Saturday, March 31, 2018

Ontario elections web site & twitter

Earlier today I saw an ad for the Ontario Elections web site in Twitter.  Being paranoid I didn't click on the link and navigated to the site and started the process to verify that I am registered.  With all of the various groups who can make something like legit there was absolutely no way I would click on that link.

I found the site easily enough at www.elections.on.ca and I was happy to see the HTTPS, but, not all of the site was secure and I didn't get that nice little green lock icon.  When it navigated to the 'E-Registration' it did show the proper lock.  ALL the other pages after the main page showed the proper lock icon so there was something on the initial page that caused the issue.

Main Election Ontario page.

Start of the registration
Disclaimer page


When you click the 'Next' button it takes you to the check voter list page.

Check voter list

Once I filled in the information it presented me a page with my information.  I had an option to go back, confirm or update.

It is nice, fast and in 2 minutes I had confirmed my information and Jane's and we are good to vote in the June 7, 2018 Ontario provincial election.

Wednesday, March 28, 2018

Downloading my Twitter archive

With all of what is happening on Facebook and the privacy I was thinking about Twitter and getting a backup of what I can from that service.  I have downloaded my Google archives and Facebook and started to dig to see how to get Twitter.  It is fairly easy to find! 

I am doing this from my browser and not the app on my tablet or phone so it may be different there.  At the top right hand side this is your 'profile & setting' button to the left of the blue tweet button.  Towards the bottom there is a 'settings and privacy' option.  Once you select that you can scroll down until you see the button labelled 'Request your archive'.  Once you click on that it will pop up a screen that the request was received and you will receive an email with the link.  It will be interesting to see what is in that archive and also to have a backup of all of what I did there.

Main Twitter page where you start

Select Settings and Privacy

Popup when you request your archive

Sunday, March 25, 2018

What are they doing with our data?

With the 'breach' at Facebook they won't get my trust back again.  They can call it anything they want, but, from my point of view it is a 'breach'MY data was taken and used in ways I did not give MY permission for.  It isn't just Facebook, but, anyone who offers services over the internet that we need to be more aware of what they know about us and are willing to share to others.  It doesn't matter that it is 'free' like Facebook or a paid service we need to demand that they treat our personal information like crown jewels and do their best to make sure that it isn't taken without our knowledge and permission.

I don't know what they put into the document for data analysis by that 'researcher', but, here are a few things I can quickly think of for anyone who is thinking about people getting access to our data.


  • Where is the data stored?
  • What is the data you need, why do you need it, and, for how long will you require to keep the data for?
  • How is the machine secured both from a physical access point and software?
  • Does the system which holds the data accessible from your LAN and/or internet?
  • What software tools are being used for data storage and analysis and are they up-to-date for patching?
  • Has your hardware been patched for the latest identified vulnerabilities?
  • How did you test the security of your systems?
  • Who has access to the machine?
    • Do you limit access to 'need-to-know' and only the data required?
  • Do you limit how the data is moved off the system when 3rd parties have access?
    • If so, how?
    • What agreements do you have in place for 3rd party access and what do the agreements say?
  • If law enforcement or government request access to the data what is the process you follow to grant them access?  
    • Do you notify the original owner of the data for such data requests?
  • What is the process you follow when there is a network or physical breach of your system?
  • How are the backups done and secured and who has access to those backups?
  • When you are done with the analysis how is the data deleted?  
    • Does that include all backups?
  • How do you prove that the data was deleted and can never be recovered?
I understand that they need to make money, but, when the data leaves their control then anything can happen and they need to do a better job documenting what was requested, why it was requested, how it was secured and how it was deleted when done.  For myself I have downloaded my Facebook data to see what they have and I am now looking at other services that respect my privacy more.  It will be hard as Facebook has a massive population, but, other communities in the past have fallen (MySpace, AOL come to mind).

Sunday, March 18, 2018

Looking at one Linux Distro for home

At home we use Linux on almost all of our computers.  The only exception right now is one laptop with Windows 10 so I can run my tax software.  Each machine has its own Linux that best works for that device.  That is getting to be a bit of a pain as some packages are not available for some distros (like the Pale Moon browser).

My netbook (Acer Aspire One D255E) I bought years ago as there was a chance I would be traveling and I wanted a light weight computer that would allow me to quickly pick up email, browse, chat with family.  The machine originally had Windows 7 starter and that was quickly replaced with Linux Lubuntu.  I picked that as it was very light weight and quickly launched.  While Lubuntu is a great package there are things I couldn't do easily and I had to write bash scripts to do those tasks (like turn off the touch pad when logging in).  It also would not play one of the browser based games I play (Runescape) as the latest Firefox and Chrome disabled the ability to launch Java which is why I am using Pale Moon.  I normally don't play online with the machine (which is what I am composing this blog entry with), but, it is nice to have if I start to travel again.


My wife's laptop is running Netrunner as that worked on machine as other distros had problems with the video card or the wireless network card.  It is a great distro, and worked well on her machine.

We have a media tower in the living room hooked up so that we can stream shows, plug in USB sticks for picture shows and a quick way to browse the net without having to bring down one of the laptops.  It is running PCLinuxOS and that is also an excellent distro as just about everything is there (including Pale Moon).  It is also what I am running on my HP laptop and it just works and is not too bad on system resource usage.

I wanted to consolidate everything with PCLinux, but, when I tried it on the netbook it would either crash as start or run so slow it was almost useless.  Not a problem as I could always use Lubuntu if I could get PCLinuxOS to work on the wife's machine.  When I did the launch it would crash on the video card that the machine had and I was not willing to play around with settings to make it work in case my wife did something and break the setup.

Next up i tried Linux Mint on the netbook.  I figured if it worked well there it should work well on the other machines.  It did launch and worked very well.  It is a bit slower that Lubuntu, but, not enough to be a deal breaker.  It recognized everything and just worked.  I proceeded to make a complete backup of all my folders and then reimaged the machine with Mint.  A few obervations:
  • Pale moon isn't available, but, their web site does give instructions on how to download & install.  The only quirk I had was when I tried to install with my non-admin account it would accept the password for the admin account (more about that later).  I signed out and then launched the admin account and did the install there without an issue.
  • The first account you define when starting up is by default the ADMIN (root) account so be very aware of that.  That is what I had to log in as when doing the Pale moon installation from.
  • There are a lot of patches so when you launch for the first time do it from admin and get everything patched up.  Once you get that done define a regular account that you will use every day.
  • It is slower than Lubuntu so be patient at times.  When I log in there is about a 15-20 second wait from when I supply my userid and password and when the main screen shows unlike Lubuntu which takes a couple of seconds.  The same is true for logoff.
  • There is a setting for mouse where you can go to the touchpad and click the option to turn it off when it detects an external mouse.  This is much nicer than Lubuntu where I had a custom bash script written to toggle the mouse off.
  • The screen is smaller than a normal laptop and some of the screens do not fit and cannot be resized to fit.  I found a workaround by holding the [ALT] key and holding the left mouse button I can move the window around.
  • Most software you need is automatically installed.  The only thing was the browser I use and then the XSANE package for when I scan documents.  It does come with Scanlite that I may try later on.
Later on I will have to plug in the USB stick with Mint into my wife's machine and see how it all works.  I am hoping that it 'just works' and then I can image her machine to Mint.  I have already done a full backup of all her documents.

Last task will be later in the evening on the media box and re-image that machine to Mint.  I don't have to back up anything there as we don't save files, but, use the Internet for content.

End result is that I should be down to just two distros at most (PCLinuxOS and Mint).

Update 1:

Jane's machine has been updated to Mint.  I still have to finish configuration, but, the system boots up and her account is active.  Next up is to restore the backup of her documents, install Thunderbird for email and a number of games she likes to play.  The only machine left to convert is the media box as I think I will leave my main machine alone (PCLinuxOS).

Android and Facebook app

After a long wait Facebook has finally launched their lite version for Android.  The old app was not too bad, but, massive and slow.  On the tablet it wasn't all that bad, but, on my cell phone it slowed the device so much I logged out, purged the cache and stopped running.  I was running the messenger lite so I could chat with some people when I was away and had only my phone, but, Facebook itself I wouldn't launch.

I installed the lite app on both my tablet and phone and it appears to be running much faster.  The options I use are all there and whatever they took away I don't use and don't miss. The one thing it does is when you click on messages it goes to Messenger (or Messenger lite which I use) and not the internal version.  When it is installed on the phone you need to be patient for a minute as it appears to download some content and may generate a message that it crashed (it didn't).

On my tablet Facebook was using 295 megs of storage space and even when not running it used 38 megs of memory.  The Lite version uses 7.7 megs of storage and 4.3 megs of memory.  On the phone it shows using 6.5 megs of storage and 1.7 megs of memory.

One warning, when you search for 'Facebook lite' in the play store make sure the  author (below the software title) shows 'Facebook' so you get the legit version!

Facebook Lite in Play Store