Showing posts with label Google. Show all posts
Showing posts with label Google. Show all posts

Saturday, May 28, 2016

Run Free Google Nik Photoshop filter collection in Paint.NET

I have an older build of Adoble Photoshop that I rarely use for photo editing work. I prefer the freeware application Paint.NET.

So when I heard that the Google Nik Collection became a free download back in March I got really excited because at least I would have some new filters for Photoshop.

If you aren’t familiar with the Nik Collection and just hit that page, you might think that it offers seven or so very high-quailty photo retouching/editing filter profiles for use in Photoshop.

What it really contains is an amazing number of high-end photo retouching/editing filters that fall under seven primary filter categories.

But maybe you don’t have Adobe Photoshop so you have the sads as you couldn’t take advantage of these filters.

Fear not!  You can easily run the Google Nik Photoshop filters in the free Paint.NET photo-editing software application to your heart’s content and not need Adobe Photoshop at all.

image

sample photo by Mayur Gala via Unsplash with CC0 license

  1. Download/install Paint.NET (if you don’t have it already).
  2. Download and manually install the Paint.NET 8bf filter plugins.
    1. Once downloaded, unzip the file package.
    2. Close out Paint.NET if running. 
    3. From the unzipped location, copy the “PSFilterPdn.dll” and “PSFilterShim.exe” into the Paint.NET “Effects” folder (usually C:\Program Files\Paint.NET\Effects) (see here if needed) Download/install the Google Nik Collection. Tip: make a note of what the default install directory path is.
  3. Run Paint.NET
  4. Go to “Effects” on the Menu bar,
  5. Select the 8bf Filter near the bottom.
  6. In the window, click on “Search Directories” tab,
  7. Make sure the “Search Subdirectories” tick box is checked.
  8. Click on the “Add” button.
  9. Browse to the top-level folder location where the Google Nik Collection was installed (from step 3 tip) and select that folder.  (On my system it was “C:\Program Files\Google\Nik Collection”
  10. Click “OK” and the path will be added to the seach directory. (more details on installing Photoshop-compatible filteres wth 8bf Filter here.)
  11. Done!

To access the Google Nik Collection fiters in Paint.NET do this.

  1. Run Paint.NET if not already running.
  2. Load up an image file in Paint.NET to get started with.
  3. Go to “Effects” on the Menu bar,
  4. Select the “8bf Filter” near the bottom of the Effects dropdown listing.
  5. Select the “Filters” tab in the window.
  6. Expand the “Nik Collection”
  7. Pick a filter category
  8. Click the “Run Filter” button
  9. It will load up the image you have selected and then present you with the filter control window.
  10. On the top left side you will see the different sub-categories for the loaded filter.
  11. Select the filter subcategory and then try the different filters. You will see them previewed on your image.
  12. If you want, you can fine-tune the selected filter effect on the right hand side.

Amazing! All this in Paint.NET.

Mind blown.

Cheers.

Claus Valca

Saturday, December 12, 2015

Windows Live Writer Goes Open - Hurray - WLW breaks - Booo!

Well I was all set to excitedly post news about the announcement that Windows Live Writer has gone to an Open Source project release.

Hurray!


Only I got an account/password error during installation when configuring it up to the Blogger system.

Oh well, let me just launch my original WLW installation and go from there...

Nopes.
Turns out it looks like Google has timed it's depreciation of the WLW authentication method so it now will not work.

Booo!


Per a comment in the thread by "Hirschy" earlier today...

The issue is well known and is being worked on as part of the Open Live Writer project, please see https://github.com/OpenLiveWriter/OpenLiveWriter/issues/5 for progress
The reason it's not working is that a few years ago Google deprecated the authentication process that Live Writer uses,  i.e. Google declared it as obsolete because it is not secure enough for the modern web, and developers should stop using it ASAP. Unfortunately Live Writer was not updated to use the new more secure OAuth 2 standard. Google removed support for it back in about May this year, then temporarily re-enabled it for Blogger / WLW, now it looks like they have pulled it for good.
It's not straightforward to fix, certainly more than a couple of lines of code. If you want to comment, please post to the GitHub issue via the link above, as that will be read by the developers. They will not generally be following the MS forums as it's no longer an MS product.
Convert Google Blogger ClientLogin to OAuth 2.0 · Issue #5 - OpenLiveWriter/OpenLiveWriter · GitHub

And as "ronmartmsft commented on the issue page:
This could not have happened at a worse time given how many bloggers rely on the holiday season for income. It seems that Google has taken the release of this product as a green light to finally deprecate the legacy auth leaving Blogger users stranded.
Track here - https://productforums.google.com/forum/?utm_medium=email&utm_source=footer#!msg/blogger/lw_sNsyySKI/FyMxf1DBBwAJ
I must agree.

The initial excitement I had at a new WLW release...even if missing spellchecking at this stage was heavily tamped down with the breaking of the original WLW posting to Blogger.

It's not clear to me yet if other alternative blogging clients that can interface with Blogger will also hit that brick wall.

I'm composing this post in the Blogger web page UI but that won't do for regular posting.

So until this sorts out -- please be patient while the blog posting at GSD slows down.

Bummed for the moment.

--Claus Valca

Saturday, October 31, 2015

Web Browser Linkpost; Mostly Vivaldi and Firefox

Tracking

Vivaldi updates march on

Still loving Vivaldi and the feature set they are bringing to the table.

Still not a “daily driver” for web browsing but getting closer and closer. I’ve not listed all the snapshot posts but here are some highlights that might be interesting.

Considering the large volume of bookmarks I deal with, the bookmark bug-fix improvements have been very well received in particular; sorting, ordering, editing.

Firefox and Mozilla Developments

Google Chrome/Chromium

Pale Moon Rising

Pale Moon - Release Notes

25.7.3 (2015-10-14)
This is a usability update needed due to the fact that Mozilla has shut down their key exchange (J-PAKE) server along with the old Sync servers. This was unexpected and required us to set up our own key server (testing indicates this works as-expected, but please do report any issues on the forum) - which also required reconfiguration of the browser.
Please note that older versions of the browser will no longer be able to link devices to a sync account using the 12-character code since it requires a Mozilla server no longer present. If you need this functionality, you must update to this version or later.

Edge(ed) Out

Browse on, my friends.

--Claus Valca

Tuesday, September 01, 2015

This week in browser bits: roll-backs, upgrades, and changes

Ever since Mozilla released an upgrade of Firefox to version 40.x I seem to been seeing frequent and persistent crashing of my Firefox browser.

As of the time of this post, I am running version 40.0.3.

The issue seems to occur most when I grab an open tab handle and drag/drop the tab into my bookmark side-bar to “save” a bookmark of that page.

It got so bad that I began to look at rolling back (downgrading) my Firefox version to an older version, say the last 39 release version, to see if that would help.

Making a bookmark the “long way” by clicking the “star” icon or using the Ctrl+D key-combo worked fine but was a lot of work due to my deep folder structure in the bookmarks.

Fortunately, I found that by grabbing the small icon on the far left of the address bar, I could drag and drop that to also create a bookmark at will without the crash I get from using the same technique but with the page-tab item.

I’ve not yet filed a bug report, but will shortly.

Firefox Version Roll-Back

The process to roll back to an older version of Firefox is fairly simple, as long as you know where to get the bits. In my case it is a touch more complicated as I use Mozilla Firefox, Portable Edition via Portable Apps. For installed versions of Firefox, head over to Index of /pub/mozilla.org/firefox/releases and download the version you want and reinstall. Sure, you should first back up your profile, etc. before doing it, just in case. For portable apps versions, head over to Mozilla Firefox, Portable Ed. at SourceForge.net project page, and find the earlier version, download, and over-install.

Here are some more guides on the process to roll-back Firefox:

My recent and growing frustrations with Mozilla/Firefox have led me to invest even more heavily that normal (and that’s saying something) in spending considerable more time using and testing alternative web-browsers; specifically Vivaldi (based on Chromium) and Pale Moon (based on Mozilla).

Add-On Support for Pale Moon and Firefox

Pale Moon (portable) has been very stable and runs very well on my systems in the testing work I’ve been doing more and more.

I don’t have a lot of Firefox Extensions/Add-ons and found that almost all of them were compatible in Pale Moon. Listed below are my current Firefox Add-ons and I’ve noted the ones that ARE NOT Pale Moon compatible -- at least directly installable via the Mozilla Add-ons store.

- about:addons-memory 10.1-signed  (not offered for Pale Moon / Firefox 24.9)
    https://github.com/nmaier/about-addons-memory
   
- Adblock Plus 2.6.10 (didn’t bother to try as I like/prefer uBlock Origin)
    http://adblockplus.org/en/
   
- CoLT 2.6.5
    http://www.borngeek.com/firefox/colt/
   
- Copy as HTML Link 3.2.1-signed
    http://justinsomnia.org/2006/05/copy-as-html-link-for-firefox/
   
- Download Status Bar 12.3.0.1-signed
    https://addons.mozilla.org/en-US/firefox/addon/download-status-bar/?src=api

- Extension List Dumper 2 1.0
    https://addons.mozilla.org/en-US/firefox/addon/extension-list-dumper-2/?src=api
   
- FiddlerHook 2.5.1.8 (installed on system by Fiddler, but doesn’t seem to pick up in Pale Moon / Firefox 24.9)
    https://fiddler2.com/r/?FIDDLERHOOKHELP
   
- Firebug 2.0.11 (not offered for Pale Moon / Firefox 24.9)
    http://www.getfirebug.com/
   
- Greasemonkey 3.3  (I didn’t bother to try to install yet in Pale Moon)
    http://www.greasespot.net/

- HttpFox 0.8.14.1-signed
    http://code.google.com/p/httpfox/

- Linky 3.0.0.1-signed
    http://gemal.dk/mozilla/linky.html

- NoScript 2.6.9.37rc1
    https://noscript.net

- Search By Image (by Google) 1.1.2.1-signed
    http://www.google.com

- Tab Memory Usage 0.1.8 (Disabled)
    http://mybrowseraddon.com/tab-memory.html

- TinEye Reverse Image Search 1.2.1
    https://tineye.com/

- uBlock Origin 1.1.0.0
    https://github.com/gorhill/uBlock

Pale Moon project provides a list of known incompatible Add-ons you may wish to consult.

The FiddlerHook item is not a real deal-breaker as I have lots of network sniffers/tracers to use, and isn’t “required” as you can just run Fiddler, then manually/temporarily set Pale Moon to use the system proxy.

Having said that, this extension isn't really needed in modern versions of Firefox. Instead, simply set Tools > Options > Advanced > Network > Proxy Connection to "Use System Proxy."

Likewise Firebug is a very powerful tool to inspect web page elements and code. However the “F12” web developer tools natively provided in Pale Moon are a sufficient alternative.

More Firefox Gripes News and the “Contextual Identity” Project

That last one really has me conflicted.

For full details see this Security/Contextual Identity Project/Containers - MozillaWiki feature draft page that Martin Brinkmann alluded to in his article.

Also, take a look at the Security/Contextual Identity Project mainpage for full context.

As a browser user, I can see the draw and benefit of having a feature allowing for concurrent “persona” sandboxing while browsing at work; that way I can browse all the cat sites I want at work under one “persona” while concurrently monitoring all my embedded network appliance and nodal dashboards in the same browser under my other “persona”, while doing all my personal secure on-line banking transactions in a third “persona”.  See how handy that will be? I can separate all those browsing activities while doing them at the same time in my browser -- at work -- and never will they need to inter-mingle.

Oh. Wait.  Why am I doing personal web-browsing at work on my work-provided systems?

Snap.

I guess it comes down to the workplace internet usage policy, but I just don’t see it a good idea to mix personal web browsing on work-provided equipment and networks; even if permissively allowed by the employer policy. That activity is fraught with security and privacy issues.

But then again, I’m an old security curmudgeon.

Like I say, read the feature draft page for full details. I’m confident many “modern” browser users will totes love this feature if it gets folded in. I get it and it does look like it will be slickly delivered. However as a sysadmin I think that while the feature looks good it may provide a false-sense of security and provides less benefit from a network administrator/security perspective for the organization’s benefit.

Oh well, I probably don’t have to worry because as we all know, only Internet Explorer is approved for use in the workplaces right?

Vivaldi Developments and Tab Tiling!

The Vivaldi team remains focused on regular snapshot updates to their project. It’s still at “technical preview” release level so not yet ready for prime-time use. But the fixes and features keep coming strong.

Snapshot 1.0.258.3 was pretty cool for me as it brought in tab-tiling.

Basically, you select more than one tab that is opened, hit a little tab-tiling option icon in the bottom right corner and select the layout, then the browser opens (tiles) them in a single window for concurrent viewing of all the tab pages side-by side!

In the example below, I’ve got the Phil Are Go!, Google Art Project. and Vivaldi Team Blog tabs all opened (tiled) in a single page window in Vivaldi. Cool!

_2015-09-01_10-15-03

For data-hungry sysadmins monitoring multiple web-pages on a super-screen sized monitor this could be handy.

And no, it’s not the same think as the “contextual identities” feature as Mozilla is discussing, thank you very much.

IE 11/ Edge browser

Just had to toss this one out there to make up for my cheeky comment about IE browser in the workplace.

--Cheers!

Claus Valca

Friday, July 31, 2015

This week in browser bits; runway memory edition

Submitted for your review, Firefox news,  Mozilla whining, Chrome tab “discarding”, and Claus deals with a runaway freight train -- no, scratch that -- runaway memory usage in Firefox.

To the rails!

Firefox News

The Firefox Extension Guru's Blog has been hard at work parsing details and analysis of coming changes in the Mozilla browser.

  • Truthful, but not very PC… - Firefox Extension Guru's Blog - Silverlight will be banished, Flash retained, and the 64 bit mainstream version release of Firefox x64 is delayed, and questions persist.
  • Win64 Firefox NOT Coming with Firefox 40 - Firefox Extension Guru's Blog - Maybe with Firefox 41?
  • A Look at Extension Signing In Firefox 40 - Firefox Extension Guru's Blog - The Guru goes to the mats for  us and loads his profile into Nightly 42, Developer’s Ed. 41, and Beta 40 of Firefox to take a look at the impact to users (and their Add-ons) with Extension Signing coming soon to a Firefox 40 release on your system.  Read his post for the full comparison. Summary: FF40 = warnings, FF 41 = blocks (but action can be user disabled), FF 42 = blocks (no disablement).
  • Disabling Add-on Compatibility Check - Firefox Extension Guru's Blog - Guide update notice and point to Disable Add-on Compatibility Checks Add-on for extended feature support. Note this Add-on appears to be very popular with Pale Moon users.

What Does the Fox Say?

(with a nod to Ylvis)

It’s probably not that long ago in most people’s minds to recall the great browser wars of the 90’s and the anti-trust settlement and also how the EU forced Microsoft to provide a default web-browser “ballot” to guide users to an alternative browser than Internet Explorer as the default.

Today although many users still turn to use IE on their Windows systems without question, there is general familiarity with alternative browsers such as Mozilla Firefox, Google Chrome, Opera, Apple Safari, and upstarts Vivaldi and Pale Moon-- to name a few. Their presence in the formerly IE dominated world has been hard fought; both in coding/development, in the courtroom, and in the marketplace.

So it was probably a frustrating day in many a browser boardroom when it came out that the Microsoft Windows 10 upgrade will automatically reset the default Windows web-browser setting to Microsoft Edge and over-write the user’s current default browser choice if it isn’t already IE. It will do this unless you are a pre-informed geek/user and choose to ignore the “express settings” option during setup and choose the “customize settings” option, and then carefully locate another button to make the option change to keep your settings. It isn’t a stretch to anticipate that most consumers eligible to get this Windows 10 upgrade will be more than happy to select the “no-pain/no-fear” “Express Settings” upgrade and toddler on with the process unawares (and get a whole lot of other potential security and privacy setting headaches along the way by default). More on that in a follow up post.

Anyways…

Mozilla for one isn’t taking that roll-back to Microsoft Edge browser by hiding out quietly in a foxhole. No, in a shout to equal the noise of Ylvis’s video they howled/barked pretty loudly.

Ooops. Did you click the “Express Settings” option? Fear not, here are some steps to get Firefox (or Chrome) set back to being your default browser.

Chromium Tab “discarding”

Memory management can be a real challenge for a “modern” web-browser. With the media-rich webpage content, and multi-process hosting in these browsers, keeping system memory usage in check and browser performance up is a developer’s constant nightmare.

My own browsing habits are such that I usually have no more than three or four browser “tabs” open at any given time. I generally file away pages to my bookmark manager to be saved for later review. The only time I regularly have more than 25 tabs open is when I am going through my RSS feeds in Omea Reader and launching them to open in the background in Firefox. Once done with the RSS feed culling, I then go to Firefox and sort them into a specific folder for topical blogging, or future reference.

Lavie on the other hand leaves fifty+ tabs open in multiple web browsers concurrently. Drives me crazy! But that’s how she works.

A new feature “tab discarding” has surfaced in Chromium builds. For those who have a lot of tabs left open, it will use an algorithm to trigger “discarding” open tabs when physical system memory is running low. My understanding that “discard” means something more like “suspend” rather that shut it down and toss it in the bin. If enabled and triggered, the tab stills shows on the tab-bar, but nothing is happening until you select the tab, when it then “revives” again.

I’ve enabled it in my Chromium build though I don’t expect to see much difference with my minimal tab usage. If it rocks my world I’ll let you know. Martin Brinkmann of gHacks has the “how-to” for enablement of the feature in his post below.

Per Brinkmann’s article, the Firefox BarTab extension has offered a similar feature to Firefox users for some time. The original BarTab by philiKON is not supported on Firefox 39 or higher. However a newer “fork” of it -- BarTab Heavy -- seems to be fine. See also this other fork BarTab Plus.

Claus Deals with Runaway Memory in Firefox

So this morning I happened to have my own struggles with Firefox memory usage so here are my notes.

I was tearing through my RSS feeds and opening articles of interest in the background within Firefox.

My tab bar was filled and more tabs were spilling over “hidden” off the left.

I eventually noticed a number of things…memory usage on my system was almost maxed out, though I just had a handful of applications open, and the laptop cooling fan had kicked on full-tilt.

I checked Process Explorer and quickly found the culprit for my RAM usage; Firefox!

osuyqzsh.qfq

Normally my system runs about 3.5 GB of RAM usage unless I have a VM open and running.

In this case my 8 GB of system RAM was almost maxed out and a large portion was being consumed by Firefox.

The RAM counters showing were continuing to climb mercilessly.

I started to try to save my tabs to the bookmark folders so I could close them out but after just a few, Firefox became locked up.

I killed the process and restarted Firefox. Luckilly my tab sessions were restored so I didn’t loose any of the open ones…but almost immediately, the RAM counters went climbing sky-high again to the 3 GB mark!  Did I have a rouge Add-on? Was one of the tabs hosting bad page code? What was going on?  I felt blind and Process Explorer wasn’t helping.

Step one: Make sure “Prefetching” was turned off.

How to stop Firefox from making automatic connections - Firefox Help - Lots of good advice here but this was the one I was interested in checking.

  1. In the Location bar, type about:config and press Enter.

    • The about:config "This might void your warranty!" warning page may appear. Click I'll be careful, I promise! to continue to the about:config page.
  2. In the about:config page, search for the preference network.prefetch-next.
  3. Observe the Value column of the network.prefetch-next row.
    • If it is set to false then do nothing.
    • If it is set to true, double-click on it to set it to false.

In my case, I had previously set it to “false” so that wasn’t a help.

Step two: Figure out what is consuming all the RAM within Firefox in the first place.

Firefox uses too much memory (RAM) - How to fix - Firefox Help

This page has tons of useful tips and tricks to try out; most are common sense like updating Firefox, disabling themes and add-ons, disabling auto-run of media on pages, using fewer tabs or adding more system RAM (really?).

However it was this tip - Memory troubleshooting tools - that had a great new find for me:

The about:memory page allows you to troubleshoot finely specific issues about memory (for instance, caused by a website, an extension, a theme) and sometimes its Minimize memory usage button may help you instantly reduce memory usage. For guidance on use of about:memory visit https://developer.mozilla.org/docs/Mo.../about:memory

Typing that in I get a page with some options to load memory reports, save them for later/diff’ing, free up memory, or save some garbage collection or concise cycle logs.

For first level stuff, hit the “Measure” button under the “Show memory reports” section and let it rip.

Here you can review all the different elements and how much RAM they are using.

fsbif4yj.uiv

Pretty helpful stuff.

Step three: check and enable trimming

Fix for Firefox memory leak on Windows - How-To Geek

  1. Type about:config in the address bar.
  2. Right click in the whitespace and choose New --> Boolean and enter.
  3. For the name provide “config.trim_on_minimize
  4. Set the value to “True”
  5. Shut down and restart Firefox.

Per MozillaZine Wiki this setting’s benefit is “dubious” but shouldn’t actually hurt anything if you are having issues.

Config.trim on minimize - MozillaZine Knowledge Base

Background

On Windows operating systems, when a program is minimized and left for a period of time, Windows will swap memory the program is using from RAM onto the hard disk in anticipation that other programs might need RAM. Because of the way Mozilla applications are stored in memory, Windows is much more aggressive in swapping out the memory they use, which can cause a delay when the program is restored. This preference determines whether to mark memory as preferably swappable, from a minimized Mozilla Windows application.

Recommended settings

Any positive effect of this setting is dubious, since any memory saving may be illusory.Bug 420267, comment 7

However, if you're experiencing problems with the application consuming too much RAM (Mem Usage in the Windows Task Manager), you can try setting this preference to true. If you're not experiencing any problems, it should be left at false to maintain application responsiveness.

Step four: Install an Add-on memory-monitoring tool

Knowing what in general is using RAM in Firefox (see step 2) is great, and disabling add-on one at at time to look for performance improvements is a great idea…though time-consuming if you have more than several. Luckilly, a solution was found in this gHacks post. Another Add-on!

Martin Brinkmann points out the Add-on about:addons-memory

It works great. Install the Add-on (no restart needed) and then type “about:addons-memory” in your address bar and it wills show you the memory usage of each add-on. How cool is that?  This can really speed up your troubleshooting.

Step five: Install a page-tab memory-monitor tool

Another add-on mentioned (that I haven’t tried yet) is Tab Data (+Memory usage) it offers to show memory use feedback on each open tab though reviews indicate some stability issues. See also Tab Memory Usage add-on.

Bonus Tip: About:About page

I’ve made a bookmark bar folder called [Abouts] that I then have placed various “about:” pages into it for faster access without having to type them. Go type about:about in the address bar to get the full listing but these are the ones I am interested in.

  • about:about
  • about:addons
  • about:addons-memory
  • about:cache
  • about:config
  • about:healthreport
  • about:memory
  • about:networking
  • about:permissions
  • about:plugins
  • about:preferences
  • about:support
  • about:telemetry

As of now, Firefox RAM usage hovers in the 500 MB - 1 GB range which seems pretty “normal” for me.

Hopefully one or more of these tips may help and if nothing else, give you some tools to better troubleshoot RAM issues in Firefox when you do encounter it.

Cheers,

Claus Valca

Sunday, July 12, 2015

Rapid Browser News Linkpost

Just some miscellaneous news and linkage on web-browsers.

Firefox/Mozilla

PaleMoon

So in the comments of a recent GSD browser news post, El Guru posted an observation that if Mozilla continues their feature bloat direction, it may drive many more Firefox users to the Pale Moon browser project.  I’m lightly familiar with Pale Moon but haven’t used it except for fiddling around. Firefox public\Developer, Vivaldi, and Chromium all take up most of my browser usage attention.

That said, I’m going to start paying much closer attention to the Pale Moon project, particularly if the “Three Pillars” philosophy/strategy doesn’t bear visible fruit.

Vivaldi

Chrome

Browser Security & Privacy Issues

Cheers!

--Claus Valca

Sunday, May 03, 2015

Sysadmin Linkfest Extravaganza

Like I said, I’m opening up the floodgates…again for my personal reference but there is the off-chance you might find something useful in here.

Network Stuff

Vivaldi Browser News/Releases

Firefox/Mozilla News

Google Account Protection for Chrome (sort-of)

The point of the bypasses (to me) isn’t so much that Goggle’s effort is a fruitless effort, but that the noble cause demonstrates the challenges of password security monitoring and the (relative) ease of exploiting/bypassing such attempts.

Chrome Web Browser News and Tips

Internet Explorer 11 and Enterprise Mode

Critical Updates…better late than never…

I note that on at least one Win 7 Professional system I support (x64) KB3046269 continues to present itself as needing to be installed after it installs and the system reboots. This seems to be reported by others as well. It’s not fatal but is a nuisance.

Samsung SSD EVO 840 Firmware Released (+ other SSD news & Tips)

Previous details:

The Samsung Magician software update (v 4.6)and then followup firmware update (EXT0DB6Q) went smoothly on my EVO 840 SSD drive. The only special thing I had to do was first to disable RAPID mode, reboot, apply the update, reboot, enable RAPID mode again, then reboot.

New and improved utilities

Malwarebytes Anti-Malware Update

General Security Bits for Sysadmins

I have always liked using Stinger as an alternative malware scanning tool to get an additional opinion on a system’s state of cleanness after a malware infection. I also like the features that Raptor provides. However I’m not sure I like it being bundled in with Stinger; particularly since it actually installs into the system and you need to know in advance it does this…and how to remove it when done. Count me undecided for now…

So, have you seen that new Age-Guesser App from Microsoft? Guess what…

IANAL and there is some conflicting commentary about the TOS noted on the page link and the “P.S. We don’t keep the photo” statement also on that page. I’m just saying…

Update 05/04 - per the Observing Virality in Real Time article post, they have provided the following statement:

Updated 5/2/2015

We've had some questions so we updated this post to be more clear. To answer the top one: No we don't store photos, we don't share them and we only use them to guess your age and gender. The photos are discarded from memory once we guess. While we use the terms of service very common in our industry, and similar to most other online services, we have chosen not to store or use the photos in any way other than to temporarily process them to guess your age.

Tips, Tricks and Tools

I really like the OffCAT tool. It is awesome for diagnostics and configuration troubleshooting and assessments. This new version looks even more feature-packed!

Ubuntu 15.04 Released

It took forever to download and upgrade my previous Ubuntu install to 15.04. Sure I made the mistake of doing it over WiFi rather than a wired connection. And I didn’t stick with it so it hung up on some packages that needed my express confirmation and I had stepped away (slept overnight) so it couldn’t continue till I discovered the pause in the morning. I was running it in a Virtual Box session and it crashed a couple of times booting up after the upgrade process completed. However I kept rebooting and eventually it cleared the errors itself and continued on to a now stable state again. Upgrade was good.

Surface Pro 3 Admin

Microsoft Visual Studio Code release - Cool factor +10

Notepad++ works good enough for me for my humble code editing needs (XML/HTML markup mostly). However this also has syntax highlighting for a ton of languages.

Note per the project page fine print:

By downloading and using Visual Studio Code, you agree to the license terms and privacy statement for Visual Studio Code. When this tool crashes, we automatically collect crash dumps so we can figure out what went wrong. If you don’t want to send your crash dumps to Microsoft, don't install this tool.

So if that bothers you, be warned that here could be privacy dragons. Or just don’t crash their code.

Topics still to be posted from the bookmark hopper..

To name just a few…

Cheers!

Claus Valca

Sunday, February 08, 2015

New Vivaldi TP release + Miscellaneous web browser bits

Last week I posted about a new Chromium-based web-browser that has an integrated bookmark side-bar like Firefox.

It doesn’t seem to yet have an (active) self-updating feature yet, so how does one tell if/when to update?

It appears that for now you have two options

  1. Monitor the Vivaldi Forums – and look for a new topic post announcing a release update, or
  2. Monitor the Vivaldi.net blog – and look for a new blog post announcing a release update.

Had you done either this week you would have seen a new Technical Preview version came out.

  1. Vivaldi Forum - Topic: Feedback for Weekly build 1.0.94.2 (1/7)
  2. First Snapshot Vivaldi 1.0.94.2 - Vivaldi.net blog

Vivaldi - Download

I did find this part interesting, after downloading the updated setup file from Vivaldi, I was curious how it would handle the updating of my standalone version.  When I clicked the “Advanced” button after launching the installer, I found it had already pre-populated the values to use my previous standalone location and settings.  That was kinda nice…though it would have been nice to give me a tip that it already had it covered.

Update install went smoothly and preserved all my limited customizations.

Lavie’s frustration with Firefox has been growing. She is one of the many web-browser users who opens new tabs for all the links she wants to get to read (eventually) but doesn’t bookmark them. So when the browser crashes (as it inevitably will do), sometimes she cannot restore her session and she looses those open tabs since we don’t apparently have Session Manager Add-on installed on her system. She liked Chrome but the lack of a bookmark sidebar really frustrated her (like me) and the many tab-bar add-ons for Chrome just didn’t satisfy the same experience we like for the bookmarks side bar presentation in Firefox.

So finger’s are crossed that Vivaldi will mature quickly and be ready for some prime-time usage one it pushes past the technical preview stages.

In other browser news, chron.com’s TechBlog writer Dwight Silverman recently encountered browser-malware distribution hijacking from an unexpected source, the Chrome Sync feature!

Mr. Silverman’s approach to remediation was pretty straightforward, uninstall the core problem app via the Windows “Programs and Features” list, then do some scans with Microsoft Security Essentials and Malwarebytes.  Some more uninstall work was required on the Macbook Pro and a Google browser “settings reset” brought the Google browser back to a clean state.

Don’t forget for Windows users, Google also provides their Software Removal Tool to clean up their browser from malware that is entrenched in the Chrome browser/system. I’ve used it on a few systems that had both Chrome and malware but whatever it looks for didn’t get an alert.

The takeaway?

Beware of browser sync features…they could cause more issues than you would expect across synced platforms. All it takes is one water-hole poisoning and everyone who drinks from it can get sick.

Moving on…

It really isn’t a secret but few non-technical AdBlock Plus users realize that it uses a whitelist where some companies have paid to be included on so that “non-intrusive ads” can continue to be served, bypassing the normal protections offered by AdBlock Plus.

What's the point of AdBlock Plus if Google, Microsoft and Amazon can pay to bypass it? – Brian Wilson – BetaNews

My personal experience is that 1) I already knew about this so I am not shocked and, 2) the effect of leaving the feature enabled for my browsing experience has been negligible so far.

However, if 1) you did not actually know about this and, 2) you either want to disable this feature or understand it more for yourself –- see the pile of links below.

Stay informed!

--Claus Valca

Saturday, December 20, 2014

Browser Bits in the News - Quickpost

Lots of web-browser bits have been in my RSS feed pile lately.

Here is a sizable collection for your review and bookmarking.

Security Related

  • SSLPersonas, making the padlock obvious. - Malwarebytes Unpacked - I like the concept but the graphic was a bit too bold IMHO.
  • Are you a robot? Introducing “No CAPTCHA reCAPTCHA” - Google Online Security Blog - GSD has been flooded in the past several months with an update in comment-spam. I seriously debated turning comments off, however there wasn’t a granular way on Blogger to keep the current comments visible and suspend commenting. So, since I do like the discussions and comments from the GSD support base -- and I guess keeping things open so it wastes time for the comment bots and boiler-room comment spam drone workers -- the comments remain open. And I will continue to rely on Blogger’s spam-filters to catch most of them.
  • The No CAPTCHA problem - Egor Homakov - and counterpoint analysis
  • The New Malwarebytes Anti-Exploit 1.05 - Malwarebytes Unpacked - I really like the promise of Anti-Exploit. Lavie continues to “pilot” it on her Win 8.1 system. However I also run EMET on our systems and AE seems to require some significant tweaking of the EMET rule-set to get Internet Explorer to run “normally” when both are installed at the same time.That said, I hope to one day see where they both can run concurrently without additional tweaking of default rule/behavior sets. Alas, this new version of AE didn’t bring it to me just yet.

Firefox Related

Chrome Related

  • The Best Chrome Extensions - MakeUseOf -  I have some of these already and will be looking into a few to see if they will be worth adding.

GPU acceleration in the web browser

Also, in Chrome you can type “chrome://flags/” in the address bar and get a GUI and more fine-grained way to address/disable rendering options in the browser.

F12

Cheers,

Claus Valca

Saturday, October 04, 2014

Firefox Updates, Nirsoft Changes, and Evil Add-Ons

Regular readers may recall a few weeks ago I was beating my head against the desk struggling with Mozilla’s SafeBrowsing changes; particularly when trying to download files from NirSoft.

I’m still not sure why the behavior ceased, but as the FF Extension Guru pointed out in the comments, Nir Sofer had made changes to the software in an attempt to reduce false malware identification rates.

Or it could have been a change buried in one of the rapid-fire Firefox updates released after my original posts:

Regardless, I’ve been able to download all the NirSoft apps I need/want for updating since then with no ill effects.

Also this week, Scott Hanselman found “evil” behavior in a Google Chrome extension he downloaded recently.

It’s another great post on a long-running theme that you can’t automatically trust any browser add-on, be it from Mozilla, Chrome, or IE.

As usual with most Hanselman blog posts, the comments were filled with germane information and additional resources:

And for context, while this can impact you as an individual/private web-browser user, it could also impact enterprise browser deployments if the sysadmin policy allows for end-user installation of add-ons/browsers.

What would be the impact if a “harmless” add-on surreptitiously was serving additional ad content in the background of web-pages? Annoyance and bandwidth impact? Probably, but if that ad content was exploited to serve malware--regardless of the add-on developer’s knowledge or not -- it could have serious implications for the security landscape at your organization!

Just sayin’…

Claus Valca