Monday, 6 May 2013

Editorial


It is May and it is red hot outsides. This summer mercury is breaking its long time barriers to leave us high and dry. Demands for cool things like ice creams are high. Enjoy the ice creams and read on Envision.

It is IPL season again. I see that many amongst are taking advantage of the stadium nearby. Enjoy the cricket, let it not matter who plays. Defending champions KKR are struggling for place in play-offs. CSK as always is comfortably seating on top of the charts. Pune and Delhi are out of the pay-off already. Can CSK do it once again? Will star studded Mumbai lay their hands on coveted trophy?

Journalists have been kept busy for all the last month. We had UPA 2 is dishing out scam after scam - Coal gate, Rail gate, etc. CBI has spilled the beans in Supreme Court. Mamta has said UPA 3 is not happening. Mulayam Singh and Sharad Pawar has been sounding their party workers to be prepared for elections in September-November. Are we staring at early polls? Exit polls predict hung house if elections are held now. Who will be able to provide alternative options? We will have to wait and watch.


May 05, 2013 was Election Day in Karnataka, it is to be seen how badly BJP losses there, exit polls have already predicted their loss. Will Yeddyurappa play a king maker? Will he be CM once again?

TV Reports were all taken by Late Sarabjit Singh during last few days of the month. We bickered Pakistan for being in-human and for not protecting Indians in their prison all these times. After Sanaullah, aren’t we same as Pakistan?

In this edition of Envision we bring to you varied interesting topics like always. We have Pradnya giving details about Rangoli. Nishant talking about Azure, fresh from attending boot up camp on Azure. Uma shares with us delicate and heartwarming note on Father and Daughter’s relation. We are back with Fort Torna in our Forts series. Chintan, the self-proclaimed dietician and health freak is back with another missive on work outs. Chetna has written about business process modelling notations. So head on to the articles and enjoy the reads.

Finally I would sign off with an appeal to all our readers, to put on your writing hats and contribute for the magazine.

Happy reading and writing!

From Management Team’s desks


We would like welcome Mr. Anil Choubey as Human Resource Manager in Decos. He has started understanding the existing processes and started working in the direction of formulating unwritten processes. We wish him good luck and best wishes.

There has been communication from Martin about changes in the management team. We extend warm welcome to the new members and expect to use their expertise and experience in better management of Decos. Martin will be visiting India in early May to announce other changes and policies.

It is that time of the year when we conduct the Employee Satisfaction Survey to sense the mood and identify areas of improvement. MT will be conducting one during the month of May. We request all to participate constructively in this exercise.

Month of April is, as always, high on expectations for everyone. We issued increment and promotion letters in last month. We thank you all for your contribution and look forward to continued inputs and support. We would like to congratulate all of you for increments and especially to those who were promoted. Finally we wish you luck and best wishes.

Starting 22-Apr-2013, Ankur is in the Netherlands for 1½ months busy canvassing for new projects. We are hopeful that his long stay will yield us new businesses.

Some more good news. Munro’s Sander is visiting India during second week of May. His visit in continuation of the talks that had begun in March this year for new projects. With this visit we anticipate to have more clarity on plans for these new projects.

HTA customer Robert visited again to work closely with team here. He was impressed with the solutions that we proposed to him and we look forward for great patronage with this customer.

Sanket (Mistry) would be visiting the Netherlands for starting work on new project for digital reception. During his visit he is supposed to understand and make necessary documentation for this project. Further details will emerge during and after his visit.
On the flip side, we had a setback for the mobile project from Fact 24. We were in discussion with this customer for porting his product to tablets and phones.

At Decos we respect and honor information security the most. In this direction we have started evaluation of ISO 27001 (ISO/IEC 27001:2005 – Information technology – Security techniques – Information security management systems – Requirements) certification. For this we hired consultants who would analyze the state of information security as of today and submit report on the same. Based on these report management team will vet the possibilities and feasibility.

The big six key movements of muscle building


 Chintan Desai

I recently went through a good book on muscle building, ‘New rules for lifting’ by authors Lou Schuler, Alwyn Cosgrove and Cassandra Forsythe. The book explains in brief about the six key moments for body building. Here, I am sharing some common yet useful stuff from the book, the six key moments one should keep in mind while muscle building.

Squat


WHAT IT IS: In the gym, the most common version you’ll see is the one with the barbell across a guy’s shoulders. You can also do the exercise with dumbbells held down at arm’s length, although that version’s a bit awkward, since you have to hold the dumbbells slightly out to your sides to keep them from bumping into your knees. If you’re using challenging weights, you end up using your upper-body muscles a bit more than you want.

MUSCLES USED: The great thing about the squat is that it uses virtually all the muscles in your lower body in one movement. The biggest challenge is to your quadriceps, the muscles on the fronts of your thighs. These muscles are responsible for straightening your knees when they’re bent.
But the exercise also works the big, powerful muscles surrounding your hip joints. These include your gluteal (buttocks) and hamstrings (rear thighs). The lower you go on the squat, the more these muscles engage.

Your lower-back muscles also play a role, mostly to keep your torso upright while you’re squatting down and straightening back up. Many muscles help keep your body stabilized, from your feet to your calves to those in your inner and outer thighs, on up to your abdominals and middle back.

REAL-LIFE USES: Strength coaches know that if they want to increase an athlete’s jumping ability, the squat is the most important exercise. It’s not the only exercise, of course, but the fact that it’s been shown in many studies to increase vertical-jump height shows how important the squat is to a very basic human movement. 

So how important is jumping? After all, most of us don’t jump at all once we get past our jockstrap days in high school and college.

Imagine a 90-year-old you. It’s 2065, and you’re sitting in a chair in front of the TV. It’s a comfy chair, and you think you could spend the rest of your days sitting there, watching television.

Suddenly, nature calls. You try to get up. Nature calls again, louder this time. You try again to get up, but your atrophied lower-body muscles just can’t summon the strength and power to get you out of that chair. Nature gets tired of calling, and just shows up. (In your lap :-p)
I know you aren’t going to hit the gym today to avoid soaking your favorite chair sixty years from now, just as I know you don’t go through life worrying about lion attacks. But you don’t just wake up one morning without the ability to get up from a comfy chair. There’s a slope—with age, you gradually lose strength and power until you have trouble walking up stairs, playing with your grandkids on the floor, and, yes, getting out of bed or a chair.

Deadlift

WHAT IT IS: You bend over a barbell or pair of dumbbells and lift it or them off the floor by straightening your body at the hips.

MUSCLES USED: Like the squat, the deadlift and its many variations use just about all your lower-body muscles, but this time the emphasis is on the powerful gluteal and hamstring muscles that straighten your hips.

Your lower back has an important role in stabilizing your body while bending and straightening, along with your deep abdominal muscles. Your trapezius—the big, diamond-shaped muscle that runs from your neck to your shoulder blades to your middle back—also has a big role in this exercise, since your shoulder blades have to pull together in your back to finish the movement. Finally, the gripping muscles in your hands and forearms get a workout, since without a strong grip that barbell is going to slip from your hands and hit the floor (if you manage to lift it off the floor at all).

REAL-LIFE USES: It’s hard to go through life without picking heavy stuff up off the ground, which makes the deadlift perhaps the most useful exercise you can do with weights.
Imagine a life in which you couldn’t lift a sleeping child off the floor, or move a sofa, or pick up a box of books without one of your spinal discs turning into sushi. (A friend of mine who had back surgery tells me the stuff that spills out of a ruptured disc looks like crab meat. Just FYI.) You wouldn’t want that life. The deadlift and its many variations keep your back and hips strong.

Lunge

WHAT IT IS: You hold weights at your sides or across your shoulders (or do it without weights), take a long step forward, and descend until your rear knee nearly touches the ground. Then you push off with your front leg and step back to the starting position.
An alternative is the “split squat,” in which you start the exercise with one leg already out in front, and then lower yourself and rise again without stepping out and back.

A third variation is the “step-up,” in which you step forward and up onto a platform.

MUSCLES USED: This exercise uses the same muscles as the squat and deadlift, but in a crucially different way. On the front of your pelvis are muscles called “hip flexors,” which lift your thighs up in front of your torso. (The opposite muscles are the “hip extensors,” the gluteals and hamstrings, which straighten your torso when it’s bent forward.)

Most people have tight hip flexors—a lifetime of sitting will do that—and in some they’re so tight as to be locked up, practically. The tighter your hip flexors, the harder it is to jump, much less take those long steps forward or diagonally to get over a puddle or avoid a snoozing drunk on the sidewalk.

The lunge forces those muscles to stretch and then contract quickly. That makes it one of those exercises that’s as much about increasing the suppleness and flexibility of your muscles as it is about keeping them strong.

REAL-LIFE USES: Almost all sports, excluding chess, feature lunges to the front or side. Imagine a baseball infielder who couldn’t lunge to stop a grounder up the middle, or a beach volleyball player who couldn’t lunge to dig an opponent’s shot out of the sand.

The lunge also figures into those powerful strides a sprinter takes to get up to full speed, and the move a wrestler uses to take down an opponent, and the step you take before throwing a ball. And what is soccer but a series of lunges in every direction?

I understand you probably aren’t playing any of these sports right now. But the lunge is still crucial to your everyday physical well-being. The shorter your strides, the less mobile and agile you become. And when mobility and agility go, you’re just one slip or tumble away from the assisted-living community, where you sit back in that comfy chair to watch TV.

Push

WHAT IT IS: It can take many forms in the weight room, such as a push-up, bench press, shoulder press, or dip. In a push-up, obviously, you push your torso up from the floor. In a bench press, you lie on a bench, lower weights to your chest, then push them back to arm’s length. An overhead press involves pushing the weights straight up from your shoulders. A dip starts with your bent arms behind you (your body is “dipped” down below them), and is completed by straightening your arms and pushing your body up even with them.

MUSCLES USED: Even though the push-up and bench press are generally thought of as “chest” exercises, and the overhead press is a “shoulder” exercise, and the dip is a “triceps” exercise, they all start with action in your shoulder joints. The dip, push-up, and bench press mostly activate the front parts of your shoulder muscles, while the overhead press uses the front and middle parts.

The push-up, bench press, and dip use your chest muscles in conjunction with your front shoulders. The overhead press bypasses the chest muscles and instead uses more of the shoulder muscles.

All four exercises use your triceps to straighten your arms at the elbow joint.

REAL-LIFE USES: Many in the gym would consider the two major pushing exercises—overhead press and bench press—to be physiologically distinct. Certainly, you wouldn’t do one and expect to get all the benefits of the other. But outside the gym, the line blurs. You’re rarely pushing straight off your chest (a chest pass in basketball is one of the few exceptions I can think of) or straight overhead. Most movements are at an angle in between the two extremes.

Imagine this: Your neighbor’s car has slipped off the road on a snowy day. You get behind the car to push it back onto the road. How’s your body positioned? Chances are, your torso is at a 45-degree angle to the ground. So, although most of your power is going to come from your legs, you’re still going to use your chest, shoulders, and triceps to push. That’s not a pure analog of any gym exercise. In fact, while it might start off resembling an incline bench press, it quickly morphs into more of a shoulder press as you push the car farther from your torso, and as your torso lowers to a position that’s almost parallel to the ground.

Pull

WHAT IT IS: As with pushing movements, pulls can come from many angles. The lat pull down—one of the most popular gym exercises—involves pulling a weight straight down to your shoulders from overhead. In a pull-up or chin-up, you pull your body up to a stationary bar.

Rowing exercises have many forms. In a gym, you can sit at a machine and pull a weight toward you. You can also sit or stand in front of a cable pulley and pull a weight toward you from many different angles, using one arm or two.

Free-weight rowing exercises are usually done with you bent over at the hips so your torso is nearly parallel to the floor. Then you pull dumbbells up to your sides or a barbell up to your abdomen.

Finally, there’s the pullover, in which you take a weight that’s overhead or behind you (if you’re lying down) and pull it in an arcing motion until it’s in front of or over your torso.

MUSCLES USED: The two major upper-back muscle groups are the latissimus dorsi—“lats” to you—and the trapezius, or “traps.” The lats are shoulder-joint muscles; they pull your upper arms back to your torso when they’re extended overhead or in front of you. The traps are shoulder-blade muscles, meaning they pull your shoulder blades together in back (as in a row), or down (as in a pull down or pull-up), or up (as in a shrugging motion).

Your biceps and some of the muscles in your forearms aid your lats (and, indirectly, your traps) in these pulling exercises. That’s one of the most important points we’ll make in this book: Your biceps will get all the work they need from rows, chin-ups, and other pulling exercises. They don’t really need any special attention to grow in proportion to the rest of your muscles. And, as I’ve already said in this chapter, they won’t grow out of proportion to those muscles no matter how many curls you do, and no matter how you do them.

REAL-LIFE USES: If I could design any exercise machine, it would be one that mimics a tug-of-war. I don’t think there’s another exercise or game that so thoroughly works your biceps and upper-back muscles in their natural, harmonious relationship to each other. (With the possible exception of sailing in a heavy wind; I’m not the nautical type, so I have to take the sailors’ word for it.)

If you’re winning the tug-of-war, you’re starting the pull with your upper-back muscles, and then finishing with your biceps and, to a lesser extent, your forearm and hand muscles. (Don’t underestimate the importance of grip strength—it’s one of the few aspects of muscular fitness that’s been linked to a longer life.)

In fact, if you put together all the components of a successful tug, you’d start with a straightening at the hips that resembles part of the deadlift motion, then a pull with the upper back, then a biceps curl, with a twist thrown in for good measure. In other words, in one picnic game, you’d employ three of the six most important muscle-building movements.
Tug-of-war isn’t all that different from a rowing movement, and of course rowing is called “rowing” because it mimics the very useful act of (ready for this?) rowing a boat.

The other important use of the pulling muscles is in climbing, an ability that was so important to our primitive ancestors that it literally meant life or death. If you couldn’t pull yourself up into that tree or scramble up that cliff faster than whatever drooling predator was in pursuit, you were that day’s low-carb lunch special. And there goes your genetic legacy—a tangle of bones and a few steaming piles of saber-tooth-tiger dung in the Pleistocene forest.

In climbing, you start to pull yourself up using your upper-back muscles, then finish with your biceps. And, of course, you can’t get around the importance of gripping strength. You slip, you die.

One more point about pulling movements: They mirror pushing movements precisely. For example, if you were tugging on a rope with one arm, it would be the mirror opposite of a pushing motion. In the gym, the shoulder press and pull-up are opposites, as are rowing and bench-press movements. You could even do the opposite of a pullover, if you wanted to do an exercise called a “front raise,” in which you lift a weight in an arcing movement from the front of your torso to overhead.

Twist

WHAT IT IS: Some exercises are specifically designed to isolate the twisting motion. You can do this lying flat on your back and then twisting at the waist to lower your legs to the floor. Or you can anchor your lower body, and turn your shoulders from side to side, as in the Russian twist.

But you can also add twists to other gym exercises. For example, a standing row can include a twist, as can a shoulder press.

Finally, an exercise doesn’t have to involve an actual twist to work the twisting muscles. If you do an exercise that requires coordination and balance, and you’re actively preventing your torso from twisting, you’re still using those muscles. That’s why, when you get to the workout section, you won’t see a twisting movement in every single program.

MUSCLES USED: Your waist has two sets of muscles charged with bending and twisting: the external and internal obliques. The internals lie beneath the externals, and the two sets of muscles have fibers that run diagonally in opposite directions. If you were to bend to your left, then straighten, the internal and external obliques on the right side of your torso would stretch as you bent and then contract to lift you back up. If you were to twist to your left, you’d use the external obliques on your right side and the internal obliques on your left side.
Some small lower-back muscles also play roles in bending and twisting. Main lower-back muscle group, the spinal erectors, is mostly involved in straightening your back when it’s bent forward.)

And, of course, the muscle you probably care most about, the rectus abdominis or six-pack muscle, is also involved in twisting.

REAL-LIFE USES: You can’t play a sport without twisting. The most obvious example is the baseball swing. A right-handed hitter will swing using the external obliques on the right side of his body, and the internal obliques on his left, to drive the ball, although most of his power will come from his hips as he turns them. (Many youngsters mistakenly believe that the forearms are the key to the swing, but the hands and lower arms are just the end of the whip. The hip turn is the key.)

Many trainers and gurus, such as the aforementioned Paul Chek, write and speak extensively about the importance of the midsection muscles as the communications link between your upper- and lower-body muscles. And Alwyn and I certainly don’t disagree in general (although we might quibble with some particulars of each trainer’s approach—we fitness geeks are good at quibbling).

But the importance of abdominal strength, flexibility, and overall integrity goes far beyond sports. Your day starts with a twist, when you throw your legs over the side of the bed to walk to the bathroom.

From there, nearly everything you do involves a series of bends and twists, separately and together. You twist getting in and out of your car. You twist in your chair at work to get a file. You bend and twist to pick up your kids, or pick up after them.

Walking and Running

WHAT THEY ARE: You rarely need to train these movements in the gym. In fact, the idea of running with weights in a gym seems like a major injury or accident begging to happen. You may as well pull out your cell phone and dial “9” and “1” before you even start.

However, you can build good exercises around walking. One is called the farmer’s walk, a staple of the Strongman competitions you see on ESPN. You hold heavy weights in your hands and walk a specified distance, sometimes with steps to climb up and down. Another, promoted by trainer Chad Waterbury, is a figure-eight movement, in which you hold a barbell overhead with straight arms while walking in intersecting loops.

MUSCLES USED: Your entire lower body gets involved in walking and running— in fact, walking and running are pretty much the main reasons you have a lower body. Your hip flexors (muscles on the front of your pelvis) lift one leg up and out in front of you, while your hip extensors (gluteals and hamstrings) and calves on your trailing leg push against the ground to propel your body forward. The muscle on the front of your shin, the tibialis anterior, lifts your toes up on your front leg so they don’t drag on the ground.

Meanwhile, your postural muscles, such as your internal obliques and some of the small, strut-like muscles in your lower back and hips, keep your body upright and stable while you move.

You’ll notice that I haven’t mentioned the quadriceps, the big muscles on the fronts of your thighs. Their main job is to straighten your knees when they’re bent, and that’s not hard to do while walking or running. Runners are notorious for having tight hips and hamstrings and relatively weak quadriceps, while lifters sometimes are the opposite—they do so many leg presses and leg extensions for their quadriceps (the muscles they can see in a mirror) that they end up with relatively weak hamstrings. Either combination is bad for your posture and the health of your knees and spine.

REAL-LIFE USES: I don’t need to belabor the importance of walking or running, since they’re part of everything. I will, though, mention that running fast is one of the great neglected exercises in our world, even among those who are fit.

As with jumping, few of us have a need to approximate a sprint as we get older. And when we try it, it tends to be at a company picnic or some other occasion in which we go from zero—no warm-up, no momentum—to full speed in an instant.

Sources:

Fort Torna

- Sandeep Yadav


Torna Fort

Torna fort also called Prachandagad is a fort situated near Pune, Maharashtra in India. The word "Prachanda" means "huge" and "gad" means fort in marathi, which undoubtedly means that this fort is vast and stretches on for many miles. The Torna is located at a very high altitude and it takes an average of three hours to get to the top from the foothills of the Sahyadri Mountains on which the fort is situated.

History of the fort:
It is said that the fort was constructed in the thirteenth century by the Shaivas i.e. the followers of Lord Shiva. Near the entrance of the fort you can see the temple of Tornaji Devi also known as Menghai Devi. The fort has been named Torna after Tornaji Devi. In 1643 when Shivaji maharaj captured the fort, he renamed Prachandgad as Torna. He also built several towers and monuments on the fort in order to strengthen the defense of the fort and to enhance the beauty and the grandeur of the place. In the 1700s after Sambhajiraje’s (Shivaji’s son) assassination, the Mughals got hold of the fort once again.
  
Fascinating Spots
Bini Darwaza:
This is the main entrance to the fort from Velhe and is situated to the northwest of the fort. The bastion on the left side has collapsed. The path ahead leads to Kothi Darwaaja.



Zunjar machi:
It is situated on the western side & a wonderful spot to see. However, in the recent period, way here has been destroyed, & hence it cannot be reached easily.  


Budhla machi:
In Marathi "Budhla" means a vessel, & "Budhla" Machi looks like a vessel kept upside down. This diff is a breathtaking spot on the fort. From here, a cheek was kept on the western side of this fort.

Kothi Darwaaza:
The road from the Bini Darwaaza takes you to the Kothi Darwaaza. From here you can go to the stone carved steps that lead to the Tornaji Temple. You see beautiful idols of goddess Somjai and goddess Tornaji in this temple.

Hanuman Bastion:
To the eastern part of the Kothi Darwaaza stands a sturdy bastion called Hanuman bastion. The idol of Lord Hanuman here will catch your attention.

Trek Routes:
From the Village of Velhe: Starting from Pune, preferably early in the morning is the best option. From Swargate Bus stand in Pune board any bus to the village of Velhe. The way to Torna starts from here and is quite straight. A walk of couple of hours leads to the "Bini Darwaaja", the main entrance to the fort.

From Rajgad to Torna: The route starts from "Male Darwaaja" of Rajgad, descending along the left side of "Sanjeevni Machi" and proceeds through a few houses. It continues through the woods and is about 5-6 hours walk. The road ends in front of "Budhla Machi". Here one has to climb a small rock patch. A walk of 15-20 minutes eastwards leads to the temple of "Mengai Devi". This temple serves as an accommodation facility.

Food and Accommodation:
There are no hotels available nearby and hence you will have to arrange your own food. Ample drinking water is available. As for the accommodation, you can merrily stay in the Mengai Devi temple on the fort.

Rangoli

- Pradnya Jadhav


Rangoli are decorative designs made on living room and courtyard floors during Hindu festivals typically consisting of bright colors. They are meant to be sacred welcoming areas for the Hindu deities. The term Rangoli is derived from the words: rang (color) and aavalli (row).

Besides a creative expression of art, Rangoli is also considered a symbol of good-luck. It is a traditional Indian art form of floor painting.

History of Rangoli
According to the mythological story a king named Chitra Lakshana, and his kingdom were extremely grieved on the death of the high priest's son.

Everyone along with the king offered prayers to the creator of the universe, i.e., Lord Brahma for giving life to the boy. Seeing this Lord Brahma, was moved by the prayers of the people and asked the king to paint a potrait of the dead boy on the floor. He then put life into the portrait, thus relieved the entire kingdom from its sorrow and pain.

This mythological tale is considered the scriptural evidence of the origin of Rangoli.

Symbols in Rangoli
Symbols used in Rangoli have its own significance and characteristic. Every symbol enhances the beauty of the other. The beauty created as a result of compilation of various symbols enhances the beauty of the Rangoli.

Rangoli Patterns
Sand powder
Usage of colored sand to make rangoli designs is very prevalent. Here rangoli is created through sprinkling powder by hand.


Flowers
This form of decorating the floor with flowers and petals is unique. Rangoli designs with flowers are more famous which looks very bright and attracts a person’s attention.


Rice Powder
This form of painting is done by soaking rice in water then a making paste of it.


Sand Rangoli on Water
It is one of the difficult and most beautiful type of sand Rangoli, which is drawn on water.


Flower rangoli on water
In this form of Rangoli lightweight flowers or petals are used make a design on water. It is a very delicate form of art and takes a lot of precision to do it.


Sand Rangoli below water
This form of rangoli requires high precision where the colored sand is decorated in different patterns below the water (Needs loads of practice :)).


Grains and pulses
Grains and pulses are also can be used to prepare attractive Rangolis.



Rangoli is named different in different states as given below:
State
Name
Kerala
Puvidal
Bengal
Alpana
Orissa
Ossa
Tamil Nadu
Kolam
Andhra Pradesh
Muggu
Karnataka
Rangoli
Maharashtra
Rangvalli
Gujarat
Sathiya
Rajasthan
Mandana
Madhya Pradesh
ChowkPurna
Uttar Pradesh
Sona Rakhana
Bihar
Aripana

Creative thinking
You can use your creativity and use any material you think is right to make Rangoli. Coffee beans, dried flowers and leaves, rice and other cereals, grains, charcoal powder, grass etc. 

Smart phones and personal data security


A brief study in data security on the iOS platform

- Prashant Kumar Singh

Introduction:

In recent years, the technology, which has evolved most and has affected the lives of major proportion of the world populace (mine as well), is undeniably, the mobile technology.
A small tabletop box, used just to communicate, has rapidly evolved into a handheld computer, even more advanced than that used to land man on the moon.

Consider a smartphone user. If you were to analyse her (see I’m not interested on his; :-p) phone, high chances are that you would be able to mine a lot of information from a small handheld device. You can get to know all the people she knows and interacts with (Contacts and text messages), banks in which she has accounts in (banking apps), places she regularly visits (Maps and other navigation apps) and much more. No other computing device in the history of mankind has been trusted with so much of personal information. A security conscious user might not store her banking passwords on a personal computer, but may jot it down as a ‘secure’ note on her smartphone.

Let’s analyse how secure the smartphone world is, in maintaining data security and privacy of user data. Apple Inc’s iOS platform with third party app review process, sandboxing of apps etc., sounds to be the most secure mobile platform.


The following section is presented as a collection of common iOS security myths.

Myths:

I use a passcode lock on my iOS device, so my personal data is secure
Passcode lock is one of the most important parts of iOS data security. Users’ data in stock apps (Apple provided apps that come with the device) and third party apps (which have chosen to implement this security) are encrypted on the disk, using a key derived from the device’s passcode. When the device is locked, within 10 seconds data is encrypted and the key is discarded. This data can only be decrypted when the correct passcode is entered again.

Unfortunately most of the users choose to have a 4 digit numeric passcode, which can be easily cracked by publically available brute force applications or even more easily by social engineering. For more complicated passcodes, tools like gecko toolkit and redsn0w are available. Even an enthusiast hacker wouldn’t take more than an hour to unlock the device with these tools.

Third party apps available on the Appstore are safe because Apple has approved them after review 
Third party apps generally go through ‘strict’ review process before being available for sale on the Appstore. Apple reviews them for the quality and performance but it’s not for what they can do with users’ personal data. Recently a famous app, “Path” was in controversy over the claims that the users’ whole address book was transmitted to the Path’s server, without informing the user.

Many apps upload users’ contacts data to their servers, WhatsApp and TrueCaller are some prime examples. This data can be used to identify users.
How do you know what data is being transmitted by an app to it’s server? A publically available tool called ‘mitmproxy’ can be used to analyze web traffic of any app.


I rely on push notification services for news, social networking and banking which is TLS encrypted and therefore secure
Apple’s push notification service is a very handy tool for both app developers and users. Many third part apps unknowingly expose their private keys that they have with Apple’s push notification server, in their site’s webroot. Armed with the private key and any iOS device’s device-token, anyone can modify the notification alerts. An example is shown below: 




My banking app is completely safe because the bank says so
The most targeted apps, by hackers are those published by the financial institutions. Although these institutions take every ‘precaution’ to protect customer data, there maybe instances where the app developers inadvertently leave loopholes. For instance an app from a reputed bank in India when examined with a freely available tool, “iExplorer”, on a non-jailbroken device, reveals an SQLite database, which is supposed to hold user information.


Although the leak of this information may not cause severe financial implication, a user’s banking habits are clearly exposed in the open.

A banking app, which doesn’t store any kind of data on the device’s disk, is still vulnerable on a jailbroken device.

My iOS device is jailbroken but I take care in installing any third party app
Jailbreaking an iOS device is the best way to make it vulnerable! On a non-jailbroken device, the OS ensures that no third party apps are allowed access outside their sandbox and to critical device specific features. Jailbreaking the device removes all these restrictions and grants all installed apps root privileges. 

Stealing user’s personal and critical information is very easy on a jailbroken device. Rogue apps generally disguise themselves as a theme or a UI enhancing app. They execute as root and run in background. Stealing information from other apps in the memory can be done either by stack smashing or hooking onto a particular process, which is currently in execution.

Summary
Although no computing platform can be free of attacks, smartphones seem to be most targeted because of their ubiquity and users’ need of having all information in the palm of their hands. It can be stated that data security is one area, which clearly needs more thought by different platform manufacturers.

Windows Azure Mobile Services

- Nishant Patel




Being an app developer, I always wondered if I can build an app around some data without having a web service serving the app? The reason being, having a web service requires a server hosting the services and the database (Trust me, managing such servers and scaling them later if required is difficult). And again, if my app requires merely saving some data online and using it again, having my own server/service involves more cost. So what do I do now?
Fortunately, Microsoft has come up with its latest offering on Azure platform - Windows Azure Mobile Services.  Microsoft has tried to provide the most basic server side necessities of an app over this platform. This will not just accelerate the mobile app development process, but also focus on building great user experience instead of worrying on backend infrastructure.

Thanks to Microsoft, the services are not just limited to Windows Phone/Tablets. The services cater to other popular platforms like Android, iOS as well as HTML5 based clients. Microsoft also provides necessary framework/SDK for all the above mentioned platforms (please refer Resource section for download links), which makes it easy to integrate and get started.
Let me walk you through the various features that fall under the Azure mobile services umberella.
Data        
The most basic requirement of any app is saving data and presenting it in for of information. Azure mobile services provides SQL Server database over cloud, making developer's life easier. Just add a reference of SDK in the project file and you are good to go. Save/retreive data using just few lines of code. Is'nt that amazing?

Authentication
Regestering a user via email appears old school now. Also, not eveyone wants to remember so many passwords. So, authenticating a user via third party identity providers is a preferred option now a days. Authenticating a user by his facebook account not just saves him remembering one more additional password, but also establishes a trust within the app since he can at any moment revoke necessary rights from facebook account.


Windows Azure provides authentication services with some of the popular identity providers like Facebook, Google, Twitter and Microsoft out of the box. Register your app with the identity provider, get the unique shared key, register the same key with Windows Azure and few lines of code does the magic.
Push Notifications
In this connected world, no one wants to have an app which requires constant monitoring. User wants to get notified at the very same moment (Oh, yes Abhi!). The Azure  mobile services introduce one more cool feature of sending push notifications to mobile devices using Microsoft Push Notification Service (MPNS). Need not mention, this is supported for Andriod, iOS as well as Windows. Just register your app for push notification on desired platform, configure the mobile service for the same and few lines of code is all you need.
Other Server side services
Apart from the above mentioned features, there are few more offerings under Azure mobile services on serverside.
  1. Sending emails on specific events (to app user/yourself) using SendGrid. For eg. User registration, in app purchase receipts etc. All this is done using SendGrid email services. 
  2. Schedule backend jobs on server. (For eg. sending periodic notifications or archiving old data etc.)
  3. Upload images to Windows azure storage. Allow the app user to upload his images to cloud and then use it as and when required.

Sample code in iOS to retreive data using Azure mobile services
Following is an example to demonstrate how to manipulate data in ‘ToDoItem’ table using Azure Mobile Services.
// Create an MSClient property in your .h file
@property (nonatomic, strong)   MSClient *client;
// TODO - create an MSTable property for your items in your .m file
@property (nonatomic, strong)   MSTable *table;
// Initialize the Mobile Service client with your URL and key
    self.client = [MSClient clientWithApplicationURLString: @"APPURL" withApplicationKey: @"APPKEY"];

   
// Create an MSTable instance to allow us to work with the TodoItem table
    self.table = [self.client getTable: @"ToDoItem"];
// Create a predicate that finds items where complete is false
    NSPredicate * predicate = [NSPredicate predicateWithFormat: @"complete == NO"];
// Query the TodoItem table and update the items property with the results from the service
    [self.table readWhere:predicate completion:^(NSArray *results, NSInteger totalCount, NSError *error)
    {
        self.items = [results mutableCopy];
        // and now use self.items to display the data received from cloud

    }];
// Insert the item into the TodoItem table and add to the items array on completion
[self.table insert:item completion:^(NSDictionary *result, NSError *error)
{
        NSUInteger index = [items count];
        [(NSMutableArray *)items insertObject:item atIndex:index];
// and now notify the caller that the item was added to database in cloud
}

Reference and Resources