Access Street View in iPhone Maps
Finding the Google Street View feature in the iPhone 2.2 version of Maps is tricky - there's no button for it. If you're viewing a map that you think might have a street view, drop a pin (tap the curled paper icon at lower right, then tap Drop Pin or Replace Pin if a pin is already being used). An orange person icon at the left of the pin's information line is dark and can be tapped if Street View information is available.
Submitted by
Glenn Fleishman
Recent TidBITS Talk Discussions
- Alternatives to MobileMe for syncing calendars between iPad/Mac (1 message)
- Free anti-virus for the Mac (20 messages)
- iTunes 10 syncing iPod Touch 4.1 (2 messages)
- Thoughts about Ping (16 messages)
Related Articles
- Google Offers Secure Search Beta (23 May 10)
- Security Experts Urge Google to Secure All Sessions (19 Jun 09)
- Google Gmail Adds Secure Session Option (28 Jul 08)
- Sidejack Attack Jimmies Open Gmail, Other Services (27 Aug 07)
Published in TidBITS 1010.
Subscribe to our weekly email edition.
- Apple Confirms January 27th Media Event
- Tech-Based Help for Haiti
- Google Docs Now Stores All File Types
- Citrix Ships Mac Version of GoToMyPC Remote Control Software
- New Ebook Offers Up-to-Date Details about Running Windows on a Mac
- Prevent the iPod touch from Launching iPhoto
- Paying by the Bit: Internet Access in New Zealand
- ExtraBITS for 18 January 2010
- TidBITS Watchlist: Notable Software Updates for 18 January 2010
- Hot Topics in TidBITS Talk for 18 January 2010
Google's Gmail Defaults to Encrypted Sessions
Google has announced that all Gmail sessions are now secured using SSL/TLS by default, rather than as a choice each individual user had to make in configuration settings. The previous default setting encrypted user logins to Gmail - as Google secures all logins - but left the content of sessions in the clear. The default encryption may be manually disabled.
Problems with offering in-the-clear webmail sessions were clear years ago, because your messages could be intercepted on public networks, such as Wi-Fi hotspots. The ante was raised in 2007, however, when a security researcher showed that the token that Google placed in a browser cookie to identify the user after login could be "sidejacked": intercepted by a local user, and used to take over a Gmail session. (See "Sidejack Attack Jimmies Open Gmail, Other Services," 27 August 2007.)
There was a workaround to use SSL at that time, where you could enter a different URL, but Google didn't expose this option, and average users would have been unaware of the consequences. In mid-2008, Google added an option to use SSL/TLS as the default, but each user had to make this setting change to activate it. (See "Google Gmail Adds Secure Session Option," 28 July 2008.)
Finally, in mid-2009, many prominent security experts asked Google in an open letter to secure all sessions for Web applications to avoid sidejacking, interception, and other issues that could allow identity theft and access to private information. (See "Security Experts Urge Google to Secure All Sessions," 19 June 2009.)
Google said then that it was concerned about latency (the delay in handshaking of transactions before data is actually sent) and additional overhead for people who don't have broadband. Apparently, Google has now tweaked its system to balance the need for speed for some users with security for all.
![](/file/11593/db.tidbits.com.tar/db.tidbits.com/images/badges/pear-note-icon50x50.png)
Typed notes are blended with recorded audio, video, and slides
to create notes that make more sense when you need them most.
Learn more at <http://www.usefulfruit.com/tb>!
If Gmail talks SSL/TLS to another mail server, the mail is secured between the two servers, but it's not encrypted for the recipient.
The weak points in SSL/TLS email, even if you could assure each segment is secure (Web browser or client to server, server to server, server to client/browser), there's a decryption stage between each segment.