iPhone ringtone roundup

Ringtones say a lot about you, your style, and your attitude. Yet, for some reason, the iPhone-the undisputed king of all smart phones-is limited in terms of ringtones. And they can be a helpful aural cue to alert you to exactly who is calling. You can use either the small default selection that comes on the phone or purchase tracks from the iTunes store to convert for 99 cents each.

There's also a way to create customized ringtones using GarageBand ( Macworld rated 4.5 out of 5 mice ), but that's a complex process that likely will not appeal to folks who don't otherwise use the program. If you're looking for ringtone variety, that's an awfully expensive way to go. Fortunately, there are alternatives in the form of standalone apps that let you create custom ringtones. These apps are specifically designed to help you easily create a new set of ringtones that make your iPhone sing the tunes you want it to. I took a few of the available choices out there for a spin: PocketMac's RingtoneStudio 2 for iPhone; Xilisoft's iPhone Ringtone Maker for Mac 1.0; Pixel Research Labs' Ringer; and AMG's Make Ringtones on your Mac.

PocketMac RingtoneStudio 2 PocketMac RingtoneStudio 2 for iPhone lets you create a new ringtone with a few clicks. RingtoneStudio exports the new ringtone to iTunes automatically, ready for syncing. Just drop a music file onto the interface (which looks like an iPhone), select the portion of the tune you want to use-up to 30 seconds, Apple says-and click Create. The current version of the product adds fade-in and fade-out options, volume boost, and a new waveform editor that looks similar to waveforms found in sound editing software. In my tests, the program worked quite well.

RingtoneStudio lets you zoom into a waveform up to 16x, and now features unlimited undos for volume adjustments. I converted about 10 music tracks, including the song In Exile by Thrice (my current favorite), and RingtoneStudio turned the MP3 into a ringtone in seconds. RingtoneStudio had trouble with a 2GB file (the movie Miracle at St. Anna, converted from DVD using HandBrake). Volume adjustments took over 15 minutes to apply, and the program became sluggish. The program supports the same formats as QuickTime, so that includes MP3, AAC, M4a and QuickTime movies-although you can't convert MPEG-1 videos (because the audio and video are stored as one file). Unlike Xilisoft's iPhone Ringtone Maker 1.0 (which I'll get to shortly), RingtoneStudio 2 shows you a thumbnail preview of the video, not just the audio portion, so it's possible to find that one jocular moment in Pink Panther 2 (and there is only one, by the way) and make it your ringtone. PocketMac says the slowdown is a result of how RingtoneStudio analyzes the file and-for volume adjustment-changes the actual sound level, as opposed to just the QuickTime setting. RingtoneStudio 2 works well, but a few extra features like zoom and video preview do not justify the slightly higher price of $20 compared to $15 for Ringer and Ringtone Maker, especially since this app has a few bugs and supports fewer file formats than Ringtone Maker.

PocketMac suggests using just a portion of the video to speed things up. Xilisoft iPhone Ringtone Maker 1.0 Xilisoft iPhone Ringtone Maker 1.0 is compatible with a much wider variety of video and music formats than PocketMac's RingstoneStudio 2. In fact, Ringtone Maker supports just about every format I can think of: MP3, WAV, Windows Media, XviD (a popular BitTorrent file format), DivX, and more. The look and feel of the program reminds me of a Windows app circa 1999, with large bulbous buttons and goofy-looking shading. Ringtone Maker gets the job done-but without any flare. But no matter: in testing another 10 audio files, including the single by Echo & the Bunneymen called I Think I Need It Too (the smooth retro-synth song works well as a ringtone), Ringtone Maker rocked: it never introduced any audio glitches and worked extremely quickly.

One complaint: you can't see video clips as you edit, although you can select a portion of the video using sliders and hear the sound from the video. The app even handled a large 2GB movie file-the same Miracle at St. Anna feature film that RingtoneStudio choked on. Another oddity: I could select any segment of music or video no matter how long, although the iPhone itself only plays the ringtone for a set length-until you answer or the call goes to voicemail. Pixel Research Labs Ringer For the same price as Ringtone Maker ($15), Ringer actually has more in common with RingtoneStudio because it supports the same file formats as QuickTime (MP3, AAC, MOV, MP4, M4V) but no specialized formats, such as XviD or DivX. Yet, like Ringtone Maker, Ringer does not show you the video clip when you want to create a ringtone from your favorite Hollywood epic. I'd prefer a warning that says the clip is unnecessarily long. One of its best and most unusual features: Ringer actually taps directly into your iTunes library.

You can use Ringer that way if you want, but it's easier and faster to just click an artist name or album and select a song. With other tools, you drop media onto the app and select the portion you want for a ringtone. You can also choose songs from your playlist or click Movies to see any and all movies on your Mac, even video files you did not remember you had. Audio files loaded in seconds. Ringer took about three minutes to load the movie Miracle at St. Anna that caused problems for RingtoneStudio.

The interface for selecting a portion of a clip is easy to use-just drag the mouse to select the portion you want. The default view on Ringer shows a large window of the audio waveform-you can make the app larger on screen to see an even closer view. Unlike Ringtone Maker, you can't select more than 40 seconds. However, the zoom functions and fade in or out controls are more limited. AMG Make Ringtones on your Mac AMG (Advanced Media Group) Make Ringtones on Your Mac is essentially a collection of loops and GarageBand songs that you can use to create ringtones.

For example, Zoom just maximizes the window without actually zooming. As such, it's a departure from the PocketMac and Xilisoft offerings, and is even different from how you'd normally create ringtones with purchased songs (by paying 99 cents and converting them). For the do-it-yourself approach, AMG has created a fun tool. Instead, they are mostly techno/dance/trance loops that work well as ringtones. The loops and samples from this collection are not recognizable songs. You can use a John Q ringtone for an easy-going vibe, or The Low End for an attention-grabbing chime.

I built several custom ringtones, and I like the loops-there's lots of variety. Make Ringtones on Your Mac also provides a tutorial on how to add ringtones to iTunes (just drag and drop), export them from GarageBand (most are already set to loop correctly and are about 30 seconds long), and set the current ringtone on your iPhone. You get a wide assortment of techno music to suit any mood, and I was impressed with the quality. You can start with a basic GarageBand song and add your own loops, either from the included library or your own samples. There are about 300 ringtones and hundreds of loops and song clips to choose from. However, AMG does not include any software, so you could just buy the loops you really like (even from AMG's own Samples-now.com site) and follow the ringtone creation steps for GarageBand.

Macworld's buying advice Choosing the best ringtone app was not easy-there is no single tool that outperformed all the others in the group I tested. You'd save plenty of cash that way. However, my nod goes to Pixel Research Labs' Ringer because it works quickly, costs less than RingtoneStudio, and lets you select songs easily. Make Ringtones on Your Mac has a lot going for it as a ringtone maker, but it's not really a program, and is more than double the price of its competitors. I wish it showed video clips, and if you really need that feature, go with RingtoneStudio.

For $40, if it included a simple song-to-ringtone converter, the package would make more sense. It even supports fade-in and fade-out and creates iPhone-specific tones. [John Brandon is a freelance technology writer based in Minnesota.] As it stands, you can buy just the loops you like online and go through the work of making ringtones in GarageBand for a lot less. (You can use its loops for other purposes, though-including creating an entire song.) For folks interested in the no-frills route to ringtones, I'd also suggest having a look at Audiko, a free, online utility that supports ringtone conversion from an audio file.

Personal data of 24,000 Notre Dame employees exposed online

In an embarrassing security gaffe, personal data on more than 24,000 past and present employees at the University of Notre Dame was made publicly available on the Web for more than three years. Files containing the data are believed to have been posted on the site in August 2006 and remained there until this October this year when they were finally discovered and reported to university officials. The breach resulted when an employee inadvertently posted files containing the names, Social Security numbers and zip codes of the employees on a publicly accessible university Web site. The files have since been removed and secured and there is no evidence that the information has been inappropriately used, said Dennis Brown, Notre Dame's assistant vice president for news and information.

All of those affected by the breach have been notified and the university has offered to pay for credit monitoring services, he said. Included in the list of those affected by the breach are a "large number" of on-call and temporary employees, Brown said. Notre Dame last suffered a data breach in January 2006 , when unknown intruders broke into a server and accessed records belonging to an undisclosed number of individuals. On Sunday, a blogger discovered online a sensitive security manual containing detailed information on the screening procedures used by Transportation Security Administration agents at U.S. airports. This is the second time this week that an organization has found itself in the news over an inadvertent data leak.

The document was supposed to have been redacted before it was posted on a government Web site, but wasn't. As with the Notre Dame incident, the document was quickly removed once the lapse was reported but not before numerous copies of the document were posted at sites all over the Internet. This June, a 267-page document listing all U.S. civilian nuclear sites , along with descriptions of their assets and activities, became available on whistleblower site Wikileaks.org days after a government Web site publicly posted the data by accident. Though data breaches involving external hackers get most of the attention, inadvertent data exposures such as these latest examples are not all that uncommon. The sensitive, but unclassified, data had been compiled as part of a report being prepared by the federal government for the International Atomic Energy Agency (IAEA). In another incident in October 2007, a student at Western Oregon University discovered a file containing personal data on student grades after it had been accidentally posted on a publicly accessible university server by an employee. Numerous others breaches, including at government agencies, have also inadvertently leaked confidential and sensitive data over file-sharing networks.

Rivals mock Microsoft's free security software

Although one of the top consumer security vendors welcomed Microsoft's Security Essentials to the market, another dismissed the new free software as a "poor product" that will "never be up to snuff." Earlier today, Microsoft launched Security Essentials , its free antivirus and antispyware software suite, which has been in development for almost a year. "I think it's a good thing that they're in the market," said Carol Carpenter, the general manager of Trend Micro's consumer division. "We look forward to the competition ... and I think Microsoft's targeting of developing countries and the unprotected is a good approach." Microsoft has pitched Security Essentials, which replaced the now-defunct for-a-fee Windows OneCare, as basic software suitable for users who can't, or won't, pay for security software. And now they've decided to go for the free market, but that's a very crowded market. Not everyone, however, agreed with Carpenter. "Security Essentials won't change anything," said Jens Meggers, Symantec's vice president of engineering. "Microsoft has a really bad track record in security," he added, ticking off several ventures into consumer security that the giant has tried, including Windows Defender, an anti-spyware tool bundled with Windows Vista and Windows 7; the released-monthly Malicious Software Removal Tool; and OneCare. "Like OneCare, Security Essentials is a poor product," said Meggers. "It has very average detection rates. There's not much room to grow there." In a company blog, another Symantec employee called Security Essentials a "rerun" of OneCare , and said: "At the end of the day, Microsoft Security Essentials is a rerun no one should watch." It's no surprise that top-tier security vendors like Trend Micro and Symantec dismissed Security Essentials today.

At the time, a Symantec executive said it was a capitulation by Microsoft, which was tacitly admitting it couldn't compete . But Meggers' take today was even more bearish. "We don't like the notion of 'basic,'" he said. "That makes me very worried, because the risk on the Web today is far too high for 'basic.' Tossing a bunch of little basic tools into the computing environment doesn't make it safe." Even Carpenter had some unkind words for Microsoft. "It's better to use something than to use nothing, but you get what you pay for," she said. "But I don't think it will worry the main security vendors. They did the same thing last year, when Microsoft announced the upcoming demise of OneCare and said it would ship a free, streamlined product. If I were a free, focused security company, trying to get my upsell over time, like AVG [Technologies], then I'd be concerned." Symantec's Meggers also wondered what took Microsoft so long to come up with Security Essentials. "It takes them an entire year to remove features from OneCare, to make something even worse than OneCare?" Meggers asked. "I could have done that with three developers in three months." And that's a good clue that Microsoft won't be able to keep up with the likes of Symantec, Trend Micro and McAfee, Meggers added. "Look how long it took them to build it. When was the last time that Microsoft innovated?" The free Security Essentials can be downloaded for Windows XP, Vista and Windows 7 from the Microsoft Web site. Security needs constant innovation.

Users nervous about Oracle's acquisition of MySQL

The European Union is not the only one antsy about Oracle taking possession of the open source MySQL database should the commercial database giant's merger with Sun Microsystems get final approval. On its Web site, Oracle merely notes that "MySQL will be an addition to Oracle's existing suite of database products." "I wish that Oracle would broadcast its intentions a little bit more" on the Sun acquisition, says Duane Kimble, a Linux technologist who works in the banking industry. So are MySQL users. (The E.U.'s executive arm has held up approval of the merger, fearing that Oracle's acquisition of MySQL could reduce competition in the database market, as well as harm the open source nature of MySQL. Sun's stockholders and the U.S. Justice Department have approved Oracle's $7.4 billion acquisition of Sun.) "We've got a fair number of databases and Web applications that use those databases in MySQL. If Oracle does something that sort of makes it look like MySQL's days are numbered or something is going to change that we don't like, we'll probably look at alternatives," says Ernest Joynt, a contractor for the National Oceanic and Atmospheric Administration. [ Relive Sun's storied history in InfoWorld's slideshow "The rise and fall of Sun Microsystems." | Learn why attendees at the JavaOne conference were skeptical of Oracle's buyout of Sun. ] Anand Babu Periasamy, CTO of clustered storage technology company Gluster, expresses doubts that Oracle would add enterprise capabilities to MySQL. "I hope that they will retain MySQL. [But] I am doubtful [that] they will ever improve MySQL to take it mid-enterprise level, but at least it will help them compete with Microsoft SQL Server on the low end," he says. (Gluster uses MySQL for its Web site operations.) Thus far, Oracle has said little about its intentions for MySQL and declined to discuss the issue with InfoWorld.

For him, Oracle's ownership of MySQL is a specific cause for caution. His firm has begun looking at other enterprise-scale open source databases such as EnterpriseDB's Postgres database in case it has to replace MySQL. Standing to reap a harvest from unease about the Oracle-MySQL pairing are open source database vendors EnterpriseDB and Ingres. MySQL users start looking at alternatives A key issue is that Oracle is a main competitor to MySQL, notes Timothy Dion, CTO of mobile and Web apps builder Sensei. "I'm very concerned about what that means," he says. EnterpriseDB, which builds its products on the PostgreSQL open source database, has been hearing from concerned MySQL users, says Larry Alston, EnterpriseDB's vice president of product management and marketing. "They're telling us that they're nervous" about the future of MySQL, he says. Doubts remain over the fate of other Sun technologies Users remain concerned over the fate of other Sun technologies such as Java and Solaris, not just of MySQL. "We are rethinking our Solaris deployments," says Linux technologist Kimble. "We are moving swiftly toward more of an AIX and Linux environment, depending on the size or the scale of the project." Although Kimble notes it is "too early to say whether we'll move off [Solaris] or not," he does say his employer is rethinking its Solaris commitment: "Certainly, we're not going full-bore with Solaris as we were before the merger." Kimble does see a positive side to the Sun acquisition: "I think it kind of simplifies the platform offering somewhat.

Ingres also sees opportunities. "The phones ring a lot," says Ingres CEO Roger Burkhardt. Oracle is a strong company and if they keep Sun Java, which I'm sure is what they bought [Sun] for, I think it will make Java a better product." But Bryce Pier is not so sure. Another large company buying another large company reduces competition," he says. The senior systems engineer at Target sees no benefits of the buyout - at least not yet. "I'm not really certain that it's going to be good for anybody. Pier expects the acquisition to cause Target to move away from Solaris to Red Hat's Linux over time. Oracle, said Craig Muzilla, Red Hat's vice president for middleware, was very active in the Java Community Process for updating Java and has strived for openness in Java. "We don't see anything from Oracle that [would indicate that] they would do anything" that would differ with the past, he said.

One reason is the uncertainty: "We're just not sure what Oracle's commitment is going to be to the Java stack and to maintaining it as an open source project." Another is Oracle's reputation for extracting revenues from customers: "We certainly fear that all of the subscription fees are going to change for everything from Sun." At its recent conference, Red Hat sought to reassure customers about the continued openness of Java-based JBoss technology, which Red Hat owns, now that Oracle is buying Java founder Sun.

Advice to beginners

One of my colleagues asked me to substitute for her in a systems engineering course that I used to teach until a few years ago. With the instructor's agreement, I decided to discuss some beliefs, attitudes and behavior that can help students entering the workforce for the first time as interns or new employees make the best of their opportunities. The assigned topic was how students could best work effectively in software development groups.

Some of these topics may be helpful to a wider audience. The first steps to success in any new job are to observe and learn: listen, watch, think! From this point on, I'll simply address readers rather than using the past tense. 1) How to enter a new work group The worst approach a new employee can take – especially a recent graduate or an intern – is to swagger into a new workplace and start comparing the way things are done to the style at a previous workplace – or worse, to what some professor told the student in a course. Keep your opinions to yourself until you have learned more than superficial impressions about your new work environment. If you don't mind the idea, keep a notebook (file) about what you learn. 2) Making suggestions Keep your opinions to yourself until you have earned credibility by doing your job well and being thoughtful, courteous and helpful. Watch, listen, learn, and think.

If you do see opportunities for improvement, find out who is likely to be responsible for making the changes you think might be useful. Describe your impression of the current situation, define the problem neutrally (avoid emotional language), and ask your contact about what she thinks about it. Don't launch into a diatribe about how rotten the current situation is: ask the person if she can discuss the specific issue you are concerned about. Then offer your suggestion respectfully (not arrogantly, not from a position of assumed superiority, not rudely) and be prepared to listen to a different perspective. Take every opportunity to share knowledge, lend a hand, prevent an accident – you will win as a worker and as a human being. Don't assume that just because you think something ought to be changed that it will be. 3) Work (and life) is not a zero-sum game Helping someone to do better (at work, in your family, in your marriage, in your life) does not subtract from your success.

Don't believe the cynics who tell you that the individual is all that counts, that there is no valid social group beyond the family, and that everyone should maximize their gain at the expense of all comers. When we write or code, we sometimes see in our work what we want to communicate rather than what a reader or a computer will see and execute: our assumptions are often implicit and invisible to ourselves. Life does not have to consist of a battle with every person competing against every other. 4) Egoless work Suggestions for improvement to code or writing are not attacks on you. Thus an editor or a code reviewer may challenge a passage of an article or a section of code and point to improvements. For more on this topic, see an article I wrote in this column in 2006 and the essay "On Writing." 5) Don't blindside your boss Always work to make your boss look good. Be grateful, not resentful.

In particular, keep your boss informed of anything out of the ordinary: the last thing you want is to have your supervisor challenged by a superior officer demanding to know what you have been doing – and have the supervisor unable to answer. 6) Be honest Do what you say you will do: don't pretend. In Eric Berne's famous book, "Games People Play: The Basic Handbook of Transactional Analysis", the author describes the why-don't-you-yes-but game, in which someone asks for advice and then proceeds to show why every possible solution is wrong or impossible to implement. For example, if you are seeking someone's opinion, listen honestly and openly – don't go through the motions. A typical application of this game is for a dishonest manager to ask for employee opinions about a planned or existing policy and then to ignore or discount every comment as meaningless or wrong. Don't do that.

The manager is being dishonest. So endeth today's lesson. Go forth and be good human beings.

IBM aims at Google, Microsoft with new Webmail

IBM has launched LotusLive iNotes, an on-demand e-mail, calendaring and contact management system meant to compete with the likes of Gmail and Microsoft Exchange, the company said Friday. IBM is aiming the software at large enterprises that want to migrate an on-premise e-mail system to SaaS (software as a service), particularly for users who aren't tied to a desk, such as retail workers. Pricing starts at US$3 per user per month, undercutting Google Apps Premier Edition, which costs $50 per user per year. It is also hoping to win business from smaller companies interested in on-demand software but with concerns about security and service outages, such as those suffered by Gmail in recent months.

While alluding to Google's service outages, Poulley acknowledged that no company can guarantee 100 percent uptime for on-demand applications. LotusLive iNotes is based on technology IBM purchased from the Hong Kong company Outblaze. "What we brought to Outblaze and to the marketplace is what you'd expect from IBM in terms of security, reliability and privacy," said Sean Poulley, vice president of online collaboration. But IBM has a long-standing track record of running "the world's mission-critical systems," he said. Overall, the main point of interest in IBM's announcement is price, said Gartner analyst Matt Cain. "Outblaze always sold low-cost mailboxes and that's what this is," he said. "Google's long been in it, Microsoft's long been in it. IBM will also have an opportunity to win customers from Microsoft who aren't ready to migrate to the upcoming Exchange 2010 release, given the headaches and investments involved, Poulley said. Now IBM's in it." However, that's not to say IBM's brand on the software isn't of some value, Cain added. ."From an enterprise perspective, you'd rather buy e-mail from IBM than a company called Outblaze." It's unlikely that IBM's pricing strategy will cause competitors to lower fees for their offerings, according to Cain.

For one thing, Microsoft already has a $2 per month Exchange Online option called "Deskless Worker," Cain noted.

CA looks to ease encryption key management

CA today unveiled key-management software that helps automate the storage and distribution of encryption keys for multi-vendor tape encryption purposes. According to CA's director of storage product marketing Stefan Kochishan, CA intends to add support for other vendor tape-encryption methods in the future. "This product will manage the keys," Kochishan says. "If there's a call for centralization of management of either public or private keys, that can be done. Cool new products of the week CA Encryption Key Manager is z/OS-based software (it also runs on Linux, Unix, Windows and Solaris platforms) that can support the IBM TS1120 and TS 1130 tape encryption devices as well as the CA Tape Encryption subsystems from the same interface.

You can also set up key stores in various sites and those sites will be updated when there's a change. CA Encryption Manager allows tracking and monitoring of encryption keys and digital certificates as well as deletion once a key is no longer used, Kochishan notes. It's full life cycle key management." CA Encryption Key Manager will also interface with security systems that include IBM RACF, CA ACF2 for z/OS, and CA Top Secret for z/OS for public/private key and digital certificate storage. Changes are propagated via SSL-encrypted TCP/IP. The goal is to let IT managers more easily share encryption keys across business units or with outside business partners. Mark Depathy, senior infrastructure engineer there, indicated it has simplified key distribution for business-to-business tapes and other uses. "It's something that gives you real-time key distribution," Depathy says, adding it allows for a common database related to keys. Peoples United Bank in Bridgeport, Conn., has been beta-testing the CA Encryption Key Manager for the past month.

CA Encryption Key Manager, available now, starts at $16,000.