different track). Most of the hall roared with laughter when one of the campers asked what the difference between Rails and Javascript. Hmm! With this question I came out of the hall and met <a title="Kausik's blog" href="http://chaosbudha.blogspot.com/">Kausik</a>, <a title="TeraOm" href="http://teraom.com/">Bharadwaj</a>, <a href="http://moyeen.net/">Moyeen</a>, <a title="Kumar APP's blog" href="http://sparsham.wordpress.com/">KAPP</a>, <a title="Shyam's Blog" href="http://shyamk.blogspot.com/">Shyam</a> and a few more guys. We were discussing about programming languages, mainly about python and various IDEs. I also struck a deal with Shyam to collaborate on an open source mobile project. More details about it will be available soon.</p>
<p>By the time we finished our discussion on the hallways, it was lunch time and we headed to Tiffanys. We ragged Moyeen <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> about his GF and stuff. Moyeen is a good sport you see <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> so we had a nice time. Post lunch, there was a session on linux kernel basics and then came the best session of the day.</p>
<p>It was on <a title="Open Street Maps website" href="http://www.openstreetmap.org/">Open Street Maps</a> by a final year engineering student named Arun Ganesh. Open Street Maps is a community effort to map out the whole world. A wikipedia of sort for mapping. Arun had done some seriously good tasks of mapping out Teynampet &amp; sharing it with the post offices in his area to get it validated. He also pointed out that, where Google or Yahoo maps take a few years to map changes in locality, those changes are reflected relatively immediately on OSM. That&#8217;s mainly because of the volunteers who edit the maps on a day-to-day basis. Unlike Google or Yahoo maps, OSM allows you to change the underlying mapping data itself, which is pretty cool. When Arun showed the OSM website on his browser, someone asked what the software was <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> The audience brought the ceiling down by laughing. I was pondering about building a mobile software for displaying OSM on Symbian mobiles. Interested anyone? I may start this in a couple of month&#8217;s time.</p>
<p>My session on the recent &#8220;<a title="Assign Categories WP Plugin" href="http://www.aswinanand.com/blog/2008/10/bulk-assign-categories-to-multiple-posts/">Assign Categories</a>&#8221; wordpress plugin was next. Response was good <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> and I&#8217;m happy. After this, there was a session on web 2.0 (old stuff?) but then, myself and a few others used the law of two feet and discussed various other topics between cups of coffee. I also answered a few questions on my wordpress plugin during this time. Day 1 came to an end with this.</p>
<p><strong><span style="color: #ff5c00;">Day 2</span></strong></p>
<p>Today was superb I should say. The first session was from Viru [viru {at} physicssociety {dot} com] about &#8220;Indian Education System Sucks&#8221;. The word &#8217;s**ks&#8217; provoked the audience very much and what followed was very hot debate with a few solutions to the current problems. Solutions being that students should be allowed to ask questions and teachers should encourage that. Also, more amount of practicals should be introduced in the curriculum for understanding the subjects better rather than mugging up. I believe CBSE has solved part of the problem here. By making the syllabus huge, they have effectively discouraged students from mugging up &amp; vomiting. So, to answer questions in the exams, they have to understand the subject well; else they flunk. There are lots of side effects to this. But we will discuss it some other time.</p>
<p>Second session was on &#8220;Global Financial Meltdown&#8221; by <a title="Syed's Blog" href="http://orione.wordpress.com/">Syed</a>, Sukumar and <a title="Rupya.com" href="http://www.rupya.com/">Ganesh (of Rupya)</a>. It was superb. Though I did follow the news on the financial meltdown, I learnt a lot from the discussion. One specific portion that still stays fresh is the news that India Inc. is spending Rupees 1 Lakh Crore to help the failing banks. They are buying stock at a discounted rate and imagine the returns when the meltdown ends! <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> . There was also a small discussion on how it affects the IT industry. Software service companies have to be on watch was a view that was shared by everyone.</p>
<p>Post lunch, the talk was on &#8220;Disaster Management&#8221;. Since Mr. Mani, DSP of Police couldn&#8217;t turn up, it turned into a fun group discussion. The hall applauded when Sukumar advised the campers to take &#8220;good care&#8221; of our lives. Point well taken.</p>
<p>After this it was time for our discussion using the law of 2 feet &amp; then it was time for Thomas&#8217; session on &#8220;How to become an innovator&#8221;. Crux of the talk is that, you have to <a title="Stress - Unstress" href="http://thoughts.clubecho.org/2007/08/stress-unstress.html">condition your mind</a> in to thinking out of the box and he recommends the books written by <a title="Edward De Bono's Biography" href="http://www.edwdebono.com/debono/biograph.htm">Edward De Bono</a>. <a title="Siddhi's Blog" href="http://siddhi.blogspot.com/">Siddhi</a>&#8217;s session on creating a really good office space was enlightening as well. On the whole, Day 2 rocked and I learnt plenty of things today.</p>
<p><strong><span style="color: #ff5c00;">Wifi</span></strong></p>
<p>Wifi sucked <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_sad.gif' alt=':(' class='wp-smiley' /> Most of the time, it didn&#8217;t connect. Wifi Gurus are most welcome to share gyan on how to setup a reliable wifi for (un)conferences. May be this would have been a great session at Barcamp.</p>
<p><strong><span style="color: #ff5c00;">Photos</span></strong></p>
<p>Please search for BCC2 or BarcampChennai on Flickr and other places.</p>
<p>Crowd size was optimum this time, which made the sessions all the more interactive. Were you there and I missed talking to you? If so, please drop a comment and I will get back in touch with you. Thanks!</p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/425548270" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/10/barcamp-chennai-2-interesting/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/10/barcamp-chennai-2-interesting/</feedburner:origLink></item>
		<item>
		<title>Barcamp Chennai 2 happening today &amp; tomorrow</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/424252598/</link>
		<comments>http://www.aswinanand.com/blog/2008/10/barcamp-chennai-2-happening-today-tomorrow/#comments</comments>
		<pubDate>Sat, 18 Oct 2008 03:01:57 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[BCC2]]></category>

		<category><![CDATA[BarcampChennai]]></category>

		<category><![CDATA[Casually Speaking ...]]></category>

		<category><![CDATA[Technology]]></category>

		<category><![CDATA[events]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=221</guid>
		<description><![CDATA[
Yay! barcamp chennai second edition is happening today and tomorrow at IIT Madras in the IC &#38; SR auditorium. The previous barcamp was truly awesome and I sincerely hope, this one will also meet the expectations. There are lots of interesting talks lined up and whats even more interesting is that, there are lots of [...]]]></description>
			<content:encoded><![CDATA[<p><img class="alignnone" style="border: 0" src="http://farm4.static.flickr.com/3193/2944948690_257d919892.jpg" alt="Barcamp Chennai Logo" /></p>
<p>Yay! barcamp chennai second edition is happening today and tomorrow at IIT Madras in the IC &amp; SR auditorium. The <a title="Barcamp Chennai 1" href="http://www.aswinanand.com/blog/2006/04/barcamp-chennai-was-amazing/">previous barcamp</a> was truly awesome and I sincerely hope, this one will also meet the expectations. There are lots of interesting talks lined up and whats even more interesting is that, there are lots of new faces this time :D </p>
<p>We are also planning for an all-night code camp for tonight. If its happening, I will post more details about it here. If you are attending, do let me know. I will be around. For more details about barcamp, check out <a title="Barcamp Chennai 2 website" href="http://barcampchennai.org/">http://barcampchennai.org/</a>.</p>
<p>If you are taking pics/videos/tweeting about the event, use the tag &#8220;BCC2&#8243;. That would make it easier to search and find the relevant pics, blog posts and videos.</p>
<p>See you there!</p>
<p> </p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/424252598" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/10/barcamp-chennai-2-happening-today-tomorrow/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/10/barcamp-chennai-2-happening-today-tomorrow/</feedburner:origLink></item>
		<item>
		<title>Bulk Assign Categories to Multiple Posts</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/420920729/</link>
		<comments>http://www.aswinanand.com/blog/2008/10/bulk-assign-categories-to-multiple-posts/#comments</comments>
		<pubDate>Tue, 14 Oct 2008 18:03:21 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[Technology]]></category>

		<category><![CDATA[techblog]]></category>

		<category><![CDATA[wordpress]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=219</guid>
		<description><![CDATA[Here&#8217;s a cool new wordpress plugin that allows you to assign one or more categories to multiple posts in a single shot, with or without preserving existing categories.
This plugin will be very useful when you are migrating to your own wordpress blog, hosted on your domain. The default wordpress functionality is that, you can assign [...]]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s a cool new wordpress plugin that allows you to <strong><em>assign one or more categories to multiple posts in a single shot, with or without preserving existing categories</em></strong>.</p>
<p>This plugin will be very useful when you are migrating to your own wordpress blog, hosted on your domain. The default wordpress functionality is that, you can assign new categories to posts only by editing each post and changing the category assigned to it. So, if you have a large number of posts, then it will be a nightmare.</p>
<p>Enter this plugin.</p>
<p>With this plugin, assigning multiple categories to one or more posts is a breeze. Pop the plugin&#8217;s PHP file to your wordpress plugin directory, activate it and click on &#8220;Assign Categories&#8221; under the Manage menu. The page will show the list of available categories, followed by the available blog posts. You can select the categories, select the required posts and then click on &#8220;Assign Categories&#8221; at the bottom of the page. Now, all your posts will be assigned the new categories. </p>
<p>Currently, the plugin is in &#8220;beta&#8221;. The beta will go off in a few days <span style="text-decoration: line-through;">and will contain search functionality also</span>. The plugin has been updated with search functionality. Please download the plugin again.</p>
<p>The plugin is licensed under GPL v2 (the same as wordpress).</p>
<p><a title="Assign Categories Plugin" href="http://www.aswinanand.com/downloads/assign_categories.zip">Download the plugin</a>, take it for a test drive and let me know.</p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/420920729" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/10/bulk-assign-categories-to-multiple-posts/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/10/bulk-assign-categories-to-multiple-posts/</feedburner:origLink></item>
		<item>
		<title>Kids and Kittens</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/421089852/</link>
		<comments>http://www.aswinanand.com/blog/2008/10/kids-and-kittens/#comments</comments>
		<pubDate>Mon, 13 Oct 2008 01:30:14 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[Casually Speaking ...]]></category>

		<category><![CDATA[humour]]></category>

		<category><![CDATA[kids]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=220</guid>
		<description><![CDATA[About 4 weeks ago, a cat had given birth to 2 kittens. Since then, those kittens are playing around with everybody they seem to cross. They look very cute. A big face when compared to their overall body size, especially their eyes! LOL.
Anyhoo&#8230; it was a sleepy saturday afternoon when I went to the bike stand [...]]]></description>
			<content:encoded><![CDATA[<p>About 4 weeks ago, a cat had given birth to 2 kittens. Since then, those kittens are playing around with everybody they seem to cross. They look very cute. A big face when compared to their overall body size, especially their eyes! LOL.</p>
<p>Anyhoo&#8230; it was a sleepy saturday afternoon when I went to the bike stand to go out somewhere. Two guys were playing. One was aged 7 and the other was aged 12. They were moving very quickly between the bikes on the stand. I got curious when the older kid held a bike tightly with this hand, while the other one climbed on top to try and reach the asbestos roof. Perched atop the roof was one of the kittens.</p>
<p>Fearing that he may slip, I wanted him to come down &amp; the following discussion ensued.</p>
<p><strong style="color: #FF5C00;">Me:</strong> Dai, keezha vizhundhuda pora. Erangu da. (Translates to, &#8220;Dude, you may fall down and get hurt. Climb down&#8221;).<br />
<strong style="color: #FF5C00;">Him:</strong> Illa anna. Naa andha poonaya pidikanum. (Translates to, &#8220;No brother. I want to catch the kitten&#8221;).<br />
<strong style="color: #FF5C00;">Me:</strong> Dai, adha yen da nondra? (Translates to, &#8220;Why mess with the kitten unnecessarily?&#8221;).</p>
<p>Saying this, he deftly placed his hand on one of the cracks on the asbestos roof and tried to pull the kitten down by its tail. But it got a bit wild and puts in head down to push him off. But that didn&#8217;t deter him. I was a bit afraid now. Here was a small guy who was standing on the edge of a bike &amp; he may slip &amp; break his jaws. But at any cost, he wanted the kitten down and be with him.</p>
<p><strong style="color: #FF5C00;">Me:</strong> Edhukku da unakku andha poonai ippo venum? (Translates to, &#8220;Why do you want that kitten now?&#8221;)<br />
<strong style="color: #FF5C00;">Him:</strong> Anna, na adhukku rendu naala saapadu pottu valathukuttu varen. Adhu konjam kooda nandri illama, mela yeri okandhirukku. Adhan erakka poren (Translates to, &#8220;Brother, I have fed it food for the last 2 days. But without showing any gratitude, it has climbed up beyond reach and sitting there. That&#8217;s why I&#8217;m going to bring it down now.&#8221;) &#8230;.</p>
<p>THAT ZAPPED ME! seriously! What the 7 year old spoke just now weren&#8217;t small words <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> <a title="Ah! Kids Again" href="http://www.aswinanand.com/blog/2006/04/ah-kids-again/">Kids are powerful</a>.</p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/421089852" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/10/kids-and-kittens/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/10/kids-and-kittens/</feedburner:origLink></item>
		<item>
		<title>Visit to Kone Falls</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/411650801/</link>
		<comments>http://www.aswinanand.com/blog/2008/10/visit-to-kone-falls/#comments</comments>
		<pubDate>Sun, 05 Oct 2008 02:36:45 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[Casually Speaking ...]]></category>

		<category><![CDATA[tour]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=211</guid>
		<description><![CDATA[It&#8217;s been quite a long time since I visited a good place and had fun for a full day. I hadn&#8217;t even gone for a long ride on my bike until now. So, it was five of us. Arvindh, Karthik, Paramesh, Siva and myself. Arvindh is my friend from the Kalari class, a cool talkative guy. Karthik [...]]]></description>
			<content:encoded><![CDATA[<p>It&#8217;s been quite a long time since I visited a good place and had fun for a full day. I hadn&#8217;t even gone for a long ride on my bike until now. So, it was five of us. Arvindh, Karthik, Paramesh, Siva and myself. Arvindh is my friend from the Kalari class, a cool talkative guy. Karthik doesn&#8217;t talk much but likes adventures. Paramesh was the <strong>very</strong> practical guy among us and Siva was the paranoid. You know about yours truly. Hence, no &#8220;about me&#8221; here.</p>
<p>Kone falls is also called &#8220;konai falls&#8221; or &#8220;kona falls&#8221; or the &#8220;kailashnatha kona&#8221;.</p>
<p><strong>The Drive</strong></p>
<p>Kone Falls comes 10 kms before Puthur (Andhra Pradesh). Its a couple of 100 Kms from Chennai and takes about 2 hours if you drive at 60 kmph. The first one hour journey through the national highways was simply awesome! Roads are superb and there were no potholes at all. Driving speed was consistently between 80 kmph and 100 kmph. I was even able to touch the magical 100 kmph a couple of times. Once we reached the toll plaza, we took a left turn to reach Periyapalayam and then the road straight to Uthukottai. From Uthukottai, it was a 34 km ride on a perfect road. The weather was awesome! It was drizzling slightly for a few minutes in the morning. But apart from that, there was nothing much.</p>
<p>Paramesh, being the crazy biker among us, tried to do a few dangerous bends on his pulsar 180cc. But the turns on the road weren&#8217;t turning deep enough. I was even caught meditating on the middle on the road during the last 34kmph stretch <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> The roads were free with an occassional lorry or two to disturb the silence.</p>
<p><strong>The Falls</strong></p>
<p>The entrance to the falls looks like this.</p>
<p><a href="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2716.jpg"><img class="alignnone size-medium wp-image-212" title="Kone Falls entrance" src="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2716-300x225.jpg" border="0" alt="Kone Falls entrance" width="300" height="225" /></a></p>
<p>This entrance is tucked away from the main road. You need to watch for the milestone (on the right side of the road) that reads &#8220;Puthur 10&#8243;.  This entrance comes immediately after that milestone on the left side of the road. From here its a 2km drive along the single road. Be careful when you drive along this road. There are a few really sharp bends &amp; cars come dashing through without any warning.</p>
<p><strong>The Temple</strong></p>
<p>The end of the road takes us to the base of a small hill, on which there&#8217;s a temple of Lord Shiva. To the left of the temple, there is the actual &#8220;waterfall&#8221;. The flow is not huge. But its sufficient for a few people to bath. We, being the more adventurous, didn&#8217;t want to bath here. There was a way up the hill which led to us small pools on top of the hill. We decided to trek to that place.</p>
<p><strong>The Trek</strong></p>
<p>This was the part of the trip that I loved the most. Armed with a couple of water bottles and a few cameras, we set out to explore the hillock from where the waterfalls&#8217; started its downward journey. A quarter way up the hill, we were confronted by a gang of rowdy monkeys. They threatened to rip our bags apart from us to check its mysterious contents. Earlier, I would have just thrown my hands up and surrendered. But hey, what for am I learning Kalari if I can&#8217;t even handle a bunch of silly monkeys?</p>
<p><a href="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2729.jpg"><img class="alignnone size-medium wp-image-213" title="This culprit monkey was responsible for surrounding us with his friends." src="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2729-300x225.jpg" alt="This culprit monkey was responsible for surrounding us with his friends." width="300" height="225" /></a></p>
<p>Just as I was about to get into position, they all jumped in fear and ran away. As I turned around to see what happened, our beloved Karthik, remembering that our forefathers were monkeys, bent down and made mock faces at them. He also tried to pounce on them. Seeing this in action, we broke into peals of laughter. To celebrate the victory, with the monkeys out of the way, we stood on the edge of the rock and took a couple of daring photos.</p>
<p><a href="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2743.jpg"><img class="alignnone size-medium wp-image-214" title="On the Edge" src="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2743-300x225.jpg" alt="On the Edge" width="300" height="225" /></a></p>
<p>That&#8217;s me and Arvindh standing on the edge. Its a steep fall from this place <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> We continued our trek. We found a few interesting grasses along the way. One such grass was that, if you crush its leaves, it gives a nice lemony smell. Local folks said that, this smell keeps them away from suffocation if they keep climbing too far.</p>
<p>After an hour of trekking, we reached the place <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> </p>
<p><strong>The Waterfall and The Pool</strong></p>
<p>We all beamed when we heard the sound of water rushing. It was like salvation. A goal that you had reached after some hardwork. But we were yet to see the place from where the water was falling through. Making our way through the trees, we found that the waterfall had formed a small pool which was overflowing and filling another pool about 15 feet below. We climbed down the waterfall and reached the pool in a couple of minutes. The water was amazingly clear and cool !</p>
<p><a href="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2789.jpg"><img class="alignnone size-medium wp-image-215" title="The pool with myself, Arvindh and Siva (L to R)" src="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2789-300x225.jpg" alt="The pool with myself, Arvindh and Siva (L to R)" width="300" height="225" /></a></p>
<p>We bathed here for about an hour and a half. This pool overflowed and filled another pool about 15 feet below, which is where the adventure began.</p>
<p><strong>The Adventure</strong></p>
<p>I got out of the pool and was sitting on the rocks through which the water was flowing to fill the pool below. I was sitting with my legs folded and suddenly I slipped. The slope was steep and slippery and I couldn&#8217;t hold on anywhere. In the same sitting position, I fell through 15 feet with my a** bumping the rocks along the way and whooosh! &#8230; I just plunged into the pool below. With the force with which I fell, I touched the base of the pool and came up again. Thank Goodness, the pool deep enough.</p>
<p>I swam back to the rocks, held to a tree root, climbed it up, stepped on yet another rock and then made my way to the place where we were sitting. Phew! it was nothing like I had encountered before. This experience threw out a lot of imaginary fears from me. I escaped without a scratch.</p>
<p>I was almost like a caveman. Dressed only in an underwear, with a few leaves stuck around my hips, and climbing the rocks to our place, the sight was quite hilarious. Only Karthik saw me fall through very clearly. Others just heard the splash.</p>
<p><strong>The Trek Down</strong></p>
<p>We bathed for some more time and then made our way down. No rowdy monkeys this time. We were able to make out the route now and reached the base of the hill in under 30 minutes.  We visited the Lord Shiva temple, ate some prasadam and then made our way back to home sweet home.</p>
<p><a href="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2814.jpg"><img class="alignnone size-medium wp-image-216" title="Driving back!" src="http://www.aswinanand.com/wp-content/uploads/2008/10/img_2814-300x225.jpg" alt="Driving back!" width="300" height="225" /></a></p>
<p>It was a superb trip/trek, that I enjoyed thoroughly <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> after a long time.</p>
<p> </p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/411650801" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/10/visit-to-kone-falls/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/10/visit-to-kone-falls/</feedburner:origLink></item>
		<item>
		<title>Microsoft TechVista</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/409367324/</link>
		<comments>http://www.aswinanand.com/blog/2008/10/microsoft-techvista/#comments</comments>
		<pubDate>Thu, 02 Oct 2008 12:01:31 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[Casually Speaking ...]]></category>

		<category><![CDATA[Technology]]></category>

		<category><![CDATA[events]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=210</guid>
		<description><![CDATA[Microsoft Research (MSR) India conducted TechVista yesterday, a symposium by MSR to showcase some of the hottest research that&#8217;s been happening. The talks were interesting and so were the posters presented by various students from top notch colleges, some of whose research is sponsored by Microsoft.
After the usual keynote, the real talk began by 10.45 [...]]]></description>
			<content:encoded><![CDATA[<p>Microsoft Research (MSR) India conducted TechVista yesterday, a symposium by MSR to showcase some of the hottest research that&#8217;s been happening. The talks were interesting and so were the posters presented by various students from top notch colleges, some of whose research is sponsored by Microsoft.</p>
<p>After the usual keynote, the real talk began by 10.45 AM. The talk was about the &#8220;Future of Computing&#8221; by Dr. John Hopcroft. It was a very insightful talk with details about &#8216;the cloud&#8217; that I could relate to; and also about information storing and retrieval in digital form. The next talk was by Dr. Richard Szeliski about &#8220;Weaving the World&#8217;s Photos&#8221;. This talk was more about <a title="Microsoft Photosynth" href="http://www.photosynth.net/" target="_blank">Photosynth</a> and the technology and algorithms that go behind it. The talk was simply awesome; especially the place when they mentioned about the SIFT and RANSAC algorithms. SIFT determines similar points in 2 photos taken from different angles while RANSAC is able to stitch those points together and form a 3D model of the image. Considering the fact there are 1000s of photos online for a popular place (E.g. Taj Mahal), with photos taken from different angles, the SIFT and RANSAC algorithms brings about the 3D model of the place. Then these points are optimized and the resulting images are stitched together. When pictures are more detailed and where users have tagged those details, these pictures are used when users zoom in and zoom out of the 3D model. It also removes all the &#8220;noise&#8221; from the photographs and gives an almost seamless 3D experience.</p>
<p>The next talk I attended was by Dr. Shafi Goldwasser about program obfuscation and one-time programs. I could related to this talk because of my <a title="Dissecting iMobile - Security Analysis of ICICI Mobile Banking App" href="http://www.aswinanand.com/blog/2008/09/imobile-security-analysis/" target="_self">very recent experiment</a> <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> and paid full attention to this talk. I was smiling when one of her slides contained the <a title="Minification vs Obfuscation" href="http://yuiblog.com/blog/2006/03/06/minification-v-obfuscation/" target="_blank">last paragraph of this blog post from YUI blog</a>. Many points in her slide were eye-opening such as ROKs and the slides that said where obfuscation fails.</p>
<p>It was lunch now. Somehow, most of these conferences mangle up lunch so badly that we want to give out a blood curdling yell. As soon as the morning session talks were over, myself and a few guys walked over to the Professors and were asking them a few doubts. By the time we went for lunch, most of the good dishes were over. So were the desserts <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_sad.gif' alt=':(' class='wp-smiley' /> </p>
<p>The talk immediately after lunch was some marketing blah blah about MSR that was putting me to sound sleep. I woke up and went to the poster presentations to check out what the Ph.D students had done. Some of the posters were really cool! I liked the ones on &#8220;Understanding the dynamics behind evolution of stable peer-to-peer networks&#8221; by Bivas Mitra from IIT-KGP, &#8220;Secure Distributed Computation and Communication&#8221; by Arpita and Ashish from IITM and PULRP by Deepthi and Kannan from IITB. It was about an hour by the time I finished looking through the posters. With my sleep vanished, I headed to main hall again to check out the next talk.</p>
<p>This talk was about &#8220;Computational Camers&#8221; by Dr. Shree K Nayar. It was just awesome! When I was college, I did a paper on Digital Image Processing and almost cried because of the complex equations <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> All of those were coming back in my head when this talk was going on. May be if I had known earlier, I would have applied for MSR as soon as I had passed out.</p>
<p>With this talk getting over, one of my friends who was a finalist of my batch&#8217;s MSAPP had come to the venue. Just as myself, Dhaval and Subhamoy were getting intro&#8217;d to him, we delved deep into quantum and relative physics, with a bit of astronomy thrown in. That twisted my brain in some crazy ways. Our discussion happened for more than 2 hours and I learnt a lot more from this discussion than from the ones that were happening inside at this time.</p>
<p>Oh! while I was talking to Subhamoy, he casually mentioned this story. His mobile had fallen in water &amp; when he switched it on, it got short circuited. So, he removed the panels, took the mobile circuit to this lab, found the short circuits and resoldered everything again in their proper places. He is still using that same phone. THAT WAS AWESOME!</p>
<p>All-in-all, it was a day spent very well <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> I enjoyed every moment to the core.</p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/409367324" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/10/microsoft-techvista/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/10/microsoft-techvista/</feedburner:origLink></item>
		<item>
		<title>Dissecting iMobile - Security Analysis of ICICI Mobile Banking App</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/404722273/</link>
		<comments>http://www.aswinanand.com/blog/2008/09/imobile-security-analysis/#comments</comments>
		<pubDate>Sat, 27 Sep 2008 15:06:59 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[Technology]]></category>

		<category><![CDATA[mobile]]></category>

		<category><![CDATA[mobility]]></category>

		<category><![CDATA[techblog]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=209</guid>
		<description><![CDATA[ICICI Bank&#8217;s iMobile website has some of the worst server side validations ever, which is what prompted me to download the mobile app&#8217;s JAR file, study it in detail and write this post. According to the website, until the Reserve Bank of India comes out with mobile banking guidelines and approves it, mobile banking is [...]]]></description>
			<content:encoded><![CDATA[<p>ICICI Bank&#8217;s iMobile website has some of the worst <a title="Server Side Validation" href="http://www.aswinanand.com/blog/2008/01/server-side-validation-importance/">server side validations</a> ever, which is what prompted me to download the mobile app&#8217;s JAR file, study it in detail and write this post. According to the website, until the Reserve Bank of India comes out with <a title="Mobile Banking Guidelines" href="http://www.rbi.org.in/scripts/BS_PressReleaseDisplay.aspx?prid=19124" target="_blank">mobile banking guidelines</a> and approves it, mobile banking is supposed to be halted. Technically, it means that, all existing users shouldn&#8217;t be able to use the service what-so-ever and new user signups should be prevented &amp; a notification stating that they should retry later should be shown.</p>
<p>Therefore, in this scenario, I shouldn&#8217;t have been able to download the app to my mobile device. The website of ICICI fails in <strong>not enforcing</strong> this by providing the following ways:</p>
<ol>
<li>Existing users who have already installed the app are given an option to &#8216;Upgrade&#8217; from within the mobile app itself. This opens up a webpage in the phone&#8217;s native browser, whose URL is <a title="ICICI Bank Mobile App" href="http://mobile.icicibank.com/upgrade?version=null" target="_blank">http://mobile.icicibank.com/upgrade?version=null</a>.</li>
<li>The <a title="iMobile website" href="https://infinity.icicibank.co.in/web/appDownload.html" target="_blank">actual iMobile website</a> has some stupid javascript validation, which is very easy to bypass using modern browsers. Heck, just by browsing the HTML source code of the page, you will be able to easily find the URL for the application JAR files. Put 2 and 2 together and you will be able to download the app.</li>
</ol>
<p><strong>Which brings me to explain Step 2 in detail:</strong></p>
<div>On any browser, go to View-&gt;Source. This will display the source code of the rendered HTML page. Notice the first &lt;script&gt; tag. It contains many functions &amp; the most important functions to us are &#8220;submitForm&#8221; and &#8220;displayOption&#8221;. The line of interest in submitForm method is <code style="font-size: 8pt;">document.jump1.action="https://infinity.icicibank.co.in/web/apps/"+fileName;</code>. That line pretty much gives away everything. All you have to do is, navigate to the above mentioned URL and append a filename to it for download.</div>
<p><strong>What filename do you have to give and How?</strong></p>
<div>That&#8217;s where our displayOption function is very useful. That function contains a set of simple If-Else conditional statements, which have the respective filenames. For e.g. if you want to download &#8220;M20P1520ALL1.jar&#8221;, then just append it to the URL &amp; access it using the address bar. Therefore, the URL becomes https://infinity.icicibank.co.in/web/apps/M20P1520ALL1.jar <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> Being a JAR file, most browsers will display a &#8220;Save As&#8221; dialog box. Now, just download the file and transfer it to your mobile. The application is fairly straight forward.</div>
<p><strong>Where ICICI Bank failed?</strong></p>
<div>
<ol>
<li>They should have disabled the link mentioned in #1 above and replaced it with some text that says, &#8220;RBI mobile banking guidelines blah blah&#8230;&#8221;. But some clever users will bookmark the link to the JAR file and try to access the JAR file by bypassing the link itself. When they do that, the web server should return a &#8220;404 - Resource Not Found&#8221; error. Got it? Implementing this is pretty simple.</li>
<li>There shouldn&#8217;t have been such a lot of useless javascript on the page. Firstly, they should have removed the device selection drop down box. Secondly, they should have replaced this page with an alternative. Thirdly, this mobile banking link should have been removed in the home page itself. Fourthly, they should have validated on the server for JAR file downloads and should have displayed the &#8220;404 - Resource Not Found&#8221; error page.</li>
<li>Ok. Leave aside #1 and #2. At least the mobile app should have thrown soft errors when users try to access mobile banking from the JavaME app. Any bank would store all activity data for a certain period of time. So when you access the bank&#8217;s service from a mobile device, the server software surely knows about it, which means, the server software should have returned errors to the user instead of allowing the user to do transactions.</li>
<li>There&#8217;s one more bug in the app itself. When you launch the app, it will prompt you to sync the data on the device to its servers for faster access the next time. When you click &#8220;OK&#8221; to synchronize, it will wait for a few minutes and show a message as, &#8220;There is no data to synchronize&#8221;. When you proceed further and try to access your info, it will again prompt you to sync the data. That&#8217;s frustrating. Either you should sync the data properly or you should access the server every time over a secure channel. As simple as that. That&#8217;s not followed too.</li>
</ol>
<div>For me, all these things imply only thing. ICICI wants the existing users to continue using the app, thereby disobeying RBI&#8217;s orders or they are having some really bad programmers who don&#8217;t know the stuff they are doing. At a time when people fear about Google tracking their internet usage, this is MY/YOUR FINANCIAL INFORMATION, which is at risk Right?</div>
<p>That was a long post already <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> We still have some more to go. Lets take a break.</p>
<p><img src="http://farm2.static.flickr.com/1349/830113325_8c929bfb9f_m.jpg" alt="Tea Break" width="240" height="240" /> <a title="Image Credits" href="http://www.flickr.com/photos/xerones/830113325/" target="_blank">Image Credits</a></p>
<p>Back? Ok <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> Now, lets dissect the actual JAR file and look into the technical details of its implementation.</p>
<p><strong>The Manifest File:</strong></p>
<div>Rename the .JAR extension to .ZIP extension and extract it to your favourite folder. Open the &#8220;META-INF&#8221; folder and open the &#8220;MANIFEST.MF&#8221; file in a text editor. As you will note, it contains lots of very valuable information, especially the socket URLs of various mobile service providers. User agent is also very interesting. When sending HTTP requests through the application, it uses that property for setting the &#8220;user-agent&#8221; HTTP header. They also have debug strings enabled, which means by snoping around using a good file manager for your mobile, you will be able to get technical errors! thereby, letting us know how the app works itself, what requests it sends, its behaviour etc.</div>
<p>Another important item is, &#8220;MIDlet-Name&#8221; property in the manifest. This property determines what name the user sees after he installs the app on his mobile. Using the same name, when future upgrades are made available, the app is just replaced in place of the old one, which means, if you modify the &#8220;MIDlet-Name&#8221; property and install the app again, you will have 2 copies of the same app. THIS SHOULD NEVER BE ALLOWED FOR A HIGHLY CRITICAL FINANCIAL APPLICATION. Isn&#8217;t it? As an example, try changing the MIDlet-Name of the Yahoo! Go JAR file and try to install the app again on your mobile. My E51 shows an &#8220;Invalid JAR&#8221; error message because of MD5 sum checks etc.</p>
<p><strong>Some more Holes:</strong></p>
<div>Now, move back to the folder where the JAR file has been extracted. It contains a bunch of .class files. Pass it through a decompiler. You will get &#8220;perfect&#8221; java source code files. The code looks obfuscated. But its not obfuscated enough. Anybody will be able to make good sense from the source code. All the URLs, all the used strings and everything else will be clearly visible. By using the app on your mobile side-by-side, you will be easily able to go through the source code. All in all, I wouldn&#8217;t use this app anymore until the security measures are tighter.</div>
<p><strong>What should the bank do here?</strong></p>
<div>
<ol>
<li>Shouldn&#8217;t allow the installation of 2 apps of the same JAR with different names. Take this example of the Yahoo! Go JAR file.</li>
<li>I guess these mobile providers&#8217; socket URLs are used for a one time basis to send verification SMS. If that be the case, they shouldn&#8217;t be present in the manifest file for a variety of reasons that I won&#8217;t discuss here.</li>
<li>There&#8217;s an interesting property named &#8220;WSCDomainName&#8221; in the manifest file. I guess it expands to &#8220;Web Service Client Domain Name&#8221;, though I&#8217;m not sure about it. Suggestion: Encrypt the name value pairs.</li>
<li><strong>Most importantly, sign the application using the Java Signed program</strong>. C&#8217;mon, users are doing financial transactions and a signed app will increase their confidence of using this application.</li>
</ol>
<p><strong>Suggestion for Users:</strong></p>
<div>Users should install these kinds of apps on their mobile&#8217;s inbuilt memory, instead of the memory card. That is, when you connect your phone to the PC in thumb drive mode, all the RMS file stores for the mobile app are clearly visible. There are many decoders available on the internet that can read content from the RMS file stores. When you store this app on your mobile&#8217;s inbuilt memory, you can&#8217;t read those stores directly and there are a number of checks in place, that prevent reading it.</div>
<p><strong>Thats about it !</strong></p>
<p>Of course, this blog post can&#8217;t be termed as a full fledged security analysis. But most of what has been ignored by the bank are mere basics. They <strong><em>must</em></strong> have more secure systems in place.</p>
</div>
<p>If you liked this article, kindly do me a favour by <a title="Digg this!" href="http://digg.com/security/Security_Analysis_of_ICICI_Mobile_Banking_Application" target="_blank">digging it</a>. Thanks for your time.</p>
</div>
<img src="http://feeds.feedburner.com/~r/Waves/~4/404722273" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/09/imobile-security-analysis/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/09/imobile-security-analysis/</feedburner:origLink></item>
		<item>
		<title>Conversation</title>
		<link>http://feeds.feedburner.com/~r/Waves/~3/402849315/</link>
		<comments>http://www.aswinanand.com/blog/2008/09/conversation/#comments</comments>
		<pubDate>Thu, 25 Sep 2008 14:35:38 +0000</pubDate>
		<dc:creator>Aswin Anand</dc:creator>
		
		<category><![CDATA[Casually Speaking ...]]></category>

		<category><![CDATA[humour]]></category>

		<guid isPermaLink="false">http://www.aswinanand.com/blog/?p=208</guid>
		<description><![CDATA[Few days ago, I was chatting with a guy in my office. It goes without saying that the guy is far more experienced than me. Myself and my team mate were showing a prototype UI &#38; this conversation happened. Here&#8217;s how it went:
Me: Please check this functionality &#38; let us know if you have questions.
Guy: Keeps his [...]]]></description>
			<content:encoded><![CDATA[<p>Few days ago, I was chatting with a guy in my office. It goes without saying that the guy is far more experienced than me. Myself and my team mate were showing a prototype UI &amp; this conversation happened. Here&#8217;s how it went:</p>
<p><strong>Me:</strong> Please check this <em>functionality</em> &amp; let us know if you have questions.</p>
<p><strong>Guy:</strong> <em>Keeps his left hand on his chin, turns his head slightly, squints at the monitor, pointing his right hand at the webpage &amp; without checking an ounce of functionality</em>, says &#8230; The UI doesn&#8217;t look good. Make changes to it.</p>
<p><strong>Me:</strong> Okay&#8230; We are working on it.</p>
<p><strong>Guy:</strong> <em>Suddenly stares at me with a blank expression</em> &amp; says &#8230; Hey don&#8217;t use &#8220;div&#8221; tag.</p>
<p><strong>Me:</strong> (I&#8217;m obviously confused) &#8230; Why not?</p>
<p><strong>Guy:</strong> Stares again and says &#8230; Major browsers don&#8217;t support it well !!</p>
<p>That hit me - like a brick - on the head and I was dazed for a second. Team mate and myself burst out laughing and walked out of the room <img src='http://www.aswinanand.com/wp-includes/images/smilies/icon_biggrin.gif' alt=':D' class='wp-smiley' /> </p>
<p>Oh! did I mention that it was supposed to be a &#8220;technical&#8221; discussion?</p>
<img src="http://feeds.feedburner.com/~r/Waves/~4/402849315" height="1" width="1"/>]]></content:encoded>
			<wfw:commentRss>http://www.aswinanand.com/blog/2008/09/conversation/feed/</wfw:commentRss>
		<feedburner:origLink>http://www.aswinanand.com/blog/2008/09/conversation/</feedburner:origLink></item>
	</channel>
</rss>
