Technology

Almost Disposable Email

by

In a previous post I discussed my overall approach to personal information stored on websites. That post spent a lot of time discussing personal details such as my name address and credit card information. First and foremost any website you deal with nowadays requires an email address.

In the past I had generic email addresses for specific topics. I had traveling at, shopping at, web services at, etc. I have been doing that for almost 18 years now. The value that gave me was if I received a message from for example my domain registrar to an email address I use for traveling I would know it’s a fake address. You’d be surprised how often that would happen.

For two or three years I have been creating disposable email addresses that I rotate every quarter. Those were for websites that required an email address but I never really plan on using it again. The challenge there was if I used one of these disposable addresses and then change my mind and wanted to keep using the site I would have to go and make a change to my settings update the address on file. This method worked most of the time.

For years I had the challenge where one website would sell my details and then I would get spanned so my entire shopping email address would be tainted by one vendor. That scenario was a nuisance however I never really addressed it. Recently when I started doing a threat model regarding my entire online presence I decided that I needed to change my approach in regards to email addresses. Instead of having generic grouped addresses and some disposable group that addresses I needed to have more unique dresses per site. That meant new websites needed a unique address that I continue to use or delete as needed. Sites that I already had I needed to go back and create dedicated email addresses for.

With the mail system I’m using the process was very manual. I did go into the admin tool and create each alias I wanted. Then I had to go to each website and update the address on file and document the change in my password management application. The solution is pretty comprehensive for my needs however going back and applying it to all of the sites I currently use is taking time. It is not something I’m doing in mass. Anytime I go to a site and it’s using an old address I’m making the change. This approach is slow however I don’t want to  block off large amounts of time to complete this all at once.

The Ever Increasing Complexity of Securing My Personal Information Online

by

Do you know how many online accounts you’ve created? How many of those have personal information that could be exploited or sold? According to lastpass I have approximately 350 Online account profiles created. The exact number of those that have personal identifying information such as my name, address, email, or even credit card I’m not sure. I am guessing out of all those maybe 1/3 to 1/2 of those sites require a physical address and maybe a credit card or some sort of payment information. In this day and age when Yahoo has at least two or more compromises to their security I personally cannot trust random institutions on the Internet to keep my information safe.

I’ve had this conversation with many people and depending on the audience i am considered a tinfoil hat crazy or just a determined realist. Either way the state of the Internet today where many sites require registration is such that I am concerned about the level of personal information I’m trusting with people that frankly don’t deserve or have not earned that trust.

There is no one simple fix to this challenge. I have taken a multileveled approach to addressing the situation depending on my use of a particular website.

For websites requiring a name and email address I simply provide an alternative name as well as either a unique email address I can destroy as needed for generic email address that I periodically destroy. If I create a unique address I can simply destroy the address when I no longer need that website. The process of creating an address does take a few minutes however so for one off sites that I need to register with and don’t intend to use again addresses that I delete every few months. That helps me reduce any spam.

The above solution only works for websites that do not require payments of any kind. Things get complicated when you start dealing with websites requiring some sort of payment method. To limit exposure I’ve used a few different options depending on the situation.

The simplest solution is when I have a service provider for a website that provides digital goods and they accept Bitcoin. In this scenario I would need to provide any personal information or any reasonable payment information. The challenge here is the number of websites that offer Bitcoin payment options are limited. One example of this use case would be my VPN provider.

The next area would be a website that does not offer bitcoin however I still need to pay for services that do not require shipping anything to me. In this case I would look to use PayPal when possible since none of my personal information are stored with the website only on PayPal systems. If that’s not possible I will use a real credit card. For recurrent purchases as of now I’m currently stuck and need to continue to provide my real information and a credit card. For nonrecurring services I will use blur. Blur is a service that allows me to buy prepaid credit card. What is unique about this service is that it allows me to use their address and any name you want on the virtual card. It’s also completely virtual so you can use it as a one-off disposable credit card number. I’m trying to go back to websites where they require credit for details however I don’t shop with them at all anymore or often. I replace any valid credit cards with one of the disposable ones from Blur. It requires a lot of effort however update the site or two here and there when I think I have a few minutes to spare.

One of the challenges with blur is that in some cases I have had issues validating the credit card. It’s hit or miss so I’d like it to be more reliable however it’s still a good choice to use I no longer want my personal detail shared however the account on the site cannot be canceled. At that point filling in details not specific to my personal information is useful.

The most complicated scenario is when I need a real physical address to have something shipped to me. In those scenarios Apple pay, or PayPal is preferred. That way my details are not stored on a any websites systems. In recent months I’ve been surprised how many services do you offer PayPal however the majority of times it feels like I do need to provide my credit card information. In cases where I do have to give my real credit card details I will try to not create an account on the site. Many websites force you to do that however. In those cases I try to remember afterwards to go back and provide non-identifiable information in my profile. That way if the site is hacked all the have is my purchasing history and identifiable information that cannot be tied to me. I’m not as consistent in doing that as I would like to be however the past year and more diligent about cleaning who has personal identifiable information.

Within that last group of sites there are some that I frequently reuse. Under those circumstances I don’t have a choice at this time other than to maintain my personal information including credit card details with that website. In the case of someone like an Amazon I use two factor authentication however does not prevent them from being hacked in their database stolen. At present maintaining information on these sites is a risk I have to take if I want to use the Internet. All of what I described previously enables me to minimize the number of sites I have to trust with this information.

Even with all of these actions I’m not where I want to be with regards to personal information exposure online. I’m probably better off than 99% of the population however I know what specific actions I need to do to secure myself further. Now it’s just a matter of finding the time to go through the list of sites I’ve recorded that I’m registered with and make necessary updates. At the time of writing this I’m about 60 to 70% done. The challenges it only takes one site like the Yahoo breach to have bad things happen.

My Sort of First Mac, Again

by

Back in November while I was searching for the iBook G3 clamshell I got curious and was looking up other Mac’s that I might be interested in. I immediately was drawn to  the first Mac that I ever bought, the iBook G3 12 inch in white. I was pleasantly surprised to see this model plentiful on eBay and also relatively inexpensive at about $50-$75 depending on condition. For that price I kind of wanted to buy one. What I ended up searching for and buying was not the exact model that I owned. That was because the advice I was given was that model is prone to issues. So I stayed away from the G3 polycarbonate white and got the last version made in that body type that was a G4. It was harder than I thought to find one that did not look visibly beat up. After a while I did find one in order to.

After getting the laptop the screen feels a little washed out however I’m not sure if it’s this particular computer or if I just don’t remember the screen being like that on those older computers. It’s still very usable and I was happy to see that the keyboard and hand rest was in good shape. I purchased some headlight cleaner from a recommendation that is perfect for cleaning polycarbonate. I haven’t yet however I intend to clean the shell of the computer to get looking in better shape.

As with the G3 clamshell I have specific plans in mind for this computer. It is not just an impulse by to sit around. Now that I have them however I’m not sure if I’m going to swap what I intended them to do or not. I might end up just keeping the clamshell G3 for show since it looks awesome. I would then use the polycarbonate white G4 to do what I wanted to with the G3. Use it as an educational computer for the girls. I have my eyes on my favorite PowerBook of all time. The 12 inch PowerBook that I owned three or four different versions of over the years. If I do get that I would use it as my off-line writing computer that the polycarbonate white computer would have been used for.

As I am slowly preparing to install software on these computers I’m surprised at how much software I saved that is in my backup archive of Mac software that will run on the later variance of OS 10 at work on the PowerPC chips. There is a bunch of things that I’m missing from my latest backup that I have online. I need to go to some off-line hard drives with backups circa 2009 or so to get a few more applications. In any event I should be able to easily do what I want to do with this computer.

Now all I have to do is find time to work on this and other projects I would like to take on.

My Sort of New Vintage Keyboard

by

In addition to the vintage computers I picked up I also bought an Apple Pro keyboard from the early 2000’s. Over the summer when I bought my wireless Bluetooth mechanical keyboard I did so because I thought fondly of my old black Apple Pro mechanical keyboard. As I was shopping for vintage Mac laptops I started to look for how much a pro keyboard would cost me. Most of the ones I found were pretty dirty shape. The going price was somewhere in the range of $30. I searched around and want to bid on one that looked pretty decent. With shipping I think I paid less than $40. For a good mechanical keyboard that’s not so bad.

When I got it I was eager to tried out. It typed as I remember it did. After using it a bit I did realize that my new Matais mechanical keyboard based on the same movement typed nicer. I found myself able to type faster and more comfortably on that one however the old Pro keyboard is still pretty slick.

I was using the Pro keyboard on my second computer set up for a while at home. A few weeks ago I decided to bring it into the office to use so I can bring home the Matais keyboard. The computer it’s plugged into I delight amounts of typing on however having the mechanical keyboard on it has been an improvement over the newer white and silver Bluetooth Apple keyboard that I had.

My experience with the Pro keyboard versus the Bluetooth Matais makes me want to get a new wired mechanical keyboard. The only issue I have with the Matais is it loses its Bluetooth connection with my laptop much more frequently than I would like. I had many more problems with it than I do with my Mac keyboards. That was one of the reasons why I took it home.

I Figured Out My Problem With The Apple Watch

by

Back in early October I was curious enough to pick up and other Apple Watch. I bought a series 138 mm. I felt the 30 mm was better fit on my wrist even though my other watches are larger. From what I read series 1 was as fast as the series to and should solve all the problems that I felt I had with what is now called the series 0. As much as the series 1 wasn’t super cheap, it wasn’t that expensive. At present it’s actually the most expensive watch I own since my Seiko was slightly more.

Since I bought the Apple watch for the second time I’ve been using it exclusively. I like it. Functionality wise I’ve been pleased with it. I haven’t had major frustrations with the speed of anything that it does like I did with the series 0.  I find myself telling the watch to set the timer or an alarm often. I also like the ability to see how much times less than the timer instead of having to go to my phone. Other advantages of the Apple watch for me has been the fact that I do not need to wear my Fitbit. Seeing and sometimes replying to texts on the phone has been useful however I don’t do it often. Also the ability to answer the phone and talk on speakerphone briefly from the watch is something I don’t do often but I’ve done it and it’s been helpful at those times.

Right after I bought the series 1 I regretted not having the waterproof series 2. The series 1 was available immediately when I ordered it whereas the series 2 I would’ve had to wait almost a month for. When I bought it I didn’t think I really cared much about the waterproof. I had some buyers remorse and thought about returning it within the two week period I get from Apple to make a return. In the end I opted to keep the cheaper version of the watch did not think the waterproof would come in handy for me.

Until Friday of this week I’d worn the watch every day since I got. Recently however I missed the nicer looking watches I own. I contemplated switching back however i was concerned about the loss of functionality if I stopped using a “smart watch”. Friday for some reason I decided to put on my X-33 and where that instead. What I found was a few times during the day I went to look at the watch to see the date. I also went to set the timer and after two seconds I put my arm down and reached for my phone to do it instead. Other than that I didn’t really miss the smartwatch. I had to get used to the fact that the X-33  was noticeably heavier then the Apple Watch. It makes sense that it was heavier however I am use to my titanium X-33 being the lightest thing I wear.

When I first started wearing my jawbone Up several years ago I wanted to encourage myself to be more active. Nowadays I’m pretty knowledgeable in knowing what I do and how active that makes me. I learned a lot from four or more years of wearing an activity band. Friday when I put the Fitbit on since I wasn’t going to be having the Apple Watch I immediately took off the Fitbit. I did not want to wear the extra weight or hear the clanking of the Fitbit against my Omega. The loss of the standup notifications in my activity tracking was slightly noticeable however I was pretty okay with it.

We are traveling this weekend and at first I packed the charger for the Apple Watch so I can bring it with me. Before we left however I put it away and unpacked all the gear I needed for it and just put on my Speedmaster instead. Yesterday I again went to my wrist for a few things that the  Apple watch does for me before I realized I didn’t have it. Other than that I don’t really miss it day-to-day. I miss the idea of it and how cool I think doing electronic stuff on my wrist sounds like. In practice however I don’t miss it. I also like how my mechanical watches look significantly better than the smartwatch.I feel like that sums it all up for me and why I’m not so sure if I’ll wear the smartwatch again.

Unfortunately I know myself and I’ll sell something and not have it for a while and little get updated and I’ll feel like hey this major issue I had with it is solved I should get it again. That’s why I got the series 1 in the first place. I’m glad I did because it was an improvement however when you boil it down I just don’t feel like I need it. I do waffle about this stuff so it doesn’t mean that I don’t want it sometimes however functional speaking I don’t miss it.

I Bought a Classic iBook G3 Clamshell Laptop

by

One of the guys at work has been talking about some of the old computers he’s been buying and reconfiguring or restoring to get working. It’s fascinating to talk to him about it partly because he’s very passionate around the topic. Also it’s something that I have thought about doing with one or two computers but never had the space or time to want to do it.

I’m finding it very funny that for some time now I have wanted a classic iBook G3 Clamshell laptop circa 1999. I never owned one however they always did look pretty cool. I personally did not get into Max until the G4 around 2002. I’ve also wanted a lampshade iMac. For some reason I keep thinking about the 15 inch version although the 17 inch is better and the same physical footprint. I owned a 20 inch version of that computer and loved it. I was reminded of my desire to want the iMac when I was at my sister-in-law’s I saw that she had one and she commented about oh that old thing or something like that. I told her I’m jealous since I actually want one.

The final straw for me was when my friend was talking about how he bought and restored and upgraded the G3 iBook. I started asking questions around how we found a good one and how much it costs. He gave me a bunch of pointers on what to look for on eBay and I started to search. The prices weren’t too bad however I was surprised that a 18-year-old computer was worth even that much. It goes to show you that this particular model was in demand. I found a blue G3 that had its internals upgraded to slightly better variant that did not come in blue. It also had an SSD instead of an IDE hard drive. Even had a new power brick.

I was ex cited get the laptop however when I got it I realized there was something wrong with it. The LCD backlight was out. The seller on eBay was extremely accommodating and I sent back the laptop. He fixed it and send it back to me. I had a choice of a full refund or options on a different model but after I got the laptop it was in perfect shape other than the backlight and one hairline crack in the case. The crack was visible in the auction pictures even though I didn’t see it myself the first time. The computer was still functionally fine with the crack and he barely noticed it so I was happy to keep this particular computer if he could get the LCD to work. Thankfully he was and shipped it back the same day he got it after fixing it.

The girls wanted to play with it. Originally that was my idea to get it working with some educational software for the girls to use. Now that I have it however not so sure I want them playing with a vintage laptop. Just because it’s so cool I don’t want them to break it. It’s very heavy I’m not sure other than the LCD if they could break it but I don’t want to chance it. I do have a few use cases in mind for it.

My friend needs to own up and take responsibility for all the money I spent since knowingly or not he gave me the idea to go out and buy this laptop. I was just following is very bad/very good footsteps regarding vintage computers.

Dual Monitors

by

Now that the girls are in school full time when the opportunity arises unable to work from home more often. Sometimes it’s a necessity because of the girls being in school and the need to drop off and pick them up in the same day if MC cannot for some reason. Other times it’s just general convenience. Being able to do that has posed new challenges for me. I used to have to hide in my bedroom with a laptop so no matter what I did I was not comfortable. Now I can go to my desk however I don’t like sitting in front of the laptop screen all day. It was a big production to reconfigure my monitor so I can plug my laptop into it to work. My solution was second 27″ monitor so I can have two computers running at the same time.

This configuration solves another challenge I had since I wanted to run a Linux desktop in tandem with my Mac mini. Or sometimes plug raspberry pi into monitoring my desk and work on. With my Apple Cinema Display I’m unable to do any of that since it has the thunderbolt display adapter that limits what computers I can use on it. Amazon had a good deal on a 27 inch Dell monitor. It’s basically the 27 inch variant of the 24 inch monitors I have at work. They’re pretty good so I was confident in buying a larger 27 inch.

Even I measured before I bought it that both 27 inch displays will fit I have very little room on my desk  with both computers set up. Functionally speaking the set up does exactly what I wanted it to. I put my desktop and the cable run for the laptop to a shelf on my desk so I save surface area. When I’m not using my work laptop I can plug my MacBook or a Lenox computer into the second set up. I’m contemplating buying and building a Lenox desktop however  I don’t have the time for that project just yet with a few other projects I have still going on at home.

Inbound Network Lockdown With an SSH Proxy

by

Ever since I started working on building my backup network using raspberry pi’s and BitTorrent Sync I’ve started a list of other home projects I want to do with technology. One of the things that’s been in my head however not high on the list actually do was create a VPN endpoint with my home router so I could VPN in while remote. I tried to play around with open VPN and ran into some pickups. Didn’t have all the time I really needed to sit down and figure it out so I gave up on the project. Even while I was trying to set up an inbound VPN friends of mine at work were saying it was probably overkill anyway.

At least one if not more people recommended that I set up a SSH proxy on one machine and use that to connect to all the other resources. I like the idea but never gave it much focus until recently. I have a Zotac ZBox C Series Mini Computer that I have been running Ubuntu Linux on for a while. I’ve been baking it in as a next-generation BitTorrent Sync machine for my network. I hadn’t deployed it yet and figured I would try using that as my SSH proxy.

The proxy itself was trivial to initiate to the box. Deciding how I would configure my computer was not difficult however it took some thought so I could be connected to the proxy in one web browser and not affect all other Internet traffic. I opted to try FoxyProxy in Firefox. I do not normally use Firefox on a day-to-day basis so being able to dedicate that browser for direct proxy connections to my home network seemed reasonable.

The setup worked with less than 30 minutes of configuration. Once I was able to prove to myself that I can do this and maintain I needed to figure out what my permanent solution would look like. The Zotac likely won’t stay at my house and I’m using it for other things. If ongoing have a proxy I use often I want isolated and basically have it do one thing only. I opted to set up one raspberry pi as a dedicated SSH box. At the moment I have enough spare pi’s to dedicate one. I initially had concerns about the 100 Mb limit on the network card however I doubt I’ll be doing anything of high traffic that I should worry.

My set up for now is simple enough. I have a plain-vanilla Rasbian install on a Raspberry Pi 2 with a 16 gig SD card. I have the pi plugged into an ethernet jack on my router. Besides SSH I installed Fail2ban to protect myself from potential attacks on the Internet. I also used a password of significant complexity for the login details. I have a dynamic DNS entry set up so it’s easy to connect from anywhere.

This setup works well on my laptop however I am not sure if I could get it working using my iPad. That’s one trade-off with this configuration however most if not all of the services that I previously exposed to the Internet should be fine with this limitation. If anything I can use remote desktop software from an iPad to connect to a local machine and then bring up those services.

The next thing I want to do involve making it easier to access my home network while on my laptop remotely. That mainly involves configuring Royal TSX sessions to use my proxy details. I also would need to set up the proxy connection within royalty TSX. I also need to finish creating localhost entries for my home network services as well as bookmarks within Firefox to make accessing everything easier. As much as I want to do that all up front it’s a little bit of effort that I will probably just take care of as I need it.

An additional enhancement I would like to make is to go beyond having Fail2ban and a strong password to enabling to factor authentication. That will require A bit more skill for me to learn and at least one hardware USP token. For now I consider that a reach goal.

I still want to find some time to play with inbound VPN configuration. Even if it’s just to show myself I can do it. For now however the SSH proxy more than meets my needs and is working today. There are other projects on my “Technical Maker Board” that I set up that I’d like to get to next.

The Apple Event

by

By many I am considered a fan of Apple products. I guess I am however that’s only because they make good stuff. When they stop making goods product I’ll stop buying them. That’s an old argument since many don’t realize I’ve owned many an android device so I have my opinion of Apple-based first-hand experience between both platforms.

I have mixed opinions on the product updates that Apple recently announced. For the Apple Watch I am very curious if the series 2 watches are fast enough that there is no lag when I lift the watch to my face to look at the time. That was a huge annoyance for me and one primary reason why I sold my original Apple watch. I will wait until the series 2 watches are available in the store to test it myself. Until then I  am still happy with a nice classic analog watch.

When I first saw the specifications for the iPhone seven I realized there was no compelling reason for me to upgrade. I have a success plus as my personal phone and there was virtually nothing that stood out and said who I need to have that. Last year forced touch was compelling enough for me to try it however afterwards I realized it wasn’t a worthwhile upgrade. I had several conversations with friends about the same topic. Then I spoke to someone I met via the parent meet up groups. I think even admitted wasn’t much of an upgrade however he was upgrading anyway. It got me thinking why he would do that. It turns out you might be right. I buy my phone out right when i get one. I have for doing that because I set aside money every month for my “tech fund”. Why sell something on eBay I put it back into the fund. When I buy a new iPhone I typically sell the old one on eBay and put it that sale amount towards buying the new phone. I usually get about 30 to 50% of my money back depending on the condition of the phone. What this friend said was that you could do the same thing with apples purchasing plan and still get a new phone every 12 months. I did the math last year and for some reason didn’t think it was compelling. Looking back I think it was because I didn’t want to be locked into something and also because apples purchasing plan includes the extra cost of AppleCare. Thinking about it now I want AppleCare anyway and the price of the phone is no different than me buying it unlocked. The fact that it’s still an unlocked phone even though I’m in a purchase agreement doesn’t matter either.

After weighing all the options using apples purchase plan in essence you can’t get a new phone every year. Now if I was a different person  this might not make sense. If you upgrade annually you’re constantly in an agreement to pay for phone. If you want to upgrade every three or four years then upgrading constantly is not for you since you wouldn’t want to be continuing to make payments. For me however buying the phone every year or two anyway. Even if I did an upgrade to the iPhone seven this year I would definitely be upgrading next year. I amortize the price out over two years that means I’m always paying a fee for my phone anyway. By buying into the Apple purchase plan it just makes it easier to get a new phone every year.

An Update on The Disembodied Female Voice Called Alexa That My Kids Always Hear Me Talking To

by

When I last wrote about my Amazon echo I said I would be trying to teach it some smart things commands. Yeah, so I didn’t do that. Since setting up my Logitech Harmony with my echo to turn my TV on and off I haven’t really spent much time with the echo teaching it anything new. I’ve continue to use the echo. Apparently not as much as other people who are very vocal about how awesome it is however I am using it. My use case has become listening to music and checking the weather. Of course the main reason I bought the echo in the first place was I wanted to use voice commands to listen to music and my phone paired with a Bose Bluetooth speaker wasn’t doing that very well. With that fact in mind the echo is extremely successful at what I originally purchased it for

I did have hopes of using it for more than just music. I’m not sure if it’s usefulness hasn’t improved for me because I do not use Google for contacts, calendars, tasks. I also do not currently get my news from the radio or TV. I could see using an echo in my bedroom to listen to news stories as in getting ready in the morning however I don’t see the cost benefit of buying another device to do that specific task. The current echo I have is in our living room and suits its primary function very well in that location.

I could see over time having another device in different rooms however I’m holding back on that partly due to curiosity if Apple will release something to compete against the echo. They likely will however what the product turns out to be is anyone’s guess. And plenty of people are guessing, so I’m not going to. Until Apple makes an announcement I keep reading the weekly updates I get from Amazon on what new tricks the echo can perform to see if there’s any new features that will peak my interest. So far I’m still waiting.

One thing I do want to find time to focus on is ;to see if I can integrate my smart things with the echo a bit. That project however is not on the top of my hobby project list. Of course there’s a lot of specific things I want to do with my smart things that I haven’t done in over a year. Since we want to get a house at some point in the near term investing in any fixed devices such as power or light switches in this apartment doesn’t seem worth the value or time. All this extra integration might just wait until after we move.