Software and Tools - Browsers

This is the second in a group of blogs on software, tools and repositories.  One of the main tools I use and I suspect the majority of people is a web browser.  There are a number of great browsers out there and the one you use and like depends on your personal preferences (and biases).  For me since I run a Windows laptop (gaming), Android (tablets and phones) and Linux (laptops and netbook) I prefer Firefox and Chrome.  They run equally well on a cell phone right up to the laptop I am composing this blog on.  The Windows laptop (Windows 10) has Edge on, but I don't run it.  I may be biased, but, I don't trust the security on it and how much it is reporting back to MS about my searches and browsing habits.  I know Chrome and Firefox does do some reporting, but, so far they haven't abused my trust there.

This won't be all inclusive, but, a quick tour of my basic setup and hopefully will give you an idea of what they look like and a couple of things I added to assist me and secure my browsing.

If you use Windows click on Firefox if you want to go to the Mozilla site,  click on Chrome if you want to go to the Chrome site.  If you are using Android it is in the Play store and for just about every distribution of Linux it is part of the repositories that you can install (for me that is Synaptic).

For the rest of this blog the screen shots are from my Linux machine, but, Android and Windows have a similar layout and look-and-feel.  For all of the screenshots I used KSnapshot.  Gwenview is used for quick-and-dirty edits (like rotate, resize and rename).  Google Drive is used to store all of my blog images and the GRIVE tool syncs that up for me (with my writing a BASH script front-end, my previous BLOG on that).

Firefox

Once you install Firefox and launch it you will get a screen something like below.

It is a rather plain and simple screen.  This is my personal preference as I don't like or want a lot of clutter.  I have turned off the menu bar, bookmark toolbar and the status bar.

I did add a few extensions (from the Mozilla site) for the status bar and for shutting down those annoying ads.

My Plugins are default to my Linux distro.  When there are bug fixes I use Synaptic to update when they are available.  I still have Flash installed, as much as I hate it for the security holes I still need it for accessing corporate materials when I log into the company site.

To see preferences click on the icon at the top right (looks like a hamburger) and click on the preferences icon (looks like a cog).  You will see a number of options that you can click on and are presented with a variety of settings.  On content I turned off the option to play DRM protected content and to block pop-up windows.  I also changed the font to Arial as I find that easier on my eyes.

For privacy I turned it up to as high as I can go.  I know sites can still snoop, but, I want them to know if they want my information they should ask me first.

For security I also have that set to maximum.

For good measure I use  uBlock Origin to shut down as much of the annoying ads and tracking when I do surf.  I turn it off for sites that respect me and don't flood me with annoying ads.  To see what the dashboard looks like you will need to keep on reading as it is in the Chrome section.

To summarize my settings:

• Check to see if Firefox is my default browser;
• Show blank page at start;
• Search right now defaults to Google, I did disable Bing and Yahoo;
• Disable play DRM;
• Enable pop-up protection;
• Privacy tracking on for private windows;
• Never remember history;
• Security, Warn & block all turned on!
• Sync bookmarks, I have that turned on so it is easy to keep phone, tablet and laptops synced to the same set of bookmarks;
• Downloads, ask me where to save; 
• uBlock Origin, set up to hide as much crap as possible.  Good sites I open up;
• Advanced I left at their defaults. 

Chrome

My other browser is Chrome.  There are times that sites have problems with Firefox and I use that.  It is also set up to link to my personal Google calendar and to use Google Docs.  Part of the time I run it for Facebook to chat with family and post various updates and use Firefox for general web browsing and gaming (Runescape).   Like Firefox I have a minimal screen display, I really don't like clutter.

To go to your settings click the vertical ... on the top right side, then click on settings.

By default the advanced settings are not displayed, scroll down to the bottom and click on +Show advanced settings.  You can see your browsing history, Extensions and Settings.  For privacy you can click on content settings and it pops up a privacy setting screen.

For extensions it will show what you have installed.  At the bottom it has Get more extensions that takes you the Chrome Web Store.  I really suggest you use just that site as you know that Google has done some checks on the quality and security of the extensions.  I know nasty extensions can slip in, but, when found they get yanked PDQ.

Like in Firefox I use uBlock origin.  It is small, light and very configurable.  I used to use Ad-Block, but, when they went to white listing ad sites I dumped it.  I pick what ads are presented to me and I will retain full control of that.

To summarize my settings:

• Show blank page on startup;
• Google is the default search page;
• No 'Guest' browsing;
• Cookies, clears when I shut down Chrome and 3rd party is blocked;
• Let me choose when to run plug-in;
• Do not allow tracking;
• All other content settings at default;
• Downloads, ask me where to save;
• Cloud print is on, I use this only for stuff that isn't sensitive;
• uBlock Origin, set up to hide as much crap as possible.  Good sites I open up;

Summary

Hopefully this is of use and a good starting point for your using either Firefox or Chrome as your main browsers.

Why do I use ad blockers?

In this blog I will try to explain why I am using ad blocking software.  To quickly summarize use ad blocking software for four simple reasons.

1. I have a bandwidth limit and when I exceed it I pay for every byte sent/received.
2. A number of devices I use are older and slower and most ads will bring them to a complete stop.
3. Ads have now been used to target us with malware.
4. Cookies and other tools are being used to peel back what little privacy we have on-line to track us everywhere and try to target us with 'relevant' ads based on where we go.

For a number of years I have been using ad block software.  Publishers for years also have been complaining that we are stealing.  Frankly that is BULLSHIT, publishers you have been hogging my bandwidth that I pay for when you spew ads at me and try to track every move I make on-line.  I monitored a few sites and 80% of what is sent to me are scripts and images for ads and tracking companies!  That is just the scripts, I wasn't even counting the images and flash pages they were sending.  Since I am the one paying for the bandwidth I want to make sure I get what I pay for.  For the good sites with ads that are tasteful, unobtrusive and doesn't suck up every spare CPU cycle I white-list and allow the ads.  The rest I give them a try now and then and if I find them to be resource hogs I black-list again.

Some will say it isn't that bad, well in my not so humble opinion it is.  I have a number of devices and for all of them I must use ad blocking software or when I go to a site in the browser a number of my devices will stop for minutes at a time while it is trying to render that page and serve ads.  The three devices where I must use ad blocking or they are almost unusable are:

1.  Huawei cell phone.  I use this now and then when i am out shopping.  While resting I may surf Twitter, Facebook and email if the mall has free WI-FI.  Now and then something may catch my eye on-line and I click the link to see more about it. Without ad blockers the browser will take minutes to render a page (looking at you CNN, ABC, CTV and CBC).  At times I just close the window due the scripts running if I don't use ad blockers.
2. Google Nexus 7 tablet.  This is now retired, but, I used it in a similar manner to my cell phone when traveling.  At home it was my main tool for using Twitter, Facebook, blogging and email.  Like the phone I am forced to use ad blockers or even that machine will slow down to a near stop.
3. Acer Aspire Net-book.  This is a more robust machine, albeit a low end laptop.  I upgraded the system to 2 gigs of memory, but, everything else is stock.  Before I moved to Linux I was running Windows 7 then Windows 10.  Like the two  devices before I do run ad blockers.  It isn't as bad as those devices, but, it would take up to a minute for some sites to render a page and I watched the CPU usage hit 100% (I like using GKRELLM to see what my system is doing).  I also modified my HOSTS file to kill a lot of ads and trackers.  

I have two more devices that are more modern and higher powered and even there I use ad blockers as even they have problems at times rendering pages with ads.

1. Samsung Galaxy Tab A.  An android device and works quite well.  Samsung's site is also up-front on their use of cookies!  The browser has an ad blocker.  I can't modify the HOST file as I have not rooted the device.
2. Dell Inspiron 15 7000 Series.  A high end laptop with Windows 10.  Even here I have to use a HOST file and ad blockers as some sites are so bloated they take up to 30 seconds to render.

Now I can hear web sites saying we need the ad revenue to stay in business.  Some have even gone as far as to run scripts to scan for ad blockers and then block their site until we turn off our blockers.  For those companies who actively block me when I run ad blockers I just go elsewhere and a good site gets my 'business' and you get absolutely $0.00 in ads from my visit.

1. When you use third party ad companies to present ads on your behalf you are trusting them to ensure their sites show us legit ads.  Well check out the links here and here for malware issues.  Why should I open up my machine to malware served by YOU?  You can claim that it is the ad company, but, you picked them, you trusted them, you are taking their money for presenting those ads and in my not so humble opinion the buck stops at your desk!
2. Your advertising partners are doing their best to track everything I read and where I go in order to 'serve' me more 'relevant' ads.  Relevant in whose opinion?  When I read an article on diabetes does not mean I want to get flooded with targeted ads on blood meters and related items.
3. I do unblock the good sites.  I understand their need to make money and the ads they serve are good and don't hog my bandwidth or system.  They also respect my privacy and try their best not to track my behavior.

The latest beef I have about ad blockers is that some of them are now white-listing sites and taking the choice out of my hands for what sites can present me ads.  Well that cost them a loyal user as I dropped them from EVERY browser in EVERY device in my house.  When it comes to ads and sites I am the final arbiter and no one else!

For users I have a few things for you to think about.

1. If you are technically inclined check out using a HOST file.  You can then pick the more annoying sites to block. 
2. Virus scanner software.  There are a lot of good ones and many are fairly inexpensive.  Personally I use AVAST as it is cross platform (Windows, Mac and Android), inexpensive, doesn't hog system resources and it just works.  
3. An up-to-date Browser.  This is important and the latest versions have bug fixes to minimize exploits.
4. Ad blocking software that allows you to white-list sites.  You can then tailor your blocking and allow sites that respects you to be able to serve ads and allow them to stay in business.  For me I like UBlock origin and Flashblock.  They work in Windows, Android and Linux for my Firefox browser.

An example white-list from UBlock origin (hmmm, seems like there is only one site there, probably because I don't want to advertise who I white-list).

White-list options, Slashdot is one of the GOOD sites I allow ads.  I hid the others.

It does not matter what O/S you use when it comes to malware

Now that the Apple people got a reality check on how secure their O/S really was when they got hit with flashback.  We all may want to think about securing our machines.  It does not matter what O/S you run, we call can have our machine taken over by malware.  A few things that we all should be doing to at least slow down and make the lives of malware authors a bit harder:

• Keep your machines up-to-date by applying patches when they are available.
• Never open attachments from people you don't know and be skeptical about attachments when you get one from someone you know and you didn't ask for that file.  
• Assume that senders are not as vigilant and check with them before opening.
• Assume that the from account name was forged.
• Never believe a popup window in your browser stating your software is out-of-date and install the update via that convenient link.
• Never believe those popups or messages while browsing that they scanned your system and you are (or could be) infected.  
• Never run an account with admin priviliges.  Create a simple user account that cannot add, change or delete programs.
• Do regular backups of your files.  External USB hard drives are inexpensive.  When you are done remove the backup and do not leave it connected all of the time to your machines.  If you do get malware at least you have a chance that the backup is still clean.
• Use a simple firewall on your computer at a minimum.  
• If your router has the option to enable a firewall then use that firewall too.
• Assume that your machine will get taken over and make plans on how you will rebuild your system and recover your documents.
• Install, use and keep up-to-date an anti-virus package and scan on a regular basis.  It really does not matter now what O/S you use, assume malware writers can take over your machine.
• If someone hands you a CD, DVD, USB Memory stick or USB drive scan it before doing anything else.  Never assume that the media is clean.

At home every machine is running A-V software (for windows I like AVG as it gives good protect, fast running and not a resource hog).

I assume that sooner or later one or more of my computers at home will get infected and I will have to wipe and rebuild the system(s).  I do run backups on all of the machines so while I may lose some recent documents or email it won't be a total loss.

PCLinuxos 2011 and Flash Crash

A while ago I upgraded Jane's machine to the latest version of PCLinux and then updated all of the software.  When she was surfing sites with Flash it would crash and nothing would work to enable flash.  I did the update to the latest version and it still didn't work.  I eventually found out that Firefox was pointing to the older version within the add-ons manager section (Tools, ad-ons, and then go to the plugin section).  After I disabled the older version of flash and restarted Firefox the Flash pages started to work.