<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>unsharpTech &#187; Web Dev</title>
	<atom:link href="http://unsharptech.com/category/web-dev/feed/" rel="self" type="application/rss+xml" />
	<link>http://unsharptech.com</link>
	<description>when the bleeding edge just doesn&#039;t cut it</description>
	<lastBuildDate>Mon, 01 Aug 2011 03:54:28 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Mockingbird doesn&#8217;t want casual users</title>
		<link>http://unsharptech.com/2010/07/29/mockingbird-doesnt-want-casual-users/</link>
		<comments>http://unsharptech.com/2010/07/29/mockingbird-doesnt-want-casual-users/#comments</comments>
		<pubDate>Thu, 29 Jul 2010 19:01:26 +0000</pubDate>
		<dc:creator>Will</dc:creator>
				<category><![CDATA[Amazing]]></category>
		<category><![CDATA[Web Dev]]></category>

		<guid isPermaLink="false">http://unsharptech.com/?p=359</guid>
		<description><![CDATA[This morning a friend forwarded me this email from Mockingbird. Dear Mockingbird customers, Mockingbird&#8217;s taking flight We&#8217;re excited to announce that Mockingbird will launch on August 15, 2010 &#8212; with multi-user collaboration! Details on the paid plans: Active Projects Users Price/month Personal 2 Unlimited $9 Team 10 Unlimited $20 Pro 25 Unlimited $40 Unlimited Unlimited Unlimited [...]]]></description>
			<content:encoded><![CDATA[<p>This morning a friend forwarded me this email from <a href="http://gomockingbird.com/" target="_blank">Mockingbird</a>.</p>
<blockquote><p>Dear Mockingbird customers,</p>
<h2>Mockingbird&#8217;s taking flight</h2>
<p>We&#8217;re excited to announce that Mockingbird will launch on <strong>August 15, 2010</strong> &#8212; with multi-user collaboration!</p>
<p>Details on the paid plans:</p>
<table border="0" cellspacing="0" cellpadding="0" width="450">
<tbody>
<tr>
<td></td>
<td>Active Projects</td>
<td>Users</td>
<td>Price/month</td>
</tr>
<tr>
<td>Personal</td>
<td>2</td>
<td>Unlimited</td>
<td>$9</td>
</tr>
<tr>
<td>Team</td>
<td>10</td>
<td>Unlimited</td>
<td>$20</td>
</tr>
<tr>
<td>Pro</td>
<td>25</td>
<td>Unlimited</td>
<td>$40</td>
</tr>
<tr>
<td>Unlimited</td>
<td>Unlimited</td>
<td>Unlimited</td>
<td>$85</td>
</tr>
</tbody>
</table>
<p>There will also be a free account available that allows 1 project with 3 pages.</p>
<p>You can archive finished projects, which won&#8217;t count toward your active project limit. You won&#8217;t be charged for months during which you have no projects active.</p>
<h2>What you need to do</h2>
<p><strong>Projects made with beta accounts will be automatically archived and will not be accessible after August 15, 2010.</strong> Customers who choose to upgrade to a paid plan may re-activate beta projects, but free accounts will not be able to access old beta projects, so please make sure to log into your <a href="http://u10382.sendgrid.org/s/bExan21yRYqnI-84nFc4Lg/h0" target="_blank">Mockingbird account</a> to export PNG or PDF versions of any projects you need.</p>
<h2>Beta discount</h2>
<p>Your feedback has made Mockingbird better, and we&#8217;d like to thank you by offering a coupon for 25% off the first three months of any paid plan. Keep your eye out on your inbox for the coupon code when Mockingbird launches.</p>
<h2>Questions or comments?</h2>
<p>If you&#8217;ve got questions about the transition out of beta or want to get in touch with us for any other reason, we&#8217;d love to hear from you. Email us at <a href="mailto:contact@gomockingbird.com" target="_blank">contact@gomockingbird.com</a>.</p>
<p>Thanks for all your support, and we look forward to continuing to help you make great wireframes.<br />
- The Mockingbird Team</p></blockquote>
<p>In a nut shell they are saying thanks for testing, all projects are now archived so export them. If you want your old projects back, pay us. Wow.. Awesome. Thanks!</p>
<p>I jumped on Twitter, first off I never use Twitter but I figured it might be worth a try.</p>
<p><a href="http://twitter.com/willlangford/status/19844248651"><img src="http://willlangford.s3.amazonaws.com/twitter0.png" alt="Thanks @gomockingbird for throwing casual users under the bus, hope you enjoyed all the testing that was done with no reward except a coupon" /></a></p>
<p><a href="http://twitter.com/gomockingbird/status/19844879691"><img src="http://willlangford.s3.amazonaws.com/twitter2.png" alt="@willlangford We really do want to be usable for casual users, and it seems like many don't use more than 1-2 pages, hence our free plan." /></a><br />
<a href="http://twitter.com/willlangford/status/19845036130"><img src="http://willlangford.s3.amazonaws.com/twitter3.png" alt="@gomockingbird archiving current projects and only allowing paid users to reactivate old projects is what got me." /></a><br />
<a href="http://twitter.com/gomockingbird/status/19845465083"><img src="http://willlangford.s3.amazonaws.com/twitter4.png" alt="@willlangford If you need to keep your projects longer, just let us know, and we'll happily do so. Also, share links will keep working" /></a></p>
<p>Wow. Didn&#8217;t expect that.</p>
<p>I guess I just have to tweet a complaint to get my projects extended, so everyone else that is in the same boat as me has to ask? What&#8217;s the harm in letting your free beta testers to keep their current projects? Oh&#8230; right.. Mockingbird doesn&#8217;t want casual users that could see the benefits of a quick HTML5 mockup tool so they won&#8217;t eventually become paid users and tell friends and colleagues alike how great of an application it is.</p>
<p>My project is exported.. who knows what they will do in the future but don&#8217;t consider your projects safe with this startup.</p>
]]></content:encoded>
			<wfw:commentRss>http://unsharptech.com/2010/07/29/mockingbird-doesnt-want-casual-users/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>A good reason to dump OpenDNS</title>
		<link>http://unsharptech.com/2010/07/08/a-good-reason-to-dump-opendns/</link>
		<comments>http://unsharptech.com/2010/07/08/a-good-reason-to-dump-opendns/#comments</comments>
		<pubDate>Fri, 09 Jul 2010 01:23:59 +0000</pubDate>
		<dc:creator>sam</dc:creator>
				<category><![CDATA[Amazing]]></category>
		<category><![CDATA[Browsers]]></category>
		<category><![CDATA[Notes]]></category>
		<category><![CDATA[Web Dev]]></category>

		<guid isPermaLink="false">http://unsharptech.com/?p=343</guid>
		<description><![CDATA[Like me, you&#8217;ve probably read all sorts of great things about the public DNS service OpenDNS, but one thing you should find out for yourself is how it will impact the speed of your web browsing. After using OpenDNS name servers for months at work I started to notice that page load times at home (on a [...]]]></description>
			<content:encoded><![CDATA[<div id="attachment_344" class="wp-caption alignright" style="width: 310px"><a href="http://unsharptech.com/wp-content/uploads/namebench.png" rel="lightbox[343]"><img class="size-medium wp-image-344" title="namebench" src="http://unsharptech.com/wp-content/uploads/namebench-300x165.png" alt="" width="300" height="165" /></a><p class="wp-caption-text">namebench DNS Benchmark Results</p></div>
<p>Like me, you&#8217;ve probably read all sorts of <a href="http://lifehacker.com/212589/speed-up-web-pages-with-open-dns">great things</a> about the public DNS service <a href="http://www.opendns.com/">OpenDNS</a>, but one thing you should find out for yourself is how it will impact the speed of your web browsing.</p>
<p>After using OpenDNS name servers for months at work I started to notice that page load times at home (on a much slower connection) were considerably more &#8220;snappy&#8221; with my ISP provided DNS servers. A quick Google brought up the comprehensive Open Source <a href="http://code.google.com/p/namebench/">namebench</a> DNS benchmark tool.</p>
<p>A run of namebench resulted in a pretty html file with numbers and graphs that confirmed my suspicions. <strong>My ISP&#8217;s (Comcast) DNS servers were 174.4% faster than OpenDNS on average,</strong> with Google&#8217;s Public DNS coming in a close second place.</p>
<p>It should be noted that namebench is rather smart and it rifles through your browser history in order to compile a personalized set of domains for its testing, so my results are potentially unique &#8211; and this is just one test (actually I did three, I also used Alexa top domains for a source to avoid DNS caching &#8211; and the results were all similar), at one location. Although once I switched to my ISP&#8217;s DNS servers I experienced a noticeable difference in page load times.  Not to mention that my results may change in the future due to server load, poor caching, etc. But with OpenDNS, there was always a slight wait before a page would even start to load, and now that wait is gone. And that&#8217;s on a 36Mbps downstream connection.</p>
<p>My points are simple:</p>
<ol>
<li>Switching to OpenDNS (or any other DNS service) may be a <strong>bad thing</strong>.</li>
<li>Your DNS server <strong>does matter</strong>.</li>
<li><a href="http://code.google.com/p/namebench/">namebench</a> is awesome.</li>
</ol>
<p>It may be a matter of milliseconds but it all adds up, many large websites require dozens of DNS queries for ads, images, scripts and more. Do your own testing before believing the hype.</p>
<p>Regardless, OpenDNS is still a great service: if I ever have the need for a basic content filtering system I will turn to OpenDNS.</p>
<p>Download <a href="http://code.google.com/p/namebench/">namebench</a> (for Windows, Mac, or Linux/Unix) and see for yourself how your current DNS stacks up.</p>
]]></content:encoded>
			<wfw:commentRss>http://unsharptech.com/2010/07/08/a-good-reason-to-dump-opendns/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>WordCamp PDX &#8217;09 Day 1 &#8211; What I came away with</title>
		<link>http://unsharptech.com/2009/09/20/wordcamp-pdx-09-day-1-what-i-came-away-with/</link>
		<comments>http://unsharptech.com/2009/09/20/wordcamp-pdx-09-day-1-what-i-came-away-with/#comments</comments>
		<pubDate>Sun, 20 Sep 2009 08:28:29 +0000</pubDate>
		<dc:creator>sam</dc:creator>
				<category><![CDATA[Reviews]]></category>
		<category><![CDATA[Web Dev]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://unsharptech.com/?p=275</guid>
		<description><![CDATA[I just attended WordCamp Portland &#8217;09 Day 1 (Sat, Sept. 19 2009) an this is what I came away with&#8230; Session: Jason Grigsby – Speed Up WordPress. Make Readers Happy and Your Site Green Setting expires headers really does matter in the battle for page loading speed/efficiency. SpriteMe makes CSS sprite implementation so easy there&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<p>I just attended <a href="http://www.wordcampportland.org/">WordCamp Portland</a> &#8217;09 Day 1 (Sat, Sept. 19 2009) an this is what <em>I</em> came away with&#8230;</p>
<ul>
<li>Session:<span style="text-decoration: underline;"> Jason Grigsby – Speed Up WordPress. Make Readers Happy and Your Site Green</span>
<ol>
<li>Setting expires headers really does matter in the battle for page loading speed/efficiency.</li>
<li><a href="http://spriteme.org/">SpriteMe</a> makes CSS sprite implementation so easy there&#8217;s little excuse not to try it.</li>
<li>There&#8217;s a promising SQL query stats plugin for WP available:  <a href="http://wordpress.org/extend/plugins/sqlmon/">SQL Monitor</a></li>
</ol>
</li>
<li>Session: Woopra intro w/ <a href="http://lorelle.wordpress.com/">Lorelle VanFossen</a> (who is very friendly!)
<ol>
<li>Woopra provides real time analytics via a cross-platform desktop app.</li>
<li>Woopra is free while in beta but will continue supporting most existing accounts when they go full release and start charging for the service.</li>
<li>Woopra utilizes javascript embedded in the site in order to track (line Google Analytics).</li>
<li>Woopra&#8217;s real time capabilities provide insight into the results of social networking + marketing campaigns.</li>
<li>Woopra&#8217;s interface is snazzy!</li>
</ol>
</li>
<li>Session: Matt Mullenweg – WordPress Q&amp;A
<ol>
<li>Matt is a funny guy in person too!</li>
</ol>
</li>
<li>Session: Unconference discussion of the WordPress Codex (I suggested this topic)
<ol>
<li>The Codex&#8217;s short comings are well known and being addressed!</li>
<li>A new &#8220;handbook&#8221; documentation system is in the works and volunteer help is needed.</li>
<li>The plan is to approach many help topics from multiple points of view such as Theme Designer, Core Developer, Plugin Developer, etc. as well as having &#8220;lessons&#8221; for particular tasks.</li>
<li>The new docs will be standardized, version controlled, community driven, and overseen by the WP team.</li>
<li>We can contribute to the current Codex (it&#8217;s MediaWiki driven) and our good stuff won&#8217;t be lost in the change over.</li>
<li>A jobs board for WordPress.org is in the works &#8211; community cred will be associated with contractors offering their services.</li>
<li>There is a passionate <strong>accessible</strong> open source community behind WordPress! It may be hard to find but it&#8217;s definitely there, and they need volunteer help from anyone involved in WordPress &#8211; even if you&#8217;re brand spanking new, they need your perspective! <strong>Some resources for contributing to WordPress:</strong>
<ul>
<li>List of mailing lists to join: <a href="http://lists.automattic.com/mailman/listinfo">http://lists.automattic.com/mailman/listinfo</a></li>
<li>WordPress.org Forums (of course): <a href="http://wordpress.org/support/">http://wordpress.org/support/</a></li>
<li>Codex article series on contributing: <a href="http://codex.wordpress.org/Contributing_to_WordPress">http://codex.wordpress.org/Contributing_to_WordPress</a></li>
<li><strong>#wordpress-dev</strong> IRC channel at <strong>irc.freenode.net</strong> (not sure on regular meeting dates/times)</li>
</ul>
</li>
</ol>
</li>
</ul>
<p>On another note, there was an interesting mix of MacBooks and NetBooks at the con and from what I was seeing the WiFi was a little flaky (had some issues getting an IP).</p>
<p><strong>If you would like to talk to me at the conference Sunday I will be wearing the below pictured yellow Kool-Aid Man Web 2.OH YEAAH!! t-shirt</strong> from <a href="http://store.muledesign.com/">Mule Design</a>. I may appear to be derisive or zombie-like but I assure you it&#8217;s because I am trying to kick the energy beverage habit and suffering the side effects.</p>
<p>If you can&#8217;t read my badge on Sunday, <strong>my name is Sam</strong>.</p>
<p>Why might you want to talk to me?</p>
<ol>
<li>You enjoy my dry sarcasm.</li>
<li>You have something to say about the WP plugin I wrote: <a href="http://builtbackwards.com/tac/">TAC (Theme Authenticity Checker)</a></li>
<li>You are curious why I only mentioned the above topics and not others.</li>
<li>You take pity on me and want to inflate my ego.</li>
<li>You want to meet a real live person you found on the web (even though I may lack celebrity).</li>
<li>You enjoy the non-WordPress related content on this site and want to give me a high-five.</li>
<li>You think I am a blundering idiot and don&#8217;t deserve to live (kindly warn me before you open fire).</li>
<li>You really like the below t-shirt and want your picture taken with me. (I&#8217;m pretty good looking as well).</li>
<li>You are having technical difficulties with you computer; Mac, Windows, or Linux and would like my help (I spend my daylight hours as a support technician).</li>
</ol>
<p style="text-align: center;"><a href="http://store.muledesign.com/shirts/koolaid.php"><img class="size-full wp-image-278 aligncenter" title="koolaid_2oh_yeah" src="http://unsharptech.com/wp-content/uploads/koolaid_lg.gif" alt="koolaid_2oh_yeah" width="338" height="320" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://unsharptech.com/2009/09/20/wordcamp-pdx-09-day-1-what-i-came-away-with/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Thanks to TweetPhoto.com Everyone Knows Im a Pervert</title>
		<link>http://unsharptech.com/2009/05/06/thanks-to-tweetphotocom-everyone-knows-im-a-pervert/</link>
		<comments>http://unsharptech.com/2009/05/06/thanks-to-tweetphotocom-everyone-knows-im-a-pervert/#comments</comments>
		<pubDate>Thu, 07 May 2009 06:47:03 +0000</pubDate>
		<dc:creator>sam</dc:creator>
				<category><![CDATA[Amazing]]></category>
		<category><![CDATA[Reviews]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web Dev]]></category>

		<guid isPermaLink="false">http://unsharptech.com/?p=197</guid>
		<description><![CDATA[So tweetphoto.com plans to dominate the twitter photo upload market  by copying twitpic.com and adding very little to set it apart&#8230; except for the built-in tracking that reveals on the front page what I really think about day and night&#8230; BOOBS! Yeah, that&#8217;s my Twitter avatar (and my Twitter username is embeded in the img [...]]]></description>
			<content:encoded><![CDATA[<p>So <a href="http://tweetphoto.com">tweetphoto.com</a> plans to dominate the twitter photo upload market  by copying <a href="http://twitpic.com">twitpic.com </a>and adding very little to set it apart&#8230; except for the built-in tracking that reveals on the front page what I really think about day and night&#8230;<span id="more-197"></span></p>
<h1>BOOBS!</h1>
<p><a href="http://unsharptech.com/wp-content/uploads/tweetphoto-privacy-orig.jpg" rel="lightbox[197]"><img class="size-full wp-image-199 alignnone" title="TweetPhoto Privacy Breech" src="http://unsharptech.com/wp-content/uploads/tweetphoto-privacy-med.jpg" alt="TweetPhoto Privacy Breech" width="680" height="383" /></a></p>
<p>Yeah, that&#8217;s my Twitter avatar (and my Twitter username is embeded in the img tags&#8217; title and alt attributes &#8211; making it viewable on hover) and yours could show up next.</p>
<p>This is a total breech of privacy, now everyone gets the chance to jump to conclusions and think I&#8217;m a freakin&#8217; pervert &#8211; just because I viewed an image (which could have been from a link, with me having no prior knowledge of the the contents).</p>
<p>So TweetPhoto&#8217;s recently viewed feature is cute and all but MAYBE EVERYONE DOESN&#8217;T WANT TO BE TRACKED?</p>
<p>The fact that there isn&#8217;t even a setting to turn off user tracking is even worse, did they not realize that people like anonymity?</p>
<p>Just thought I&#8217;d share this great <em>&#8220;feature&#8221; </em>before someones wife accuses them of cheating or something even cooler.</p>
<p>Have a super day!</p>
]]></content:encoded>
			<wfw:commentRss>http://unsharptech.com/2009/05/06/thanks-to-tweetphotocom-everyone-knows-im-a-pervert/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Fix Slow Scrolling in jEdit</title>
		<link>http://unsharptech.com/2009/05/05/fix-slow-scrolling-in-jedit/</link>
		<comments>http://unsharptech.com/2009/05/05/fix-slow-scrolling-in-jedit/#comments</comments>
		<pubDate>Wed, 06 May 2009 05:25:07 +0000</pubDate>
		<dc:creator>sam</dc:creator>
				<category><![CDATA[Customization]]></category>
		<category><![CDATA[Fixes]]></category>
		<category><![CDATA[Notes]]></category>
		<category><![CDATA[Web Dev]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://unsharptech.com/?p=190</guid>
		<description><![CDATA[So far jEdit is proving to be a great editor (FTP/SFTP support is great) but after tweaking it to my liking (BufferTabs plugin, fonts, etc.) I noticed that scrolling the main text area had become very slow. I didn&#8217;t want to just blame Java so I looked it up and found the cause. Platform: Windows [...]]]></description>
			<content:encoded><![CDATA[<p><img class="alignright size-full wp-image-210" title="jedit-icon" src="http://unsharptech.com/wp-content/uploads/jedit-icon.png" alt="jedit-icon" width="128" height="128" />So far jEdit is proving to be a great editor (FTP/SFTP support is great) but after tweaking it to my liking (BufferTabs plugin, fonts, etc.) I noticed that scrolling the main text area had become very slow. I didn&#8217;t want to just blame Java so I looked it up and found the cause.<span id="more-190"></span></p>
<ul>
<li>Platform: Windows XP Pro SP3 + Java 1.6.0_13</li>
<li>jEdit Version: 4.3pre16</li>
</ul>
<p><strong><em>Utilities -&gt; Global Options -&gt; jEdit -&gt; Text Area:</em></strong></p>
<blockquote><p><em><strong>Anti Aliased  smooth text:</strong></em> subpixel</p>
<p>UNCHECK: <strong><em>Fractal font metrics (for better smooth text display)</em></strong></p></blockquote>
<p>The combination of <strong><em>subpixel antialiasing</em></strong> (a must) and<strong> <em>Fractal font metrics</em></strong> (makes little difference) causes the unbearably slow scolling.</p>
<p>Thanks to the jEdit Community Forums.</p>
<p>Source:</p>
<blockquote><p><a href="http://community.jedit.org/?q=node/view/4148">http://community.jedit.org/?q=node/view/4148</a></p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://unsharptech.com/2009/05/05/fix-slow-scrolling-in-jedit/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
		<item>
		<title>Warning: FileZilla FTP Passwords now Stored in Plaintext</title>
		<link>http://unsharptech.com/2008/05/20/filezilla-ftp-passwords-stored-in-plaintext/</link>
		<comments>http://unsharptech.com/2008/05/20/filezilla-ftp-passwords-stored-in-plaintext/#comments</comments>
		<pubDate>Wed, 21 May 2008 03:51:13 +0000</pubDate>
		<dc:creator>sam</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web Dev]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://unsharptech.com/2008/05/20/filezilla-ftp-passwords-stored-in-plaintext/</guid>
		<description><![CDATA[I feel that this should be brought to the attention of FileZilla users out there even though it may be a huge concern. (Lots of apps do this but potentially giving up FTP access info to a bunch of servers you are responsible for is something to be avoided). Jump to the Important Stuff I [...]]]></description>
			<content:encoded><![CDATA[<p><a title="FileZilla Plaintext Passwords" href="http://unsharptech.com/wp-content/filezilla_plaintext.jpg" rel="lightbox[33]"><img src="http://unsharptech.com/wp-content/filezilla_plaintext.thumbnail.jpg" alt="FileZilla Plaintext Passwords" align="right" /></a>I feel that this should be brought to the attention of FileZilla users out there even though it may be a huge concern. (Lots of apps do this but potentially giving up FTP access info to a bunch of servers you are responsible for is something to be avoided). <a href="http://unsharptech.com/2008/05/20/filezilla-ftp-passwords-stored-in-plaintext/#important">Jump to the Important Stuff</a></p>
<p><span id="more-33"></span></p>
<p>I love the FTP client <a href="http://filezilla-project.org/">FileZilla</a>, and I used to share my filezilla.xml file between machines because it stored all my recent servers and passwords (encrypted). Recently I tried to do the same and came to find out that the most recent versions of <strong>FileZilla version ~ 3.0.9.2+</strong> (and possibly older) store all saved FTP account connection info in <strong><a href="http://en.wikipedia.org/wiki/Plaintext">plaintext</a> .xml files</strong>. This applys to both Linux and Windows installations (Mac OS X has yet to be tested but I would bet the same applies).</p>
<p>In some cases this is convenient &#8211; often I connect over FileZilla then don&#8217;t  have access to the password but need to use it in a different app/machine, I could just look it up in these plaintext config files.</p>
<p><strong>But in other cases this is a serious problem.</strong> From a practical standpoint, let&#8217;s say we connect to our FTP server using FileZilla on a semi-public machine like at a buddy&#8217;s place where you may not be concerned about keyloggers but don&#8217;t necessarily want your stuff <strong>available in plaintext</strong> after you walk away.</p>
<p>And let&#8217;s not forget that someone could write an app that runs in the background, <a href="http://en.wikipedia.org/wiki/Pod_slurping">slurping</a> up that info and putting it in the hands of people you may not trust.</p>
<p>Personally, I am not gonna stop using FileZilla at my primary FTP client on my Linux and Windows boxes, it really is a great app &#8211; one of the best clients if not the best. But I feel that awareness pertaining to storage of sensitive data should be a major concern to any serious user.<br />
Text to be displayed<br />
<a title="important" name="important"></a><strong><em>The following files are what you need to know about:</em></strong></p>
<blockquote><p><strong> filezilla.xml</strong> &#8211; Stores most recent server info including password in plaintext.<br />
<strong> recentservers.xml</strong> &#8211; Stores all recent server info including password in plaintext.<br />
<strong> sitemanager.xml</strong> &#8211; Stores all saved sites server info including password in plaintext.</p></blockquote>
<p><strong><em>These files can usually be found in the following directories:</em></strong></p>
<blockquote><p><strong>Windows XP/2K:</strong> &#8220;C:\Documents and Settings\username\Application Data\FileZilla&#8221;<br />
<strong>Windows Vista:</strong> &#8220;C:\Users\username\AppData\Roaming\FileZilla\&#8221;<br />
<strong> Linux: </strong>&#8220;/home/username/.filezilla/&#8221;</p></blockquote>
<p>It seems that this has been brought to the developer&#8217;s attention but it also seems that this won&#8217;t be changing any time soon. There seems to be a bit of a dispute as to how this should be handled, but <strong>I say why not use weak cryptography/obfuscation like they used to</strong>, at least that way it would take someone some minor effort/know-how to get to these passwords.</p>
<p><strong>If you have further information regarding the subject, please comment.</strong></p>
<blockquote><p><strong> Related resources:</strong></p>
<p><strong><em>Security posting:</em></strong> <a href="http://seclists.org/fulldisclosure/2008/Apr/0511.html">http://seclists.org/fulldisclosure/2008/Apr/0511.html</a></p>
<p><em><strong>FileZilla Password Recovery Apps/Scripts: (may only apply to older encryption scheme)</strong></em></p>
<p><a href="http://www.reactive-software.com/filezilla-password-recovery.html">http://www.reactive-software.com/filezilla-password-recovery.html </a></p>
<p><a href="http://www.ianwootten.co.uk/2008/01/05/decrypting-filezilla-passwords-with-php/">http://www.ianwootten.co.uk/2008/01/05/decrypting-filezilla-passwords-with-php/ </a></p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://unsharptech.com/2008/05/20/filezilla-ftp-passwords-stored-in-plaintext/feed/</wfw:commentRss>
		<slash:comments>37</slash:comments>
		</item>
		<item>
		<title>Echo PHP Nested Array Contents + Keys</title>
		<link>http://unsharptech.com/2008/05/03/echo-php-nested-array-contents-keys/</link>
		<comments>http://unsharptech.com/2008/05/03/echo-php-nested-array-contents-keys/#comments</comments>
		<pubDate>Sat, 03 May 2008 20:31:11 +0000</pubDate>
		<dc:creator>sam</dc:creator>
				<category><![CDATA[Fixes]]></category>
		<category><![CDATA[How2]]></category>
		<category><![CDATA[Notes]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Web Dev]]></category>

		<guid isPermaLink="false">http://unsharptech.com/2008/05/03/echo-php-nested-array-contents-keys/</guid>
		<description><![CDATA[I&#8217;ve always had some trouble with the syntax for accessing Nested Arrays and their Keys in PHP so I wanted to make note of this. Structure is as follows: print_r $contents; ([Cutbacks.jpg] =&#62; Array ( [time] =&#62; 1207637110 [hash] =&#62; 05dee882129fe1574bcc8379ad3a40ac [size] =&#62; 43928 ) [matrix3.zip] =&#62; Array ( [time] =&#62; 1208040588 [hash] =&#62; 5f317404880304b82e9502fb399f2737 [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://unsharptech.com/wp-content/php.gif" alt="PHP Logo" align="right" />I&#8217;ve always had some trouble with the syntax for accessing Nested Arrays and their Keys in PHP so I wanted to make note of this.</p>
<p><span id="more-30"></span></p>
<p>Structure is as follows:</p>
<pre class="brush: php">print_r $contents;</pre>
<pre>([Cutbacks.jpg] =&gt; Array
(
[time] =&gt; 1207637110
[hash] =&gt; 05dee882129fe1574bcc8379ad3a40ac
[size] =&gt; 43928
)
[matrix3.zip] =&gt; Array
(
[time] =&gt; 1208040588
[hash] =&gt; 5f317404880304b82e9502fb399f2737
[size] =&gt; 46790
)
)</pre>
<p>Code:</p>
<pre class="brush: php">
foreach( $contents as $key =&gt; $list ) {
echo &#039;Filename: &#039; . $key . &quot;\n&quot;;
echo &#039;Time: &#039; . $list[&#039;time&#039;] . &quot;\n&quot;;
echo &#039;Hash: &#039; . $list[&#039;hash&#039;] . &quot;\n&quot;;
echo &#039;Size: &#039; . $list[&#039;size&#039;] . &quot;\n&quot;;
echo &#039;----Next File----&#039; . &quot;\n&quot;;
}</pre>
<p>Outputs:</p>
<pre>Filename: Cutbacks.jpg
Time: 1207637110Hash: 05dee882129fe1574bcc8379ad3a40ac
Size: 43928
----Next File----
Filename: matrix3.zip
Time: 1208040588
Hash: 5f317404880304b82e9502fb399f2737
Size: 46790
----Next File----</pre>
]]></content:encoded>
			<wfw:commentRss>http://unsharptech.com/2008/05/03/echo-php-nested-array-contents-keys/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MySQL: Convert all Values in Column to Upper Case</title>
		<link>http://unsharptech.com/2008/02/29/mysql-convert-all-values-in-column-to-upper-case/</link>
		<comments>http://unsharptech.com/2008/02/29/mysql-convert-all-values-in-column-to-upper-case/#comments</comments>
		<pubDate>Sat, 01 Mar 2008 03:18:24 +0000</pubDate>
		<dc:creator>sam</dc:creator>
				<category><![CDATA[How2]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[Notes]]></category>
		<category><![CDATA[osCommerce]]></category>
		<category><![CDATA[Web Dev]]></category>

		<guid isPermaLink="false">http://unsharptech.com/2008/02/29/mysql-convert-all-values-in-column-to-upper-case/</guid>
		<description><![CDATA[Recently using osCommerce I had a customer who wished to have all the products&#8217; names in uppercase but they had been entered in mixed case. After having some trouble finding a simple answer through Google, I pieced together this simple query that can also be adapted to other situations. The below is a MySQL query [...]]]></description>
			<content:encoded><![CDATA[<p>Recently using <strong>osCommerce </strong>I had a customer who wished to have all the products&#8217; names in uppercase but they had been entered in mixed case. After having some trouble finding a simple answer through Google, I pieced together this simple query that can also be adapted to other situations.</p>
<p><a href="http://unsharptech.com/2008/02/29/mysql-convert-all-values-in-column-to-upper-case/"><img src="http://unsharptech.com/wp-content/mysql_query.gif" alt="MySQL Query" /></a></p>
<p>The below is a <strong>MySQL query</strong> to update all of the products&#8217; names in an <strong>osCommerce </strong>catalog to <strong>uppercase </strong>- you can copy this into <strong>phpMyAdmin</strong>.</p>
<pre class="brush: sql">UPDATE products_description SET `products_name` = UPPER( `products_name` )</pre>
<p><strong>OR GENERICALLY:</strong></p>
<pre class="brush: sql">UPDATE table_name SET `column_name` = UPPER( `column_name` )</pre>
]]></content:encoded>
			<wfw:commentRss>http://unsharptech.com/2008/02/29/mysql-convert-all-values-in-column-to-upper-case/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
	</channel>
</rss>

