I've been holding off on this one. The computers I have run adequately fast on what ever operating systems I use to get my own personal and professional work done. It is a mix of Windows 8.1 and Debian Linux - primarily Linux by proportion of use.
I've been told that I need to adjust my "Tinfoil Hat", that I'm overreacting.
No, I haven't drunk the Kool Aid and I don't have to.
Here's the deal. A month or so ago, people were given the option to download a copy and install a "Free upgrade to Windows 10 Home".
Microsoft doesn't give anything away for free. There's always a hook, even if you have to look deeply for it.
In the case of Windows, it's best if you remember that "If you aren't the customer, you are the product". I am directly quoting one of my friends who is one of the biggest critics of Android.
I have no doubt that Android is a case of Google simply watching everything you do, and using it to build a profile of you, personally. It may be to serve advertising. It may be for future use. It may be for a friendly or not so friendly government.
Android costs money to make. Those people have to be paid. They're doing it by selling that information to a shadowy "someone" who could be as "innocent" as an advertiser.
I hate ads. Did I say that? I have never clicked on an ad in all the years that I have been using computers intentionally. Have you? I doubt it.
Anyway, that free version of Windows 10 Home is exactly the same thing. Every time you do something, you're being watched. Even on the Pro version of Windows 10 you have to go in and turn that garbage off.
Thanks, I'll pass. Windows 8.1 has a bit of life left in it.
It might surprise you to hear that if you read this blog at any depth. I use Windows 8.1 Pro with a program called Classic Shell to give me back a Windows 7 look and feel. Any time I have to go back into that ugly block land called "Metro" or Modern Interface, I'm jarred with just how hideous and inefficient it is.
But I'll stay right here. I don't use any Modern programs and for that matter, everything I use on Windows is Free or Open Source. The GPL License seal of approval.
You can tame the evil kitten called Windows 10 Home but then you have to do without the Microsoft Store.
Just one example of one issue of many that I have with Windows 10 Home. It has been shown that your personal typing style is distinct enough
to track your self to your specific computer. Microsoft wants you to
help it improve its typing recognition.
Per Lifehacker:
Send Microsoft info about how I write: This feature
improves text completion suggestions when you handwrite or type
(presumably on the touch keyboard, though it doesn’t say. That’s very
broad, and we’ll talk about it more in a bit. I recommend turning this
off.
If you want to play Solitaire because you got hooked back on Windows 3.1, you can do so with ads. Same thing with Freecell.
There is an advertising ID number that basically stays with you. If you didn't like the idea of an advertising company tracking your every move, why would you want Microsoft to do so?
Actually, you can find it on your old Windows 7 machine, copy it across, and I'm told it works. I don't know first hand since I've got too much to do than to play Solitaire on a computer. That's the kind of thing I'd do on Hold with a Client, and I don't stay on hold long if I'm there.
So to those of you who don't like the prospect of being watched, you can pay the $100 or so and upgrade to Windows 10 Pro and then look into locking it down.
For me, I'm staying put. The other machines I have are happily on Debian Linux. I know Linux well enough to make it do what I need it to. No ads, No spyware, and it's all free, including Freecell.
One of those rare cases where you don't have to worry about evil software getting involved on your computer.
Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts
Wednesday, August 19, 2015
Friday, August 7, 2015
Firefox Security Hole Is Why You Need An Adblocker And An Update
Windows:
Assuming you have "real" Firefox installed and the sources in place.
Mac apparently does not have the problem.
What happened? Hackers. Simply put, a Hacker exploited a hole in Firefox so that advertisements could push some code onto your machine to take it over.
Now, this business about ad blockers.
I run one and I use it very aggressively. It is for this reason. It is also that I truly hate being pandered to and watched.
The latest trend is to watch what you are doing via "tags". A 1 pixel "dot" of a picture will be pushed to your browser as an anchor for them to watch what you are doing.
The best thing for you to do is to run an ad blocker. You tell it what to block, and yes, it gets very technical because you have to take responsibility to block these things. For the most part, an ad blocker with (free) subscriptions will block most, but never all, of these nasties.
When you run an ad blocker you will also notice that your browser runs much faster since it isn't trying to paint all those ads for all those products that you will never use.
Lets be honest, have you ever actually clicked on an ad intentionally?
Me neither.
Heck, I don't even see youtube commercials because I run an ad blocker.
The easier one to use is Ad Block Plus. It is controversial because they allow certain advertisers to pay *them* to be allowed past the blocker. I would recommend this for basic users because unless you want to learn how to use it, it's pretty simple.
The one I am using is called uBlock. I'm still learning how to use it. It removes the ads, but I haven't figured out how to make it remove the blank space the ad created.
It's up to you. Ads and Hackers, or a better browsing experience. I know what I chose.
Now, if you will excuse me, I have a browser to restart.
- When I clicked "Help" then "About Firefox" it immediately downloaded the patch.
- Click on the "Restart Firefox To Update Button"
Assuming you have "real" Firefox installed and the sources in place.
- Open Terminal as Root.
- Smile because you have Root.
- apt-get update
- apt-get upgrade
- Restart Firefox when you click on the button that appears.
Mac apparently does not have the problem.
What happened? Hackers. Simply put, a Hacker exploited a hole in Firefox so that advertisements could push some code onto your machine to take it over.
Now, this business about ad blockers.
I run one and I use it very aggressively. It is for this reason. It is also that I truly hate being pandered to and watched.
The latest trend is to watch what you are doing via "tags". A 1 pixel "dot" of a picture will be pushed to your browser as an anchor for them to watch what you are doing.
The best thing for you to do is to run an ad blocker. You tell it what to block, and yes, it gets very technical because you have to take responsibility to block these things. For the most part, an ad blocker with (free) subscriptions will block most, but never all, of these nasties.
When you run an ad blocker you will also notice that your browser runs much faster since it isn't trying to paint all those ads for all those products that you will never use.
Lets be honest, have you ever actually clicked on an ad intentionally?
Me neither.
Heck, I don't even see youtube commercials because I run an ad blocker.
The easier one to use is Ad Block Plus. It is controversial because they allow certain advertisers to pay *them* to be allowed past the blocker. I would recommend this for basic users because unless you want to learn how to use it, it's pretty simple.
The one I am using is called uBlock. I'm still learning how to use it. It removes the ads, but I haven't figured out how to make it remove the blank space the ad created.
It's up to you. Ads and Hackers, or a better browsing experience. I know what I chose.
Now, if you will excuse me, I have a browser to restart.
Tuesday, August 4, 2015
Windows 10 New Feature - You Are Sharing Windows Updates Files With Others
There are a lot of things that I am uncomfortable with in the new Windows 10.
Oh sure, it's shiny! and new! and free!
But wait, haven't you heard the old line "If you aren't the customer, you are the product"?
Microsoft is using that logic on your new free version of Windows 10 Home.
With all the privacy holes that Microsoft created with Windows 10 I really do feel like I'm watching the movie 1984 where the TVs are watching you - and can never be turned off.
Same thing with the book Fahrenheit 451, but I never saw a movie version of the book that did it justice.
You made the choice to go to Windows 10 because Windows 8.1 bleah. I know, I said the same thing about 8 and 8.1 but I am not at this time going to windows 10 unless I can figure out how to make myself comfortable with it.
I'll let the bugs get worked out, let the hackers figure out how to stop Cortana from watching over my shoulder, and so forth. Maybe when the free year is up, I may take advantage of the Free! Windows 10! Upgrade!
But honestly, probably not. This is being written from Linux and frankly it does everything I need and about twice as fast as Windows 8.1 ever did - on the same machine. Yes, you can do both. I am, but if you are an "end user" or "Mom just surfs the web" user, you probably won't.
Never mind all that. You made your choice. Here's what is happening.
With "old" windows you got windows updates directly from the mothership - Microsoft. It would go out in the middle of the night, download patches, restart your computer, and you wouldn't really know what all happened.
Every so often it would glitch and you'd have to talk to your neighbor's 13 year old who "lives in the basement" to get it fixed, and you'd go back on your way after tossing him a $20.
Now Windows 10 Home goes out, grabs the updates from something called a torrent. Basically it's like the old Napster was - grab things from who ever has a piece of it.
Mind you, Torrents can be amazing things. I grabbed my copy of Debian Linux using a torrent.
But.
Here is why you don't want that happening.
It can either slow your computer down (especially if you have an older one) or it can easily slow down your network connection.
Windows Updates now looks on your network for other computers that have Windows 10 and will grab what it needs to assemble the Update, then send it to whoever requests it.
Yeah, I thought it was a bit odd, perhaps heavy handed, too.
So if you made the jump and are happy with Windows 10, Great, but here is how to stop that behavior.
Go to the not-actually-very-obvious Settings → Updates and Security → Advanced options → Choose how you download updates → Get updates from more than one place.
Your choices are:
The best one for you at home will be the second selection - PC's On My Local Network. It saves you from having all of your PCs using your connection to talk to Microsoft for their updates.
This was adapted from this article at the rather excellent site:
Naked Security from Sophos.
Sophos is well worth an occasional read or a like on Facebook if that's your sort of thing.
Oh sure, it's shiny! and new! and free!
But wait, haven't you heard the old line "If you aren't the customer, you are the product"?
Microsoft is using that logic on your new free version of Windows 10 Home.
With all the privacy holes that Microsoft created with Windows 10 I really do feel like I'm watching the movie 1984 where the TVs are watching you - and can never be turned off.
Same thing with the book Fahrenheit 451, but I never saw a movie version of the book that did it justice.
You made the choice to go to Windows 10 because Windows 8.1 bleah. I know, I said the same thing about 8 and 8.1 but I am not at this time going to windows 10 unless I can figure out how to make myself comfortable with it.
I'll let the bugs get worked out, let the hackers figure out how to stop Cortana from watching over my shoulder, and so forth. Maybe when the free year is up, I may take advantage of the Free! Windows 10! Upgrade!
But honestly, probably not. This is being written from Linux and frankly it does everything I need and about twice as fast as Windows 8.1 ever did - on the same machine. Yes, you can do both. I am, but if you are an "end user" or "Mom just surfs the web" user, you probably won't.
Never mind all that. You made your choice. Here's what is happening.
With "old" windows you got windows updates directly from the mothership - Microsoft. It would go out in the middle of the night, download patches, restart your computer, and you wouldn't really know what all happened.
Every so often it would glitch and you'd have to talk to your neighbor's 13 year old who "lives in the basement" to get it fixed, and you'd go back on your way after tossing him a $20.
Now Windows 10 Home goes out, grabs the updates from something called a torrent. Basically it's like the old Napster was - grab things from who ever has a piece of it.
Mind you, Torrents can be amazing things. I grabbed my copy of Debian Linux using a torrent.
But.
Here is why you don't want that happening.
It can either slow your computer down (especially if you have an older one) or it can easily slow down your network connection.
Windows Updates now looks on your network for other computers that have Windows 10 and will grab what it needs to assemble the Update, then send it to whoever requests it.
Yeah, I thought it was a bit odd, perhaps heavy handed, too.
So if you made the jump and are happy with Windows 10, Great, but here is how to stop that behavior.
Go to the not-actually-very-obvious Settings → Updates and Security → Advanced options → Choose how you download updates → Get updates from more than one place.
Your choices are:
- Off. Your computer calls home to Microsoft, and gets updates only from there.
- PCs on my local network. WUDO (Windows Update) will "torrent-share" files, but only between computers on your own LAN.
- PCs on my local network and on the internet. You'll potentially get files from, and offer file uploads to, computers anywhere in the world.
The best one for you at home will be the second selection - PC's On My Local Network. It saves you from having all of your PCs using your connection to talk to Microsoft for their updates.
This was adapted from this article at the rather excellent site:
Naked Security from Sophos.
Sophos is well worth an occasional read or a like on Facebook if that's your sort of thing.
Thursday, March 12, 2015
What is Foistware or Crapware, and Simple Tips To Avoid It
With five different operating systems running here on far too many computers, I see it all the time.
I'm That Guy. I'll say it this way: Yes, I can fix your computer, but I won't do it for free. I'm done with that free stuff.
On the other hand, I hear this too many times. Someone went out and got a new computer because it's too slow.
The "new-to-me" computer I am using to write this on is a 5 year old. It's running Windows 8.1 and it's running it quite well. The one I do most of my professional work on is a 7 year old beast running Linux or/and Windows 7. My file server is a 12 year old laptop running Windows 7. That runs well too. Laptops consume less power and space and do the same job as that beast of a desktop I used to love to build back in the day.
You say "Sure, but you know how to make it go faster".
Yep. It's simple. I don't allow software foisted on me. Crapware. Foistware.
I was giving someone an old computer once who was staying for a few days. Recently. The day after he got the computer he had two pieces of Foistware already installed.
He got it when he went to install Skype. I guess he wanted to be spied on, but he also wanted to talk to people in his family that was scattered all over the globe. So I told him to go find the download and install.
Wrong person to do that to. He went to a "Partnered Download Site" I was told. Red lights and fire engine sirens went off in my head. He ended up with a toolbar on the browser and a redirected home page. I growled at him, fixed it, then sent him on his way.
Two very simple rules to avoid this kind of garbage.
First, make certain you are going to the software vendor's approved site for downloads. That means it's going to require you, and not someone else, to do the research for you. Skype is pretty simple, it's a Microsoft product, so go to Microsoft to find it. That takes care of the honest software producers.
Second, always, and I do mean ALWAYS, when you are installing the software use the Advanced install. When you are installing, actually read the page that is presented. Don't simply click "Next". That's how you get the crap installed in the first place. That helps to take care of most of the dishonest software producers.
You don't ever need a toolbar on your browser. If you get one, remove it through your control panel's "Programs and Features" list of programs. There are way too many programs to list here, but you will then be able to remove the "feature" by double clicking on the name of the program. Other more evil toolbars are actually more like a virus, and you will need to do research on how to get rid of them.
If it truly is a virus, it gets much more complex, but here's one way of fixing all that garbage.
That is the same place you can go to when you find yourself with a program needs to be removed, such as anything is riding along and doing "useful" things like presenting you with ads or anything by McAfee.
Why do I mention McAfee specifically? Adobe Flash. If you aren't careful, when you do a security update for them, you will end up with the helpfully named "McAfee Security Scan Plus".
You don't need it. More "Foistware". All this "Foistware" slows you down. You can get rid of it, or you could get a new PC and start over. One requires less time than the other. Since many computer stores that you can actually visit have a nasty habit of trying to upsell you to a more expensive model, you should try to delay that particular task as long as possible.
Basically be careful and watch what you're doing. It is, after all, your computer. Just because a particular NEW! and shiny piece of software is "suggested" to you by something you actually want, doesn't mean that you need the blasted thing.
In return, you may be able to skip a new computer next year.
How great would that be? An extra couple hundred bucks in your pocket? Or Pounds, or Euro?
You'll thank me later.
I'm That Guy. I'll say it this way: Yes, I can fix your computer, but I won't do it for free. I'm done with that free stuff.
On the other hand, I hear this too many times. Someone went out and got a new computer because it's too slow.
The "new-to-me" computer I am using to write this on is a 5 year old. It's running Windows 8.1 and it's running it quite well. The one I do most of my professional work on is a 7 year old beast running Linux or/and Windows 7. My file server is a 12 year old laptop running Windows 7. That runs well too. Laptops consume less power and space and do the same job as that beast of a desktop I used to love to build back in the day.
You say "Sure, but you know how to make it go faster".
Yep. It's simple. I don't allow software foisted on me. Crapware. Foistware.
I was giving someone an old computer once who was staying for a few days. Recently. The day after he got the computer he had two pieces of Foistware already installed.
He got it when he went to install Skype. I guess he wanted to be spied on, but he also wanted to talk to people in his family that was scattered all over the globe. So I told him to go find the download and install.
Wrong person to do that to. He went to a "Partnered Download Site" I was told. Red lights and fire engine sirens went off in my head. He ended up with a toolbar on the browser and a redirected home page. I growled at him, fixed it, then sent him on his way.
Two very simple rules to avoid this kind of garbage.
First, make certain you are going to the software vendor's approved site for downloads. That means it's going to require you, and not someone else, to do the research for you. Skype is pretty simple, it's a Microsoft product, so go to Microsoft to find it. That takes care of the honest software producers.
Second, always, and I do mean ALWAYS, when you are installing the software use the Advanced install. When you are installing, actually read the page that is presented. Don't simply click "Next". That's how you get the crap installed in the first place. That helps to take care of most of the dishonest software producers.
You don't ever need a toolbar on your browser. If you get one, remove it through your control panel's "Programs and Features" list of programs. There are way too many programs to list here, but you will then be able to remove the "feature" by double clicking on the name of the program. Other more evil toolbars are actually more like a virus, and you will need to do research on how to get rid of them.
If it truly is a virus, it gets much more complex, but here's one way of fixing all that garbage.
That is the same place you can go to when you find yourself with a program needs to be removed, such as anything is riding along and doing "useful" things like presenting you with ads or anything by McAfee.
Why do I mention McAfee specifically? Adobe Flash. If you aren't careful, when you do a security update for them, you will end up with the helpfully named "McAfee Security Scan Plus".
You don't need it. More "Foistware". All this "Foistware" slows you down. You can get rid of it, or you could get a new PC and start over. One requires less time than the other. Since many computer stores that you can actually visit have a nasty habit of trying to upsell you to a more expensive model, you should try to delay that particular task as long as possible.
Basically be careful and watch what you're doing. It is, after all, your computer. Just because a particular NEW! and shiny piece of software is "suggested" to you by something you actually want, doesn't mean that you need the blasted thing.
In return, you may be able to skip a new computer next year.
How great would that be? An extra couple hundred bucks in your pocket? Or Pounds, or Euro?
You'll thank me later.
Labels:
Computer,
helpful hints,
Microsoft,
Security,
Skype,
Software,
Technology
Tuesday, January 13, 2015
Microsoft Discontinuing Their Advanced Notification Service for Patches
Not the best news to come out of Redmond in a while.
For Mom and Pop, they'll get the news the way they always had, their machine will restart on a Tuesday or Wednesday, they'll ask someone what is going on, and they'll hear "Patch Tuesday" out of their grand kids or their children, shrug and go on. It's all automatic, isn't it?
For Businesses and IT support people, this Advanced Notification Service is more important.
What happened was that it gave someone in the know the advanced notice that Microsoft was going to push a patch to their computers at some level on Patch Tuesday, typically the Second Tuesday of the Month. It would tell them what the patch would do, and let them know some more background info on the patch.
Great. It would also warn these people that if your computer is broken when it forces a restart, you may have to back out the patch and restore to an earlier time. It may allow them a cushion of time to test their servers, create extra backups, revisit whether their computer security policies are up to date.
That Good Computer Hygene is a part of Information Technology. They're made by people, people sometimes have an oops. Best to let them know what's up and give advanced warning.
The reason you need this information is that it's entirely possible your entire business sits on "That Computer In The Corner". They may not know what it does, but they do know it's an important box. They may call it The Server in hushed tones, and give it offerings of tapes from time to time.
They hopefully have backed the machine up, made sure that they could gracefully reverse changes and so forth.
For my own sanity, I turned off automatic updates years ago, and keep turning it off every time I get a new machine or upgrade one. I then make it a point to manually go to Windows Update and get "up to date" a couple days later.
The reasoning I have behind that is that while Microsoft is diligent in making sure that things work, their tests don't involve the machine that is in my lap in this exact moment. That patch may be great on the box sitting three timezones away, but it may break when it gets to me, specifically.
I tend to be on the trailing edge with Windows Update for that reason.
The blog posting that Microsoft made did say that the service will be available for a fee so their largest customers can manage their server farms with the information that isn't getting out so widely.
Information leaks, it's like carrying water in a leaky bucket. Information will get all over your shoes and water the grass on the way in from the well.
But it does make things a bit less secure since Information is best used when it is widely spread. It also puts the onus back on the individual or the person in the business who is charged with maintaining them.
Hopefully everyone has their Backups and their Restore Points set, right?
Oops. Caught myself there. It has been a week or three since I have done a proper backup. Happens to the best of us and the rest of us.
While Manually updating Windows Update is what I personally do, it is a bit annoying and it is something you have to remember to do. On the other hand, Automatic Updates is a bit like flying in an airplane without a seatbelt. It is safer to fly than drive, but once in a long time something happens and you hit some turbulence.
It's all up to you and that is what I think Microsoft is telling us - Security through updates are up to you, after all it is your data and your computer. Just be aware best practices and of what is going on around you.
For Mom and Pop, they'll get the news the way they always had, their machine will restart on a Tuesday or Wednesday, they'll ask someone what is going on, and they'll hear "Patch Tuesday" out of their grand kids or their children, shrug and go on. It's all automatic, isn't it?
For Businesses and IT support people, this Advanced Notification Service is more important.
What happened was that it gave someone in the know the advanced notice that Microsoft was going to push a patch to their computers at some level on Patch Tuesday, typically the Second Tuesday of the Month. It would tell them what the patch would do, and let them know some more background info on the patch.
Great. It would also warn these people that if your computer is broken when it forces a restart, you may have to back out the patch and restore to an earlier time. It may allow them a cushion of time to test their servers, create extra backups, revisit whether their computer security policies are up to date.
That Good Computer Hygene is a part of Information Technology. They're made by people, people sometimes have an oops. Best to let them know what's up and give advanced warning.
The reason you need this information is that it's entirely possible your entire business sits on "That Computer In The Corner". They may not know what it does, but they do know it's an important box. They may call it The Server in hushed tones, and give it offerings of tapes from time to time.
They hopefully have backed the machine up, made sure that they could gracefully reverse changes and so forth.
For my own sanity, I turned off automatic updates years ago, and keep turning it off every time I get a new machine or upgrade one. I then make it a point to manually go to Windows Update and get "up to date" a couple days later.
The reasoning I have behind that is that while Microsoft is diligent in making sure that things work, their tests don't involve the machine that is in my lap in this exact moment. That patch may be great on the box sitting three timezones away, but it may break when it gets to me, specifically.
I tend to be on the trailing edge with Windows Update for that reason.
The blog posting that Microsoft made did say that the service will be available for a fee so their largest customers can manage their server farms with the information that isn't getting out so widely.
Information leaks, it's like carrying water in a leaky bucket. Information will get all over your shoes and water the grass on the way in from the well.
But it does make things a bit less secure since Information is best used when it is widely spread. It also puts the onus back on the individual or the person in the business who is charged with maintaining them.
Hopefully everyone has their Backups and their Restore Points set, right?
Oops. Caught myself there. It has been a week or three since I have done a proper backup. Happens to the best of us and the rest of us.
While Manually updating Windows Update is what I personally do, it is a bit annoying and it is something you have to remember to do. On the other hand, Automatic Updates is a bit like flying in an airplane without a seatbelt. It is safer to fly than drive, but once in a long time something happens and you hit some turbulence.
It's all up to you and that is what I think Microsoft is telling us - Security through updates are up to you, after all it is your data and your computer. Just be aware best practices and of what is going on around you.
Friday, January 2, 2015
Happy Unbirthday or Why I Became 110 Years Old on Facebook
I admit it, I read too much. It's part of staying up to date in any sort of technical career.
I came across article after article about sharing online. People share too much data about themselves.
What they're wearing, well that's kind of harmless right? No, not really if you have a stalker. Look for that person in that shirt over there and ...
What they are cooking for dinner? I'm doing that all the time, but apparently I'm doing it right. Why? Well you can see what kind of furnishings you have in that kitchen. Is there a house alarm on the window? Good, you can break in there.
Oh look, beautiful vacation pictures! They went to Hawaii, they won't be back for a week. Nice TV in the living room in the other picture.
Not Anymore, Inspector Clouseau.
Get the picture? Or rather you don't?
It was one after another.
An article was warning people about putting controversial items up on their Facebook feeds. After all, if you are radical, your next company or even your current one won't want you. Nobody wants someone who rocks the boat, right?
I've been self editing that sort of thing for years. I hardly ever post anything that is "out there", usually everything is supportive, and I'm liking things more than anything else.
That's a problem too. If you just Like things on Facebook, it has been shown that things get "weird". Your feed starts to show things that are more intense than the things you actually like. For example, if you like animal causes like the local SPCA or Rescue, and I definitely do, you start seeing things for PETA. PETA is "controversial" to many people because of their "radical" vegan outlook.
"Nothing with a face" is their motto, and animals first. They go a bit too far for me, I'm a carnivore, still. But I do support that they are out there.
You see the point, things keep getting more "radicalized" if you like absolutely everything.
One of the "data points" that came up recently was about identity and credit card theft. If "they" have a few things like your name, birth date, and a few other obscure things, "they" can get you a credit card.
For themselves.
How do they get that?
You used to get a phone call from someone saying they were from the "Credit Card Bureau" and they would want to "verify a few details". You're done if you answer that question.
First off, YOUR credit card company would never call for that. I have been called by one questioning whether I was really in Florida once, but yes, I was at the beach and it is a lovely day and I wanted to get something in a shop, so please do put that charge through.
One other time, it was after I ordered something from www.Rakuten.com and almost immediately started getting weird charges. Five Minutes Later I got a call from my credit card asking me if these were valid. Nope, and thanks! They stopped that in the bud and I can not recommend www.Rakuten.com as a result
So one of the most important details they said you should never share?
Your Birthdate.
I immediately went into Facebook. Facebook's business is getting information from you in a "soft" matter. It is what they are doing when you click on Like. They are building a profile of you.
It is what you signed up for, and personally I am OK with that end of it.
What I didn't like was when I went in to hide my birthday as a recommendation of that security article, I couldn't.
Facebook would not let you hide your birthday from "everyone". You had to keep it visible to your friends. That was the most limited you could go. Mind you there are a lot of friends in Facebook that you collect through the years of use, and by now it really is "Years" of use, that you really don't know. Some of them you will never meet, and some of those that I will never meet I consider that a shame. Some really neat people I have "met" over the years and "friended" that I will never run into, or never run into again.
Others, Who knows what they really are. They go silent or something happens and they drop away. You may have said something inappropriate or what have you. Can't really say that happened much to me, but it does happen.
So I changed it.
I moved it from my real birthday to the oldest possible date I could.
January 1, 1905.
I'm expecting a nasty email from them at any day now.
So if you wished me a happy birthday yesterday, thank you, I know you care. Or I know you had a knee jerk reaction to seeing the thing.
I do know that those that wished me happy birthday yesterday were those who I know well, and I did appreciate the well wishes then as I appreciated them and their well wishes every day.
But it's not my actual birthday and I am not 110 years old.
If I have to change it again, I think I will make myself 32. I met my partner then, life was looking up, things were going into a time that just kept getting better.
I'll stop there, I don't want to share too much.
But Happy Unbirthday to me!
Was I right to do this? I've been told I'm getting paranoid. Perhaps I am. I don't know. But I feel good about "This".
If you are a friend and you perhaps feel a bit manipulated, I apologize completely.
My bad.
Mea Culpa.
It was not my intent.
I came across article after article about sharing online. People share too much data about themselves.
What they're wearing, well that's kind of harmless right? No, not really if you have a stalker. Look for that person in that shirt over there and ...
What they are cooking for dinner? I'm doing that all the time, but apparently I'm doing it right. Why? Well you can see what kind of furnishings you have in that kitchen. Is there a house alarm on the window? Good, you can break in there.
Oh look, beautiful vacation pictures! They went to Hawaii, they won't be back for a week. Nice TV in the living room in the other picture.
Not Anymore, Inspector Clouseau.
Get the picture? Or rather you don't?
It was one after another.
An article was warning people about putting controversial items up on their Facebook feeds. After all, if you are radical, your next company or even your current one won't want you. Nobody wants someone who rocks the boat, right?
I've been self editing that sort of thing for years. I hardly ever post anything that is "out there", usually everything is supportive, and I'm liking things more than anything else.
That's a problem too. If you just Like things on Facebook, it has been shown that things get "weird". Your feed starts to show things that are more intense than the things you actually like. For example, if you like animal causes like the local SPCA or Rescue, and I definitely do, you start seeing things for PETA. PETA is "controversial" to many people because of their "radical" vegan outlook.
"Nothing with a face" is their motto, and animals first. They go a bit too far for me, I'm a carnivore, still. But I do support that they are out there.
You see the point, things keep getting more "radicalized" if you like absolutely everything.
One of the "data points" that came up recently was about identity and credit card theft. If "they" have a few things like your name, birth date, and a few other obscure things, "they" can get you a credit card.
For themselves.
How do they get that?
You used to get a phone call from someone saying they were from the "Credit Card Bureau" and they would want to "verify a few details". You're done if you answer that question.
First off, YOUR credit card company would never call for that. I have been called by one questioning whether I was really in Florida once, but yes, I was at the beach and it is a lovely day and I wanted to get something in a shop, so please do put that charge through.
One other time, it was after I ordered something from www.Rakuten.com and almost immediately started getting weird charges. Five Minutes Later I got a call from my credit card asking me if these were valid. Nope, and thanks! They stopped that in the bud and I can not recommend www.Rakuten.com as a result
So one of the most important details they said you should never share?
Your Birthdate.
I immediately went into Facebook. Facebook's business is getting information from you in a "soft" matter. It is what they are doing when you click on Like. They are building a profile of you.
It is what you signed up for, and personally I am OK with that end of it.
What I didn't like was when I went in to hide my birthday as a recommendation of that security article, I couldn't.
Facebook would not let you hide your birthday from "everyone". You had to keep it visible to your friends. That was the most limited you could go. Mind you there are a lot of friends in Facebook that you collect through the years of use, and by now it really is "Years" of use, that you really don't know. Some of them you will never meet, and some of those that I will never meet I consider that a shame. Some really neat people I have "met" over the years and "friended" that I will never run into, or never run into again.
Others, Who knows what they really are. They go silent or something happens and they drop away. You may have said something inappropriate or what have you. Can't really say that happened much to me, but it does happen.
So I changed it.
I moved it from my real birthday to the oldest possible date I could.
January 1, 1905.
I'm expecting a nasty email from them at any day now.
So if you wished me a happy birthday yesterday, thank you, I know you care. Or I know you had a knee jerk reaction to seeing the thing.
I do know that those that wished me happy birthday yesterday were those who I know well, and I did appreciate the well wishes then as I appreciated them and their well wishes every day.
But it's not my actual birthday and I am not 110 years old.
If I have to change it again, I think I will make myself 32. I met my partner then, life was looking up, things were going into a time that just kept getting better.
I'll stop there, I don't want to share too much.
But Happy Unbirthday to me!
Was I right to do this? I've been told I'm getting paranoid. Perhaps I am. I don't know. But I feel good about "This".
If you are a friend and you perhaps feel a bit manipulated, I apologize completely.
My bad.
Mea Culpa.
It was not my intent.
Labels:
Birthday,
facebook,
helpful hints,
rakuten.com,
Security,
Software,
Web
Thursday, November 13, 2014
Hit Windows Update Yet This Week?
Oh yes, I will admit it, I am stubborn.
I don't like people monkeying around with my computers which is why I told my windows computers not to go out and grab the windows update patches automatically.
Mind you, I did tell it to tell me when it wanted my attention and check for critical updates.
Small semantic point, but I prefer to be the person who pulls the trigger, and not the trigger that gets pulled.
However...
If you are like me, today is an excellent day to go to your favorite start button, find your Windows Update link in there or in Control Panel, and do a Windows Update.
They fixed a 19 year old bug that is in every version of Windows including and since Windows 95.
I tend to do my own checks later in the week, on a Thursday, although I have been getting reflexive about just hitting the damn button and doing updates whenever I think about it.
You know, sometimes when you're bored and you just want to do something that needs to be done and don't want to really think about it? I rearrange the deck chairs on the Titanic my own way, thank you very much!
The reason why I wait a day or two to do it "officially" is simple. If you have your system go out and grab the updates as soon as they are there, which is typically on the second and fourth Tuesday at 1 PM in the Eastern time Zone or 6pm in London, and you restart your computer, you may have a bigger problem. Once in a very long while, some of the same patches will break your computer. It may not start.
So give it a day or three. They may have to fix their fix after someone else broke it.
I know, eventually a person just has to shrug and say life moves pretty fast. If you don't stop and look around once in a while, you could miss it. Ferris, do your updates and take your chances.
Today is my turn. Actually later today is my turn. I've been on Linux for the last two weeks and there's a very different way of doing things there. I get a little sunburst in my control strip in the upper right and it tells me to go look.
Wait, Bill, How is that different?
It just is. Now go check Windows Update, just because.
I don't like people monkeying around with my computers which is why I told my windows computers not to go out and grab the windows update patches automatically.
Mind you, I did tell it to tell me when it wanted my attention and check for critical updates.
Small semantic point, but I prefer to be the person who pulls the trigger, and not the trigger that gets pulled.
However...
If you are like me, today is an excellent day to go to your favorite start button, find your Windows Update link in there or in Control Panel, and do a Windows Update.
They fixed a 19 year old bug that is in every version of Windows including and since Windows 95.
I tend to do my own checks later in the week, on a Thursday, although I have been getting reflexive about just hitting the damn button and doing updates whenever I think about it.
You know, sometimes when you're bored and you just want to do something that needs to be done and don't want to really think about it? I rearrange the deck chairs on the Titanic my own way, thank you very much!
The reason why I wait a day or two to do it "officially" is simple. If you have your system go out and grab the updates as soon as they are there, which is typically on the second and fourth Tuesday at 1 PM in the Eastern time Zone or 6pm in London, and you restart your computer, you may have a bigger problem. Once in a very long while, some of the same patches will break your computer. It may not start.
So give it a day or three. They may have to fix their fix after someone else broke it.
I know, eventually a person just has to shrug and say life moves pretty fast. If you don't stop and look around once in a while, you could miss it. Ferris, do your updates and take your chances.
Today is my turn. Actually later today is my turn. I've been on Linux for the last two weeks and there's a very different way of doing things there. I get a little sunburst in my control strip in the upper right and it tells me to go look.
Wait, Bill, How is that different?
It just is. Now go check Windows Update, just because.
Labels:
helpful hints,
Microsoft,
Security,
Software,
windows
Wednesday, November 12, 2014
Thanks, Apple, But I Think I'll Pass on Yosemite
I have computers on Windows, Mac OSX, and Linux. Various levels and flavors of all of the above actually.
There's always the question as to when or whether to upgrade them.
Linux is pretty simple - when your distribution changes, give it a week or so and listen to the chatter. If the chatter is clear, go for it. I've never had a problem here.
Windows. I have a Windows 7 machine that won't get upgraded because it's an old Core 2 Duo machine. It will either die before Windows 7 does or it will get given away. Windows 8 became Windows 8.1 as soon as it was offered to me. Windows 8 was an abortion, Windows 8.1 is manageable. Just add Classic Shell and it cleaned up almost all of that Modern/Metro hideousness and pushed it aside. Classic Shell made that ugly block land go away and replaced it with all the desktop land goodness that I need to get things done. It's still there, lurking under the hood, but I couldn't tell you the last time I had to use one of those ugly blocky programs that Microsoft mistakenly thinks I need to slice, dice, and make julienne fries. Other than network access which the Modern/Metro interface gets in the way massively and then drops you back to a desktop app to actually get the job done to disable and enable things.
I don't. 'Nuff said about that.
Then there's the Mac. I always liked the sleekness and the design of them. Beautiful hardware, a well thought out interface. When I need to use my Mac, it is almost always a pleasure. I got the thing, installed Snow Leopard, and it purred. When the Mavericks upgrade was offered, it was free so why not? I noticed no real problems there, and since I am a lightweight user of my Mac it's fine.
I've heard reports that Mavericks slowed memory access from the prior version, Lion, but like I said: I'm a lightweight user so I don't notice.
They put out a new operating system, Yosemite. Since I knew about the memory speed issue, I thought I'd wait. Let the experts go after it.
I'm glad I did because there are some privacy issues that made me uncomfortable with things.
Everyone likes having search functions on their computers and generally don't think twice about how things are done. What happens is that that information you are looking for is sent back to the program to check its indexes and report back to you when it finds what it thinks is the right answer.
That was all well and good back in the good old days when it was enough just to search this current computer. Some smart people decided that they'd go out and do a search on the internet to give back more content. It's a built in function on the desktop called Spotlight that phones home to Apple and does that search.
Fair enough if you're actually doing an internet search. But why do you need that search to go back to Apple if you're just looking for a file on "this" computer? If you are searching for movie information or maps, it's going to send back your current location, as well as the current device you are on, and anything else that it thinks is pertinent such as language settings and what apps you have used.
To be fair to Apple, you can turn this off, but I have done enough support to know that unless someone turns that sort of thing off for you it won't get done.
The flip side to that is that if you have turned it off, location services are one of those things that get rather naggy to have turned off. Your searches get a helpful prompt asking you to turn on location services and eventually you wear down and just leave them on.
Checking my Android phone, location services is turned on there, and we know that all that sort of thing goes on there with Google. If you want a smartphone these days, you are either going to have Apple or Google put their hand in your pocket and watch over every move you make that they believe they need to, it's part of the game.
The idea of having big brother was scary enough when I read 1984, but the reality is that we all now have that big brother in our own pocket and don't think too much about it.
Nothing to see here, keep moving on.
All this was reported in the Washington Post's technology blog a while back, and apparently Apple has been taking heat about their decisions to make these changes.
There is a website called fix-macosx.com that promises to give you information how to take back some privacy and turn off some of Apple's data collection.
This all is a change of heart since the old days where the Mac was more privacy friendly. Now, they're going all in and sucking down all this info while you happily go along with it. Since Apple is notoriously tight lipped about what they do internally, I suspect that it will be a long time before we find out just exactly what they're doing with all that data.
No thanks, I'll pass.
There's always the question as to when or whether to upgrade them.
Linux is pretty simple - when your distribution changes, give it a week or so and listen to the chatter. If the chatter is clear, go for it. I've never had a problem here.
Windows. I have a Windows 7 machine that won't get upgraded because it's an old Core 2 Duo machine. It will either die before Windows 7 does or it will get given away. Windows 8 became Windows 8.1 as soon as it was offered to me. Windows 8 was an abortion, Windows 8.1 is manageable. Just add Classic Shell and it cleaned up almost all of that Modern/Metro hideousness and pushed it aside. Classic Shell made that ugly block land go away and replaced it with all the desktop land goodness that I need to get things done. It's still there, lurking under the hood, but I couldn't tell you the last time I had to use one of those ugly blocky programs that Microsoft mistakenly thinks I need to slice, dice, and make julienne fries. Other than network access which the Modern/Metro interface gets in the way massively and then drops you back to a desktop app to actually get the job done to disable and enable things.
I don't. 'Nuff said about that.
Then there's the Mac. I always liked the sleekness and the design of them. Beautiful hardware, a well thought out interface. When I need to use my Mac, it is almost always a pleasure. I got the thing, installed Snow Leopard, and it purred. When the Mavericks upgrade was offered, it was free so why not? I noticed no real problems there, and since I am a lightweight user of my Mac it's fine.
I've heard reports that Mavericks slowed memory access from the prior version, Lion, but like I said: I'm a lightweight user so I don't notice.
They put out a new operating system, Yosemite. Since I knew about the memory speed issue, I thought I'd wait. Let the experts go after it.
I'm glad I did because there are some privacy issues that made me uncomfortable with things.
Everyone likes having search functions on their computers and generally don't think twice about how things are done. What happens is that that information you are looking for is sent back to the program to check its indexes and report back to you when it finds what it thinks is the right answer.
That was all well and good back in the good old days when it was enough just to search this current computer. Some smart people decided that they'd go out and do a search on the internet to give back more content. It's a built in function on the desktop called Spotlight that phones home to Apple and does that search.
Fair enough if you're actually doing an internet search. But why do you need that search to go back to Apple if you're just looking for a file on "this" computer? If you are searching for movie information or maps, it's going to send back your current location, as well as the current device you are on, and anything else that it thinks is pertinent such as language settings and what apps you have used.
To be fair to Apple, you can turn this off, but I have done enough support to know that unless someone turns that sort of thing off for you it won't get done.
The flip side to that is that if you have turned it off, location services are one of those things that get rather naggy to have turned off. Your searches get a helpful prompt asking you to turn on location services and eventually you wear down and just leave them on.
Checking my Android phone, location services is turned on there, and we know that all that sort of thing goes on there with Google. If you want a smartphone these days, you are either going to have Apple or Google put their hand in your pocket and watch over every move you make that they believe they need to, it's part of the game.
The idea of having big brother was scary enough when I read 1984, but the reality is that we all now have that big brother in our own pocket and don't think too much about it.
Nothing to see here, keep moving on.
All this was reported in the Washington Post's technology blog a while back, and apparently Apple has been taking heat about their decisions to make these changes.
There is a website called fix-macosx.com that promises to give you information how to take back some privacy and turn off some of Apple's data collection.
This all is a change of heart since the old days where the Mac was more privacy friendly. Now, they're going all in and sucking down all this info while you happily go along with it. Since Apple is notoriously tight lipped about what they do internally, I suspect that it will be a long time before we find out just exactly what they're doing with all that data.
No thanks, I'll pass.
Friday, October 24, 2014
Password Frustrations
So tell me why is it that some websites have a Fort Knox approach to passwords when it may not be appropriate?
Most of that is answered with a question: Appropriate to whom?
The best way to answer all of this for myself is through examples.
I have a few passwords that I repeat all over the place. The reason why I repeat them is because I don't care if the account gets compromised. Websites that require free registration are typical of this. If you aren't really invested in the information, a password is a nuisance and I generally give them "that password".
"That Password" was one that I used at work, years ago. It became something that quickly formed a "body memory" in that I could sit at a keyboard and just burst it through my fingers. So why not, right?
The problem there is "Familiarity Breeds Contempt". You want a password you know, and that you think others won't guess, but not too simple. That leaves out things like your dog's name, Mom's name, your elementary school, 12345, password, or the ever favorite "qwerty".
Why? When someone tries to crack a password online, any given network for example, they typically won't walk up to "your" computer and type away. They'll be noticed.
Who was that guy in cubicle 9 anyway?
They will use software that will show up if someone is actually watching the store. That network guy who is usually in cubicle 9 is probably down the hall watching the statistics on a remote computer or the phone, and locking down that specific port or address coming in to his network that someone outside is running the software on and will be back in a moment. He's got to stop off and visit the boss, grab coffee, hit the head, and fight a few fires.
The problem is that companies have decided that it is your problem to worry about your own passwords. So they're getting grumpy. You're asked to think of a new password every time you log in because you haven't visited them in more than once a month, and there are rules. Evil, sick, and twisted rules. Something that you won't remember because it requires Mixed Case, Punctuation - but not all punctuation, and a f3w numb3rs.
Yeah, numb3rs. That will show th3m! The name Eric becomes 3R1q just because it is k3wl and L337.
Except it doesn't. All those remote attacks will be done via software. The software has access to all the same books you read, plus the ones you didn't read, plus the telephone book, plus many other aspects of popular culture. I once came across some of those dictionaries to crack a computer that I was given and they're massive.
I didn't end up using that because on the fourth try, I guessed the password for the happy client.
My biggest complaint, though, is the Recruiting and Human Resources websites. The worst of them assume that you actually care about them. You end up rewriting your resume once you get in, and have to type in War And Peace while you're doing it. Oh, and don't forget to log back in once every two weeks or we will delete your information!
No wonder why I try the "Low Security" password that I memorized and if that doesn't work I click on the "I forgot" link.
Recruiters, you really are not all that significant and are a hurdle to get past, so relax on the security.
So what do you do?
When I was doing Project Management at the University you would be shocked to know how many times I found people's passwords. Forget the Social Engineering tricks of their baby's name plus their dog. I would walk to their workstation and lift up their keyboard. There would be a Post-It note with the passwords written on it.
Believe it or not, that isn't as terrible as it sounds - if you convert that post-it note to a text file on your phone or on the cloud that you really really do know what the password is for. After all, while I would lift your keyboard, I won't be able to get into your phone. That is unless it is unlocked or your password is "1111" or something simple like that.
There is a file I keep on my computer. It's a clear text file. Has the passwords on it. There is a wrinkle though, it is only hints to the password and the hints are pretty obscure unless you are in my family. But it is in a "safe place" that only I know where it is.
Now that you have found the place to store the hint file, what would I suggest you make the password?
Random numbers, letters, and punctuation is probably best, but make it a physical keyboard pattern you will find easy to memorize, and change it for truly important websites like your bank and credit cards and that annoying website you get all your financial advisor's information from.
That last one emails me practically every day and I hate logging into it.
Find the file, open it up and remember what that password was...
Actually, this all makes me wonder where I put that post-it note. Nope, not under my keyboard. I'll have to have a look.
Most of that is answered with a question: Appropriate to whom?
The best way to answer all of this for myself is through examples.
I have a few passwords that I repeat all over the place. The reason why I repeat them is because I don't care if the account gets compromised. Websites that require free registration are typical of this. If you aren't really invested in the information, a password is a nuisance and I generally give them "that password".
"That Password" was one that I used at work, years ago. It became something that quickly formed a "body memory" in that I could sit at a keyboard and just burst it through my fingers. So why not, right?
The problem there is "Familiarity Breeds Contempt". You want a password you know, and that you think others won't guess, but not too simple. That leaves out things like your dog's name, Mom's name, your elementary school, 12345, password, or the ever favorite "qwerty".
Why? When someone tries to crack a password online, any given network for example, they typically won't walk up to "your" computer and type away. They'll be noticed.
Who was that guy in cubicle 9 anyway?
They will use software that will show up if someone is actually watching the store. That network guy who is usually in cubicle 9 is probably down the hall watching the statistics on a remote computer or the phone, and locking down that specific port or address coming in to his network that someone outside is running the software on and will be back in a moment. He's got to stop off and visit the boss, grab coffee, hit the head, and fight a few fires.
The problem is that companies have decided that it is your problem to worry about your own passwords. So they're getting grumpy. You're asked to think of a new password every time you log in because you haven't visited them in more than once a month, and there are rules. Evil, sick, and twisted rules. Something that you won't remember because it requires Mixed Case, Punctuation - but not all punctuation, and a f3w numb3rs.
Yeah, numb3rs. That will show th3m! The name Eric becomes 3R1q just because it is k3wl and L337.
Except it doesn't. All those remote attacks will be done via software. The software has access to all the same books you read, plus the ones you didn't read, plus the telephone book, plus many other aspects of popular culture. I once came across some of those dictionaries to crack a computer that I was given and they're massive.
I didn't end up using that because on the fourth try, I guessed the password for the happy client.
My biggest complaint, though, is the Recruiting and Human Resources websites. The worst of them assume that you actually care about them. You end up rewriting your resume once you get in, and have to type in War And Peace while you're doing it. Oh, and don't forget to log back in once every two weeks or we will delete your information!
No wonder why I try the "Low Security" password that I memorized and if that doesn't work I click on the "I forgot" link.
Recruiters, you really are not all that significant and are a hurdle to get past, so relax on the security.
So what do you do?
When I was doing Project Management at the University you would be shocked to know how many times I found people's passwords. Forget the Social Engineering tricks of their baby's name plus their dog. I would walk to their workstation and lift up their keyboard. There would be a Post-It note with the passwords written on it.
Believe it or not, that isn't as terrible as it sounds - if you convert that post-it note to a text file on your phone or on the cloud that you really really do know what the password is for. After all, while I would lift your keyboard, I won't be able to get into your phone. That is unless it is unlocked or your password is "1111" or something simple like that.
There is a file I keep on my computer. It's a clear text file. Has the passwords on it. There is a wrinkle though, it is only hints to the password and the hints are pretty obscure unless you are in my family. But it is in a "safe place" that only I know where it is.
Now that you have found the place to store the hint file, what would I suggest you make the password?
Random numbers, letters, and punctuation is probably best, but make it a physical keyboard pattern you will find easy to memorize, and change it for truly important websites like your bank and credit cards and that annoying website you get all your financial advisor's information from.
That last one emails me practically every day and I hate logging into it.
Find the file, open it up and remember what that password was...
Actually, this all makes me wonder where I put that post-it note. Nope, not under my keyboard. I'll have to have a look.
Labels:
helpful hints,
rant,
Security,
Software,
Technology,
Web
Wednesday, October 15, 2014
Security? Poodles? Sandworms? Here we go again.
If you have any passing interest in computer security, you have noticed a few announcements go by.
If you don't, you may think it is overwhelming.
Yes, and Yes.
If you are worried, there's a simple solution. No matter what the computer, no matter what the operating system - make sure you are up to date.
Most home users are set up "from the factory" to automatically get updates. This is true on Windows and on Mac OSX. My Linux computers pop up a friendly sunburst to say it's got updates too.
In both cases this will solve these two problems.
Poodle - Make sure your browser is up to date. Windows update will fix this. It is a low level problem that is more of a headache for systems administrators. So it's not a major headache for most people.
The long description that 99 percent of us can skip is that it's a bug that Google has found in the Secure Sockets Layer (SSL) version 3 that is seriously out of date. It shouldn't be used at this point anyway, but some folks haven't updated that.
Sandworm - It's a worm that goes after Powerpoint files. Since Windows machines are set up to ask you if you want to open the file, don't. If your computer asks you to open anything with a ".INF" extension, don't. That is how the worm will propagate.
How to fix it? Home users, make sure you go through your Windows Update. It's a windows problem. But anyone else should be running the most up to date version of their operating systems that they can. If their operating system is no longer supported, it's best that you upgrade as best you can. No more XP for you.
While you are at it, make sure your virus protection is up to date and you may want to just force a run of a full scan. You never know what is running around on your computers these days and it is just good practice to do this once in a while.
If you don't, you may think it is overwhelming.
Yes, and Yes.
If you are worried, there's a simple solution. No matter what the computer, no matter what the operating system - make sure you are up to date.
Most home users are set up "from the factory" to automatically get updates. This is true on Windows and on Mac OSX. My Linux computers pop up a friendly sunburst to say it's got updates too.
In both cases this will solve these two problems.
Poodle - Make sure your browser is up to date. Windows update will fix this. It is a low level problem that is more of a headache for systems administrators. So it's not a major headache for most people.
The long description that 99 percent of us can skip is that it's a bug that Google has found in the Secure Sockets Layer (SSL) version 3 that is seriously out of date. It shouldn't be used at this point anyway, but some folks haven't updated that.
Sandworm - It's a worm that goes after Powerpoint files. Since Windows machines are set up to ask you if you want to open the file, don't. If your computer asks you to open anything with a ".INF" extension, don't. That is how the worm will propagate.
How to fix it? Home users, make sure you go through your Windows Update. It's a windows problem. But anyone else should be running the most up to date version of their operating systems that they can. If their operating system is no longer supported, it's best that you upgrade as best you can. No more XP for you.
While you are at it, make sure your virus protection is up to date and you may want to just force a run of a full scan. You never know what is running around on your computers these days and it is just good practice to do this once in a while.
Labels:
Computer,
helpful hints,
linux,
Mac,
Security,
Software,
Virus,
Virus Scanner,
windows
Friday, September 19, 2014
So how DO you know when your phone is obsolete?
I have a friend who visits about once a year. I have a standing request that he brings his "Daily Driver" computer with him when he comes.
He calls it a tune up. What I generally do is go through the machine, run a virus scan, uninstall spyware, and send him on his way. It runs much faster because I've cleaned out the junk.
He's also been using that machine for longer than even I have expected. He's gotten newer machines, but he keeps coming back to that beast of a 17 inch "laptop" because I'm able to keep it going.
Eventually, he'll have to stop using it, and then it will have a second life as either a table leveler, something to hold a shelf down in the linen closet, or I'll put Linux on it and it will be good for another 5 years of use.
I'm leaning toward Linux, but that is because I actually do like using the environment.
Computers have a longer life than the manufacturers want you to believe because they exist to make money by selling you new. It's Planned Obsolescence.
With a phone, it appears much more clear cut. Especially with a smartphone, things have a shelf life. The vendor puts out a new model, it can do more, but does it really warrant you getting a new one?
Again like with my friends beast of a laptop, to me, it appears that it is software driving the decision.
There are two schools here. Apple and Android. Not looking at this as a fanboy of either set up, I have a preference for Android because I can do things with it like use the phone as a multimedia computer much easier than I can with iOS. I look at it as a use case to form a decision as to which works best for me.
Your Mileage May Vary.
With Apple, there is a clear end of life with their phones. When you can no longer run their current operating system, it is time to consider moving on. Apple has always done this with their computers as well. For a while their PowerPC computers were supposed to be the best thing out there. Then they came out with Intel based computers that made their old computers look horrible and they stopped supporting them after one more upgrade.
My iPhone is an old 3GS. It will still make calls, but as a computer, Apple is actively pushing it away. I have software that ran on it until I updated it, then all the sudden the older software is gone, and the newer one doesn't work because I don't have the current operating system. One after another app is going away and eventually that will be the end of it.
Of course if you have the latest iPhone 6, it's obsolete when you drop it on the ground on the first day it's out because you just broke the screen.
Android is a different animal.
Android support varies with the company that made the phone or tablet. Typically, an Android phone will get updates within the operating system version that it was bought with. After that you are on your own.
My tablet, a Samsung Galaxy Tab 2, got updates until the current OS came out. That doesn't mean that the tablet is unusable, it merely means that it will get more behind the times as I run into the same problem that my old iPhone had. Software won't be written for it.
There is another problem with the older versions of Android. The browser that shipped with every version of Android except the current one has a rather nasty bug in it. The short of it is that if you have an older Android device, do not use the default browser. Disable that browser, and install another. I did that at the start and I use Firefox which is the suggestion that is made by most security groups.
Why is that a problem? Because if you don't have a current device that runs the current Operating System, you aren't going to get an update and you are on your own. That means you have just hit the wall with using that phone, it's now obsolete - if you want to be secure.
It all seems a bit alarmist, but considering how many people use their phones and tablets as their main computing devices these days, it really does pay to be aware of what that device is capable of doing. It is a computer and they do need to be kept up to date. But when you can't do that any more, you have to be aware what not being up to date can mean.
He calls it a tune up. What I generally do is go through the machine, run a virus scan, uninstall spyware, and send him on his way. It runs much faster because I've cleaned out the junk.
He's also been using that machine for longer than even I have expected. He's gotten newer machines, but he keeps coming back to that beast of a 17 inch "laptop" because I'm able to keep it going.
Eventually, he'll have to stop using it, and then it will have a second life as either a table leveler, something to hold a shelf down in the linen closet, or I'll put Linux on it and it will be good for another 5 years of use.
I'm leaning toward Linux, but that is because I actually do like using the environment.
Computers have a longer life than the manufacturers want you to believe because they exist to make money by selling you new. It's Planned Obsolescence.
With a phone, it appears much more clear cut. Especially with a smartphone, things have a shelf life. The vendor puts out a new model, it can do more, but does it really warrant you getting a new one?
Again like with my friends beast of a laptop, to me, it appears that it is software driving the decision.
There are two schools here. Apple and Android. Not looking at this as a fanboy of either set up, I have a preference for Android because I can do things with it like use the phone as a multimedia computer much easier than I can with iOS. I look at it as a use case to form a decision as to which works best for me.
Your Mileage May Vary.
With Apple, there is a clear end of life with their phones. When you can no longer run their current operating system, it is time to consider moving on. Apple has always done this with their computers as well. For a while their PowerPC computers were supposed to be the best thing out there. Then they came out with Intel based computers that made their old computers look horrible and they stopped supporting them after one more upgrade.
My iPhone is an old 3GS. It will still make calls, but as a computer, Apple is actively pushing it away. I have software that ran on it until I updated it, then all the sudden the older software is gone, and the newer one doesn't work because I don't have the current operating system. One after another app is going away and eventually that will be the end of it.
Of course if you have the latest iPhone 6, it's obsolete when you drop it on the ground on the first day it's out because you just broke the screen.
Android is a different animal.
Android support varies with the company that made the phone or tablet. Typically, an Android phone will get updates within the operating system version that it was bought with. After that you are on your own.
My tablet, a Samsung Galaxy Tab 2, got updates until the current OS came out. That doesn't mean that the tablet is unusable, it merely means that it will get more behind the times as I run into the same problem that my old iPhone had. Software won't be written for it.
There is another problem with the older versions of Android. The browser that shipped with every version of Android except the current one has a rather nasty bug in it. The short of it is that if you have an older Android device, do not use the default browser. Disable that browser, and install another. I did that at the start and I use Firefox which is the suggestion that is made by most security groups.
Why is that a problem? Because if you don't have a current device that runs the current Operating System, you aren't going to get an update and you are on your own. That means you have just hit the wall with using that phone, it's now obsolete - if you want to be secure.
It all seems a bit alarmist, but considering how many people use their phones and tablets as their main computing devices these days, it really does pay to be aware of what that device is capable of doing. It is a computer and they do need to be kept up to date. But when you can't do that any more, you have to be aware what not being up to date can mean.
Thursday, July 17, 2014
I See You!
Security Cameras.
They're interesting beasts. I have installed them professionally, and we installed one at home.
They're not all they're cracked up to be, but there are some things to be aware of.
Outdoor cameras don't always perform as well as you might expect.
I think this was what I was being told when I received this picture. Partly at any rate, and partly because Kevin was gone and looking at my porch from the Auto Train. He was sitting there most likely somewhere in Georgia on that night, maybe feeling lonely, missing me, or just being curious as to whether he could catch me coming and going.
I'm a TV game now.
We've had the DVR, that's like a VCR but no tapes used, for about 4 months now.
We've seen some pretty odd things in it. The scooters that ride past the house in the small hours amused me, but I am in Florida and a scooter can be viable as a "daily driver" here - if you don't mind being hunted down by snowbirds who have yet to learn to drive.
The ducks on the lawn are amusing to watch. The hedges that are "in frame" are visited each morning by them when they're grubbing around in my indifferently maintained gardens.
No, really, there are hedges there, you just can't see them. On the left of that pole. See the shadow? That's a hedge although you couldn't prove it by this picture.
And that's the rub. They promise 30 feet of Night Vision, typically, although some promise more. It is like the mileage claims for a car when they say "your mileage may vary".
My version of that is "Never Trust A Chinese Manufacturer".
You couldn't use that picture in court to prove that yours truly was at the front door with his faithful sidekick, Rack the McNab Dog, could you?
You could try. I've heard some pretty sleazy tricks in what passes for a court room in this country, and I try to avoid court rooms as a general rule.
So a few basic rules? I'll keep them as brief as possible.
TVL - TV lines. We're all used to HD TV now. This camera is Standard Def. Old school square, just like all the DVRs that are being dumped. Do you need HD? You might, but HD Is expensive. This camera is 420 TVL (Lines) and Standard Def.
Night Vision. They slap that array of Infrared LEDs around the lens of the camera. It puts out a glow. It will have a "Feet of Vision" attached. Divide that by two to get your real distance, seriously. Just like the MPG scores on a car, your mileage may vary. After all, I can get 40 MPG rolling down hill in my Jeep at 40 MPH. I've seen it.
HD vs SD. My own opinion is why not both. Put SD cameras (not as sharp) on things that you will watch from "close up" like your front door, and then put the good HD cameras on things that you want to see crisply. You may even be able to use fewer cameras by using more HD where you need it. Instead of my having two cameras on the driveway and one that leaks onto the front yard, one HD camera may do it. That will save a couple channels for use elsewhere.
Number of Channels. My DVR will record up to 8 channels. Some do 4. The most I have ever seen is 16. You probably don't need 16. Really, you don't. You will want to save recordings, so get a big hard drive for the machine of at least 1 TB and roll with it. It doesn't have to be fast since you're not recording a lot all at once.
I will say though after looking at that picture... it needs to have the camera moved. That's just too fuzzy to be worthwhile. Maybe closer to the front door.
I wonder if I can convince someone else to go up on the ladder. I hate those ladders. Nothing looks more ridiculous than a tall man well over 6 feet trying to balance on one of those things.
They're interesting beasts. I have installed them professionally, and we installed one at home.
They're not all they're cracked up to be, but there are some things to be aware of.
Outdoor cameras don't always perform as well as you might expect.
I think this was what I was being told when I received this picture. Partly at any rate, and partly because Kevin was gone and looking at my porch from the Auto Train. He was sitting there most likely somewhere in Georgia on that night, maybe feeling lonely, missing me, or just being curious as to whether he could catch me coming and going.
I'm a TV game now.
We've had the DVR, that's like a VCR but no tapes used, for about 4 months now.
We've seen some pretty odd things in it. The scooters that ride past the house in the small hours amused me, but I am in Florida and a scooter can be viable as a "daily driver" here - if you don't mind being hunted down by snowbirds who have yet to learn to drive.
The ducks on the lawn are amusing to watch. The hedges that are "in frame" are visited each morning by them when they're grubbing around in my indifferently maintained gardens.
No, really, there are hedges there, you just can't see them. On the left of that pole. See the shadow? That's a hedge although you couldn't prove it by this picture.
And that's the rub. They promise 30 feet of Night Vision, typically, although some promise more. It is like the mileage claims for a car when they say "your mileage may vary".
My version of that is "Never Trust A Chinese Manufacturer".
You couldn't use that picture in court to prove that yours truly was at the front door with his faithful sidekick, Rack the McNab Dog, could you?
You could try. I've heard some pretty sleazy tricks in what passes for a court room in this country, and I try to avoid court rooms as a general rule.
So a few basic rules? I'll keep them as brief as possible.
TVL - TV lines. We're all used to HD TV now. This camera is Standard Def. Old school square, just like all the DVRs that are being dumped. Do you need HD? You might, but HD Is expensive. This camera is 420 TVL (Lines) and Standard Def.
Night Vision. They slap that array of Infrared LEDs around the lens of the camera. It puts out a glow. It will have a "Feet of Vision" attached. Divide that by two to get your real distance, seriously. Just like the MPG scores on a car, your mileage may vary. After all, I can get 40 MPG rolling down hill in my Jeep at 40 MPH. I've seen it.
HD vs SD. My own opinion is why not both. Put SD cameras (not as sharp) on things that you will watch from "close up" like your front door, and then put the good HD cameras on things that you want to see crisply. You may even be able to use fewer cameras by using more HD where you need it. Instead of my having two cameras on the driveway and one that leaks onto the front yard, one HD camera may do it. That will save a couple channels for use elsewhere.
Number of Channels. My DVR will record up to 8 channels. Some do 4. The most I have ever seen is 16. You probably don't need 16. Really, you don't. You will want to save recordings, so get a big hard drive for the machine of at least 1 TB and roll with it. It doesn't have to be fast since you're not recording a lot all at once.
I will say though after looking at that picture... it needs to have the camera moved. That's just too fuzzy to be worthwhile. Maybe closer to the front door.
I wonder if I can convince someone else to go up on the ladder. I hate those ladders. Nothing looks more ridiculous than a tall man well over 6 feet trying to balance on one of those things.
Friday, May 23, 2014
Is It Me Or Is Everyone Updating Computers These Days?
The short of it is that since you're reading this on a computer go and do your system's update.
Windows almost always has updates.
Mac OSX has one for Safari for the supported operating systems.
Even my Linux system needed it, but that's normal when you have 1500 projects updated by probably as many different groups of people.
What got me started on this was that this morning before sunrise when I started the main computer, I saw a "helpful" yellow text show up on Windows. It was warning me that there was an important update available.
I've gotten so that Windows seems to be the Boy That Cries Wolf, but ok let's check. Definition Update for Windows Defender. It's a built in virus scanner in Windows 8 and above. It's the love-child of the old Microsoft Security Essentials. I've used it for quite a few years now, and while I trust it, I have grown to expect a message telling me to update.
Since it is Windows, it is the operating system everyone seems to like to attack. More ways than one, I'm afraid.
I installed that particular update, and since it didn't demand a restart of the system, I shrugged and got on with my business.
I also have a Linux machine, two actual laptops, and a number of virtual machines, so just for giggles, I thought I'd check. 172 updates on Linux, but that's not a shock. With Linux, avoiding viruses is easy, just go to a known repository and use their software - in Windows terms, only use Windows Update and don't install from an unknown source.
That doesn't help with backdoors, and that is what the Heartbleed bug was last month. Someone had found a backdoor into the software and everyone needed to change passwords.
You did change your password didn't you?
It went on its happy way, and I realized that I had a couple other virtual machines that needed attention. Since they're all lightly used, they'll get it when I run them. Virtual Web Servers and the like.
Even Apple has gotten in the mix of it all, since they want an update to their browser. Part of being popular I guess, and that means that iPhones will probably need it too.
I know for a fact that my Android phone needs an update, but that's a very different thing. It's a very old version of Android that's named Gingerbread, on a very old phone, relatively speaking. Even the "alternate ROMs" don't support this phone fully. Not to mention the software that I installed through Google Play needs updates. Since I don't actually want Facebook on my phone, I tend to ignore things like that.
So if you got this far, go find out how to update your Windows Computer (Start, Windows Update), Apple Computer (Apple Menu) and Linux Computer (Software Update or Synaptic or "apt-get update") and watch the pretty thermometers go.
Now, if you will excuse me, my Linux Virtual Computer says Restart is Required. Strange that Windows didn't need it, but Linux did... Never mind that, time to restart!
Windows almost always has updates.
Mac OSX has one for Safari for the supported operating systems.
Even my Linux system needed it, but that's normal when you have 1500 projects updated by probably as many different groups of people.
What got me started on this was that this morning before sunrise when I started the main computer, I saw a "helpful" yellow text show up on Windows. It was warning me that there was an important update available.
I've gotten so that Windows seems to be the Boy That Cries Wolf, but ok let's check. Definition Update for Windows Defender. It's a built in virus scanner in Windows 8 and above. It's the love-child of the old Microsoft Security Essentials. I've used it for quite a few years now, and while I trust it, I have grown to expect a message telling me to update.
Since it is Windows, it is the operating system everyone seems to like to attack. More ways than one, I'm afraid.
I installed that particular update, and since it didn't demand a restart of the system, I shrugged and got on with my business.
I also have a Linux machine, two actual laptops, and a number of virtual machines, so just for giggles, I thought I'd check. 172 updates on Linux, but that's not a shock. With Linux, avoiding viruses is easy, just go to a known repository and use their software - in Windows terms, only use Windows Update and don't install from an unknown source.
That doesn't help with backdoors, and that is what the Heartbleed bug was last month. Someone had found a backdoor into the software and everyone needed to change passwords.
You did change your password didn't you?
It went on its happy way, and I realized that I had a couple other virtual machines that needed attention. Since they're all lightly used, they'll get it when I run them. Virtual Web Servers and the like.
Even Apple has gotten in the mix of it all, since they want an update to their browser. Part of being popular I guess, and that means that iPhones will probably need it too.
I know for a fact that my Android phone needs an update, but that's a very different thing. It's a very old version of Android that's named Gingerbread, on a very old phone, relatively speaking. Even the "alternate ROMs" don't support this phone fully. Not to mention the software that I installed through Google Play needs updates. Since I don't actually want Facebook on my phone, I tend to ignore things like that.
So if you got this far, go find out how to update your Windows Computer (Start, Windows Update), Apple Computer (Apple Menu) and Linux Computer (Software Update or Synaptic or "apt-get update") and watch the pretty thermometers go.
Now, if you will excuse me, my Linux Virtual Computer says Restart is Required. Strange that Windows didn't need it, but Linux did... Never mind that, time to restart!
Friday, May 2, 2014
Got Windows? Hit Windows Update - Even Windows XP
So that bug I have been banging on about?
The one that is a bug of doom, effects every version of Internet Explorer from Version 6 through present?
Windows XP
Windows Vista
Windows 7
Windows 8
and
Windows 8.1?
Yeah, the fix is in.
Microsoft has relented since 1/4 of the entire PC Market is still running Windows XP. Not to patch this one would cause havoc on the Internet and crash web servers, and make little babies cry.
This morning, I started finding messages in the security blogs that mentioned it. This bug, the 1776 bug, with a rather nasty hole has been exploited.
As far as XP is concerned, Microsoft has said in the past that while support has ceased for it, they may at their own choice make patches to it in the future. Since this was a big one, and it is the future, take advantage of it.
Even if you don't use Internet Explorer, you will want to get this fix.
The steps are simple. You may have already downloaded the fix and there could be a message waiting for you to either shut down or restart your computer to apply the fix
If not, just:
Click Start
Click Control Panel
Click Windows Update
Click Install Updates
and you're on your way!
Now, if you will excuse me, my computer wants to be restarted. I guess I really do need to take a break anyway!
The one that is a bug of doom, effects every version of Internet Explorer from Version 6 through present?
Windows XP
Windows Vista
Windows 7
Windows 8
and
Windows 8.1?
Yeah, the fix is in.
Microsoft has relented since 1/4 of the entire PC Market is still running Windows XP. Not to patch this one would cause havoc on the Internet and crash web servers, and make little babies cry.
This morning, I started finding messages in the security blogs that mentioned it. This bug, the 1776 bug, with a rather nasty hole has been exploited.
As far as XP is concerned, Microsoft has said in the past that while support has ceased for it, they may at their own choice make patches to it in the future. Since this was a big one, and it is the future, take advantage of it.
Even if you don't use Internet Explorer, you will want to get this fix.
The steps are simple. You may have already downloaded the fix and there could be a message waiting for you to either shut down or restart your computer to apply the fix
If not, just:
Click Start
Click Control Panel
Click Windows Update
Click Install Updates
and you're on your way!
Now, if you will excuse me, my computer wants to be restarted. I guess I really do need to take a break anyway!
Friday, March 28, 2014
A Security Camera View On The World
Lately I've been preoccupied.
When we're home, I have video to look at.
What you see here is my view on the world. I have another three cameras to place, and we already know where they will go.
It started with me getting "A Deal" on a security camera set up. It came with no hard drive, so once we got one of those, dropped it in the machine with a cable and four screws, we were on our way. Not too shabby for $150 US. It came with eight cameras and a bunch of wires, mounts, and power bricks.
Low price to live on the set of The Truman Show. No, I will not allow cameras inside the house. That's just Beyond The Pale.
The machine is self maintaining, so none of the usual "Operating System Twiddling" that everyone was used to. There is a whole world of terminology to learn. I had done all this before. I "Specified, Procured, and Deployed" two of these same units at the mall that I was the IT Director for.
The hardest part of setting the second one of these up is running wires in uncomfortable places.
The hardest part of setting up the first is learning all the terminology.
Things like "TVL", IR, and PTZ become second nature after a while.
You have to know that the more TVL you have, the better the picture. TVL being TV Lines, which is just how "HD" your HDTV Picture would be. These cameras are only 640 lines so they're below HDTV spec, around the same as your old square Standard Def TV used to be.
IR is Infrared. In this case, each camera has a ring of 28 infrared LEDs around the lens. They glow red at night, and some may not even be able to see that frequency due to color blindedness. In my case, they're quite bright and give me a view on the world of everything that goes on at night.
PTZ is something I truly want simply for the flexibility and the Coolness Factor. Stands for "Point, Tilt, Zoom" and it's something you need to be able to do even if you never get a camera that will support it. It will allow an operator, you or me, to Point or Tilt the camera at something, and then Zoom in on it.
Just like any technology, there is a world of jargon to fool the outsiders.
Add to it that the Chinese who wrote the manual wrote it in crystal clear "Engrish". Which is to say there was a passing acquaintance with the rules of English Grammar. They passed the rules when they were on the bus in the town center. They were in the book store they rode past at 50KPH. They didn't read the rules, but the book was there.
So you have to step back and read between the lines. The documentation is there, and you just may be able to figure it all out. Once you do you can twiddle and I have a stack of settings that I can twiddle with. Getting all that set just so is the goal. Motion Detection should be just enough that you're not looking at 8 hours of uninterrupted video every night. The IR light should not be reflecting against the eaves of the house so you're looking at solid grey video. There is a screen where I can block off certain areas of the screen from Motion Detection at all meaning if something happens in the upper third or the neighbor's house, I don't care. I can tell it not to record during certain hours which I'm trying to figure a reason that would be helpful.
All that is really quite involved. Just like anything it's the sum of the parts. A lot of little parts make a system.
Unfortunately, the software has limits. The web interface only runs on Internet Explorer which runs like molasses on my i7 laptop, and like crap everywhere else. The query function is creaky. I could write some serious improvements to the system if I had "root access" to the operating system but even that isn't available. The help messages are written badly, more of that Engrish.
That's one very strong reason why this sort of thing should be open. Chinese Software is horrid. Give me a LAMP server and let me write my own PHP code or Java.
But it does work, after a fashion, and it is open enough that third party software will work with it - if you are brave enough to try to get it to.
So if you're coming down the block, wave hello to the camera. I'm sure I'll get to watch it on the DVR.
When we're home, I have video to look at.
What you see here is my view on the world. I have another three cameras to place, and we already know where they will go.
It started with me getting "A Deal" on a security camera set up. It came with no hard drive, so once we got one of those, dropped it in the machine with a cable and four screws, we were on our way. Not too shabby for $150 US. It came with eight cameras and a bunch of wires, mounts, and power bricks.
Low price to live on the set of The Truman Show. No, I will not allow cameras inside the house. That's just Beyond The Pale.
The machine is self maintaining, so none of the usual "Operating System Twiddling" that everyone was used to. There is a whole world of terminology to learn. I had done all this before. I "Specified, Procured, and Deployed" two of these same units at the mall that I was the IT Director for.
The hardest part of setting the second one of these up is running wires in uncomfortable places.
The hardest part of setting up the first is learning all the terminology.
Things like "TVL", IR, and PTZ become second nature after a while.
You have to know that the more TVL you have, the better the picture. TVL being TV Lines, which is just how "HD" your HDTV Picture would be. These cameras are only 640 lines so they're below HDTV spec, around the same as your old square Standard Def TV used to be.
IR is Infrared. In this case, each camera has a ring of 28 infrared LEDs around the lens. They glow red at night, and some may not even be able to see that frequency due to color blindedness. In my case, they're quite bright and give me a view on the world of everything that goes on at night.
PTZ is something I truly want simply for the flexibility and the Coolness Factor. Stands for "Point, Tilt, Zoom" and it's something you need to be able to do even if you never get a camera that will support it. It will allow an operator, you or me, to Point or Tilt the camera at something, and then Zoom in on it.
Just like any technology, there is a world of jargon to fool the outsiders.
Add to it that the Chinese who wrote the manual wrote it in crystal clear "Engrish". Which is to say there was a passing acquaintance with the rules of English Grammar. They passed the rules when they were on the bus in the town center. They were in the book store they rode past at 50KPH. They didn't read the rules, but the book was there.
So you have to step back and read between the lines. The documentation is there, and you just may be able to figure it all out. Once you do you can twiddle and I have a stack of settings that I can twiddle with. Getting all that set just so is the goal. Motion Detection should be just enough that you're not looking at 8 hours of uninterrupted video every night. The IR light should not be reflecting against the eaves of the house so you're looking at solid grey video. There is a screen where I can block off certain areas of the screen from Motion Detection at all meaning if something happens in the upper third or the neighbor's house, I don't care. I can tell it not to record during certain hours which I'm trying to figure a reason that would be helpful.
All that is really quite involved. Just like anything it's the sum of the parts. A lot of little parts make a system.
Unfortunately, the software has limits. The web interface only runs on Internet Explorer which runs like molasses on my i7 laptop, and like crap everywhere else. The query function is creaky. I could write some serious improvements to the system if I had "root access" to the operating system but even that isn't available. The help messages are written badly, more of that Engrish.
That's one very strong reason why this sort of thing should be open. Chinese Software is horrid. Give me a LAMP server and let me write my own PHP code or Java.
But it does work, after a fashion, and it is open enough that third party software will work with it - if you are brave enough to try to get it to.
So if you're coming down the block, wave hello to the camera. I'm sure I'll get to watch it on the DVR.
Thursday, January 9, 2014
Another Reason To Dump XP - Security Essentials Will Receive No More Updates
I dumped XP a while back. I'm on a collection of old machines running Debian Linux which runs faster than XP does on the same hardware - Generally.
I also have two Macs, one running Lion, another on Mavericks.
The Windows machines are either on Windows 7 or the cringeworthy Windows 8.1. Windows 8.1 does "seem" to run well, but the effort I have to put into making sure that the "Ugly Block Land" of the Start Screen has everything I want, and none of the chaff of their live tiles has turned me off of Windows. I avoid using Windows 8.1 as a result.
There are also the security and privacy questions that I have about Windows in general. Any software that "phones home" for updates is by definition a risk - whether it is a miniscule one or not.
The computer I use the most is a Windows 7 laptop, I'm comfortable there and will remain that way until I am forced off of Windows 7 for a business reason.
All that having been said, there are some folks who I Support/Chat/Help/Consult for (and so forth) that still have Windows XP computers that run every day.
Please upgrade those now.
Extended Support for Windows XP will be ending April 8, 2014.
Windows Update will cease to function.
Internet Explorer will no longer be updated and become even more abysmal to use in time.
You will be forced to use Chrome or Firefox for a "modern" browser.
Now the latest announcement - if you use Microsoft Security Essentials for your virus protection, you will no longer be able to get updates.
Seeing that I get an update on a daily or more than once a day basis on my virus signatures on Windows 7, that is a significant issue.
The XP user will have to pay for a virus protection program - and it is a big market with many names. But by the time you get that virus, you won't be able to save your data.
I've had one virus hit this machine in the time I have used it - one year. While that clobbered my computer, I was able to restore from a week old backup. All my data is stored either on a SDHC chip or on a network - so I was safe. The hard drive on the machine is not for "permanent storage".
Do you have that kind of regimen?
I have a good friend and neighbor who clicked on a link in an email and immediately knew he had a Cryptolocker Virus screaming at him that if he didn't pay 300 bucks for a ransom, his info would be passed to the FBI. While that threat is bogus, it shows how easy it is to get a virus now. For XP Users on April 8, 2014, it will get easier since they are already writing viruses to take advantage of back doors and other exploits. At current 30 percent of US Computer Users run Windows XP.
At any rate, if you are one of those folks who can't afford to pay the 100 Dollars US for a copy of Windows 7 or 8, I strongly recommend looking into a free copy of Debian or Ubuntu Linux. Since they run Firefox as a browser as the default, you'll be fine.
After all, why spend 100 for an operating system when a new computer runs around 200 dollars for a "beater". If someone is running XP then their computing needs are a bit more modest than someone who needs a top of the line beast.
I also have two Macs, one running Lion, another on Mavericks.
The Windows machines are either on Windows 7 or the cringeworthy Windows 8.1. Windows 8.1 does "seem" to run well, but the effort I have to put into making sure that the "Ugly Block Land" of the Start Screen has everything I want, and none of the chaff of their live tiles has turned me off of Windows. I avoid using Windows 8.1 as a result.
There are also the security and privacy questions that I have about Windows in general. Any software that "phones home" for updates is by definition a risk - whether it is a miniscule one or not.
The computer I use the most is a Windows 7 laptop, I'm comfortable there and will remain that way until I am forced off of Windows 7 for a business reason.
All that having been said, there are some folks who I Support/Chat/Help/Consult for (and so forth) that still have Windows XP computers that run every day.
Please upgrade those now.
Extended Support for Windows XP will be ending April 8, 2014.
Windows Update will cease to function.
Internet Explorer will no longer be updated and become even more abysmal to use in time.
You will be forced to use Chrome or Firefox for a "modern" browser.
Now the latest announcement - if you use Microsoft Security Essentials for your virus protection, you will no longer be able to get updates.
Seeing that I get an update on a daily or more than once a day basis on my virus signatures on Windows 7, that is a significant issue.
The XP user will have to pay for a virus protection program - and it is a big market with many names. But by the time you get that virus, you won't be able to save your data.
I've had one virus hit this machine in the time I have used it - one year. While that clobbered my computer, I was able to restore from a week old backup. All my data is stored either on a SDHC chip or on a network - so I was safe. The hard drive on the machine is not for "permanent storage".
Do you have that kind of regimen?
I have a good friend and neighbor who clicked on a link in an email and immediately knew he had a Cryptolocker Virus screaming at him that if he didn't pay 300 bucks for a ransom, his info would be passed to the FBI. While that threat is bogus, it shows how easy it is to get a virus now. For XP Users on April 8, 2014, it will get easier since they are already writing viruses to take advantage of back doors and other exploits. At current 30 percent of US Computer Users run Windows XP.
At any rate, if you are one of those folks who can't afford to pay the 100 Dollars US for a copy of Windows 7 or 8, I strongly recommend looking into a free copy of Debian or Ubuntu Linux. Since they run Firefox as a browser as the default, you'll be fine.
After all, why spend 100 for an operating system when a new computer runs around 200 dollars for a "beater". If someone is running XP then their computing needs are a bit more modest than someone who needs a top of the line beast.
Thursday, November 14, 2013
Facebook Forced You To Change Your Password? Blame Adobe
Actually, blame yourself according to these Security Guys.
You see most of us have a habit of using the same password in multiple places. I've done it, especially with Job sites. There just isn't a reason to use a different password for a site that is pretty much a site you won't visit again, or if you lose your sign on won't really effect you.
Shopping is a very different matter. If you are using the same password in one store as the next, you're potentially letting yourself in for a lot of financial hardship.
Believe it or not, I actually agree with Facebook because all that blather I just gave you is why they locked you out.
I have a friend who complained about being locked out this morning from Facebook. Then I remembered that this was the story about Adobe. You see, Adobe got hacked. The passwords and user names got passed around the internet and are being used to hack other accounts. If you used one of those general passwords on Adobe, you really should consider your security.
I mean it's not like you're applying for a job there, are you?
The problem with that is that you end up having a list somewhere with website names and passwords written down on them. Either done on a piece of paper stuck to the bottom of the keyboard, or on a computer file somewhere.
Yes, people do stick their passwords on the bottom of keyboards. It was the first place I would check when I had someone stuck not able to get in to the computer that morning.
Mine was on a PDA, remember them? I had an electronic file that had the password hints on them.
Now, if you're home there are better places to hide those needed files. A small chip can go lots of places, after all you can fit 128 GB on something the size of a postage stamp.
So give a thought to how many places you use your favorite password. Might be a good idea to start changing them.
You see most of us have a habit of using the same password in multiple places. I've done it, especially with Job sites. There just isn't a reason to use a different password for a site that is pretty much a site you won't visit again, or if you lose your sign on won't really effect you.
Shopping is a very different matter. If you are using the same password in one store as the next, you're potentially letting yourself in for a lot of financial hardship.
Believe it or not, I actually agree with Facebook because all that blather I just gave you is why they locked you out.
I have a friend who complained about being locked out this morning from Facebook. Then I remembered that this was the story about Adobe. You see, Adobe got hacked. The passwords and user names got passed around the internet and are being used to hack other accounts. If you used one of those general passwords on Adobe, you really should consider your security.
I mean it's not like you're applying for a job there, are you?
The problem with that is that you end up having a list somewhere with website names and passwords written down on them. Either done on a piece of paper stuck to the bottom of the keyboard, or on a computer file somewhere.
Yes, people do stick their passwords on the bottom of keyboards. It was the first place I would check when I had someone stuck not able to get in to the computer that morning.
Mine was on a PDA, remember them? I had an electronic file that had the password hints on them.
Now, if you're home there are better places to hide those needed files. A small chip can go lots of places, after all you can fit 128 GB on something the size of a postage stamp.
So give a thought to how many places you use your favorite password. Might be a good idea to start changing them.
Friday, November 8, 2013
Dealing with Facebook Annoyances Using Adblock Plus
Audience is either Firefox Users or Chrome Users.
Facebook is the website you love to hate.
Teens are leaving it, adults can be addicted as a time sink, marketers think they can buy the world's information at a song.
You can tame the beast some.
Lately Facebook has made some changes to the way they present information. It's all about getting you to opt into more things - you know, to "Like" them. That helps them build a profile about you. Since you tend to give up that information freely, it's pretty valuable.
But lately it got to be a bit much. Since I manage a number of websites, and a number of social media presences online, I have to be on Facebook - all day.
First thing is you really need a good ad blocker. The reason is that those ad services may be entertaining but they are watching what you do everywhere. You may not have a problem with it, but I do.
I went to Firefox years ago and installed an adblocker. The latest iteration of it is called "Adblock Edge". It will block both intrusive and non-intrusive advertising. The distinction between that and "Adblock Plus" is that Adblock Plus has been paid by Google and perhaps others to not block their text ads. That raises the question of what else are they not telling you. Supposedly Adblock Plus is making the decision as to whether something is acceptable, and I'm not comfortable with that.
I'll let you look into that whole learning process. It's best that you look into it yourself, but the default settings on Adblock Edge are pretty good to begin with. The simplest explanation is that you can right click on an ad, Select "Adblock Plus: Block Image" and tailor what you see.
The next step is to import something into Adblock Edge that works with Facebook itself. There's a big long list of things that they added that annoy me, as well as clutter their interface. Frankly I don't have time for most of it, but a long list of that stuff can be found in this article.
Those annoyances are the "You May Like" or the "You May Know" genre of items. They got to the point where they were more than half of what I would see on Facebook. So when I saw the article, I followed the simple instructions:
You're done. Facebook will be less cluttered - until they break that by changing things.
You can always hide those people or businesses by unfriending or unliking them, but that is a bit of a Nuclear Option. This keeps the friends but loses the "chaff".
It just got too hectic, so thankfully Technology came to the rescue.
Facebook is the website you love to hate.
Teens are leaving it, adults can be addicted as a time sink, marketers think they can buy the world's information at a song.
You can tame the beast some.
Lately Facebook has made some changes to the way they present information. It's all about getting you to opt into more things - you know, to "Like" them. That helps them build a profile about you. Since you tend to give up that information freely, it's pretty valuable.
But lately it got to be a bit much. Since I manage a number of websites, and a number of social media presences online, I have to be on Facebook - all day.
First thing is you really need a good ad blocker. The reason is that those ad services may be entertaining but they are watching what you do everywhere. You may not have a problem with it, but I do.
I went to Firefox years ago and installed an adblocker. The latest iteration of it is called "Adblock Edge". It will block both intrusive and non-intrusive advertising. The distinction between that and "Adblock Plus" is that Adblock Plus has been paid by Google and perhaps others to not block their text ads. That raises the question of what else are they not telling you. Supposedly Adblock Plus is making the decision as to whether something is acceptable, and I'm not comfortable with that.
- Simple, get Adblock Edge instead. Adblock Edge will allow you, once you learn how to use the thing, to block any advert as well as things like frames and those reprehensible "Fancybox" and "Lightbox" things that seem to float over a web page.
I'll let you look into that whole learning process. It's best that you look into it yourself, but the default settings on Adblock Edge are pretty good to begin with. The simplest explanation is that you can right click on an ad, Select "Adblock Plus: Block Image" and tailor what you see.
The next step is to import something into Adblock Edge that works with Facebook itself. There's a big long list of things that they added that annoy me, as well as clutter their interface. Frankly I don't have time for most of it, but a long list of that stuff can be found in this article.
Those annoyances are the "You May Like" or the "You May Know" genre of items. They got to the point where they were more than half of what I would see on Facebook. So when I saw the article, I followed the simple instructions:
- First Surf this page. It gives you a graphical representation of things you don't want to see.
- Second, select the link you want. I selected the Block All in the first column but that may be a bit too much. You can see the graphic and select the one you want by clicking on the green "+ add" button.
- Third, add the rules to your Adblocker. When you click on the "+ add" button, it will pop up the Adblock dialogue box for "Add Adblock Plus Filter Subscription". Click on the button to "Add Subscription".
You're done. Facebook will be less cluttered - until they break that by changing things.
You can always hide those people or businesses by unfriending or unliking them, but that is a bit of a Nuclear Option. This keeps the friends but loses the "chaff".
It just got too hectic, so thankfully Technology came to the rescue.
Friday, July 19, 2013
Your Software Is Secure - Or Is It?
There's a quote out there that goes:
If you're not the customer, you're the product.
That's directly applicable to any bit of "Free" software you use. If there's an ad being shown, if it asks you to install a different browser or tool bar, if there's an offer to download 10 free MP3s - You Are The Product.
Fair enough.
There are exceptions to that rule. There are a lot of excellent pieces of software out there that are free with no strings attached. No phone home tricks, no advertising, and no other gotchas. Those typically are called "GPL" or "GNU Software" or "FOSS". I do most of what I do on Windows, however off that windows machine, I live in that FOSS world of Linux. If I want a spreadsheet, I merely download Libre Office and I'm happily counting away my beans.
I guess the fact that there is no support network provided with most of that kind of software means I'm still the product but I'll ignore that.
Once you leave that world of Windows or Mac OSX where you pay and expect complete discretion (and you would be wrong), or Linux where the power of Open Source means you have thousands of eyes looking at the software and putting out a warning that your operating system might be spying on you (Ubuntu), it gets a bit questionable.
The assumption is that with your shiny iPad or iPhone, Apple is looking into that for you. It's not completely clear that that is true, and rumor has it that it isn't.
On the other hand, Android does warn you when your phone or tablet is being asked to sign away your information. You can still allow it, but it does warn you. The idea is that the user is expected to be an educated Android user and actually stop and look at the warnings. On the other hand, when is the last time you took the time to read an EULA (End User License Agreement)?
Exactly, even I just skim them. If it says it's GPL, I assume it's OK, otherwise, you may get one of those programs that says that if you send an email to a specific address, you "win" 1000 dollars US. Yes, that happened, once, and it took five years for anyone to find it and collect!
The most egregious use of the person being the product lately is the Jay Z app called "Magna Carta". Download and install the app and you get to join in and help to promote his CD of his latest "songs".
Great, if you like that sort of thing. On the other hand people did start to read what the app wanted to do to your Android phone. It basically demanded full control, including your personal details, it wanted to start at start up time, and demanded access to your Facebook and Twitter accounts. The assumption is that it was going to go out and put postings to those accounts in your name saying how much you were enjoying his "songs".
Rap. Bleah. But he's making my point for me. It does not say that Jay Z is doing something with all that information, it merely says that the software has access to it. He is using people as marketing tools to build the social buzz on Facebook and Twitter. He may never use any of it, and that access may not ever be used, but it begs the question:
Is that in your benefit?
When you go to your app store, look around and ask yourself do you really need it? That app will probably slow your phone or tablet down whether it is on the iPhone or a shiny new Android Tablet because it will want to start up when you turn the thing on.
Is that in your benefit?
That app may want to know who you called today, and forever.
Is that in your benefit?
That app may want access to whatever is running at any given moment.
Is that in your benefit?
The answer to all of that is no.
Especially that last one. If you use a smartphone to do your banking, your banking details are POTENTIALLY exposed to any app that is running at that time. Want to share your bank account information with me? I didn't think so, but would you with an app developer? That answer should still be no.
The best thing you can do with that phone is to make calls with it and keep it clean of unneeded software. That includes free or paid apps. There's too much risk these days.
Sorry to bring bad news but there are some questionable people out there.
If you're not the customer, you're the product.
That's directly applicable to any bit of "Free" software you use. If there's an ad being shown, if it asks you to install a different browser or tool bar, if there's an offer to download 10 free MP3s - You Are The Product.
Fair enough.
There are exceptions to that rule. There are a lot of excellent pieces of software out there that are free with no strings attached. No phone home tricks, no advertising, and no other gotchas. Those typically are called "GPL" or "GNU Software" or "FOSS". I do most of what I do on Windows, however off that windows machine, I live in that FOSS world of Linux. If I want a spreadsheet, I merely download Libre Office and I'm happily counting away my beans.
I guess the fact that there is no support network provided with most of that kind of software means I'm still the product but I'll ignore that.
Once you leave that world of Windows or Mac OSX where you pay and expect complete discretion (and you would be wrong), or Linux where the power of Open Source means you have thousands of eyes looking at the software and putting out a warning that your operating system might be spying on you (Ubuntu), it gets a bit questionable.
The assumption is that with your shiny iPad or iPhone, Apple is looking into that for you. It's not completely clear that that is true, and rumor has it that it isn't.
On the other hand, Android does warn you when your phone or tablet is being asked to sign away your information. You can still allow it, but it does warn you. The idea is that the user is expected to be an educated Android user and actually stop and look at the warnings. On the other hand, when is the last time you took the time to read an EULA (End User License Agreement)?
Exactly, even I just skim them. If it says it's GPL, I assume it's OK, otherwise, you may get one of those programs that says that if you send an email to a specific address, you "win" 1000 dollars US. Yes, that happened, once, and it took five years for anyone to find it and collect!
The most egregious use of the person being the product lately is the Jay Z app called "Magna Carta". Download and install the app and you get to join in and help to promote his CD of his latest "songs".
Great, if you like that sort of thing. On the other hand people did start to read what the app wanted to do to your Android phone. It basically demanded full control, including your personal details, it wanted to start at start up time, and demanded access to your Facebook and Twitter accounts. The assumption is that it was going to go out and put postings to those accounts in your name saying how much you were enjoying his "songs".
Rap. Bleah. But he's making my point for me. It does not say that Jay Z is doing something with all that information, it merely says that the software has access to it. He is using people as marketing tools to build the social buzz on Facebook and Twitter. He may never use any of it, and that access may not ever be used, but it begs the question:
Is that in your benefit?
When you go to your app store, look around and ask yourself do you really need it? That app will probably slow your phone or tablet down whether it is on the iPhone or a shiny new Android Tablet because it will want to start up when you turn the thing on.
Is that in your benefit?
That app may want to know who you called today, and forever.
Is that in your benefit?
That app may want access to whatever is running at any given moment.
Is that in your benefit?
The answer to all of that is no.
Especially that last one. If you use a smartphone to do your banking, your banking details are POTENTIALLY exposed to any app that is running at that time. Want to share your bank account information with me? I didn't think so, but would you with an app developer? That answer should still be no.
The best thing you can do with that phone is to make calls with it and keep it clean of unneeded software. That includes free or paid apps. There's too much risk these days.
Sorry to bring bad news but there are some questionable people out there.
Thursday, July 11, 2013
Go Away Priyanka, You Are A Worm.
This Priyanka has cropped up on the tech blogs, just about everywhere that I was reading, so I thought I'd jump on the bandwagon.
Got Android? Read on.
Got something called "WhatsApp"? Read on.
WhatsApp is a chat client for SMS or other WhatsApp users. Yes, Yet Another Chat Client has a worm running through it. Pretty common these days.
It's an easy one to avoid, simply don't accept any messages from Priyanka, don't friend Priyanka... In short, ignore Priyanka and delete anything from it without opening it.
If you have Priyanka in your contacts, then it goes out and sends invites to all your friends on the WhatsApp platform in order to share in on the fun.
Oooh.
The instructions to get rid of them are pretty simple as well, and you can find them at this link.
I'm an admitted oddball. I don't do SMS Texting. At all. It's turned off at T-Mobile, so no matter what I'm safe.
Want to talk to me, call me. Want to send text? Email. Yeah I know, it's not trendy but I'm in front of a computer from 7AM until 11PM some days. I'll leave WhatsApp on the shelf for those who are more "smartphone addicted" than I am.
Got Android? Read on.
Got something called "WhatsApp"? Read on.
WhatsApp is a chat client for SMS or other WhatsApp users. Yes, Yet Another Chat Client has a worm running through it. Pretty common these days.
It's an easy one to avoid, simply don't accept any messages from Priyanka, don't friend Priyanka... In short, ignore Priyanka and delete anything from it without opening it.
If you have Priyanka in your contacts, then it goes out and sends invites to all your friends on the WhatsApp platform in order to share in on the fun.
Oooh.
The instructions to get rid of them are pretty simple as well, and you can find them at this link.
I'm an admitted oddball. I don't do SMS Texting. At all. It's turned off at T-Mobile, so no matter what I'm safe.
Want to talk to me, call me. Want to send text? Email. Yeah I know, it's not trendy but I'm in front of a computer from 7AM until 11PM some days. I'll leave WhatsApp on the shelf for those who are more "smartphone addicted" than I am.
Subscribe to:
Posts (Atom)


