Showing posts with label Mac. Show all posts
Showing posts with label Mac. Show all posts

Wednesday, March 18, 2026

Linux Mint is what I would recommend to someone who wants to Learn Linux.

I got into a conversation before dawn.  I do this frequently since I am up at stupid o'clock most mornings.  Rainy morning, wash out for my workout, so I was considering my options.

My friend was telling me about someone she knew who was thrashing around with some technology.  I have seen this happen before, but this time he was rattling my cage with something I had done myself.

The process of learning Linux.

The normal response is "Just install it and use it" but that is way too oversimplified.

I don't use windows.  I have a Mac and don't use it either.  I would welcome a Mac but I would install Linux on it and be frustrated because the keys are "non standard" and the mouse or trackpad only has one button.  

Meh, I'd adapt.  Got one gathering dust?  I can haz Mac?  Oooh! Gimme! K Thx Bai!

:)

While I love new hardware and pretty machines, my newest computer is 5 years old and counting and I don't "need" one.  But, thanks for asking!

He got deep into Raspberry Pi and is frustrated by the limitations of the platform.  Size/Performance/Add-On Prices.  And so forth.

I suggested what I suggest all the time.  At this point in history you probably have an "Old Computer" gathering dust in the closet.  Many people don't know what to do with it because it has "old data" on it and don't know how to destroy that data.

Use Your Old Computer.

That old computer, unless it is truly old, should be enough to learn on.  Let's say 10 years old or newer.  i3/i5/i7 with 4GB memory and at least 50GB of disk space.  Pretty modest specifications right?  

Windows has a lot of "phone home" issues that take up some of that processor.  There are also a lot of machines that are at "end of life" according to Microsoft.  You can't install Windows 11 on it because of "reasons".  Nobody wants ads anywhere, let alone in a start menu that you are forced to use because some dolt decided "It's Betterer!".

Basically "reasons" are something called TPM that is a low level piece of firmware in the computer.  I won't go into details, it just flags the computer of not being worthy of upgrade because it doesn't have the latest version.

So with that old computer why not try Linux on that?

There is another way to do this.

Use A Live Version Of Linux.

I'm easing into the bits and bytes of how to go about this because I'm being conversational, why not, it's my blog and I have the space to do so.

But.

A Live Version of Linux is something you probably don't have a lot of experience with if you are a Windows or Mac user.

It basically is a clean and complete version of the operating system that will run on your computer without using the disc drive.  A Live Version will allow you to "look around" your computer.  If you can't use this computer with this Live Version, you will find out quickly.  

Some live distributions even have something called persistence that will allow you to take your computer with you on a USB Stick and create data permanently.  Tails is one that is specifically designed for this purpose but I do not recommend this for a learner.  Tails is also for the more paranoid of us out there or who are traveling in places where they may lose their computer hardware.

Most of the software you will need to do your daily tasks will be available.  Most of the drivers for your older hardware will be available.  If you find something missing, it is on you to find a version that works.

However, the one I would recommend is a Distribution of Linux Mint.  

Let me unpack that a little.  Linux comes as a free download from a group who supports and puts the operating system together so that you can use it, freely.  That would be a basic and hopefully not vague description of a "Linux Distribution".  We typically call that a "Distro" but that's jargon, even if I do use that word myself.

Linux Mint is a specific Distribution.  It's well supported.  If it works with your computer, it will be a well prepared software suite.  It should talk to your hardware, give you a browser, have an office suite, and look familiar enough for you to at least get your toes wet.

Importantly that this is geared for ease of use.  It is designed to be familiar enough to anyone who uses a computer at all to be able to stumble around and do real work on it with very minimal help.  It also has a huge library of software that you can explore.

Remember, Linux is Free and Open Source, so you can do what you like with it, generally.  Office Productivity, Gaming, Internet, surfing, all the "normal stuff".

Another thing to consider is that there are different looks that you can have with Linux.  If you are coming from Mac or Windows, there is one look.  Mac looks very similar to the way it has for years and has evolved but kept that look.  Windows is more variable from version to version.  

Linux has many looks from the old command line, to some that look like Mac, others like Windows.  It all depends on how much "shine" and "Eye Candy" you want in your computing experience.

Since this discussion is about basics and getting a look into this thing on old computers, I suggest what I use.  It's called XFCE.  Everything is "there", and it is one of the quicker software suites.  Everything you need to do what you really need to get done and I haven't found much missing.

There is also KDE but since Linux Mint does not have a Distro bundled with it directly, that discussion is for a different time.

XFCE looks familiar and is designed to be fast and "light".  It also is a bit dated in the default look but can be dressed up greatly.  I have seen it modified to look like Windows 7 and otherwise to look like a Mac.  I use it lightly modified and have for about 20 years as such.  It looks "Comfortable to me".

The general process is for you to grab a large downloaded file called an ISO and place it on a suitable USB stick with specific software, then start your computer (or Boot it) from that.  

In order to boot my computer from a USB stick, I have to hit "F12" when I turn the computer on, but there are other keys to hit at power up such as enter or "F1".  

While that is a list of the general process, you need a few things.

A USB Stick that is clear of data and of a reasonable size of 8GB or more.

The file that you downloaded.  That is something that ends with a .ISO extension and will be fairly large.  This page is for the current download list of sites that have the current version of Linux Mint XFCE.  You will need to choose the location of one that is appropriate for where you live.

The link here will start the download directly.  The file was called linuxmint-22.3-xfce-64bit.iso and was 2.8 GB.

Finally a piece of software to get all that data onto that USB Stick correctly.  The software will write out to the USB Stick in a way to create it as a "Bootable Drive".  In other words, it will make it so that you can run that USB Stick as your computer's operating system and not disturb what sits on the hard drive currently.

I tested the process on a machine that I would prefer it not destroy the data, and it did not harm my installed software - it was live.

But you do have to get software.

Linux Mint suggests a program called "Etcher" but there are others such as "unetbootin".  Both are free, and will run on Windows/Mac/Linux.  Pick one. 

Etcher will burn or copy any ISO to either a USB Stick or a DVD/CD.  I haven't used a DVD or a CD in years, so stick with the USB Stick.

unetbootin is a little more specific.  If you have an ISO it will burn or copy the file out to your USB Stick.  If you don't have the ISO, it will fetch one from a list for you and burn it to the USB Stick.  

Slightly different, both work on Windows/Mac/Linux.

Once it is on your stick, boot from that stick and wait for your operating system to show up.  Mine took a little bit longer than expected because my laptop battery was dead.  I think the battery needs to be replaced.  

Linux Mint has some documentation on how to do the entire process, and while it is complete, it is implying that you are going to install on the actual hard drive.  In my case I'm not going quite that far.

At this point, you have burned your USB Stick, and booted from it.  You should see the Linux Mint Desktop with the green LM Logo in the middle.  You are now in a Live Linux session.  Poke around and familiarize yourself with what you have been presented with.  

At the lower left is your start menu of applications to explore.  The only icon on the desktop at this point was an icon to "Install To Computer".  If you are happy with the way everything works, go for it.  The steps to install are not too complex.  This will erase your hard drive and place a fresh copy of Linux Mint on your hardware.

It does look like Windows 7 doesn't it?  I rather like what they did with the default look of XFCE which can be a bit too much like Windows XP sometimes.

During the time that I install any copy of Linux I do a few things.

I create a swap partition equal to the size of my memory.  This will allow me to hibernate the computer.  There may or may not be extra steps to enable this, different distributions will enable hibernate, others do not.

I always encrypt the hard drive.  Always.  Using a complex password.  If someone breaks in and steals your computer, they will not steal your data.  Up yours, thief!

I set the computer up to log in as myself directly once the encryption password has been given.  In an environment where more than one person are using the computer, this is not for the best.  Linux assumes more than one will be able to use the computer if you set it up later for it.  This all is a part of the installation process but can be added later.

At any case, Linux Mint will allow you to get exposed to Linux as a rule.  It is based on Ubuntu or Debian depending on the version.  As such there is a huge amount of help available on the subject.  

Debian is known to be one of the most stable versions of Linux available.  It is what I use, but for someone getting exposed to Linux, it is a bit advanced.

Ubuntu is not my first choice because it is subject to Corporate Realities.  They come along with some things like Snap, which adds complexities to the operating system and slow it down.  

Whichever Linux you have, it is compatible with your goals and has a lot of opportunities for learning.

Now, if someone would make an affordable Linux Phone and show me how to get my sports stats off of my sport watch, I would be very interested.  The integration is the problem there, and I am way too active not to have them.

Wednesday, July 31, 2024

This is why I will never actually BUY a new Apple product.

Strap yourselves in, it's going to be a rant.

I am fortunate in that I have someone who occasionally gives me fairly current, but not new, iPhones.   They are still quite usable but not brand spanking new.

Mind you, had they been Androids, I would have rooted them and neutered the "google spying" on me with a hosts file but that's besides the point. 

I prefer to be in control of my own technology devices and not have to trust in a walled garden whether it be iOS or Android or Mac or god forbid, Windows.

A Walled Garden from any manufacturer does not benefit you, the end user, eventually.  It starts as a curated set of experiences that are for "your best experience" and eventually get corrupted into a spyware or commercial nightmare, or both (See Windows).

This is being written on a Debian Linux based computer that just purrs and does what I want. 

My current "daily driver" is an iPhone 12.  The problem is that the battery has faded to 81% health.  Whatever the blazes that is supposed to mean.  The end result is now that I wake up and the phone that was at 100% battery at 8:30 at night before the dog walk and sleep, is at 56% at 5:15 AM. 

Who are you talking to while I am asleep?  I don't know, I don't know why you are using battery other than to poll my sport watch.

At 56% at 5:15 in the morning, when I have to immediately top off the battery to be able to take Rack the McNab SuperDog (TM) for a first walk of the day gets very complex because I need this blasted phone to count my steps.

Levels of crap happen around me, usually sports related.

Bottom line is that the phone is "old" and failing to hold a charge.

So I went into the drawer that holds my "Inventory" of new-to-me phones and stumbled across the last phone that I moved off of before.  It was actually at a newer battery strength than the one that I am trying to move off of but I have others that are better.  Newer, with a stronger battery.

That means that my old-old phone is a candidate for "Erase and Remove" any trace of my self from it.

Here is where Apple truly earned my anger.

I told the phone that I did not want it. 
It immediately began a backup.
I hit "Skip backup".
It refused and demanded me to enter in a password for iCloud.
"Why?!?!?"
I typed in that password that I have on a spreadsheet and it rejected it.
FOUR TIMES.

Mind you, any other NORMAL operating system would have a little eye that would show you what you typed in clear characters but this being Apple, no.

"Hey Apple, you are Stoopid!" you may have heard me yell, or "similar".  Instead of it immediately giving me some sort of notification that it "got" what I was trying to do with it, the software simply sat there as if it were continuing on with its task.  No feedback, no way to verify what was happening.  Why would I need feedback?

After the fourth time, I used a normal laptop, this one, and a normal browser, Firefox, and logged in to iCloud with my password of record from the spreadsheet I keep.

So here I am an hour into this process.
iCloud logs me in and demands that I consider upgrading the account. 

No.  I am free, it gives me a whopping 5GB of storage.  Never mind that the phone has 256GB of storage on it that I can't access except by jumping through hoops, it wants me to spend more.  NO!. 

Nonsensical way of doing business, nag your customer until they go to the competition. 

Seeing that I have a rooted android phone on the desk, I am considering it.

The entire time that I am proving to this stupidly small, underpowered, and fragile device that I am using the correct password but it refuses to accept it, I'm feeling myself get more and more angry.

I simply wanted to get off the phone.  I did not care what was on it.  I did not want to save anything from it. 

It would not allow me to do it gracefully so what did I do?

With an evil grin I did what many technology users would love to do.

Still wanna know?

I took it to my porch.
I put it on the porch where it was concrete.
I went back into the house in a fit of pique and...
I got the sledge hammer.

It felt great to pound the damn thing.
In fact it felt so good to do that, I did it a second time.

Why on the porch?  Because I was able to get the garden hose and saturate the phone.  It was now bent on a jaunty angle, and I saw that it was starting to smoke.

Good.

I hosed the thing down and it made many sad Apple noises as it released the magic smoke.

In case you think I should have sent it off to be destroyed, securely, I will.  There is an electronics recycling event that I will take the accursed device to in the future along with some other old iPhones so old that they were orphaned by the accursed Apple.  Iphone 5 was the oldest, the newest being an 8 that is going to go to a new home in another state.

So if you have a Mac Book Pro?  I can fix it for you by installing Debian Linux on it.  In the case of the iPhones?  I hate them myself, find yourself an e-recycler and go for it.

As for Apple?  You will never see a penny from me, your practices seem to be designed for me to need blood pressure medications, and your websites are crap.

Add a button to enter passwords in the clear.  If I click on it, it's because I am feeling safe.

As Red Forman says in That 70s Show... Dumbass.
As Red Forman says in That 90s Show... Dumbass.

Wednesday, January 24, 2024

Freeciv (Multiple Platforms) - How To Connect To Server and Force or Recover Your Last Game

Ok while the topic sounds complex, really it isn't.

Freeciv is an open source game that "works similar" to the Sid Meyers game of Civilization, typically version 2.

While there are versions on the web, and more advanced ports of the game, I like having my game here on my own computer.  I run Debian Linux, almost exclusively, but it also runs on just about every other operating system out there including Windows, Mac OSX, BSD, and even OS/2 has an implementation of it. 

It's also a massive time sink.  I stopped playing it just before lockdown and COVID but recently revisited it since I realized that I was spending about as much time avoiding it as I used to play it.

May as well come back.

Except ...

When I launched the game, I got the dreaded "Sorry" message.  From what I have read, it's connected to how your local computer talks through a firewall to a remote server.  In this case, that is the game server, which in my case runs on this machine.   The game client, with which you interact refuses to start a server automatically and you get the messages that flash up on the status bar at the bottom ending with "You'll have to start one manually.  Sorry."

Frustrating but here is how to get around that.

1 Launch your Freeciv Client if not started.
2 Launch your Freeciv Server, manually, if not started.
3 Within the Freeciv Client, select "Connect to Network Game"
4 You will then drop into the game start dialogue.  Go conquer something.

Now... you do your thing, and save your game.  How do you reclaim your last game after some time?

Assuming you saved your game as "b.sav.xz", and it sits somewhere you know where you put it.  Assuming you are me on Linux (I don't do Windows) and took the defaults the file will be saved at /home/bill/b.sav.xz ...

1 Launch your Freeciv Client if not started.
2 Launch your Freeciv Server, manually, if not started.
3 Select the Freeciv  Server and enter this string on the command line:
    load /home/bill/b.sav.xz
4 When you hit enter, the scroll will inform you that it has accepted your save file and will change to that save.  It may be at the beginning of your turn, so assume that you can do the save cheat here, but it also may not. 
5 Switch back to your Freeciv Client, and select "Connect to Network Game".  Your game will be on your machine name.  Mine is //caribou.
6 You will be presented with the resume dialogue and you can now select "Start".
7 Welcome to that last turn you were at.  Go conquer something.



Wednesday, May 1, 2019

Distro Hopping is pointless because the Answer Is Always Debian

If you have an Axe, and you replace the handle.
Later you replace the blade.
Sharpen the blade again.
Chop the wood for the fireplace this winter.

But... Is it the same Axe?

There are indeed options.  Alternatives, even with computers.  That's what this is all about.

"This" is "Distrohopping".

Think of it as remodeling your computer instead of your bathroom - which is a very small area that results in your emptying your bank account into a small hole in the floor where all your money turns to sh... sewage.

Windows and Mac people don't really understand the concept, but it is more like the ultimate theme.

You see, I actually enjoy tweaking things on my computer.  I have the freedom to tweak away.  Change fonts, colors, even the entire way that the work flow happens on the thing.

I expect everything to just work.  Why not, I've got the tools.  I can change almost everything.

I stopped running Windows when I found out that Microsoft gave themselves the right to watch every little thing that I am doing on my computer.   Since they are not paying me for that right, I dumped Windows.

On the spot.  "F" that spyware.

Not completely sure how Mac fits in that, however I finally got the chance to play around with the Apple operating system and found its rigidity never fit with my innate curiosity.

So here I am on Linux.  Debian Linux to it's friends.  BSD People know what I am talking about when I refer to absolute control, so come close, little cousins, lets laugh at the normies.

I have a spare laptop.  Still quite useable, an i3 with 4 GB soldered in.  That is all it will ever be, and it was bequeathed to me when a friend passed.  So we shall call this machine David as a result, In His Honour.

David doesn't get used too much.  It is the slowest "i" machine I have here, but with the right operating system it will run quite fast enough to be useable.

By the right operating system, I mean a Distribution of Linux.  I did try a version of BSD called Nomad BSD that boots from a stick.  It says that it never touches your hardware, which is intriguing and it does show promise.

Since BSD is even less used than Linux in the home market (Less than 1% vs about 2-3%) it is inherently more secure due to "Security by Obscurity".

But I digress.

I run Debian Linux on my computers.  It is Utterly Stable.  As in that granite counter top that some have will chip before my Debian computer will crash.  Stability comes from the Debian Foundation testing the ever loving daylights out of it.  I got tired of instability along with Windows' snooping, and settled in on Debian.

Stability comes with older, more stable software due to all that testing, but it can be quite old to be on what is called "Debian Stable".  That is a problem for some people who want newer and more cutting edge software, but that is easily solved by installing "Debian Testing".  It's the last (arbitrary last) time Debian moved the "Unstable" version to save it off.

As of this date, Debian Testing is the "Release Candidate" for the next version of Debian.  I am running that every day on two computers.  Still stable, still no problems.

Since Testing is what many other foundations use for their own base to spawn off a software library for their own Distribution, Testing is much more stable than many other distributions efforts.

In fact, the largest distributions, Ubuntu, Linux Mint, and many others are all derived from that.

Ok, enough background.

I wanted a change for David.  Ubuntu just recently went to their newest version called Disco Dingo, and since I still unironically listen to Classic Disco, I chuckled at that name and installed it.

Except it had no way to hibernate David.  David is also a laptop and a mere "suspend" is worthless.  Write the data to disc (or SSD in my case) and turn the thing off so you are not wearing out the batteries.

Ubuntu is the base for Linux Mint.  The hibernate issue is a requirement so any distribution without hibernate is a "Non-Starter" for me.  

Ubuntu?  Fix that.  It works in Debian Stable and Debian Testing.  You being arbitrary because "Some Systems May Crash So We Turned Hibernate Off" is an explanation on the order of having your child paint their younger sibling with Peanut Butter because they liked it.

It Does Not Work Because You Broke It, So Fix It.

That leaves Linux Mint off the table too as well as anything based on Ubuntu or derivatives including the alphabet soup of versions.

If you're counting, this is Ubuntu, Xubuntu, Lubuntu, Linux Mint, plus some other newer distributions like MXLinux and a few others that the names slipped my mind.

Yes, I can install another version of linux on a laptop in 15 to 30 minutes while watching old bad sitcoms at night, and I have, and I got bored with it.

Another thing I require is a fast interface.  I settled on XFCE4 because it looks like the versions of windows, broadly, before they went insane and decided everything should be giant ugly blocks and resemble something like Legos On Acid.  

My usual configuration of XFCE4 looks like Windows 7 once I get through with it, Base fonts are usually something that looks like the London Underground with a font called "Gill Sans".

Helvetica and Arial, as fonts, both look like hell.  A Lower Case Letter L and an Upper Case Letter I should look very distinct.   With Helvetica, it does not.  It irks the daylights out of me, along with the strange spacing between the letters (Kerning) and other very subtle things that some people have grown used to without realizing it.

So after churning through the top ten Debian Derived Distros, I tried CentOS.  It's a Community Based option that is the shared version of the same software that runs on all the servers.  At least all the Linux Based ones that aren't running Debian.

It was what I started with on Linux around 2000, give or take a few years.  I had a Pentium 3 Mobile laptop that I kept on the couch in my house in Philly down in the living room that was still useable in 2013 or so when CentOS dropped all support for that particular version.  Centos 3 I think.  Maybe Centos 4.  I forget.

But, CentOS is not geared towards you - or me.

It's a place to rest my head.  To hang my Skating Helmet I guess.  You see, while it is a Server Operating System, and I could do some serious web development on that little computer, it has a major problem.

The last version of CentOS 7 was announced, and while they have a long term support for it, they do not have an upgrade path for it.

Even Windows 2000 had an upgrade that you could run to get to XP, 7, 8 (ick), 8.1 (UGLY still) and that obscene spyware that is called Windows 10.

So it's a stop gap.  I wanted something different.  I'll continue all that searching later.

The laptop runs well on Centos but it won't stay there.  I'm considering a BSD for it, but not just yet.

The other problem I have with Centos is that it uses a different piece of software to install software called YUM.  They also have a newer package manager, but it also has the same problem that I see and it's called Dependency Hell.

It is what happens when you get a circular reference while installing software.

A game is written.  It needs something to manage the way a sprite works or how it gets information into it.  That is in a library.  It requires a very specific version.  So installing the game requires you install both, Manually. 

By Hand.

But... Debian (any version) does not require that.  The Debian Foundation made very sure that it just works.

Period.

So why fuss with YUM (or DNF) and Dependency Hell.

Especially when Debian has the same software library that everybody else has and I can install what I like on it.

All that just proved what the meme says.  When installing Linux, if you have any questions:

"The Answer Is Always Debian"

Seriously, anything I want for the home, for a server, for a laptop, The Answer Is Always Debian.
  • Server to write web pages?  LAMP using Debian.
  • Wordpress Server?   LAMP with Wordpress using Debian.
  • Graphics Work?  Debian.  In fact, it comes out of the box with Inkscape for vector grapics and GIMP for very fine photoshop work, as well as Krita and others.
  • How about Video Processing?  Debian.  Install Flowblade for Video Editing, Handbrake for Transcoding.
  • Um...Word or Excel and the rest of Office?  Debian.  Libre Office is extremely stable.
  • An old Windows Program?  Debian.  Add WINE and you can run some, but not all, Windows programs once you figure out the configuration.
  • File Server?  Debian, install and configure Samba.
  • Learn Spanish? Watch Video? Listen to the Radio?  Debian.  Doing all that right now.
  • How about DOS?  Debian.  DOS Box works great.
Haven't you got this down yet?  

Actually the exception people always bring up is Windows Games.  Some of them run on WINE, others via Steam.  I don't play those.  Too busy, just check that list above and ... you get the picture - with graphics, labels, and effects added.

I won't go on here.  I have a feeling that little machine, David, will eventually end up with Sid, because Debian Sid is cutting edge, more up to date than Ubuntu or what ever flavor of the month that people are enamored with on this week, and because it is a Debian flavor, it will be more stable than you should expect.

Just be aware when they upgrade software, it could break.  All the names for the different versions of Debian are from the movies Toy Story.  Sid is the neighbor kid that breaks all the toys.  Debian Sid could break your toy (computer) so do a backup before you proceed with an update or an upgrade.

Yes, even Debian Stable should be backed up, and I do it once a week.  After all I do author content, like this blather.

Yes, you should too, even if your preferred "distro" is Windows.
Even you Windows people.

Ick.

So I ended up going full circle.  I started on Centos, went "elsewhere" and put Centos on David.  I will get frustrated with it when I can't play FreeCiv because I can't find some obscure library because YUM (or DNF) is not very tasty.  I'll eventually give in and install Debian Sid, type in sudo apt install freeciv, it will install, it will work because:

The Answer is Always Debian.

So why did I distro hop again?  Because I have the memory sticks and the time to actually "Play with" my computers instead of "Play on" them!

Wednesday, January 24, 2018

Coffee and Backups don't mix well, or how I broke and rebuilt my Debian Linux install in two hours

Maybe the universe wanted me to slow down.
Maybe I just wanted a second mug of coffee.

Or maybe my fascination with automation went a little too far.

I never used Mac OS for long.  Their walled garden approach of curated software just wasn't for me.  Too limited.  I don't care for handcuffs, whether they're steel or lined with "mink".

I got away from Windows when the current approach of Microsoft insisting that You Are The Product with Windows 10 and putting in "Telemetry" so they can know how their software is doing.  You agreed to it when you clicked through the user license.

Spyware.  It is offensive.  They watch everything you are doing. 

So here I am on Debian Linux.  Happy. 

Linux does not hold your hand.  It doesn't make happy noises at you.  It does the job extremely well if you are a casual user who just wants to surf the web. 

It does not advertise at you in exchange for spying on you while you look at news, sports, or weather.  I'm looking at you Windows.

It has its own drawbacks.

Linux isn't great with cutting edge, absolutely new out of the bleeding edge hardware.  Battery management is a bit lackluster, battery life is reduced on Linux as they work to improve the drivers.

It can run some Windows software if you know what you are doing in WINE, and it can even run Windows in its own box if you want to be fancy.   But to be fair, you can run Linux on a Windows computer using the same sort of software.  It's called a Virtual Machine, and that's pretty cool. 

Basically "Yo dawg, I heard you like computers, so I put a computer inside your computer, so you can run computers".

I have done the same with Windows in a Virtual Machine many times but I keep an old machine with Windows 8.1 gathering dust under the furniture for an emergency.  I also have the entire complete environment that I was using on my old Windows XP install back when I started the blog.  I can run it, virtually, on my Linux computer.

But never mind that...

All that software has to be backed up no matter what you run, right?

You are backing things up aren't you?

You aren't?  I will let you decide if you are being brave, or just stupid, and leave it at that.

I will put up with the quirks in Debian Linux in exchange for stability, when I don't break it.  My one computer has been Hibernated 170 times as of last night in a little more than 180 days and is still stable.  I don't reboot when I don't have to.

I back things up, about twice a week.  I don't have to do it so frequently, but I do "Author Content" like this blog, as well as Video and Audio, Graphics, and my laptop does duty as a TV/Radio/Graphics Arts studio on multiple levels.

On Linux, all that software is free.  That also includes my office software, but you go on paying for Microsoft office. 

Backing up your computer on Linux is fairly painless.  When I am through, the end result is a complete clone of what I have on the computer.  Remove the hard drive, swap in the external drive, and I am back running with just one file system check "fsck /dev/sda" and a reboot.

Just like on Windows or Mac, you need an external hard drive.  USB 3 for the speed, please, and it has to be at least as large as your internal hard drive.

From that point onwards it is just technique.

Technique was what I was lacking on that Saturday. 

You see, I wrote a script for the computer to follow.  The script works if everything is correct and in place.  It backs up my chip where I save my personal writings to the hard drive, then backs up the hard drive.  Then to take it one step further it updates the computer's software, checks to see if there are any spies lurking on the hard drive by scanning for viruses and root kits.  Finally it plays a chime to tell me that it was finished and you were a good person for running it.

Well maybe not that last bit but it is complete.

I also got a little slick and simply told it to do everything without waiting.  Should not have done that.  It's a lot to stand on its own with the stack of old hardware that I use on a daily basis.

Oh the hardware works, but the wet-ware doesn't always.

I set the thing going, stood up and just as it started to run to backup the disk, it barfed.

The clone of the hard disk, the actual backup, failed when I bumped the cable and it fell out of the front of the "Destination" disk.

Then it went ahead and updated the operating system, and did all that other stuff.

Automatically.

When it ended I had a computer that showed me everything that I had done wrong to it over the last couple weeks by not starting up again.

I was presented with a black screen telling me that the boot process had stopped and I should try again.

I did, and it repeated itself.

Linux is one of the last refuges of the computer tinkerer.  If you like to do that sort of thing, you can tweak to your heart's content.  Mine looks a lot like Windows 7.  I could just as easily make it into something that looks identical to a Mac, but I want speed.  It runs about twice as fast as this same computer runs under Windows, so I have it.

When I went to enable the second video chip inside the computer, I followed an old guide on how to do it and predictably it had failed.  That was what showed when I booted the computer.

So Linux kiddies like myself, don't go and over-automate.   Step by step.  Sure, your machine CAN do it, but if you're sitting at a desk, wanting another mug of coffee, be certain not to knock the cable out of your backup drive because if the next step is a full upgrade of your computer, you may just be stuffed.

However annoying as all that is... it's a fast fix.

I reinstalled the operating system, Debian Linux 9, in about 15 minutes.
Brought it up to date in another 30 minutes.
Copied over my "home directories" in another 90 minutes.  It was massive.

Computer back to normal from a bare bones install in about 2 hours.
A few more tweaks to get file sharing working, and making it able to play DVDs.

Lesson learned, slow down.

Oh and if you're following along and wondering, the specifics are here since I use this as a scratch pad for my memory.

My computer's C Drive shows up on /dev/sda with operating system on /dev/sda1, swap on /dev/sda5

The backup D Drive shows up on /dev/sdb and will be a perfect clone of the computer.

The syntax of the clone is one line run as root (administrator for windows people)

dd if=/dev/sda of=/dev/sdb conv=noerror,sync status=progress

Just copy the chip to a place on the hard drive manually first.

*sigh*  And don't get a mug of coffee by putting your hand on your back up drive when you get out of the chair!

If you will excuse me, now, I have a mug of coffee to make.  Some home roasted Guatemala Huehuetenango that I roasted last week.  Should be just perfect this morning.

Ahhhh.

Wednesday, August 30, 2017

Securely Erasing Your Old Hard Drive Easily with Linux or a Mac

I have been thinking of the easiest way to completely and securely erase a hard drive lately.  I was given two old laptops and was asked by a dear family member to help get some personal effects off of an old laptop.

To keep this short, I was able to do that using an external hard drive case and my own machine.

Since I use Linux, I am immune to windows viruses, I can simply copy the desired data to my computer.  I now have a directory of 1.1 GB of pictures, writings and other information on my desktop which I will burn to a DVD and say "Here you go, enjoy".

Mac people and other BSD people can rejoice in that as well.

She'll need to scan that for viruses before she looks at it in detail since she's on windows.

Ok, that's all done right, just toss the drive in the nearest secure shredder or sneak it into the trash or....

Not so fast.

You see, data can be forever.

A CD typically lasts 10 years.
A CD that "you" wrote may not last that long, say 5 years.
A DVD will last longer, I haven't had one that I wrote fail yet, and some are well more than 10 years.

I still don't trust that removable and optical stuff.

But, if I can get the computer I am looking at now to recognize the drive, the data will still be there.  Useful or not.

Even those old 500 MB drives from the first days of the IDE era can be read if I have a way to convince my laptop to read it.  How?

Get an external hard drive case.   You need to know what kind of hard drive you have in your hands.

IDE External Cases are still available.
Serial ATA or SATA cases are available in USB 3.0 and 2.0 if you want cheap.

I paid under $5 for mine when they were on sale.

Put the drive in question in the case.
Plug the drive case into the computer.

Assuming that your computer can see the drive and the data on it, now what.  You've got your data off and you want to securely erase the drive.

Here's where Linux comes in to play, although a Mac will work as well.

Don't have a Mac or Linux computer?  The easy fix is to download a copy of Ubuntu and burn that to a DVD or to a memory stick and boot from that.   That is all done via a program called unetbootin and it is available for any modern operating system that I can reasonably think of.   Follow the instructions and you end up with a bootable USB stick.  Boot from that stick.  Plug the external drive in.

Now you're looking at Linux.
(If you're a Mac guy, you can to follow this on your Mac.)


Commands from this point forward will be in BOLD


Start Terminal.

Get root with "su" or "sudo su" and give it the system's password.  

Verify the address of the external drive.  "dmesg" will give the device name at the end of the display.  You can also find it in gparted (if installed).  The address will be similar to /dev/sdb.

Verify it again.  "Measure twice and cut once".

In terminal enter the following command - I am assuming that the operating system thinks that the external drive is on "/dev/sdb".  You need to know which partition and this will tell you where it is:

fdisk -l /dev/sdb

(Man, I hate Helvetica - That is a lower case -l )

On the Windows drive I have in question, it gave me two partitions - sdb1 and sdb2.  Windows being what it is, will almost always use sdb1 as the boot partition, and it will almost always be the largest one and the one in question with your data.

Since I have cleared out all the data that I would be worried about in an earlier step, I do not have to worry about deleting any partitions.  But I do have to create a space to work with.

Within terminal, mkdir work will make an empty directory to play with.

To access the data on the external drive: mount /dev/sdb1 work

To verify you have connected to the drive, cd work 

To list any data files you left in that directory, ls  will show you.

To create a big file to overwrite all that empty space enter the following command.
    dd if=/dev/urandom of=junkfile.txt

That dd Command will write random garbage out to the file called junkfile.txt until it runs out of space. Out of Space is a bit misleading because certain disk formats have maximum file sizes, so just run it again with a different name on the "of" portion of the command - like "junkfile1.txt" until you are satisfied.

That's about it.   Your empty space on the drive has been filled with garbage.  You can delete that junkfile.txt and use the drive as a floppy if you like.  Since you previously deleted things that you wanted to be securely deleted, this happened with it was overwritten with random data.

The theory goes that with the "new" and "large" disks we have inside of our computers over the last few years, simply writing garbage out would be sufficient.


The Geek version was that the old drives had enough space between tracks that the data would sometimes, but not always, be mirrored and repeated in the empty spaces.  Some of the information could be "recovered" by reading that space.

You don't have the technology to do that.  Any "normal" person finding your drive would not either.

New drives over the last few years are so densely packed that that space between the tracks is too small to store extra copies of the data.

If you are super worried (paranoid) about your data, give the drive to a destructive person, and some hand tools, and let them disassemble it for the magnets.  Or run over it with a truck.   Or both.

But this is as far as I go with my own personal data.

Friday, August 7, 2015

Firefox Security Hole Is Why You Need An Adblocker And An Update

Windows:
  • When I clicked "Help" then "About Firefox" it immediately downloaded the patch.  
  • Click on the "Restart Firefox To Update Button"
Linux (Debian)

Assuming you have "real" Firefox installed and the sources in place.
  • Open Terminal as Root.
  • Smile because you have Root.
  • apt-get update
  • apt-get upgrade
  • Restart Firefox when you click on the button that appears.
Other Linux Distros will vary, of course.

Mac apparently does not have the problem.

What happened?  Hackers.  Simply put, a Hacker exploited a hole in Firefox so that advertisements could push some code onto your machine to take it over.

Now, this business about ad blockers.

I run one and I use it very aggressively. It is for this reason.  It is also that I truly hate being pandered to and watched.

The latest trend is to watch what you are doing via "tags".  A 1 pixel "dot" of a picture will be pushed to your browser as an anchor for them to watch what you are doing.

The best thing for you to do is to run an ad blocker.  You tell it what to block, and yes, it gets very technical because you have to take responsibility to block these things.  For the most part, an ad blocker with (free) subscriptions will block most, but never all, of these nasties.

When you run an ad blocker you will also notice that your browser runs much faster since it isn't trying to paint all those ads for all those products that you will never use.

Lets be honest, have you ever actually clicked on an ad intentionally?

Me neither.

Heck, I don't even see youtube commercials because I run an ad blocker.

The easier one to use is Ad Block Plus.  It is controversial because they allow certain advertisers to pay *them* to be allowed past the blocker.  I would recommend this for basic users because unless you want to learn how to use it, it's pretty simple.

The one I am using is called uBlock.  I'm still learning how to use it.  It removes the ads, but I haven't figured out how to make it remove the blank space the ad created.

It's up to you.  Ads and Hackers, or a better browsing experience.  I know what I chose.

Now, if you will excuse me, I have a browser to restart.

Tuesday, February 3, 2015

Another Day, Another Adobe Flash Exploit

Flash used to be what I would call "Update of the Day Club".  Start your computer and get into doing what you need, and surprise of surprises, there would be an update window popping up for Flash.

We seem to be back to that.

It's a nuisance because with at least Firefox, it forces you to close your browser and go through the nonsense necessary to restart it.  Since Firefox isn't exactly 100% accurate in reopening pages and tabs, I hold my breath each time.

In this case, there's no reason to trash Firefox.  There was an exploit found with "Shockwave Flash" as it shows up in the addons page and it tells you it wants to be updated.


Except.


There is no update as of this writing.

So? What do you do?  Tread lightly, my friend.  What you need to do is put yourself through a bit of annoyance or uninstall the blighted software completely.

Since the annoyance is less of a problem than uninstalling Flash at this time, I'll show you how to do that.

What I am doing is to tell the browser to ask me to run it.  I was going to uninstall it completely.  Youtube does not use Flash as a default to play videos any longer, favoring the newer HTML5.  Facebook does use Flash and at this point it does not apparently use HTML5.

Here is how to go in and tell Flash to run when you want it.  It will leave an ugly placeholder in Facebook with the a grey Lego brick or the international symbol for no, and some warning messages, but you can always turn it back on to watch that particular video of a dog doing something cute if you really want to.




In Firefox:

In the address bar enter:   about:addons and hit enter to load the page.



On your Addons page:
  • Find Shockwave Flash
  • Click the button that most likely says "Always Activate" and select "Ask to Activate"
  • click the link to "Check to see if your plugins are up to date" to open another tab.



On your "Check Your Plugins" Page
  • Click the big red button that says "Update Now" under "Potentially Vulnerable Plugins" and follow the prompts to update your Flash.
  • This space intentionally left blank.
  • Flash will update through multiple steps that are documented on Flash's site.  
  • They include downloading a program.  
  • Make certain that you clear the box that asks if you want to download any "Optional Offer" like McAfee or any other "helpful" programs since they are not helpful and will simply clutter up your computer or it could even lock it up.
  • Flash's install will require you to close your Firefox, so save your work.
  • Note:  As Of This Writing, there is no update to Flash that will fix this problem.  That is why I told you to set Flash to "Ask To Activate".
  • Flash will not be updated on Android, Apple's IOS, or Linux.
  • Flash will eventually be updated on Windows 7 or newer, or Mac OSX... just not as of this writing.

Wednesday, January 28, 2015

Youtube Prefers HTML5 Video to Flash - But What About All That Old Stuff?

Flash is one of those necessary evils.  It was like Java, reflexively installed onto computers that weren't really quite up to the task of running it. Just checked, nope, I don't have Java - and you should not either.

The computer would bog down, act cranky, and even crash when Flash was running.  Flash also has persistent cookies that you had to remember to delete.  Some people would have those cookies for years.  Security is a bear.

But there is one more nail is in Flash Player's coffin.  Youtube is now preferring HTML5 over Flash when you watch videos there.

Why is that important?

More and more Flash had been the target of people wanting to hijack passwords, insert viruses, and track your movements with those persistent cookies.  Adobe had put more and more patches into it and it became a joke.  Start the computer, patch Flash, restart the computer and do your work - every single day. 

Worse, some people that I supported would simply tell the update check to go away and never come back.

You are getting closer to the day you can do that for good. Many of us already have.

My Linux computer, currently Xubuntu, is not even supported on current Flash Player, and I did an uninstall of it a couple weeks back.  I didn't see the value of keeping an old piece of software on something that was running well without it and I almost never used.

My windows computer will get the same treatment.

About the only thing I ever do with Flash is to watch videos on Youtube.  The few games that I have kept over the years will get deleted.

That's about the only problem that I see with this.  Videos can be streamed using "native tools" but the content that was created in Flash will simply go away.  Quite a lot has been created in Flash over the years, even a few Broadcast TV Programs, and many commercials as well.

After all, when was the last time you played a video tape?  Beta?  VHS?  Vinyl Records?

That is the kind of problem that Librarians have.  Content on a platform that is unsupported.  Music on Cylinder Beeswax Records from the Edison era.  78 RPM records.  Heck, I even have a few 45s floating around here.  Silly looking 7 inch donuts.

For most of us, it's simply easier to find the track elsewhere and save it on something new.  But for librarians, especially archival libraries, they have to worry about that sort of thing every day.

Anyone still have and use a zip disc?  Nope?  Didn't think so!

So the net result to you is that if you are running one of the four major browsers in one of the top four major operating systems on the desktop/laptop you're fine.  Just make sure your browser is up to date.  Firefox, Internet Explorer, Chrome, and Opera all work with HTML5.

See, that's easy!

The iPhone and Android based phones will typically use the Youtube client or the browser will take care of it.

One aside though, with Android, it's usually recommended that you do not use the base browser and go out and grab either Firefox or Chrome.  The reason is that if you are on an older version of Android, Google is not going to support the old "Browser" browser.

So it's just safer that way.  Listen to big brother even if it is a bother.

Ok?

Tuesday, December 2, 2014

New Firefox and Other Browser Update Weirdness

I'm settling in to get some things done and notice a blurb.

There's going to be a rollout of the next Firefox over the next few weeks.  I pay close attention to that because I use Firefox extensively.  I'd be lost without it. 

I'm so tightly trained to use Firefox that I have to step back and actually "think" how to use any other browser.  Since I use Windows 8.1, Windows 7, Mac OSX Mavericks, and Debian Linux on a daily basis as well as Android and an occasional toe dipped into Apple's iOS, I have to remain as flexible as possible and Firefox is on all of those computers. 

Except the iPhone but I hardly ever use them.

I will eventually install Firefox on the Windows machines when it tells me that it is available.  I'm not in a rush.  The last time they changed the way it looks, the User Interface or UI, it borked it for me.  I ended up installing things to make it look the way it did before I updated the browser while growling at Firefox in general.  Keystrokes and mouse clicks and all that moved.  They removed the status bar. The bookmark strip got lost, or rather hid, and that stores some of your bookmarks.  They removed the title bar.

Why?  Never heard a reason, but I installed Classic Theme Restorer and it brought it all back.  Immediately after that I installed Adblock Edge to get rid of the blasted adverts and other nasties that hitch a ride onto your computer as a result.  More Privacy means for a faster experience as well as fewer viruses and spyware pushed onto your local computer.  Nobody actually "Likes" ads anyway, we accept their presence and usually are annoyed or distracted by them, but "Like"?  I doubt it.

Rule Number One of Software User Experience (UX) is if you change the way something looks, you will break the way people work.  I learned that back in the days of the Mainframe and College. 

Rule Number Two of Software User Experience is that if you do change it there will be unintended consequences.

In My Case:

I have a computer that has what they call a "Clickpad".  It's also running Debian Linux.  I know Linux in general fairly well, but Debian Linux doesn't manage Clickpads well.  Clickpads are those weird trackpads that are flush with the case.  You click on the pad instead of having normal buttons like every other Synaptic trackpad. 

I do know that is fixed in the next version of Debian, and I do know how to fix it now, but it is an annoyance that I have to deal with.  It basically forgets that it has a physical button in Debian Stable/Wheezy, and you're stuck with whatever you touch on the trackpad.  I only get a Right Click when I tap.  I have since configured a two fingered tap to be a Left Click.

What that all did change did is to break the way Firefox works.  You see, on that particular computer, I can't Right Click.  I can't get the pop up context menu.  They changed the UI right away from it. 

Since that machine is Debian Linux, I have to wait for the next version anyway.  It isn't even using Firefox, but something rebranded as "IceWeasel".  To put it short, and sarcastic, Debian had a spat with Firefox over the branding.  Since Firefox/Mozilla doesn't want anything proprietary at all on their default install, someone in the Debian Project grabbed the source code, recompiled it, created the graphics, and renamed everything to IceWeasel.  It works like Firefox but is Older.  About a version back. 

If you're running Stable, or Wheezy, you could be quite a few versions back.  Jessie has a more current Firefox, but it also has a lot more annoying bugs in it because it is "Testing".

But Windows?  Yeah, you'll get it soon.  Just remember Classic Theme Restorer and Adblock Edge, and you'll be fine.

As for the Mac?  When it is available, you'll get a blip on the bottom of the screen telling you you're ready for an upgrade.  You can also go back to the old theme if you want, but I do recommend Adblock Edge as well.

Why the harping on the ads?  It's a much faster browsing experience when you surf a page without the ads.  No blinky pictures, crawling things, or text ads.  If you don't download them, you use less data.  Things pop faster.

Trust me on that one.  You can always turn it off later.

Wednesday, November 12, 2014

Thanks, Apple, But I Think I'll Pass on Yosemite

I have computers on Windows, Mac OSX, and Linux.  Various levels and flavors of all of the above actually.

There's always the question as to when or whether to upgrade them.

Linux is pretty simple - when your distribution changes, give it a week or so and listen to the chatter.  If the chatter is clear, go for it.  I've never had a problem here.

Windows.  I have a Windows 7 machine that won't get upgraded because it's an old Core 2 Duo machine.  It will either die before Windows 7 does or it will get given away.  Windows 8 became Windows 8.1 as soon as it was offered to me.  Windows 8 was an abortion, Windows 8.1 is manageable.  Just add Classic Shell and it cleaned up almost all of that Modern/Metro hideousness and pushed it aside.  Classic Shell made that ugly block land go away and replaced it with all the desktop land goodness that I need to get things done.  It's still there, lurking under the hood, but I couldn't tell you the last time I had to use one of those ugly blocky programs that Microsoft mistakenly thinks I need to slice, dice, and make julienne fries.  Other than network access which the Modern/Metro interface gets in the way massively and then drops you back to a desktop app to actually get the job done to disable and enable things.

I don't.  'Nuff said about that.

Then there's the Mac.  I always liked the sleekness and the design of them.  Beautiful hardware, a well thought out interface.  When I need to use my Mac, it is almost always a pleasure.  I got the thing, installed Snow Leopard, and it purred.  When the Mavericks upgrade was offered, it was free so why not?  I noticed no real problems there, and since I am a lightweight user of my Mac it's fine.

I've heard reports that Mavericks slowed memory access from the prior version, Lion, but like I said: I'm a lightweight user so I don't notice.

They put out a new operating system, Yosemite.  Since I knew about the memory speed issue, I thought I'd wait.  Let the experts go after it.

I'm glad I did because there are some privacy issues that made me uncomfortable with things.

Everyone likes having search functions on their computers and generally don't think twice about how things are done.  What happens is that that information you are looking for is sent back to the program to check its indexes and report back to you when it finds what it thinks is the right answer.

That was all well and good back in the good old days when it was enough just to search this current computer.  Some smart people decided that they'd go out and do a search on the internet to give back more content.   It's a built in function on the desktop called Spotlight that phones home to Apple and does that search. 

Fair enough if you're actually doing an internet search.  But why do you need that search to go back to Apple if you're just looking for a file on "this" computer?  If you are searching for movie information or maps, it's going to send back your current location, as well as the current device you are on, and anything else that it thinks is pertinent such as language settings and what apps you have used.

To be fair to Apple, you can turn this off, but I have done enough support to know that unless someone turns that sort of thing off for you it won't get done. 

The flip side to that is that if you have turned it off, location services are one of those things that get rather naggy to have turned off.  Your searches get a helpful prompt asking you to turn on location services and eventually you wear down and just leave them on.

Checking my Android phone, location services is turned on there, and we know that all that sort of thing goes on there with Google.  If you want a smartphone these days, you are either going to have Apple or Google put their hand in your pocket and watch over every move you make that they believe they need to, it's part of the game.

The idea of having big brother was scary enough when I read 1984, but the reality is that we all now have that big brother in our own pocket and don't think too much about it.

Nothing to see here, keep moving on.

All this was reported in the Washington Post's technology blog a while back, and apparently Apple has been taking heat about their decisions to make these changes. 

There is a website called fix-macosx.com that promises to give you information how to take back some privacy and turn off some of Apple's data collection.

This all is a change of heart since the old days where the Mac was more privacy friendly.  Now, they're going all in and sucking down all this info while you happily go along with it.  Since Apple is notoriously tight lipped about what they do internally, I suspect that it will be a long time before we find out just exactly what they're doing with all that data.

No thanks, I'll pass.

Wednesday, October 15, 2014

Security? Poodles? Sandworms? Here we go again.

If you have any passing interest in computer security, you have noticed a few announcements go by.

If you don't, you may think it is overwhelming.

Yes, and Yes.

If you are worried, there's a simple solution.  No matter what the computer, no matter what the operating system - make sure you are up to date.

Most home users are set up "from the factory" to automatically get updates.  This is true on Windows and on Mac OSX.  My Linux computers pop up a friendly sunburst to say it's got updates too.

In both cases this will solve these two problems.

Poodle - Make sure your browser is up to date.  Windows update will fix this.  It is a low level problem that is more of a headache for systems administrators. So it's not a major headache for most people.

The long description that 99 percent of us can skip is that it's a bug that Google has found in the Secure Sockets Layer (SSL) version 3 that is seriously out of date.  It shouldn't be used at this point anyway, but some folks haven't updated that.

Sandworm - It's a worm that goes after Powerpoint files.  Since Windows machines are set up to ask you if you want to open the file, don't.  If your computer asks you to open anything with a ".INF" extension, don't.  That is how the worm will propagate.

How to fix it?  Home users, make sure you go through your Windows Update.  It's a windows problem.  But anyone else should be running the most up to date version of their operating systems that they can.  If their operating system is no longer supported, it's best that you upgrade as best you can.  No more XP for you.

While you are at it, make sure your virus protection is up to date and you may want to just force a run of a full scan.  You never know what is running around on your computers these days and it is just good practice to do this once in a while.

Thursday, September 25, 2014

Shellshock - A BASH bug that effects Linux and Mac OSX ... and everyone on the web

Yeah, scaremongering isn't the best.  Luckily for those of us who run Linux, the fix is easy.

It also effects some Mac systems, although you will need to test and get your own upgrades.

It is possible that it effects Android systems as well.  I did the test on my tablet running CyanogenMod this morning and it was safe.  Your Mileage May Vary.

How this effects Windows is straightforward, it's another one of those low level things in a web server that can bite us later and since Linux powers many websites, you are effected indirectly.  Think of what the Heartbleed problem was and how you went in and changed all your passwords to protect yourself.  Good idea to start changing them again!

The bug is called "Shellshock".  The specifics is that it allows a ne'er do well to hack into an unpatched Linux server and gain full control via something called the BASH shell.  That is a bad thing because with control over bash, you can gain full control of the entire computer.

There is a test and full explanation of all the geekery under the hood here at this link at www.ArsTechnica.com if you care to dig deeper.  Basically, just go in and do a full update of your machine and make sure you see bash updated. 

The test is this line in terminal.

 env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

If the system is vulnerable, the output will be:

vulnerable
 this is a test


An unaffected (or patched) system will output:

 bash: warning: x: ignoring function definition attempt
 bash: error importing function definition for `x'
 this is a test


Since Mac OSX is based on something called BSD and bash comes with it in their terminal.  If you have an older Mac that is acting as a server, look into a patch.

I personally did the fix last night on my Debian system while I was half asleep.  Really trivial to fix.

In a root terminal -

apt-get update
apt-get upgrade

It went out and updated my list of available updates, then upgraded those that needed it.  The package "bash" was included.

CentOS came up this morning with a bubble telling me to install updates.   It worked.  No problem.

I tried it out on my RaspberryPi machine and yes, that was affected.  The patch worked, and the picture is below. 



Here's the thing, it may effect Android tablets and phones depending on whether bash is installed.  It's a very basic and well known tool, so you will need to make sure you can patch the tablets. 

However, it's highly unlikely that some average dude walking down the street with a year old Android phone with an unpatched system will have a problem.  Someone would have to know you're there, get into your machine, and do the hack to gain control.  You aren't the person they would be looking for, it's that big web server sitting somewhere like a store or a bank that they're going to hack.

Just accept the updates if you have manual control of whatever computer you are using, phones and tablets included.

If you are "going into" your machine, set your update preferences to allow security updates automatically while you're at it since that makes it easier to administer the machines.

Friday, May 23, 2014

Is It Me Or Is Everyone Updating Computers These Days?

The short of it is that since you're reading this on a computer go and do your system's update.

Windows almost always has updates.
Mac OSX has one for Safari for the supported operating systems.

Even my Linux system needed it, but that's normal when you have 1500 projects updated by probably as many different groups of people.

What got me started on this was that this morning before sunrise when I started the main computer, I saw a "helpful" yellow text show up on Windows.  It was warning me that there was an important update available.

I've gotten so that Windows seems to be the Boy That Cries Wolf, but ok let's check.  Definition Update for Windows Defender.   It's a built in virus scanner in Windows 8 and above.  It's the love-child of the old Microsoft Security Essentials.  I've used it for quite a few years now, and while I trust it, I have grown to expect a message telling me to update.

Since it is Windows, it is the operating system everyone seems to like to attack.   More ways than one, I'm afraid.

I installed that particular update, and since it didn't demand a restart of the system, I shrugged and got on with my business.

I also have a Linux machine, two actual laptops, and a number of virtual machines, so just for giggles, I thought I'd check.  172 updates on Linux, but that's not a shock.  With Linux, avoiding viruses is easy, just go to a known repository and use their software - in Windows terms, only use Windows Update and don't install from an unknown source.

That doesn't help with backdoors, and that is what the Heartbleed bug was last month.  Someone had found a backdoor into the software and everyone needed to change passwords.

You did change your password didn't you?

It went on its happy way, and I realized that I had a couple other virtual machines that needed attention.  Since they're all lightly used, they'll get it when I run them.  Virtual Web Servers and the like.

Even Apple has gotten in the mix of it all, since they want an update to their browser.  Part of being popular I guess, and that means that iPhones will probably need it too.

I know for a fact that my Android phone needs an update, but that's a very different thing.  It's a very old version of Android that's named Gingerbread, on a very old phone, relatively speaking.  Even the "alternate ROMs" don't support this phone fully.  Not to mention the software that I installed through Google Play needs updates.  Since I don't actually want Facebook on my phone, I tend to ignore things like that.

So if you got this far, go find out how to update your Windows Computer (Start, Windows Update), Apple Computer (Apple Menu) and Linux Computer (Software Update or Synaptic or "apt-get update") and watch the pretty thermometers go.

Now, if you will excuse me, my Linux Virtual Computer says Restart is Required.  Strange that Windows didn't need it, but Linux did... Never mind that, time to restart!

Friday, November 22, 2013

Weird Browser Stats

There are Lies and then there are Statistics.

I'm sure we've all heard that before.  I was going through statistics on this blog.  Not really sure why, but occasionally I do check it.  Other than realizing that people in far flung parts of the US, China, The Ukraine, and others like to look at recipes, pictures from the Florida Keys, and read cute stories about cute dogs, it does help inform me as to whether I should continue this exercise of writing something each day.

Even if it is a copy and paste exercise on the weekends.   Bad Joke Saturday and Bad Joke Sunday have to get their Bad Jokes somewhere!

All statistics are approximations, your mileage may vary...

Some of the hits are obviously false, such as those from crawlers and the like.  I've been told to ignore those, and I won't be even saying who they are here because I don't want to encourage them.

Yes, it's like the misbehaving child at the family table - ignore your bots and they'll behave.

If you do look at your statistics and see something coming from a Vampire or a Zombie site, ignore it or you'll get spiked as well.  Google Analytics is correct, Blogger is not.

But within that stat page, I also get reports on what kind of technologies that are being used to look at the blog.  

Someone is using something called "NS8" to get here.  I had to follow that one up.  I mean, it's not like it's one of my Linux readers, or someone using their iPhone or Mac to surf here, I can tell what that is.  I know that when someone surfs me with Iceweasel, they're on Debian Linux since that is what I use on my Linux Machine.  Stability, thy name is Debian.  They really should use the slogan "Debian, It Just Works!".  Even on your 10 year old computer...

Anyway...

Not having ever heard of NS8 I looked it up.   NS8 is "most likely" a copy of the old Netscape Browser version 8.   To give you an idea, that's equivalent to Firefox 1.0.   Firefox is on version 25 at this date. 

Congrats, you are using the latest version of Firefox!  is what you should see when you click on that Firefox link.

PSA - Upgrade your software when you can.   Or some blogger will be waggling a finger at you for not doing so.

I'm looking at you Windows XP People.   You're almost as bad as I was when I got my Mac - it had OSX Leopard on it, and I immediately upgraded a month later to Snow Leopard.

My Mac Peeps will know what I'm talking about.   How's your Mavericks?  Kewl?

Immediately, a month later.   Er... well they do say that Macs have no viruses and well...

Not content to just wonder about this NS8 thing, I also got a visit from someone using something called "OS;FBSV".

Er, wha?

The best I can tell is that somehow, someone, is using their iPhone in Facebook to follow through. 

Hey, it may not matter to you, but I am a curious type.

I did after all have a person surf my blog from something called "Windows NT 6.1".  Most likely someone got bored while working on a server somewhere in a noisy server room and surfed my page.

I just hope I didn't bore them or the rest of you too much with all that.

Friday, July 19, 2013

Your Software Is Secure - Or Is It?

There's a quote out there that goes:

If you're not the customer, you're the product.

That's directly applicable to any bit of "Free" software you use.  If there's an ad being shown, if it asks you to install a different browser or tool bar, if there's an offer to download 10 free MP3s - You Are The Product.

Fair enough.

There are exceptions to that rule.  There are a lot of excellent pieces of software out there that are free with no strings attached.  No phone home tricks, no advertising, and no other gotchas.   Those typically are called "GPL" or "GNU Software" or "FOSS".  I do most of what I do on Windows, however off that windows machine, I live in that FOSS world of Linux.  If I want a spreadsheet, I merely download Libre Office and I'm happily counting away my beans.

I guess the fact that there is no support network provided with most of that kind of software means I'm still the product but I'll ignore that.

Once you leave that world of Windows or Mac OSX where you pay and expect complete discretion (and you would be wrong), or Linux where the power of Open Source means you have thousands of eyes looking at the software and putting out a warning that your operating system might be spying on you (Ubuntu), it gets a bit questionable.

The assumption is that with your shiny iPad or iPhone, Apple is looking into that for you.   It's not completely clear that that is true, and rumor has it that it isn't.

On the other hand, Android does warn you when your phone or tablet is being asked to sign away your information.   You can still allow it, but it does warn you.   The idea is that the user is expected to be an educated Android user and actually stop and look at the warnings.   On the other hand, when is the last time you took the time to read an EULA (End User License Agreement)? 

Exactly, even I just skim them.   If it says it's GPL, I assume it's OK, otherwise, you may get one  of those programs that says that if you send an email to a specific address, you "win" 1000 dollars US.   Yes, that happened, once, and it took five years for anyone to find it and collect!

The most egregious use of the person being the product lately is the Jay Z app called "Magna Carta".  Download and install the app and you get to join in and help to promote his CD of his latest "songs".

Great, if you like that sort of thing.  On the other hand people did start to read what the app wanted to do to your Android phone.   It basically demanded full control, including your personal details, it wanted to start at start up time, and demanded access to your Facebook and Twitter accounts.  The assumption is that it was going to go out and put postings to those accounts in your name saying how much you were enjoying his "songs".

Rap.  Bleah.  But he's making my point for me.   It does not say that Jay Z is doing something with all that information, it merely says that the software has access to it.  He is using people as marketing tools to build the social buzz on Facebook and Twitter.  He may never use any of it, and that access may not ever be used, but it begs the question:

Is that in your benefit?
 
When you go to your app store, look around and ask yourself do you really need it?   That app will probably slow your phone or tablet down whether it is on the iPhone or a shiny new Android Tablet because it will want to start up when you turn the thing on.

Is that in your benefit?

That app may want to know who you called today, and forever.

Is that in your benefit?

That app may want access to whatever is running at any given moment.

Is that in your benefit?

The answer to all of that is no. 

Especially that last one.  If you use a smartphone to do your banking, your banking details are POTENTIALLY exposed to any app that is running at that time.   Want to share your bank account information with me?  I didn't think so, but would you with an app developer?  That answer should still be no.

The best thing you can do with that phone is to make calls with it and keep it clean of unneeded software.  That includes free or paid apps.  There's too much risk these days.

Sorry to bring bad news but there are some questionable people out there.

Tuesday, July 16, 2013

Web Annoyances - Websites Where Keyboards Don't Work

This one gets me a lot.  
It's so basic that I have to wonder who on earth is making these web pages? 
Worse, who on earth is approving and testing them?

Oh, that's right, you can't do Proper QA any more since everything is written overseas on the cheap.

You get what you pay for.

Rant aside...

For the most part, even now, the place most people are doing their "heavy duty" web surfing is on a browser.  I'm basing that on this blog's statistics, and I feel confident that that feeling is backed up by most web services.

The proportion is roughly evenly split between Internet Explorer, Firefox (and its variants), and Chrome.

I personally have noticed this on Firefox and on Internet Explorer, on Windows, Linux, and on Mac OSX.

It just doesn't happen on a tablet or a phone since the way you use a webpage is different there.  You only have a mouse (touchscreen), you rarely have a keyboard.

I notice this on a daily basis on Monster.com, but it also shows up with many other oddball sites.

Here's how to find the problem on Monster:
  • Surf Monster and do a search.  Doesn't really matter what kind of job you search for, your own zip code will be fine.
  • You will be presented with a list.  Pick one from the list.   It doesn't really matter which.
  • Now that you are looking at a page, a job really, use your Page Up or Page Down keys.

They don't work.

You actually have to click inside the body of the page to get the page to move.   You can tab around, cursor around, whatever you choose, but it just doesn't work until you click inside the page.

If you are a web developer and call this done, you are bad and you should feel bad.

Zoidberg doesn't like you and neither do I.

This also works with the Windows or Linux alternate page down, the space bar.  

Navigation is simply locked down until you click inside the page.

My best guess is that it's a function of working with the software behind the scenes (Ajax) and having reworked your browser so that all the keys are forced to do a certain special task.  Don't know but it's still wrong.

Now go back and fix your web page.  That's a rookie mistake.  If you're good, Robot Santa may leave you a gift.

Tuesday, March 26, 2013

Do We Really Need Adobe Reader? No, and Here is How to Fix That!

Lately, I've been noticing that I've been opening PDF Files less and less with that annoying Adobe Reader, and more and more with Firefox.

I didn't put two and two together, didn't really care as long as I can read my PDFs.

For years, instead of sending a document like a Recipe, Resume, or any other thing that starts with "R" to paper, I would print directly to a PDF File.   Much cleaner, I don't want a massive filing cabinet, and as any reader of this blog knows, I love to cook.  Loving to cook means I have a LOT of recipes.

But they're all printed to PDF so they sit on a postage stamp sized chip that I can put in any of my laptops.  I use CutePDF, and have been using their free CutePDF Writer for years.  It's something that will eventually get built into Windows, may even be in other operating systems, but the Print to PDF is something that I personally think is a requirement.

In fact when I am setting up a computer for someone, I install it and explain why they need it.  The lightbulb goes on and I get another Convert.

So since I have all these files sitting around I need to read them.  For me, it's Firefox.  File, Open, and point it at a PDF and you can see your document.  Chrome will view them too.   The ability has been in Linux and Mac OSX for years, natively.

If all you are doing is viewing a document, you're done.   If you need to write notes on them, you will need something more robust like Acrobat, or even that blasted Reader that Adobe makes you update practically every day. 

But for most of us, you can remove the Adobe Reader now.  

In Windows 7, you can do it via the Control Panel, just like removing any other program:
  • Start
  • Control Panel
  • Programs and Features
  • Find Double click on Adobe Reader in the list.
  • Answer yes to the "Are You Sure" message.
  • Answer yes to the "User Account Control" message that asks if you want to make a change to your system.
  • Say goodbye to one more program that was a way for your system to get a virus.
To configure your system to open a PDF in Firefox or any other program you choose:
  • Start
  • Windows Explorer
  • Locate a PDF and Right Click on the icon and click on Properties.
  • On the General Tab, Select the Change Button
  • Select your favorite program to open a PDF, in my case, I'm selecting Firefox and I did have to browse to find it.
  • Make sure the "Always Use" checkbox is ticked.
  • Click OK.
  • Click OK to close the Properties window.
 Of course if you really feel you need the reader, you can always go back to Adobe and reinstall it.