Facebook, like Twitter, has offered post-by-SMS for ages. That’s how you posted from your phone in the days before everyone had smartphones, before the mobile site was reliable, and before the app launched. And even after those options were widely available, it still takes a lot less bandwidth if all you want to do is post a short status.

Anyway, people are running into problems with it because…

  1. Facebook sends two-factor authentication-by-SMS from the same shortcode.
  2. They’ve has started sending re-engagement notices* via SMS to people who only wanted to use SMS for 2FA, not notifications.
  3. Hardly anyone remembers that Facebook does post-by-SMS.
  4. Everyone’s used SMS bots that react to “STOP” commands.

Replies to those re-engagement notices are going to the number used for post-by-SMS, so people are accidentally posting “STOP” (and the occasional more angry statement) to their profiles.

🤦‍♂️

Update (Feb 19): Facebook plans to deprecate post-by-SMS as a result of this fiasco. I wonder if they plan on keeping SMS notices for people who don’t want the app but do want alerts? ‘Cause removing that could also be a sneaky way of pushing holdouts to use the Facebook app instead of the mobile website + SMS notifications. (Hmm, can websites send notifications in iOS yet?)

*Facebook has always let you choose to get notices by SMS. Again, in the pre-app days, it was the only way you could get mobile notifications. Even now, if you don’t want to run the app on your phone for privacy or other reasons, but you do want notices for replies such, it’s a good fallback. But it sounds like Facebook has started sending extra notices as part of their win-back messaging.

At a tech training session, I wanted to get access to some of my class-related email on the training computer. But I didn’t want to log into my primary email on an open network, or on someone else’s computer at all. I have no idea what they’re logging, whether they’re doing SSL inspection, whether there’s a keylogger on it — probably not, but who knows?

Heck, I didn’t even want to use my own device on the hotel Wi-Fi without a VPN, and that was at least secured by WPA2! (then again…)

I ended up forwarding the extra class materials to a disposable email account and logging into that one. No risk to other accounts if it got sniffed, at any level.

But I remembered how we all used to get at email when traveling back in the early 2000s, before smartphones, and before every laptop and every Starbucks had Wi-Fi:

Internet Cafes.

We’d walk into a storefront and rent time on one of their computers. Then we’d go to our webmail site and type in our primary email login and password over plain, unsecured HTTP without TLS.

I’d never do that today. Admittedly, I wouldn’t need to in most cases — I can access my email wirelessly from a device I own that I carry in my pocket. (Whether that’s a good thing remains up for debate.)

But more importantly, we know how easy it is for someone to break into that sort of setup. Even if your own devices are clean, someone else’s computer might have malware or keyloggers or a bogus SSL cert authority on their browser to let them intercept HTTPS traffic. An HTTP website is wide open, no matter whose device you use. And an open network is easy to spoof.

So these days it’s defense in depth: If it needs a password, it had better be running on HTTPS. If I don’t trust the network, I use a VPN. And I really don’t want to enter my login info on somebody else’s device.

I’ve had the “Google Assistant” on my phone for a few weeks now. Since I don’t use the always-on voice activation, this means it’s pushing extra notifications based on what it thinks I want/can use. Fortunately it doesn’t do audio alerts, so it’s a lot less intrusive than it could be. I figured I’d give it a try and see if it turned out to be useful (or creepy).

The alerts I’ve gotten fall into the following categories:

  • Estimated commute time based on current traffic. This would be more useful if it wasn’t based on the freeway, which I never use to get to or from work because it’s such a pain. Though on a trip to San Francisco, it popped up transit delays, which would have been helpful if I’d actually been going anywhere beyond walking distance that day.
  • Weather changes. This is kind of useful, but I have a widget to show the same info.
  • Hours and offers for stores I have just left. At least three times, I’ve walked around a grocery store or Target for 30-40 minutes, consulting my shopping list on my phone all the way, and it has popped up with info when I load up the car. What’s the point of that?
  • Potentially useful information for someplace nearby, but that I’m not going to. I work near an airport, and it’s repeatedly sent me the terminal layout. (The one time I actually went to the airport, I was already on a shuttle to the remote terminal — which isn’t on that map, incidentally — before it sent me that one. Better than the return trip, though, when it sent me a map after I’d boarded the plane.) Once it tried to help me with a mall restaurant while I was at a different restaurant. Another time it sent me info about a hotel I had driven past.
  • News articles about Trump. As if they’re hard to find. No further info in the notice, just “There is a new article about President Trump.” (Or something along those lines — I don’t recall the exact phrasing.)
  • Premiere dates for two TV shows that I watch. This one impressed me, since it correctly picked out two of three returning shows that I watch, and has not tried to plug anything else. It makes me wonder what it’s mined to figure that out, but I’m impressed it caught the nuance of which two DC/CW shows I watch. (OK, Flash is easy, but it somehow figured out that I was interested in Supergirl but not Arrow or Legends of Tomorrow.)

At this point, I think the experiment has run its course. The only category that’s been consistently useful is the TV premiere schedule… and that only comes up a couple of times a year.

For a long time I’ve thought that if I wanted to get a smart watch, it would be a Pebble, because they actually understand that a smart watch needs to work as a watch. So when they announced their Kickstarter for the revamped Pebble 2 and Pebble Time lines this summer, I decided it was time to try out wearable computing. My Pebble 2 arrived in late October, just in time for LA Comic Con, and I’ve been figuring out how best to use it over the past month and a half. I feel like I haven’t really found the watch’s full potential yet, but I’m not sure what point there is now, because I’m not sure how long it’ll be supported.

Today they’ve been bought by FitBit, and will be discontinuing the entire hardware line as FitBit picks up the software, cloud services (for now), and part of the development team.

Getting to Know the Smartwatch

Pebble 2 does work great as a wristwatch. You only need to charge it once every 5-6 days, and the screen is always on, so you can see the time and date at a glance. I’ve already gotten back into the habit of glancing at my wrist for the time instead of reaching into my pocket and pulling out a bulky phone.

Third-party watch faces range from the aesthetic (mimic classic designs) to the informative (cram every bit of time, weather, and health tracking data you can onto the main view) to the whimsical (show time using a binary counter, or Pac-Man, or the dots on a pair of dominoes). My six-year-old loves picking new designs and seeing them show up on my watch, but I keep coming back to the basic one because it works for the key thing a watch needs to do: let me tell the time quickly.

Notifications and calendar events are a key use case for a smart watch, but you have to manage them. I always pare down my phone’s audio notifications in order to avoid getting distracted, and that goes double for something that buzzes on my wrist. Once I got it down to just texts, calls and calendar appointments, it helped me avoid missing texts…for a while. Eventually I started missing them anyway. I’m not sure whether they’re not reaching the watch or my brain has started tuning it out.

When I do catch them, though, it is nice to see a preview of the message so that I know whether I should pull my phone out right away or it can wait a few minutes.

Fitness tracking is most useful if you have an actual workout routine (which I don’t) or you wear the watch constantly. It checks your heart rate every 10 minutes, counts steps, and tracks sleep and deep sleep. The watch shows your current status, and the phone app tracks daily, weekly and monthly stats. It’s interesting, but I can’t wear the watch 24/7 because the wristband ends up irritating my skin. A nicer watchband might help, but it might not, since I need to wear it tightly to keep the heart rate sensor in place.

I haven’t explored the Pebble app ecosystem as much as I could (but who knows how long it’ll be around). A few things I’ve looked at:

  • Music control is nice: you can pause and skip your phone’s music player using actual physical buttons.
  • I don’t want to play games by tilting my wrist.
  • Transit apps would be helpful if I rode the bus or train more often.
  • There’s a to-do list app that syncs with Google Tasks, which seemed great at first…but it’s a lot easier to pull up the tasks on my phone and look at a dozen items at a time than to scroll through three items on a tiny screen.

And that brings me what I think is key for smartwatches:

What a Smartwatch Needs to Do

To really be useful, a smart watch needs to be better than a phone at certain tasks. Cases where it definitely works:

  • Always-on at-a-glance info. Time/weather/step counts/etc. most of the time, with notifications and events as they occur.
  • Health/activity sensors.
  • Quick actions. Dismiss a reminder, or reply to a text message with a pre-canned “OK.” Menus are a pain, but I can imagine voice commands would help a lot.

If it takes longer to do something on the watch than to dig out your phone, unlock it, and do it there, the watch has failed at that task. If the watch makes it more convenient, then it’s succeeded.

I recently dug out my old Samsung Galaxy S4 for some Android testing. I replaced it with a Nexus 5x last fall, and for the most part I love the newer phone, but there are a few things that I really miss about the S4.

  • The size is perfect. It’s literally as big as it can get and still be comfortable to use one-handed and fit in my pants pocket. The Nexus 5X is barely 1/8″ wider and 3/8″ taller, but it’s just enough that I can’t quite reach the whole screen with my thumb. I have to loosen my grip until it feels like I’m going to drop it, which means I’m extra motivated to keep it in the case, which makes it even bigger…
  • The Galaxy S4 display is polarized diagonally, so I can use it in landscape mode while wearing sunglasses. This is helpful for things like daytime GPS navigation. The Nexus 5X is not.
  • The volume buttons are positioned out of the way of the middle, making it easy to clip on a dashboard mount.

Those are three things that the Galaxy S4 does better (for me, anyway) than the Nexus 5X. They’re all form factor. Of course since giant smartphones are all the rage these days, good luck finding another one that’s just the right size for my hand.

Otherwise, I love the Nexus 5X’s display, the up-to-date Android OS without Samsung’s modifications (and knowing I’ll actually get security updates), the camera, the convenience of the fingerprint sensor, the speed, and just about everything else about it.

I wouldn’t go back. I considered setting up the S4 as a dedicated GPS until I realized that it wouldn’t be able to get traffic data without a SIM card. (Maps can store the actual maps offline now, and GPS works independently of cell service.)

But if Google releases their next Nexus device in a form factor just 3/8″ shorter, I’ll be tempted to upgrade early.