The Heartbleed Password Dilema

OK, the fallout from the ‘heartbleed’ bug is worse than I thought.  The problem is with how we, as humans, don’t manage a ton of passwords well.  It isn’t so much that we are lazy, but to avoid clutter in our mind, we re-use passwords across the internet to log-in to different websites.

But with the heartbleed vulnerability, the problem becomes worse because of our conservation of brain cells and the repeated username and password combination becomes yet another vulnerability.

You see, most people don’t come-up with a unique username and password for each site they have become a member of.  Most people reuse the same username over and over so that they can be identified as themselves by friends and acquaintances across networks.  Now, that would still be OK if the password used was unique for each and every website that user logged into using that username.  But because we are trying to make things simpler we usually only use a small index of passwords from which we draw our passwords, so that we don’t have to remember so many, because we know what it feels like to be locked-out.

It all has to do with username and password pairs.

So if a user logs in as “Gibraltor5” with a password of “1Ydd/R247” on a forum website that is compromised, the problem then becomes that the username and password pair are entered into a database and some malicious hacker will eventually try to use that username & password pair at other places, such as Yahoo, Twitter, Gmail, Facebook, Chase, CapitalOne, Amex, etc…

So eventually, someone will make a program that will actually try to login to all sorts of websites using “Gibraltor5” as the username and “1Ydd/R247” as the password, possibly even on a global scale.  Once more, they may not stop at one attempt.  They might wait a year or so and try again, just to check if the user had protected his accounts, but then gone back to his lazy ways.

So from now on, you have to create a unique password for every single site that you have ever accessed.

Even though Google may say that your Gmail and Google+ accounts are safe, they aren’t if you have ever used the same username and password combination ever before or afterwards on any site.  You can’t be sure that any certain site was or wasn’t compromised.   The username and password pair could have come from a site you don’t even remember joining.  So if you have a tendency, like most humans, to use the same password over and over, you have to stop that right now, go back to all the sites that you have ever been a member of, and change your password to something unique.

Now, if you are like me, you have lots of places that you frequent.  That means you will require so many passwords you won’t know how to keep them all straight without writing them down.  But if you write them on plain paper, or in a little black book of passwords like I used to do, you open yourself to having them ripped off and hacked that way, by your very own hand.

The best way to do it then, is use a password program that will keep all your passwords safe and handy.  Since I don’t always have my PC with me, but I try to always have my phone on me, I have to recommend Kuff’s Password Safe for the Android.  It allows you to generate unique jibberish style passwords on the fly, comes with 128 or 256 bit encryption to protect your entire catalog of passwords, categorize them, and more.  The one thing is that you must remember the password you will use to access the application, because there is no back door and without that one password, you will not be able to access the application again.  The good news is that you only have one password to remember, again.

Now, to top that off, you can also get another version for Windows, so that you can update and access your password data across platforms, as well as backup your data to remote servers such as Dropbox, SkyDrive & Google Drive, or to your local Windows machine.

Kuffs Password Safe on Google Play:
https://play.google.com/store/apps/details?id=uk.co.kuffs.free.passwordsafe

The developer’s website for Kuffs Password Safe (Android & Windows):
http://www.kuffs.co.uk/

If you do not have an Android smartphone and/or tablet, and you do not expect to upgrade to a smartphone, or if you prefer a Macintosh supported version, you will have to shop around.  But this little utility, a password safe, to secure all of your username and password pairs and other private information, encrypt the data to protect it from malicious hacker idiots, is now an important and vital component in the life of anyone who has or had an online lifestyle (meaning anyone who ever has done anything online).

Ads, Ads, Ads…

So much spam. I abandoned this droll blogging platform when WordPress suddenly decided to add advertisements to the blog. I was so upset that I cancelled my paid domain name mapping (where http://domainating.com was the actual address of the site). You can still get here via the http://domainating.com address, but now you are redirected to this web address (https://domainating.wordpress.com/).

So, I will lose all credibilty with my domain name in Google, as Google very hypocritically and absolutely very definitely hates redirects used on any server other than its own, even though they use this method of directing traffic all the time (check out chrome.com , android.com or picasa.com, as examples).

So I started blogging on Tumblr and wouldn’t you know it, after their sale to Yahoo the very first post to every one of my blogs is now a very spammy advertisement. Sometimes these ads even contain malware!  Hence, I will not even list my 7 tumblr blog addresses here.  In fact, if you visit any blog on Tumblr, make sure you have a good malware client.  An anti-virus program is not enough!  In fact, an anti-virus program does very little to protect you from spyware and malware.  I use a good one, Malwarebytes Anti-Malware Pro, and I recommend it, highly.  You wouldn’t believe how much stuff it has already caught and protected me from.

So now, I feel betrayed once again.  Why can’t a guy write on a blog without seeming like a spammer or scammer anymore?  I don’t have $100.00 a year for that, even full-function web hosting is cheaper, and you have more control.  It used to be that everyone who liked to blog could find a safe haven.  But now everyone is just using us to build their own scraper site.

What is a scraper site?  A site that uses ads to scrape a few cents away from the advertiser to reflect the lead, or link, giving him traffic to his site.  Now, I am not at all against advertising, when it is done right and responsibly.  But peppering the advertisements with lies, mistruths, misleading info, outright deceit, viruses, trojans, malware and spyware has always been against the law.  Plus, advertisers such as WordPress, Yahoo, even Google and Tumblr lose control of the ads and the quality of the ads because truth in advertising is never enforced in digital media anymore.

I guess I’m going back to Google’s Blogger platform, now.  At least I don’t have to display ads with Blogger (so far).  I guess all we can do is pray that corporate America sees the light and revolts against all this privacy intrusion…

Jesus Christ, please forgive the stupid people behind these corporations that are taking advantage of us bloggers and our readers with crap advertising, spam, viruses, trojans and malware, but please get some smart people into these corporations that can take charge, look after their brands, not mar us and ours up, and make it pretty darn quick! This is just plain idiocy. Amen.

Android Web Browser Recommendations?

I have found that it is almost impossible for me to use Chrome intuitively on my Samsung Galaxy Note II.  The problem is that when I am scrolling around with my finger, Chrome almost always closes my browser window because it mistakes the scroll as a flick intended to shut down that window.  This has become entirely too common, and I can find no settings to disable this “feature” bug or even to adjust the speed required of a flick.

Hell, I want the flick to scroll my page (a long way) and this is counter intuitive to the way I use my mobile devices.  I would think that it would be counter intuitive to anyone, since this is exactly how we use our browsers on a computer when we flick the mouse wheel (or touch device) to scroll way down a long page.  It can’t be just my problem.

C’MON, GOOGLE!  Get with it.  To have to find the same page all the time is a pain in the ass and a waste of time.  I know how to get rid of a window.  Maybe you should bone-up on how users use their devices.  Really!

Anyways, I really need to find a decent browser that won’t exhibit the same misguided disrupting user experience.  I have tried many browsers, and if it weren’t for this vital flaw in Chrome I would say that it is the best browser out there.  But, this one thing upsets my user experience constantly, and makes using my phone extremely hard (when it obviously should not be).

So far, I have tried the following browsers:

• FireFox
• Dolphin Browser
• Opera Mini
• Skyfire
• One Browser
• UC Browser
• Plus, the standard “Internet” browser that the Galaxy Note II is shipped with.

For some reason or another, each of these has fallen way short of the mark of being a good browser.  Most often, the singular reason that it didn’t work for me is that it didn’t work reliably on my mobile device.  And I need it to work on a couple cheap tablets and my old Droid X as well, so that I can be in familiar territory across all devices.  Plus, I have to eliminate crap software because otherwise my cheap devices get bogged down and don’t run well (I can really only do a few things, one at a time, on the slower/cheaper devices, so that they wind-up dedicated to only a couple of tasks because they have little usable memory and therefore I can’t install much on them).

My biggest problem is that no browser works reliably on any device, much less across all of my devices.  The Droid X and my 7″ tablet only has a single core 1GHz processor while all of my other cheap tablets have at least a 2 core processor.

I use my mobile browser a great deal no matter which device I am on, though.  So it is essential to the operation of any mobile hand held unit that I will utilize.  And I am often inputting information on forms, so it should definitely support ‘https://’ (secure hypertext transfer protocol) connections and Secure Socket Layer (SSL)  security certificates, warning me if there are any issues with any of the certificates.  But above all, it has to be reliable and Chrome Browser just isn’t because I am constantly losing input data when I just want to scroll a bit farther down to the next screenful of the web page presentation.

So, my obvious question is that I would like to know form others what is the best all around web browser for multiple hand held mobile devices and tablets that is reliable?

Yahoo!’s Domainapalooza

Yahoo has decided to release some of its premium domain names to the public through an auction at Sedo…

Yahoo!’s Domainapalooza …(This link was updated on November 16th, 2013)

This premium domain name portfolio auction started today, November 14th, and runs to November 21st, 2013.  Although there are quite a few names that I feel are not very good (especially for the reserve price indicated), there are some great domains in the bunch…

• AV.com
• WebServer.com
• Sandwich.com
• Sled.com
• VoiceMail.com
• Crackers.com
• Freeby.com/.net
• BlogsPort.com (or brand it as BlogSport.com)

Now, please note that the above is merely a sampling of some of the best domain names in the Yahoo Domainapalooza premium domain portfolio auction.  But that portfolio is listing over 500 names on its first day, and Yahoo! also indicates that it will also be adding even more domain names throughout the auction.

Can you walk away with a great brandable domain name that you could develop into a profitable website or business?  Very likely, considering the quality of some of these names.  Especially with names that have an excellent second meaning.  For instance, even though winter is coming and sled would make a great name to sell winter snow sleds, “sled” is often how I refer to older muscle cars that had great power but lacked the handling of a sports car.  These beasts will never have sports car handling because they double as grocery-getters and transportation to work.  And if you are into muscle cars like I am you would see the opportunity in that street rod slang name.

As of this writing, there are 517 domain names available for auction and with Yahoo planning to add even more this may become the most watched premium domain name portfolio auction in history.

Happy domaining!  I hope there will be many domainers taking advantage of this opportunity to add to their portfolio and domainate the market with domainating names.  😉

Yahoo!’s Domainapalooza …(This link was updated on November 16th, 2013)

-Doug
…”Domainating”
(I’m going back to check out that list!)

Theme Upgrade Crap

The theme for this blog, Andreas04, was upgraded to “Able”. I personally think that Able is crap and is the absolute kind of theme I am trying to avoid, one that lacks creativity of any sort.

To that end I have been strained trying to find a new theme. Which also keeps me from posting anything new, because I arrive at my dashboard and am presented with a problem indicating that my theme won’t work well, or might not even be around, for much longer. hence I go look for themes and get lost in a sespool of muck & mire.

Why FF4 is so Slow

After Twittering that FireFox 4 was incredibly slow I was met with disbelief on Twitter and elsewhere that I mentioned it.  I was told how fast FF4 is, now.

I seriously do not like FireFox because it was so pathetically slow and because it ignores good user interface experience strategies.  I was actually baffled how anyone would think that the thing was any faster, as it was so slow that it nearly crashed my Asus EeePC netbook.

Well, I finally fired-up that little Windows 7 netbook again yesterday and discovered what the problem is.  FF4 is allowing multiple and simultaneous video streams to run all at once.  What?  C’MON MAN!  Who the hell designs anything with multiple active video streams on the same page?

To further complicate this issue, FireFox 4 is allowing these simultaneous video streams to run even though the page it is loading isn’t active.  Huh?  C’MON MAN!  That is uncalled for.

Why would anyone want to load multiple pages at the same time, you may ask?  Why not?  If you are loading a page from an African web host (which have notoriously slow connections), you may load another website in another tab while you are waiting for the African website to load over seemingly slow dial-up speeds.

This isn’t even close to being every case.  I am a webmaster, a hostmaster and a web designer.  As a part of my daily duties I like to insure that my sites, as well as my client’s sites, are loading as expected each day.  So my “Home” page button is a collection of all the sites I have to check.  I need to ensure that the various hosting solutions I am offering are performing well, that my websites are loading quickly and correctly, that my sites have not been hacked, that the system is working correctly for myself & my clientel.

As it happens, a variety of those websites each have video on them, and as a part of the marketing it loads and plays by default.  Anyone may pause the play.  And until FF4, only one of these sites were streaming video when the web page they reside on wasn’t active (in focus).

But FireFox 4 has changed all that.  And because FF4 is loading all these different video streams in the background, the browser slows to a crawl.  As I press buttons, maybe something will happen, eventually.  The user interface is nearly useless.  The multiple videos that are playing are completely broken-up as the system races to deliver all the data, including those out-of-focus video streams on tabs that aren’t even viewable.  And it runs every single video stream as if they all needed to be run at the same time.

C’MON MAN!

As designers we can do much better jobs of designing apps that work.  The user is robbed of any ability to navigate.  The video stream is corrupted, the user experience is destroyed through excessive stupidity in implementation.

C’MON MOZILLA!  Get your head out of its ass.

BApps.com up for Auction

BApps.com is available for sale to the highest bidder at Sedo.

BApps.com Listing @ Sedo

This domain WILL BE SOLD at auction as the reserve price has been met.

The auction for BApps.com will conclude on May/05/11 @ 05:51 AM Eastern Standard Time.

When the nameservers are reset by the new owner (or the transfer authority @ Sedo), the old blog will expire.  It could be replaced by another should the new owner want one at the same old address, but that, of course, will all be up to the new registrant.

I have moved a couple posts to blog.widgetdroid.com and most of the rest I have moved here to domainating.com.  Still updating a few with Categories and Post Tags.

Google Voice Takes Over

The other day my friend showed me how he had setup Google Voice on his Droid Incredible.  He even had a widget that displayed what was transcribed after voice recognition tried to interpret his voice mail messages.

Eventually, I thought that it was a good idea and I thought I’d give it a try, thinking that I could always revert to my Verizon Voicemail if Google Voice didn’t work out for me.

To my surprise, I was getting a great deal more hang-ups and fewer voice mail messages with Voice than when using Verizon’s voicemail.  On top of this, it appears that Google’s voice recognition technology, which works well on my DroidX for short sentences, is often fooled or stumped when interpreting any other message left me, probably due to its longer length.

That said, the voice recognition for Voice is at least attempting to do something when it comes to those longer messages which would stump the android 2 device, but it does seem that the longer the message left, the more silly that the Google Voice transcript became.

However, because of all of these extra hang-ups, I decided to to revert back to the Verizon default voice mail system.  Unfortunately, Google Voice seems to have hijacked the answering system.  Although I have used the Settings menu to set my Call Settings  for Voicemail Service to “My carrier” and I am using the *86 number which is the default for Verizon’s Voicemail Settings.  And Google Voice is still answering every single call that I miss.

I can’t find any other Voicemail settings in my DroidX.  I even went down to my local Verizon store where I bought the phone and they can’t tell me what’s wrong.  So now I have to call Verizon’s support line (which is what they were going to do at the Verizon store, but I didn’t have enough time to hang around at the time).

Verizon Support:  Uninstall Google Voice.
I uninstalled Voice.
Verizon Support: It still goes straight to Google Voice.
Me: “I didn’t know it was going straight to voice.”
Transfered to a new Verizon tech support guy who took off call forwarding.
Me: “I had call forwarding?”

OK, now my voicemail is working again.  If you are a business, you might want to stay away from Google Voice, but if you don’t like it, stop the call forwarding.  That might require a call to a tech.  I was told that I can always put call forwarding back on if I want it.

I’m glad this Verizon tech knew what was going on.  Glad its over with, as well.  😉  I’m not so sure that Google Voice is a good idea for business after all this.  At least you know what to do after reading this should you not like it.  But taking some calls straight to voicemail without ringing?  That indicates a problem in the business world.  Not so sure I would like it doing anything like that for a personal phone, either.

Always something.  I’m glad this little dilemma is over.  😉

Update (May 1st, 2011): Google Voice has taken over my VoiceMail functions once again.  I am so busy that I don’t have time to address this with Verizon.  But Google Voice is answering my missed calls all over again (for at least a week now) and we had this fixed at one point.  GRRRR…

The reason its a problem is that people are hanging up when Google Voice answers where they usually leave a message with Verizon VoiceMail.  That sucks.

Busines Card Reader

If you have ever wanted a Business Card Reader (BCR), I just bet that it would have to be something handy.  This is one of those cases where, if you were offered a program that you would install on your computer that would scan in business cards, you probably wouldn’t even bother with it unless it was free, am I right?

Well, the reason is simple, it just isn’t convenient.  Having to take a business card home and scan it in just to have it available with all its contact information is actually more like a huge chore.  But now-a-days we are all walking around with smartphones and finally, the convenience we require is available as a little app for our Android or iPhone!

Check out my article which covers the Android based version of the CamCard – BCR (western) which I absolutely love on My DroidX.  But note that there is also a version for the asian market (Chinese/Japanese/Korean characters), another version for business, and that there are also alternate versions of each for the iPhone market as well.

With the convenience of hand held devices, the Business Card Reader has finally become a reliable and useful reality.

Business Apps: Password Safe

Although I have already reviewed Kuff’s Password safe on my android apps & widgets blog called Widget Droid, most readers here probably don’t realize that Kuff’s Password Safe is also the very best Password Safe/Vault application on Windows machines, as well.

So here is a link to my article on the very best Password organizer and encrypted safety app on the market…

What’s the Very Best Password Safe?

Just remember the master password that gets you into the program.  😉