Windows 8 Linkage: Product Name “Something or Another”

Umm…we’ll get back with you on that…

Glad I’m not the guy in charge of product branding and damage control over in Redmond at the moment!

If it wasn’t challenging enough trying to continue the positive spin on the forced Windows 8 Metro home page (?) interface, and convincing enterprises that this new GUI model will improve productivity and operational excellence with their employees over Windows XP/Window 7, now they have to do some major spin-control on the whole “it was really just a codename” for the Windows 8 look/feel.

• Exclusive: Microsoft's Metro branding to be replaced 'this week' according to internal memo - The Verge
• Report: Trademark dispute scuttles the name ‘Metro’ for Windows 8′s design [Updated] - Chron.com’s TechBlog by Dwight Silverman
• Cleaning up Microsoft’s Metro mess -ZDNet’s Ed Bott’s take on the…dare we say…debacle?

Really?

Anyway…regardless…it’s time to clean out the Windows 8 link hopper and do a Grand Stream Dreams Windows 8 linkfest dump.

Please note references to the former Win8 interface have been struck through for amusement and accuracy.

Win8 - Start Here - Get It

• It’s Official – Windows 8 Will Be Available on October 26, 2012 - Windows7hacker
• Microsoft Reveals Windows 8 Upgrade Path [Chart] - Windows7hacker
• Upgrade to Windows 8 Pro for $39.99 - Windows Team Blog

Win8 - Related Products and Services

• Download the beta release of Windows Server 2012 Essentials today! - Windows Server Blog
• Microsoft confirms enthusiasts' fears: No more versions of Windows Home Server - ZDNet
• Windows Home Server is dead, but we shouldn’t mourn it - Ars Technica
• Microsoft Office Customer Preview - Microsoft Official Site
• Office 2013 preview: cloud subscriptions, Metro flair, and touch improvements - The Verge
• Download Microsoft Office 2013 customer preview now - Ars Technica
• First look: Outlook 2013 - Ars Technica
• First look: Word 2013 - Ars Technica
• First look: Excel 2013 - Ars Technica
• First look: OneNote 2013 - Ars Technica
• First look: PowerPoint 2013 - Ars Technica
• Disabling animations in Office 2013 - Within Windows
• BETA: “The new Office” is announced - Kurt Shintaku's Blog
• Microsoft moves your Office to the cloud - BetaNews
• Office and the Cloud - Office Next Blog
• The New Office 365: Baby Steps in the Right Direction - ReadWriteWeb Blog
• A (p)review of Microsoft Office 2013 - BetaNews
• Microsoft Office 2013: Offline Installer of the preview version - Caschys Blog (Google Translated)
• Reading in the new Office - Office Next blog
• New in Windows Server 2012 – Part 1: Management - 4sysops blog
• New in Windows Server 2012 – Part 2: Storage - 4sysops blog
• Introducing Outlook.com - Modern Email for the Next Billion Mailboxes - Outlook Blog
• Outlook Is a Completely New, Feature-Filled Webmail Service from Microsoft - Lifehacker
• Get Your Email Address for Outlook.com, Microsoft's New Hotmail Killer - ReadWriteWeb blog
• Microsoft unveils Windows 8-inspired “Outlook.com” freemail service - Ars Technica
• Hotmail Gets A New Name – Outlook.com - Windows7hacker
• Microsoft relaunches Hotmail as Outlook - BetaNews
• Outlook.com: Take a Tour of Microsoft's Hotmail Replacement - ReadWriteWeb blog
• Making an Alias for Your Outlook Account Is Crazy Easy - Lifehacker
• Outlook.com: a big tour - Caschys Blog (Google Translated)

Win8 - Install It

• Windows 8 and Windows 8 Upgrade Clean Install: these are the existing information - Caschys Blog (Google Translated)
• New Windows Server 2012 puts virtualization front and center - Ars Technica
• Microsoft confirms enthusiasts' fears: No more versions of Windows Home Server - ZDNet
• Microsoft sets Server 2012 lineup and pricing, ditches Home Server - BetaNews

Win8 - Under the Hood

• Designing the Windows 8 Calendar app - Building Windows 8 blog
• Windows Aero Glass without 8: How it looks - Born’s IT & Windows Blog (Google Translated)
• Fixing up a virtual machine while importing it on Windows 8 / Windows Server 2012 - Virtual PC Guy's Blog
• Windows 8: Explorer "File Explorer" renamed - Born’s IT & Windows Blog (Google Translated)
• What’s The Difference Between Windows 8 & Windows RT? - MakeUseOf Blog
• No more freezes in Windows 8? - Born’s IT & Windows Blog (Google Translated)
• Hotfix available for Windows 8 freezing issues - Within Windows
• Fast start-Winlogon bug in Windows 8? - Born’s IT & Windows Blog (Google Translated)
• ISO mounting bug in Windows 8? - Born’s IT & Windows Blog (Google Translated)
• Protecting user files with File History - Building Windows 8
• A step back in time with Windows 8′s File History - Ars Technica
• Windows 8 file version history: the time machine for Windows 8 makes other tools superfluous - Caschys Blog (Google Translated)
• Microsoft details File History, Windows 8's automated backup tool - The Verge
• wbadmin: full backup on Windows 8 using a system image - Caschys Blog (Google Translated)
• BitLocker in Windows 8 - 4sysops Blog
• Windows 8: Final still to optical changes - Caschys Blog (Google Translated)
• Microsoft says Windows 8 Store: 7-day trial period & Co - Caschys Blog (Google Translated)
• Windows 8 Secrets: RTM Windows Store Revealed - Within Windows
• Simplifying printing in Windows 8 -Building Windows 8

Win8 - To Go

• 53 - Windows 8 To Go (boot Windows 8 from a USB drive!) - RMPrepUSB - Really great “how-to” guide (from a site with tons of USB boot device tips and tricks).

Win8 - Tweaks

• You can hack Windows 8 Metro - BetaNews
• How To Try Out Metro Version of Chrome in Windows 8 - Windows7hacker
• Skip Windows 8 Start Screen & Go Directly To Desktop On System Startup - AddictiveTips
• Workaround for Windows 8 freezing issues - Within Windows
• ViStart to Enable Start Menu (Windows Orb) in Windows 8 - Windows7hacker
• Windows 8 boot menu text vary between Metro and… - Born’s IT & Windows Blog (Google Translated)
• How To Disable and Bypass Windows 8 Lock Screen - Windows7hacker
• SystemPowerShortcuts Adds System Power Option Shortcuts on Windows 8 Start Screen - Windows7hacker
• How To Add Shutdown, Restart & Log Off Tiles To Windows 8 Start Screen - AddictiveTips
• How to “Set users home folder” via group policy in Windows 8 - GroupPolicyCentral
• RecImg Manager, a free backup and restore software for Windows 8 - The Windows Club
• RecImg Manager: Backup And Restore System Snapshots In Windows 8 - AdditiveTips
• How To Prevent Anyone From Uninstalling Metro Apps from Start Screen in Windows 8 - Windows7hacker
• Power8: Start Menu For Windows 8 That Can Block Metro Features - AddictiveTips
• Windows 8: Faster boot into the desktop - Born’s IT & Windows Blog (Google Translated)
• Windows 8: System Power Shortcuts - Caschys Blog (Google Translated)
• Upgrade Windows 8 with an awesome Metro-themed Explorer - BetaNews
• Tame the Windows 8 All Apps screen -BetaNews

Win8 - Deeper Insights

• Windows 8: CPU compatibility problems during setup - Born’s IT & Windows Blog (Google Translated)
• Windows 8: CPU compatibility problems - Part 2 - Born’s IT & Windows Blog (Google Translated)
• Windows 8: Using Hyper-V on non SLAT CPUs? - Born’s IT & Windows Blog (Google Translated)
• Caution, if at partitioning Windows 8 - Part 1 - Born’s IT & Windows Blog (Google Translated)
• Dynamic disk to basic disk conversion - Part 2 - Born’s IT & Windows Blog (Google Translated)
• UMTS: No Internet for Metro Apps (Win8) - Born’s IT & Windows Blog (Google Translated)

Win8 - DaRT

• DaRT 8 Overview - Diagnose, Troubleshoot PC Issues - Microsoft TechNet video discussion

Win8 - Usage Tips

• How To Open Dos Command Prompt Window As Administrator in Windows 8 - Windows7hacker
• Windows 8: Network Error, Access Denied - Born’s IT & Windows Blog (Google Translated)
• INFO: Hints on using Windows 8 as a Desktop OS - Kurt Shintaku's Blog
• How to Shutdown or Restart Windows 8 - Cybernet News blog

Win8 - Miscellanea, Rumors, & General Grumblings

• Why Microsoft killed the Windows Start button - PC Pro
• What’s Missing From Windows 8? - MakeUseOf blog
• Final thoughts on Windows 8: A design disaster -ZDNet
• Windows 8 is like a bad blind date  - BetaNews
• Windows 8 will flop - BetaNews
• What if Windows 8 fails? - BetaNews
• Microsoft reportedly killing off desktop gadget support in Windows 8 - The Verge
• Imagine what Metro could have been... - BetaNews
• Windows 8 Metro is pointless for the enterprise - BetaNews
• Windows 8 Mail leaves users pining for the desktop—or even their phones - Ars Technica
• Windows 8: The end of the full retail version? - CNET Reviews
• Microsoft should follow Apple's lead and ditch the disc in Windows 8 - BetaNews
• Eight awesome ways to improve Windows 8  - BetaNews
• Office politics are killing Windows 8 - BetaNews
• The New Microsoft Office: 20 Things to Like, Not Like and Worry About - ReadWriteWeb blog
• OneNote MX Available on Windows Store As Native Metro App - Windows7hacker
• EU trustbusters tire of Microsoft tricks, probe Windows 8 - BetaNews
• Microsoft Office lifestyle: making consumers more like enterprisers - Ars Technica

Windows 8 - GSD Previously Posted

• Windows 8 Linkage: “Majestic Metro” version - GrandStreamDreams blog
• Windows 8 Linkage: “Passage Public Metro” version - GrandStreamDreams blog
• Windows 8 Linkage: “Metro Santiago” edition - GrandStreamDreams blog
• Windows 8 Linkage: “Metro at Nightfall” edition - GrandStreamDreams blog

Cheers!

--Claus V.

Read More

GSD Linkfest - a little bit of everything today

Quick collection of links gathered in this week.

• Data recovery tutorial - As discovered and described by TinyApps.org. Very nice guide covering a number of Linux-based tools and techniques. DataRecovery - Community Ubuntu Documentation
• Copy files from failing devices - Another great tippage from TinyApps bloggist. Check out safecopy
• Create a system recovery partition - Great finds from TinyApps must come in “threes” as a link to Steve Si’s Create a system recovery partition post is found. It’s a detailed walkthough on setting up a Windows system-restore partition…just in case bad things ever strike.
• Add to the file carving kit - TinyApps bonus links to POC for “Smart Carving” methods. Drop into the project’s SourceForge Documentation page to get the details.
• FreeRecover - Free file recovery app for NTFS drives. It’s pretty fast. You can select options to get file paths as well as check “file integrity” to evaluate recovery value.  At this moment you cannot seem to sort results by column headings. It’s a good start.
• Redo Backup and Recovery - BootCD format ISO file to handle system backups, recovery, partition editing, file recovery, and may more additional tools.
• | Free Security & Utilities software downloads at SourceForge.net
• The Case of the Veeerrry Slow Logons - Mark's Blog - Great post by the Windows Master Mark Russinovich. Covers a number of angles as well as the Windows login process in detail (and how it can be hampered). Good reading.
• Google Chrome Bookmarks Menu Extension - CybernetNews found a really refined and polished  Google Chrome Bookmarks Menu Extension. I had been using Atomic Bookmarks but this one is much better IMHO.
• Ads Are Coming to Google Chrome Extensions - TheNextWeb blog. Choose your extensions wisely now, my friends…
• Release: NewsFox 1.0.8.4 - My favorite in-Firefox RSS feed add-on has a new release. newsfox: NEWEST
• Filelist Creator - Free mini-app to create great lists of files/directories for indexing documentation. I have a few of these and this one is very, very nicely done. It’s been added to my carry-list.  Spotted and reviewed over at this Create Detailed File Lists In Various Formats With Filelist Creator AddictiveTips post.  Check out the big collection of other great utilities over at Stefan Trost Media. I grabbed more than a few!
• TED V3.0 : The TEDinator - New update to the super-duper “TED Downloaded”.  I really appreciate the detail and help this tools brings in allowing me to download a local file of favorite “TED” talks. See also the new TED Radio Hour : NPR.
• HexDive 0.3 - Hexacorn has just released a new version of HexDive which helps look for key strings in possible malware and other executable files. It’s CLI so it is really fast.
• Forensic Artifacts blog has been releasing a large list of posts detailing forensic-worthy artifact bits left over from many applications. I found the PsTools Artifacts post extra interesting since it is used by a lot of us SysAdmins.
• NTFS Tools collection - reboot.pro. Joakim Schicht has just announced an updated collection of NTFS tools he has been grinding away on.  After you read the overview on the first link, hop over to his Google Project hosting page mft2csv to check out:
• NTFS File Extractor which extracts systemfiles (metafiles) off an NTFS volume.
• mft2csv which takes a $MFT file and rip info from all the records and dump to CSV file.
• MFTRCRD is a cli file dumper to pull all info mft2csv can decode. can also dump the $MFT record of a specific file to console and detailed run information.
• SetMACE which is a timestamp fiddling tool.
  
  Note, Joakim doesn’t have them all bundled up in a single archive package so look at the Downloads page carefully to pick out the most recent versions of each of them. It isn’t hard but does take a moment to make sure you are grabbing the right file. Also be aware that these are compiled in “AutoIt” script. It’s very flexible and powerful but some AV apps might complain…  Joakim has done a great job with his documentation on each tool. Check out the Wiki for more details on each one.

Have fun!

--Claus V.

Read More

Greased Monkey Business

It’s no secret that one of the major ways I manage to keep up with “goings-on” in the world of Technology and culture is with the use of a RSS feed reader.

Generally it goes something like this:

• Launch Feed reader (Newsfox or Omea Reader),
• Pull down article feeds,
• Read, review and analyze,
• Open feeds to be saved for later processing in web-browser, and
• Bookmark article/link.

Later I might do some sorting of the saved bookmarks by subject or category or blog-post idea.

When it comes time to actually compose a post, I will open up Windows Live Writer on one side of my screen and my web-browser in the other.

Then I do a combo of composing the text body as well as some drag/drop action from the saved bookmark links.

That’s all well and good except for a tiny gotcha I figured out about a year ago.

See, many (but not all) of my RSS feeds actual open up to a page link that was seeded with some extra feed-tracking data code.

For instance:

This article appeared in my RSS feed list, was interesting, so I launched the full article in my browser and bookmarked it: Design and create with nanoCAD, a totally free CAD solution - freewaregenius.

However if you take a look at the actual URL provided by the RSS feed link in the browser was:

http://www.freewaregenius.com/2012/07/03/design-and-create-with-nanocad-a-totally-free-cad-solution/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Freewaregeniuscom+%28freewaregenius.com%29

…rather than the direct URL of:

http://www.freewaregenius.com/2012/07/03/design-and-create-with-nanocad-a-totally-free-cad-solution/

I added emphasis in the first link to show the extra sauce the RSS link path adds.

That’s not really a problem, but adds a bunch of extra code (and tracking data) that doesn’t really need need to be present in the blog links that everybody jumps from. I’m all for fair tracking and they get my “ding” when I view the full page the first time within my RSS feed reader.

So what I had been doing is cleaning up the link first in the bookmark properties before adding it to a post.

Only sometimes I forget.

Well, actually, many times I forget and it can be a lot of work cleaning them up.

Too bad I couldn’t automate cleaning up the bookmarks somehow.

Although I couldn’t figure a easy way to do that, I did eventually find a brilliant Greasemonkey script that did one better.

It actually intercepts the RSS feed-load in Firefox and cleans it up before loading in the tab. Sweet!

Removing UTM data from URLs automatically for cleaner bookmarks -Christian Heilmann. From his post page:

“I’ve come across lots of delicious bookmarks that still have all that campaign monitoring stuff in them, which is annoying. To work around that I’ve just written myself a tiny GreaseMonkey script:

Install un-UTM for GreaseMonkey

“If the browser now opens a link that has UTM data in it, it removes the information and reloads the page without it to make for a cleaner URL.”

Christian is clearly brilliant and his solution works perfectly. No more tracking data appending of URL’s to my saved bookmarks!

Related:

• How to convert Greasemonkey scripts to Firefox add-ons? -WEDYN
• Tampermonkey (Greasemonkey for Chrome) - Chrome Plugins
• How To Install And Use Greasemonkey Scripts In Google Chrome -pcmastero.com

Mischief managed.

--Claus V.

Read More

T-Bird Development Slows…and some options

Just in case you missed it, the Mozilla Thunderbird development team recently announced that they will be scaling back development on new features to this fan-favorite email client and primarily focus on stability and security work.

It some circles it might be called “hitting a plateau.”

• Thunderbird: Stability and Community Innovation - Mitchell's Blog
• Thunderbird to Slow Down Development, Focus on "Security and Stability" Only - Lifehacker
• Thunderbird/Proposal: New Release and Governance Model - MozillaWiki
• Thunderbird Extended Release Support for Your Organization, Business, Enterprise - Overview - Mozilla.org
• Mozilla puts Thunderbird in maintenance mode - Mozilla Links

So what does that mean if you use Thunderbird as your email client?  Well. Probably not very much.

Thunderbird is a very mature email client and already packs almost all the primary features that one could need into it already.  Toss on the Lightning calendaring plugin and you have a full-featured email and activity duo. There are more than many Add-ons for Thunderbird.  Myself--aside from Lightning--I only use the following additional extensions; Color Folders, Attachment Tree, Extra Folder Columns, and AttachmentExtractor. That’s it.

So I don’t really have any concerns or cares at the present moment regarding T-Birds slow-simmering.

However, just in case that ever does become an issue with me--or maybe you are looking for some new email client platform--I did some looking around and found the following free email clients that are in active development and could be considered worthy replacements for Thunderbird. I tossed them all on my Windows 8 system and took them for a whirl. Here’s my alternative preferences.

Windows Live Mail - Microsoft. Who knows what Redmond will call it next year as they kill off the “Windows Live” branding and repackage it as something Win8’ish. Doesn’t matter. This email application is the very first one I recommend to most all family and friends. It has a dead-simple interface. It has decent email message handling security and rules/filter capabilities. And setup of a new email account (or multiple ones) is a breeze.  There isn’t much not to like with this one.

eM Client Email Client - eM Client. I would be lying to say that I had heard of this email client before yesterday’s search. I had not. However the reviews and comment'-feedback were ridiculously good so I had to check it out. I am amazed. A review of the Features left me highly impressed.  It supports both web-based email servers as well as the more traditional email server connections. It contains a full-featured calendar along with event management, task lists, and contacts.  Yes, you can import those items from most all other email clients. They have a free edition (registration required) along with a more featured ($) version. Installation was a breeze and setup was a piece of cake. The interface is really, really well designed and (hard-to-admit) outshines Thunderbird. I had no problems getting it going and feeling instantly at home. If T-Bird ever gets its goose burnt, eM Client will probably be my replacement choice, hands-down. Check it out!

DreamMail Europe Community - This free email client was also very easy to get going and set up. Like eM Client the user GUI is very approachable. All the major features you would want in an email client are present.

Pegasus Mail - David Harris. - This is a free email client that is much more advanced. It doesn’t have the same degree of “wizard support” like Windows Live Mail, eM Client, or DreamMail to get your web-based email accounts going. You will need to know in advance some of the more technical bits of your email system such as the POP3 and STMP server names as well as any special ports and security settings connections to them require. The user interface is more detailed than the previous clients mentioned. All this to day it is a more technically advanced email client than average users would probably want or need. However if you want a lot of control regarding your email client and accounts, and the advanced configurations don’t concern you, it is worth checking out.

Sylpheed - Like Pegasus Mail, this email client requires a bit of detailed work getting things going.  The interface is more simple to navigate than Pegasus, but you will need to feed it some more technical details to get it configured. Once running, it is very direct to use and is something most average users shouldn’t have any issues with.

i.Scribe - Has a very nice and basic interface. Configuration will require the POP3 and STMP sever details of your host. However I did find it very easy to navigate around in and find all the critical things needed to get it up and going.  There are message filters and advanced security setting options. All in all a nice little application.

Microsoft Outlook 2010 - Microsoft - Yeah, I know, it is neither free nor a very “light” email client. That said, if you have it as part of an already installed MS Office suite load, it might be worthwhile to give it another look. I know many folks who are so used to using MS Office at work that they feel right at home running and using it for their personal email client needs at home.

This isn’t a list of the “only” email clients for Windows out there. There are more, many smaller and many “portable”.  However these were the ones I considered myself most likely to use after downloading, configuring to a POP3 “web-mail” account, and running on Windows 8.

Cheers.

Claus V.

Read More

Material Roundup: Linkfest

Been a semi-relaxing weekend.

Read with interest this TaoSecurity blog post Bejtlich's Thoughts on "Why Our Best Officers Are Leaving" as well as this one Whither United States Air Force Academy? both by Richard Bejtlich. I also noted that the USAFA was evacuated this week as cadets were heading in due to the area fires. These things still catch my attention as I had started the process to become a USAFA candidate my senior year of high-school before removing myself from the process for family reasons (my choice…no excuses). Still, I will always wonder about the path not taken.

Also, while IANAL, I was left scratching my head and heartbroken just a bit by the recent SCOTUS decision. The USNI blog had a post that resonated with my own feelings: The U.S. Supreme Court just diminished the significances of Military Valor [opinion].

Little bro was in town so he brought some pizza’s over, I grabbed some super-good local micro-brewed root beers and we had a party catching up, comparing life notes, and watching Act of Valor on this pre-July 4th weekend.

I wrapped things up yesterday with a viewing of Cave of Forgotten Dreams (Wikipedia) which covers the Chauvet Cave (Wikipedia). Very interesting and well filmed documentary. The cave-art is really fascinating…I just wish we could have learned more about the people behind it.

I guess if there was a theme it was reflecting on the importance of what remains of us, of our efforts, of the world around us.

Back to the shallows…

Sometimes I feel a bit guilty just dumping a super-post like this that is heavy-laden with linkage.

Some weeks are busier than others, however, and while I have more than a few posts still pending in the hopper that are deeper collections of “how-to”, personal reviews, or troubleshooting sessions, I hope that some find value in these “linkfests”.  Primarily they serve to help me quickly search and find material, tools, and techniques that I believe will either be useful, or are useful, when I am away from my desk and my USB dongle is at home rather than in hand. It’s challenging finding that right software or tip and maybe something here will be useful to others or pique their interest and send them in the right direction.

Security Bits

• Adobe updates Flash Player 11.3 to fix Firefox crashing problem - The H Security - Adobe issued a new Flash (non-IE only) version 11.3.300.262 to address some issues in Firefox 13. Get your update.
• Analysis of drive-by attack sample set  - ISC Diary - I always value posts like these that teach and show how “drive-by” vectors work. I’ve cleaned more than a few systems that fell victim to a drive-by because Java/Flash/OS/etc. wasn’t correctly patched.
• Firefox thumbnails could expose private data; fix 'coming soon' - ZDNet. I hadn’t thought of it as an issue since I am use to Chrome doing the same thing, but the thumbnails are larger in Firefox and I could make out some detail to the webmail pages I saw as compared to how they render in Chrome.
• Stop Firefox 13 Speed Dial Thumbnails From Showing Secure Content - AddictiveTips
• How to turn off Firefox’s New Tab Page Completely - ghacks.net blog.
• Our password hashing has no clothes - Troy Hunt’s Blog - Troy lays out an excellent (developer level) case for the new challenges of password hashing and salting. This was excellent reading and I really took a lot out of it in terms of password security in general.
• John the Ripper password cracker - speaking of which Jon the Ripper “jumbo” edition just got released at version 1.7.9-jumbo-6 for Unit. WIndows binaries seem to be at 1.7.9-jumbo-5. Announcement here.
• oxid.it - Cain & Abel - seems worth mentioning…
• Free Computer Security - Personal Software Inspector (PSI) - Secunia. New Version 3.0 released with even more awesomeness!
• Third edition of vulnerability spotter Secunia PSI - The H Security. More breakdowns.
• Secunia PSI 3.0 released - HelpNet Security - more details here regarding this release version.
• Free Online Computer Scan - Online Software Inspector (OSI) - Secunia. If the “installed” client isn’t your thing, the on-line scan is still super awesome and helpful.
• Qualys BrowserCheck - Related - don’t browse the web in your browser without checking it for patch and plugin update availability!
• Detect & Remove Fake Antivirus Scams From Your Windows PC - AddictiveTips post for a new MicroTrend tool to help with fake-av infection removal. See below.
• Removing Fake Antivirus (FakeAV) - TrendMicro. Comes in both CLI and GUI downloads.
• Remove 50 Known Fake Antivirus Software From Windows - AddictiveTips related post on another fake-av removal tool
• Remove Fake Antivirus 1.86 - download tool as offered by free of virus & comptuer tips blog.
• Security Center reports Virus Protection is On - ever handy tip from TinyApps blog.

For Sec News

• Registry Decoder 1.3 released! - Digital Forensics Solutions. Bug fixes and some new plugins.
• More good stuff - RegRipper - new plugins from Elizabeth Schweinsberg coming soon.
• SANS Digital Forensics and Incident Response Poster Released - Handy! SANS
• Training, and Learning - Windows Incident Response blog
• When was a file accessed? - Windows Incident Response blog (How many times does this question get asked?)
• Investigator's Tool-kit: Timeline - ISC Diary. Quite detailed overview and issues post
• Win7 HomeGroup Reg Particulars - Forensic Artifacts
• WinFE “Lite” - Windows Forensic Environment
• Build questions -Windows Forensic Environment
• HexDive 0.2 - Hexacorn Blog

Network Resources

• Wireshark 1.8.0 can capture from multiple interfaces at once - The H Security
• Wireshark · Wireshark 1.8.0 Release Notes - new Wireshark release in the waters…if you didn’t figure it out.
• Wireshark · Download links
• SoftPerfect Network Scanner - freeware - release 5.4.4 now out. Changelog Comes in both x32 and x64 flavors. My favorite stand-alone IP scanner (out of more than many I carry).
• Chatter on the Wire: OS Fingerprinting - Satori was recently updated and now supports many more network fingerprints.
• http://kitty.9bis.com - Never heard of KiTTY before but it is a fork of .62 PuTTY telnet client with some extra features.
• New: KiTTY Portable 0.62.1.2 (telnet and SSH with added features) Released - PortableApps.com has a portable version.
• PuTTY: a free telnet/ssh client - For the purists.
• Announcing TightVNC Version 2.5.2 -TightVNC - New version just released. Love this app.
• TightVNC: VNC-Compatible Free Remote Control / Remote Desktop Software - Download TightVNC here.
• Announcing TightVNC Java Viewer - Yeah, the Java version rocks the beans as well. Super easy to use, compatible with standard VNC, TightVNC, UltraVNC, x11vnc, Apple Remote Desktop in Mac OS X, Xen/HVM, VMWare, Qemu etc. The link/page says 2.1 but there is a download link present for TightVNC Java Viewer version 2.5.2 so be sure you grab the latest version!

Tools and Utilities of Note

• Updates: Autoruns v11.32, Process Explorer v15.21, Process Monitor v3.02 - Sysinternals. Stop, Drop, and Download now; the holy trinity of software tools just got updated again!
• Monitor Any Folder Or Disk Drive For Changes In Real-Time, Even Across Networks - AddictiveTips blog post review of new NirSoft tool.
• FolderChangesView - Monitor folder/drive changes - NirSoft
• ExtremeCopy: Probably The Fastest File/Folder Move & Copy Utility - AddictiveTips blog review.
• ExtremeCopy - Easersoft. I’m a dedicated TeraCopy fan but this one sounds intriguing. Will need to put it through the paces soon.
• Remove Items from the Windows Explorer and IE Context Menus - CyberNet News.
• MenuMaid - SD Software - software utility link
• 4 Better Windows Console Tools Alternatives to Windows Built In Command Prompt -Windows7hacker - Kent has a really nice roundup. While the good-ole cmd.exe will do the job, I must say these “replacements” are quite nice. I’ve used “Console2” quite a bit and like the tab format and transparency/font/color tweaking options. PowerCMD surprised me with its feature set and I really can see myself using it more regularly. Check out the others as well.
• GetFoldersize - Michael Thummerer Software Design - Super nice freeware tool to locate and understand just what is taking up space on your hard-drive. Was recently updated to version 2.5.10. I really like this tool.
• SizeOnDisk Folder Size - new to me freeware tool found on CodePlex.  Another nice tool to find file/folder size hogs.
• Folder Size - another freeware file/folder size tool.
• SpaceSniffer - Uderzo Software - freeware tool that is amazingly fast and amazingly fun to use. While the previously mentioned tools excel at a tabular report, this one provides a super easy visual layout presentation of your space usage. You can drill down very easily. It gives you a easy-to-grasp picture on what is using up your hard-drive space..
• SequoiaView - I keep this one around just because it is so beautiful. It does a great job even though it hasn’t been updated in quite a long time. It may have been one of the first to present space on disk usage in a “squarified” treemap format.
• FolderSize - tiny little app (174 kb) from developer Jan Horn that is standalone and gives you a basic what-you-need-to-know report on drive/folder space usage.
• DirectorySlicer - With giant (and cheap) USB sticks and network connections aplenty, splitting files and folders to specific sizes is become a rarified task. That said this CodePlex project is worth snagging in that it splits files of a folder into partitions of a specified size. So that super-folder you are trying to burn to CD doesn’t fit? Directory Slicer takes the work out of guessing by allowing you to set the size (or use a preset) then it divvies it up accordingly! Clever.
• Unlock & Delete Empty Folders via Wildcard-Based Rules - AddictiveTips post review of…
• Empty Folder Cleaner - 4dots Software
• Reminded me of a previously GSD mentioned Empty Folder Nuker by Simon Wai.

For the Admins: Mostly from Microsoft

• Rights Protected Folder Explorer 1.0 - Bink.nu blog. “Rights Protected Folder Explorer is a Windows based application that allows you to work with Rights Protected Folders. A Rights Protected Folder is similar to a file folder in that it contains files and folders. However, a Rights Protected Folder controls access to the files that it contains, no matter where the Rights Protected Folder is located.” Also Download Rights Protected Folder Explorer from Microsoft info from TheWindowsClub blog. Get it here Download: RPF Explorer - Microsoft Download Center(Download Details).
• The Group Policy Setting “Verbose vs normal status messages” has a new name in Windows 8 - Anything about IT  blog
• Comprehensive Linux course - TinyApps bloggist shares an amazing resource find for us Linux wannabe-better’s offered by Paul Cobbaut. Although it is claims to be Linux basics, it covers a wide range of topics and material.  This is a great find! Check back to the site often as the material is getting frequent updates.
• Microsoft Outlook Configuration Analyzer Tool 2.0 - Bink.nu blog - “The Outlook Configuration Analyzer Tool 2.0 provides a detailed report of your current Outlook profile and mailbox. This report includes many parameters about your profile, and it highlights any known problems that are found in your profile or mailbox. For any problems that are listed in the report, you are provided a link to a Microsoft Knowledge Base (KB) article that describes a possible fix for the problem.” Go get the Download OCAT_Setup.zip over at the Microsoft Download Center’s Download Details page
• FREE: Service Credential Manager – Search Windows services - 4sysops post on a new tool Service Credential Manager to help check all scheduled services and tasks based on a specific user account across your domain. Nice! In free/$ flavors.
• FREE: ADREPLSTATUS – Active Directory Replication Status Tool - 4sysops blog post on a new Microsoft tool with a snazzy GUI to check for AD replication issues. Has export ability for reporting. Download: ADREPLSTATUS at the Microsoft Download Center (Download Details).

Cheers and happy pre-July 4th State-side well wishes to all.

Claus V.

Read More

Father’s Day Linkage - Tie Down Edition

cc image credit image by Fernando de Sousa on flickr

Happy Father’s Day!

Here is a real varied collection of links. Enjoy!

Security Solids

• Java 7u5 and 6u33 released - ISC Diary - Make sure you get your Java updates on. Despite all attempts, my Java app still doesn’t want to notify me updates are available (at home) so I keep a constant eye out for update notices and install them myself.
  
• Oracle Java Runtime Environment 7 Downloads - Oracle - Here’s one place to get them direct from source.
  
• Inside Flash Player Protected Mode for Firefox -Adobe Secure Software Engineering Team (ASSET) Blog - Adobe Flash Player also got updated, particularly impactful for Firefox users (see next tie-in grouping below). YMMV. You can get the very latest version for different platforms here at this Adobe - Web Players link. Or hop over to Major Geeks.
  
• (IN)SECURE Magazine - Issue #34 is now out in PDF format.
  
• How LogMeIn is enabling scammers to profit - Troy Hunt’s blog - Troy continues his ongoing battle against fake tech-help scams. This time he examines how “LogMeIn” could do more to help prevent their great service from being leveraged for The 3vil, if they chose to.
  
• Free cruise phone scam masquerades as political survey - ESET ThreatBlog - I’ve started to periodically get a few calls now on our cellulars from unknown numbers…they follow a pattern of tracing back to a cruise-operation. If it isn’t a number already in my contacts, I just don’t answer and if critical, the caller will leave a voicemail and I will call back immediately. If not…too-bad-do-dad!  So it was with interest I read this ESET post by Aryeh Goretsky and how an end-run may be going on around cellular do-not-call list participation.
  
• Close Call with a Caribbean Cruise Line Scam - IT Secure Site - More on the above.
  
• 'State-sponsored attackers' using IE zero-day to hijack GMail accounts - ZDNet’s Zero Day blog. I’ve seen the notice of “state sponsored attackers” recently and was wondering “what’s up with that?”. Now I know. more details at this Google Blog post: Security warnings for suspected state-sponsored attacks. Chron.com TechBlog’s Dwight Silverman has some advice and links to a Microsoft “hotfix” for the issue: Bad guys using unpatched Internet Explorer flaw to hack Gmail accounts.

Firefox Paisleys

In my last GSD post, I touched a bit on some issues I was having with Firefox 13 and Flash.  My issues may or may not have been related to these, however there are some serious headaches for Firefox 13 and Flash users.

• Firefox 13 tripped up by Flash patch - Update - The H Security: News and Features
  
• Inside Flash Player Protected Mode for Firefox - Adobe Secure Software Engineering Team (ASSET) Blog
  
• Flash 11.3 doesn't load video in Firefox - Firefox Help
  
• Flash 11.3 Video Issues In Firefox - Firefox Extension Guru's Blog
  
• Firefox 13.0 Release Notes - Mozilla Desktop
  
• Firefox 13.0.1 Released -Firefox Extension Guru's Blog. The Guru helpfully points out the following:
  
  ”Note: In regards to the Flash Bug (747683) this does NOT address issues related to Flash videos not playing in Firefox (which may also be affecting Firefox 12.0.x users as well) for Windows Vista and 7 users. “
  
• Wallpaper your Firefox new tab page - Mozilla Links. However all is not lost, you Firefox freakers can tweak your “new tab page” to display a wallpaper background image if desired.

Sysadmin Stripes

• Malware Hunting with the Sysinternals Tools -  TechEd North America 2012 \ Channel 9 - A new presentation video from Mark Russinovich on using Sysinternals Tools to do some malware thumpin! Watch streaming or pick from one of two formats for direct downloading and viewing later. This presentation includes real-case reviews as well as a live analysis of a Stuxnet infection. Sweet!
  
• Windows Exploratory Surgery with Process Hacker - SANS Windows Security Blog - Jason Fossen shares PDF version of his presentation primarily using the freeware tool "Process Hacker”.  It is a really great review of the different angles one can take with a limited tool-set.
  
  That got me thinking a bit. Process Hacker has matured quite a lot since I last downloaded a copy and the new one certainly has more polish on it. I went through my utility pile and offer below some other great freeware utility process-monitoring tools you may be interested in visiting again.
  • Process Explorer - Sysinternals - One ring to rule them all. Still the very first utility I place on my Windows systems and swap out the default Task-Manager with. It continues to be upgraded so if you haven’t got the latest version for a while, you are missing out!
  • System Explorer - This one also has grown up quite a bit from my last download a few years ago. I like the tabbed interface. The “Performance View” tab is very neat. Process Explorer’s graphs are still a bit more detailed looking but it doesn’t provide an all-in-one dashboard view like System Explorer offers.
    
    
    
  • Daphne - Not as GUI pretty as the others, but what it lacks in pretty it more than makes up in back-to-basics tightness.
  • Process Viewer for Windows - This project hasn’t been updated in a while but again, the “latest” update was still fresher than the one I’ve been carrying around for quite a while. This one is a bit more feature basic. If you aren’t ready for the power of some of these other process utility tools, but need more detail than the default Windows Task Manager (at least in XP) then this may be a friendly choice.
  • ProcessActivityView and  ProcessThreadsView - These two application from NirSoft compliment each other nicely.
  • NoVirusThanks EXE Radar Pro - Provides process monitoring and alerting as well as to kill processes on demand.
  • ESET SysInspector - This is a complex, single-file-executable. It provides detailed information on running processes as well heuristics reporting on items found. I find it particularly helpful in assessing a system. It may not tell me exactly what is going on, but it often will help be refine my focus a bit.
    
• WHITEPAPER: Windows PowerShell 3.0 and Server Manager Quick Reference Guides - Kurt Shintaku's Blog

I learned this week about a “honeypot” project that attempts to capture USB-seeking virus/malware by creating a virtual USB-drive honeypot. This is a cool project and I hope it continues to see success in development.

• Catching worms with ghost flash drives - The H Security: News and Features
• HPSoC Project 1 - Ghost USB Honeypot -The Honeynet Project
• ghost-usb-honeypot - A honeypot for USB malware - Google Project Hosting
• Ghost USB honeypot released - Help Net Security blog

More interesting tips for admins…

• Microsoft .NET Framework Repair Tool Download - Microsoft Downloads
  
• Windows 8 – Script for customizing WinPE 4.0 – Part 2 – Customizing the Wallpaper - Anything about IT
  
• Local admin accounts vs. the default Administrator account - Windows Networking
  
• Where is That Group Policy Setting? - Windows Networking
  
• Active Directory Replication Status Tool - Bink.nu
  
• Download: ADREPLSTATUS - Microsoft Download Center
  
• Video: User Rights - Server vs Domain Controller - Windows Networking
  
• INFO: Why the heck is my Outlook .OST so big? - Kurt Shintaku's Blog

Network Knitted

• ARP Scans - A Ping Alternative - LoveMyTool blog video presentation by Tony Fortunato.What’s really going on the wire with Colasoft MAC Scanner Free.
  
• Script to resolve hostnames to IP address - Computer Security Forum. Recently I was presented with a massive list of Hostnames for PC’s on our network. The assignment was quite simple, provide the associated IP addresses.  No problem, I could manually ping each one by hostname, copy the result (if alive) and paste into my spreadsheet. Well, no. I wanted to go home to my family that night. Instead I found and ran this nice simple script against a cleaned up text-file of the Hostnames. My success ratio for IP grabs was over 90%. The other 10% required some manual followup (systems turned off, shelved, etc.) but it made quick work. I wasn’t able to find a good free GUI-based alternative, but this did the job wonderfully.
  
• Extracting DNS queries - NETRESEC Blog - Either by Tshark or NetworkMiner.

Utility Dotted

• NTFSLinksView - View NTFS symbolic links and junction points - NirSoft utility update
  
• Backup Windows User Profile Folders & Web Browser Profiles - Auslogics BitReplica - AddictiveTips review and walkthough for a new profile backup utility.
  
• Backup for Windows 8 & Co: BitReplica - (Google Translated from German) - Caschys Blog
  
• BitReplica - A free tool for backing up files stored on your Windows PC
  
• Batch-Rename Files In Windows Using 8 Different Presets - AddictiveTips reviews the PDFN
  Batch File Rename Utility.
  
• Spreadsheet Compare - The Fool on the Hill - Neat little Microsoft Excel Add-in to compare and highlight two spreadsheets. As seen in this review How to Compare Previous Version of Excel Spreadsheet– A Diff for Spreadsheet over at Windows7hacker.
  
• VMware closes holes in its virtualisation products - The H Security: News and Features
  
• New VMware Workstation 8.0.4 and Player 4.0.4 - (Google Translated from German) - Born and Windows IT Blog. What I found interesting is Gunter’s catch of the EULA details that allow VMware to collect and use info about your use of software including IP address, hardware ID, OS information and other “non-personally identifiable” usage stats.  Also that by accepting the EULA and using the software you agree to a two-year post termination of software use agreement for folks to audit your books, records and computing devices to determine your compliance with the EULA and payment of license and support service fees.  I’m sure this is pretty standard stuff and proper use of the free software they make available shouldn’t concern the average user, but it is another reminder of what lives in the EULA’s. Just be aware.
  
• VMware Player: Run Windows 7, Chrome OS - Free Download for a Virtual PC - VMware
  
• Download VMware Player 4.0.4 - FileHippo.com - alternative download link

Foresensically Checked

• New Plugin – “TypedURLsTime RegRipper Plugin” - RegRipper
  
• Digital Forensics Stream: TypedURLsTime RegRipper Plugin - Digital Forensics Stream blog
  
• RegRipper Supplemental Plugins Updated (regripperplugins_20120528.zip) - RegRipper
  
• DEFT Pen ready for download DEFT Linux - 2GB and 4GB versions of DEFT “LiveCD” 7.x to load onto a USB pen-drive rather than the optical media version.
  
• WinPentest v1.3.0 - woanware - Major updates.
  
• Compromise Root Cause Analysis Model - Corey Harrell wonderfully thought-provoking post on DFIR concepts over at his Journey into Incident Response blog. There will be a pop-test after the review…
  
• Am I pwn3d? Windows *Non-Native* Tool Triage is a follow-up post to the Am I pwn3d? Windows *Native* Tool Triage on using “simple” tools to perform system triage. Posted on Foundstone’s Open Security Research blog.
  
• Red Rock Solutions - RRTX Blog: ShadowKit - Red Rock Solutions RRTX blog - Neat and easy-to-use tool for recovery of Windows Volume Shadow Copy files. I’ve got several tools like this, and having a few makes it easier for me to find the one that helps me best in a particular event.
  
• Windows 8 Forensic - File History - Random Thoughts of Forensics blog brief post with some backing linkage.
  
• Timeline Analysis and Timeline Analysis, and Program Execution - Two excellent posts over at Windows Incident Response blog.
  
• Prefetch Hash Calculator + a hash lookup table xp/vista/w7/w2k3/w2k8 - Hexacorn blog utility/technique.

Cheers!

--Claus V.

Read More

RSS Feed Reader Upgrade - Hope through the storm (+more)

Over the last few weeks a perfect storm apparently conspired to take out productivity on my personal laptop.

First, I had woken up on a Saturday morning to find my smokin-hot laptop “Tatiana” would no longer boot. Four beeps of death and no BIOS boot screen. Coupled with that was a failing internet connection. Oh yeah, the cable-DVR box refused to output video signal.

Bad Things™ were afoot! Bad, man.

Between sporadic and brief periods of Nettage I was able to manage a download of Dell’s Studio 1558 Support doc with beep codes. Four beeps = RAM read/write failure. I breathed better after I had tried pulling out the two (new) Crucial 4GB Dimm sticks (total 8 GB RAM) and dropped back in the x2 2 GB OEM (Kingston) RAM that shipped with the system and it booted up normally again. Based on a super-kind investment from little-bro after I walked him through some dicey system issues a while back, I had upgraded Tatiana’s memory with two sweet 4 GB sticks of RAM from Crucial. With 8 GB on board, the system chews up the VM’s I’m running.

Through trial and error I was eventually able to locate which of the two Crucial sticks went bad. I left the good 4 GB Dimm stick in and supplemented it with a 2 GB Kingston stick to limp by with 6 GB.

Good news is that the Crucial gang have a generous warranty policy on their RAM and a week after I went through the RMA process, the replacement Dimm arrived today and is waiting installation. Yea Crucial! The entire process was a piece of cake and communications to me by Crucial were spot on! Customer service done right and one reason I return to them time-after-time for my RAM upgrades.

The spotty Intertubes issue was another thing. Due credit to my ISP help desk, they never gave me a hassle during the troubleshooting process (do you have lights on your modem?) and let me jump right to the gist when I identified myself as network dude (sure, let me do a signal test like you suggest and BTW here’s the packet data results we are seeing…). The first time I called they couldn’t test down to the router as their entire system was down also (bummer). The second time they reported lots of packet loss and sent an updated config file to it. That helped a bit, for a day. Then back to spotty connectivity. I had already done extensive troubleshooting on the Cat-6 hard-wiring between the cable modem and my WiFi modem; it was fine as was my WiFi modem connection itself. Another call, another confirmation of packet issues, another day of a working network before regular outages began. “Sir, do you have splitter in the modem’s line?” “Yes, your last tech put it there himself. We’ve been good for over two years since.”  They offered to send a line tech but I didn’t feel like taking a day off work just yet.

So last week after work I pulled my Dremel, put a wire polishing brush on the tip and from the outside of the house inward, unscrewed every coax connection, polished the threads and copper center wire, and reassembled…all the way back and including the cable modem box.  An hour or more later everything was bright/shiny and tight. And the connection was rock-solid again. Hurrah!

The DVR cable box was a surprising issue.  It is Cisco RNG200 HD-DVR box and I use an HDMI cable to output signal to the TV. First check was the cable itself. Attaching it to the (now working again) Tatiana resulted in great video signal display to the TV. Not the cable.

Maybe the box itself was failing?  For the past month we had noticed a trend where the video signal would go black suddenly for a few seconds before restoring again. Related perhaps?

After finally getting a cheery cable-tech on the line from our provider, he listened patiently as I explained all the troubleshooting work I had done already and the growing video output signal dropouts. Immediately he sent a major re-programming order to the system (not your normal box reauthorization signal mind you). About forty minutes later the software had been digested, applied, and assimilated. The box sprang to life and signal was restored again. And all our recorded shows were still on the drive! Since then, we haven’t had any issues with video dropout either. Not sure what happened, but I’m guessing the software/firmware refresh cleared it up.

Claus? What has this to do with RSS feeding?

I’m getting to that.

Amongst all this drama spread over a week or two getting resolved, Firefox 13 dropped, a significant Flash update dropped, and my Firefox/NewsFox combo for reading my almost 250 RSS feeds ground to a horrible stop.

See, I found that every time I attempted to use NewsFox to pull my RSS feeds, it would inevitably hit one that had some kind of Flash/Java/script something and lock Firefox up completely. I could get it going again by waiting forever for a “script stopped responding” dialog to appear which might eventually allow me to continue on. However I found just killing the plugin-container sub-process with Process Explorer did the trick faster. To compound issues, I wasn’t seeing the Flash Player sub-processes kick off underneath the "plugin-container”.

Something bad was happening and only by killing the plugin-container process could I get control back of Firefox.

I had previously experimented with dedicated client-based RSS feed readers, but have been a die-hard proponent of having my RSS feeds directly in my web-browser and NewsFox fit the need perfectly.

So I started the search to see if there was a client-based RSS feed reader that would allow me to break out of my browser for RSS feed reading in the meantime, but still be compatible with the process to support my blogging work.

After looking through the options on my (very) old post RSS Reader Roundup…Valca Style, checking out some newer apps, (including the slick new Mishra and Voyage readers) and picking though a ton of Google search results on the subject, I settled on two possible candidates; Feedreader and Omea Reader.

Feedreader was very nice and has become quite polished since I last toyed with it. I was able to import my sizeable OMPL list from NewsFox and with a few tweaks had a nicely sorted/displayed 3-column view. The text view is beautiful for the articles and the feed information and article link presented at the top of each displayed article header was stunningly perfect. Feed updating was fast and stable. It was almost a perfect match. Except that despite all my attempts, the process of getting the link out and into Firefox just didn’t quite work smoothly. Since I bookmark interesting links during the week until blogging time rolls around this was a real problem. I don’t use IE regularly, but still prefer to leave it as my default system browser. So clicking a link opened up IE, which I then had to copy the link and paste it into Firefox and then reload the page and then save my bookmark. The total package is beautiful and simple.

Omea Reader was brilliant and I’m using it full time now for my RSS needs.  Out of the box (as I posted originally back in 2008) it is very over-the-top feature rich. I was able to turn off features/tabs for contact management, favorites, HTML plugin, News plugin, Notes plugin, and pictures plugin.  Once disabled, all that I left running was the RSS plugin. I easily imported my OPML file and it raced through the feed updating rocket-fast.  It supports complex feed-view filtering as well as categorizations. I can set a ton of special filters and highlighting based on key-words.  The article text-view is nice (though not quite as polished as Feedreader). Some feed/links that NewsFox had issue with were no issue for Omea. It doesn’t have a launch at startup option (nor launch minimized) that I can tell, however I set it to launch as a scheduled task 5 minutes after login and that seems OK.  While running it seems to kill my Windows screen saver. Haven’t figured that out yet. In fact, my only complaint seems to be that the RSS article feed link is displayed at the very bottom of each post, rather than up in the header section like Feedreader. (Omea Team? Any tips to get the article link displayed in the header section?)  This means sometimes I need to scroll to the very bottom to open the link in a browser. Speaking of that, Omea is cool in that if I have Firefox running in the background and click a RSS feed link to view the full article in the browser, it sends it to Firefox as a new tab. From there I just deposit the page in my bookmark sidebar. That’s a Texas two-step dance I can live with. Sweet!

I’ve not given up yet on NewsFox and may return to it since I (below) sorted out the Firefox lockup issue I was plagued with, but I’ve clearly reached the tipping point.  The speed and feature set that Omea Reader bring me as a full featured, and semi-autonomous RSS reader have convinced me this was a wise way to go. I can update my feeds in the background without locking up my Firefox browsing.

Now, soon after I had started getting used to Omea Reader, I had to turn my attention back to the constant lockup issues with Firefox. I was super close to jumping to Chrome full time. The only thing that saved me was the (continued) lack of a bookmarks sidebar in Chrome like Firefox has.

The lockup issue ended up not being NewsFox add-on extension specific. It directly hurt the most because NewsFox was always open in the background and it seemed that anytime it or me hit a feed that had something going on triggering the event, Firefox would lock up.

I disabled NoScript. I disabled AdBlock. No fix. Eventually I was able to find some web-pages (outside of NewsFox) that would cause the page load to lock up Firefox but not IE or Chrome. I had material to work with and it was clearly outside of being just a NewsFox problem

Long story short, I eventually found through lengthy troubleshooting that the issue (in my case) was the Flash/Adobe/Shockwave plugins I had in my portable Firefox plugin folder; Mozilla Firefox, Portable Edition Support | Installing Plugins. Basically, Firefox Portable (which I use) has a FirefoxPortable\Data\plugins directory where you can keep your plugin files if you run the app on a system that lacks them.

These here:

+ This

= Firefox lockups and no Flash sub-process execution!

Instead:

Nothing here:

+ This

= No Firefox lockup and the expected Flash sub-process executions!

Firefox 13 tamed.

Go figure.

Despite the fact that the files I had in here were the same ones from where they are also “installed” on my system, emptying out the files in this folder solved the lockup issue I was experiencing. 

Don’t know why that was an issue, but it was. With the portable plugin repository empty again, no more lockups since and Firefox seems just fine finding the appropriate browser plugins from their main installation location on my system.

So it was with interest today that I found the following in my RSS feeds.

• Firefox 13 tripped up by Flash patch -The H Security: News and Features.
  
  Quoting from that post:

A further option for remedying the problem is to deactivate Protected Mode. Under Windows 7 or Vista, this requires the addition of the line ProtectedMode=0 to the configuration file mms.cfg. Since Protected Mode is not used under Windows XP, this step is not necessary on that platform. In 64-bit editions of Windows 7 and Vista, mms.cfg is located in <%windir%\syswow64\macromed\flash>; in 32-bit versions the file is located in <%windir%\system32\macromed\flash>. Administrator privileges are required to modify these files. Detailed instructions can be found in Adobe's Protected Mode FAQ.

Some users have traced some of their crashes back to the fact that Firefox's out-of-process plugin protection has been disabled. A support article on the Mozilla web site explains how to reverse this change.

Adobe has gone even further and released instructions for downgrading Flash Player to a previous version. Users should on no account downgrade to build 11.2, however, as it is known to contain critical security vulnerabilities which are currently being actively exploited. Instead, users should install Flash Player 10.3, in which the vulnerabilities in question have been fixed in a similar way to version 11.3 since Adobe is continuing to supply enterprise customers with security patches for Flash 10.

I had considered that the new sandboxing features might have been causing the issue, but since I had been able to replicate the issue in a parallel run of Firefox 12 I ruled the Firefox version 13 itself as being the source of my particular issue.

I’m now turning my attention to picking through this detailed technical post in hopes it might help be understand what was going on:

• Inside Flash Player Protected Mode for Firefox - Adobe Secure Software Engineering Team (ASSET) Blog

All is well in my case, and having weathered a perfect storm of technology problems, I’m pleased to say Firefox 13 is running strong, I have a new “high-end” RSS feed reader that is increasing both my performance and feed consuming hunger brilliantly, the cable box video output is good as new, and thanks to Crucial, I’m back to 8 GB system RAM on my notebook again.

There is peace and harmony in the Valca home again.

Hopefully somewhere, something in all these travails and victories might help someone.

Cheers!

--Claus V.

Read More