Moving on to TV and Movies, let’s talk about subscription services. The final post in this series is about that Prime and other subscription services work and why. Let’s just say that Prime Video looks like the bargain shelves in Blockbusters. I don’t get The Long Goodbye for free, and I have to stump up for MUBI to watch Two or Three Things I Know About Her. It looks like I can watch all the kids movies I want. So let’s just toss Amazon in the bin.
You know how Amazon is really J C Penny on steroids? The streaming services - Apple, Netflix, Amazon - are Blockbusters on steroids. That’s why looking at what they offer always reminds me of walking round Blockbusters, or Fopp in Covent Garden, with the difference that Fopp has, and Blockbusters had, art movies. Blockbusters worked because some people were prepared to wait a while to see the latest movies, but mostly because all of us would watch something that was cheap to rent and looked “okay” but that we would not splash out a full-price cinema visit to see. Streaming services make money because of those grim Sunday afternoons when you’re bored and will watch anything. Amazon’s in the bin because Prime doesn’t actually apply to any movies I want, and do you notice how hard it is to find out what Netflix actually has to offer, and if any of the films or programs have an additional charge? So did I. Let’s give Netflix a pass. If you like it, you pay for it.
I'm going to stick with cut-price box sets from Fopp.
It’s Curzon Home Cinema I really want. I’ve ranted about their crazy commercial decisions before, but hey, let’s rub it in. When it started, they used the browser and I could plug an HDMI cable to my laptop and watch on my TV. Then they revamped the service, and now the Curzon app does not support any form of output re-direction. No Air Play. No Lightning to HDMI for the TV. Who the heck wants to watch a film on an iPad? Even Amazon’s iOS app supports Air Play! Ah, but wait. Curzon has an app for the Apple TV. That’s £139. Since I’m a Curzon member, £139 is about 10-12 movies depending on when I go. And it costs to rent the movies, so breakeven is way down the line. And they all come out on DVD anyway, and eventually for about £5-£10. This is not looking good for Curzon Home Cinema. I’ll just watch the movies when they come out instead. (Note: this is only because I work in central London. If you’re outside the M25 in a town with no council-sponsored art house, then it’s a bargain.)
So if I'm going to get an art-movie subscription, I’ll get MUBI instead. Ya na na ya na. (In this case, it’s the commitment to watch at least one art movie a month that’s the stumbling-block.)
Monday, 7 August 2017
Thursday, 3 August 2017
Music Streaming for Cheapies
Enough about hardware and software. Onto music streaming.
The cheapie option would be to use a free service. I did that for about twenty minutes a couple of years ago when I tried Spotify or Rdio or one of those. Ads are annoying on actual radio, which is why I listen to the BBC and Chill, and no less annoying on a streaming service. So I’m paying.
I really liked 8Tracks. I can still use it, though since they went public and got copyright religion, in the UK it plays via You Tube. And only when I’m running the You Tube site on my Mac. I like it because I could click in a random playlist that suited my mood and hear music from acts I would never otherwise hear about. Most of the time it was pleasant wallpaper, which was exactly what I wanted, and every now and then something would jump out at me, and I would buy the CD. That’s what I want. So I’ll listen to that over the Dragonfly and headphones now and then.
And before we talk about sound quality, can I just say “Royal Albert Hall”? Possibly the most famous music venue in the world, because of the Proms, and its acoustics are, well, blurry is a good word. Nearly all the Prom concerts are pretty much sold out.
Pricing. For all the providers, the basic service, at 320 kps, is £9.99 / month. CD-quality streaming is £19.99 / month. You don’t decide of a price is low or high by looking at the competition. You decide by looking at the generic alternatives. Radio, for instance, is free but has irritating ads and talking heads. Not a good comparison. I buy about 3-4 CDs a month, usually classical, not usually new releases, sometimes a box set of (say) Mozart symphonies. Let’s say I spend £40 a month on CDs. Not all of those will get played a lot afterwards. Some are purely experimental - what does this modern composer sound like? Very occasionally I will hear something in Fopp and be immediately stricken - SOHN’s first CD was like that. A new full-price classical CD is about £15. I very rarely buy those. To look at £20 / month as “twice the price of Spotify” is to miss the point. It’s “two spec CD’s I may never play again”. It’s also about the price of a ticket in the stalls of St John’s Smith Square to hear the Orchestra of the Age of Enlightenment. Tidal and Qozum’s £19.99 / month for CD-quality is a well-judged price. I suspect that I will buy fewer, or better targeted, classical and / or jazz CD’s, because I’ll be experimenting over the streaming service. I’ll happily stream 320 kps at £9.99 / month over my home broadband connection.
So now, which service? I want one with good playlists. And a decent list. And I’d prefer to avoid the reputational issues of Spotify. Also, the cool kids at work voted 2:1 in favour of Spotify over Apple Music. So. That's Millennials. This leaves leaves Apple Music, Tidal and Qozum.
The audiophile subscription service of choice, so good that it’s integrated into Roon, is Tidal. I’m tempted to say that if it’s good enough for Roon, it’s probably good enough for me. It pays artists more, and I doubt it’s making Jay-Z richer right now. So that’s my choice. Tidal Premium. Via the iDevice and the Dragonfly. I’ll let you know how that goes.
The cheapie option would be to use a free service. I did that for about twenty minutes a couple of years ago when I tried Spotify or Rdio or one of those. Ads are annoying on actual radio, which is why I listen to the BBC and Chill, and no less annoying on a streaming service. So I’m paying.
I really liked 8Tracks. I can still use it, though since they went public and got copyright religion, in the UK it plays via You Tube. And only when I’m running the You Tube site on my Mac. I like it because I could click in a random playlist that suited my mood and hear music from acts I would never otherwise hear about. Most of the time it was pleasant wallpaper, which was exactly what I wanted, and every now and then something would jump out at me, and I would buy the CD. That’s what I want. So I’ll listen to that over the Dragonfly and headphones now and then.
And before we talk about sound quality, can I just say “Royal Albert Hall”? Possibly the most famous music venue in the world, because of the Proms, and its acoustics are, well, blurry is a good word. Nearly all the Prom concerts are pretty much sold out.
Radio One streams over DAB at 128 kps, and the World Service at 64 kps. Your telephone land-line gives you 64 kps (56 kps in the USA). Radio Three is broadcast between 160-192 kps. So anyone offering 320 kps is offering twice the quality of radio. Next up is streaming CD-quality FLAC files, and that’s going make you glad you have unlimited downloads. A WAV file at 1411 kps takes about 11 MB/min and FLAC compresses between 50%-60%, so Beethoven’s Ninth, which is around 75 minutes long, is around 412 MB of music data. Signalling overhead and some re-transmission may add up to 30%, so allow another 125MB for a total of 637MB. At 320kps for the music, that’s 178MB, and at 96kps for the music, it’s 53MB. Watch the quality setting when you’re streaming on your mobile data plan.
Pricing. For all the providers, the basic service, at 320 kps, is £9.99 / month. CD-quality streaming is £19.99 / month. You don’t decide of a price is low or high by looking at the competition. You decide by looking at the generic alternatives. Radio, for instance, is free but has irritating ads and talking heads. Not a good comparison. I buy about 3-4 CDs a month, usually classical, not usually new releases, sometimes a box set of (say) Mozart symphonies. Let’s say I spend £40 a month on CDs. Not all of those will get played a lot afterwards. Some are purely experimental - what does this modern composer sound like? Very occasionally I will hear something in Fopp and be immediately stricken - SOHN’s first CD was like that. A new full-price classical CD is about £15. I very rarely buy those. To look at £20 / month as “twice the price of Spotify” is to miss the point. It’s “two spec CD’s I may never play again”. It’s also about the price of a ticket in the stalls of St John’s Smith Square to hear the Orchestra of the Age of Enlightenment. Tidal and Qozum’s £19.99 / month for CD-quality is a well-judged price. I suspect that I will buy fewer, or better targeted, classical and / or jazz CD’s, because I’ll be experimenting over the streaming service. I’ll happily stream 320 kps at £9.99 / month over my home broadband connection.
So now, which service? I want one with good playlists. And a decent list. And I’d prefer to avoid the reputational issues of Spotify. Also, the cool kids at work voted 2:1 in favour of Spotify over Apple Music. So. That's Millennials. This leaves leaves Apple Music, Tidal and Qozum.
The audiophile subscription service of choice, so good that it’s integrated into Roon, is Tidal. I’m tempted to say that if it’s good enough for Roon, it’s probably good enough for me. It pays artists more, and I doubt it’s making Jay-Z richer right now. So that’s my choice. Tidal Premium. Via the iDevice and the Dragonfly. I’ll let you know how that goes.
Monday, 31 July 2017
Cataloguing Your Music For Cheapies
Why did I go through all this? I listen to music in two circumstances: when travelling, and at home. At home, I have a Marantz 6003 amplifier and CD6005 CD player with B&W 686’s - and that sounds as good as my ears can hear in my far-from-perfect listening circumstances. I buy and play CDs, and I'm happy doing that.
When travelling I play “train music” over the iPhone through Bose QC20’s. I rarely listen to train music in the house. Train music gets downloaded into iTunes where it rotates through a playlist called ‘iPhone’, which is updated every time I plug the phone into the computer. Train music has a finite life, and I have backups of it on a NAS. That’s why I looked for a way of streaming NAS files: it was a completeness thing.
Occasionally I want some random variety in my listening. So I was interested in streaming from You Tube / 8Tracks with decent quality but without a lot of cost. That’s an added-value thing. That lead me down the rabbit-hole. And it is.
I found out that a lot of serious audiophiles have all their music ripped to a NAS and play it back through a library + music catalogue program running on a computer attached to a high-quality DAC hooked into the hi-fi amplifier. I know: you can feel a flow chart coming on. A suitable authority in this is Hans Beekhuyzen.
Summarising his excellent videos… The preferred audiophile hardware set-up is a Mac Mini - and not the cheap one - and an iDevice to run the library’s remote-control app. Audiophiles are likely to have an iDevice or two already, so this set-up is a lot cheaper than buying a MacBook Pro. (Beekhuyzen makes a good point about the volatility from time to time and market to market of the actual boards and chips used in Wintel computers of the same name. Only Apple are consistent.)
The top-end library- players are JRiver, Audirvana 3 and Roon. These have remote control apps for iDevices, and there are generic remote control apps for OS X (the Mac Mini) if you want to stream from Spotify, Tidal and other services.
All this will cost around £1,000 including the software, and more for Roon. Roon is for the 1% of music freaks. The annual subscription is £120. It looks fabulous. It has the names of all the sound engineers who worked on the record, and the names of the receptionists on duty at the studio during the recordings. If, like the Hans Beekhuyzen, you too have 500 SACDs, this is what you want, and you won't bat an eyelid at the cost.
I like music, but I'm not nerdy about it. I can recognise most major 1950's jazz musicians by ear, and identify the major composers by style within five bars, and of course my head is full of pop-culture junk from my youth, but I'm not a music nerd. I don't have four different versions of The Planets - because I have the best one, which is by Von Karajan and the Berlin Phil. I have two versions of the Bach Cello suites: Tortellier and Yo-Yo Ma. That's it. For me, the additional spending on a fancy library isn't worth it. And I need to be careful of the bottomless pit that is getting all the catalogue details right.
I have a Mac, and Apple want you to use iTunes, and iTunes really, really wants to store all the music in the Media folder next to the library.itl file. So much so that the default setting when you do File-> Add to Library is to copy all the files to that Media folder. It really is inexcusable of Apple to make wasteful copying the default. I use iTunes to manage the travelling music and the iPhone: those files live on the laptop because iTunes is happy that way.
There are not many free / cheap music cataloguing (1) programs for OS X, and a fair few of those come from Linux. This is what Clementine looks like:
Not as pretty as iTunes. Let alone the Top Three. And I couldn't find any setting to increase the size of those thumbnails.
So I created a second iTunes “library” using alt-Click-on-iTunes-Icon, turned off the “use up lots of valuable SSD space with duplicate copies of stuff on you NAS” option, and then File-> Added To Library. iTunes created a nice catalogue of what’s on my NAS for me. However…
iTunes seems to have limited write permissions for files on a NAS. OS X defaults to a protocol called AFP to connect to a NAS, and AFP seems to limit your ability to do even simple file management operations. Connect to the same NAS as an SMB (Samba) server and you get the permissions you need. I suspect iTunes uses the AFP protocol. So it won’t modify file metadata and album art if the file is on a NAS. Yep, this was one of those I-learned-more-than-I-ever-wanted-know exercises.
There’s a free program called Kid3 that will handle metadata editing of file on a NAS. It looks basic, but it does the business. Once you’ve edited the metadata in Kid3, you have to close Kid3 to release the files, delete the original entry in the iTunes catalogue and repeat File->Add to Library. The new metadata and album art will appear in iTunes.
However, in a fine demonstration of the utter irrationality of consumer thinking, since I've just avoided spending up to £1,000 on kit I don't need, I can treat myself to some kit I might want. Or some more CDs. Or a music subscription. Cue next post.
(1) Libraries have books. Catalogues are databases that provide details of a book and a pointer to its location in the library. What we really want is a music catalogue program, which is what the Big 3 seem to be. If you don’t want iTunes to make space-hogging copies, turn off the “copy music into the iTunes Media folder when adding to library” option. It’s hidden on the Advanced Tab in options.
When travelling I play “train music” over the iPhone through Bose QC20’s. I rarely listen to train music in the house. Train music gets downloaded into iTunes where it rotates through a playlist called ‘iPhone’, which is updated every time I plug the phone into the computer. Train music has a finite life, and I have backups of it on a NAS. That’s why I looked for a way of streaming NAS files: it was a completeness thing.
Occasionally I want some random variety in my listening. So I was interested in streaming from You Tube / 8Tracks with decent quality but without a lot of cost. That’s an added-value thing. That lead me down the rabbit-hole. And it is.
I found out that a lot of serious audiophiles have all their music ripped to a NAS and play it back through a library + music catalogue program running on a computer attached to a high-quality DAC hooked into the hi-fi amplifier. I know: you can feel a flow chart coming on. A suitable authority in this is Hans Beekhuyzen.
Summarising his excellent videos… The preferred audiophile hardware set-up is a Mac Mini - and not the cheap one - and an iDevice to run the library’s remote-control app. Audiophiles are likely to have an iDevice or two already, so this set-up is a lot cheaper than buying a MacBook Pro. (Beekhuyzen makes a good point about the volatility from time to time and market to market of the actual boards and chips used in Wintel computers of the same name. Only Apple are consistent.)
The top-end library- players are JRiver, Audirvana 3 and Roon. These have remote control apps for iDevices, and there are generic remote control apps for OS X (the Mac Mini) if you want to stream from Spotify, Tidal and other services.
All this will cost around £1,000 including the software, and more for Roon. Roon is for the 1% of music freaks. The annual subscription is £120. It looks fabulous. It has the names of all the sound engineers who worked on the record, and the names of the receptionists on duty at the studio during the recordings. If, like the Hans Beekhuyzen, you too have 500 SACDs, this is what you want, and you won't bat an eyelid at the cost.
I like music, but I'm not nerdy about it. I can recognise most major 1950's jazz musicians by ear, and identify the major composers by style within five bars, and of course my head is full of pop-culture junk from my youth, but I'm not a music nerd. I don't have four different versions of The Planets - because I have the best one, which is by Von Karajan and the Berlin Phil. I have two versions of the Bach Cello suites: Tortellier and Yo-Yo Ma. That's it. For me, the additional spending on a fancy library isn't worth it. And I need to be careful of the bottomless pit that is getting all the catalogue details right.
I have a Mac, and Apple want you to use iTunes, and iTunes really, really wants to store all the music in the Media folder next to the library.itl file. So much so that the default setting when you do File-> Add to Library is to copy all the files to that Media folder. It really is inexcusable of Apple to make wasteful copying the default. I use iTunes to manage the travelling music and the iPhone: those files live on the laptop because iTunes is happy that way.
There are not many free / cheap music cataloguing (1) programs for OS X, and a fair few of those come from Linux. This is what Clementine looks like:
Not as pretty as iTunes. Let alone the Top Three. And I couldn't find any setting to increase the size of those thumbnails.
So I created a second iTunes “library” using alt-Click-on-iTunes-Icon, turned off the “use up lots of valuable SSD space with duplicate copies of stuff on you NAS” option, and then File-> Added To Library. iTunes created a nice catalogue of what’s on my NAS for me. However…
iTunes seems to have limited write permissions for files on a NAS. OS X defaults to a protocol called AFP to connect to a NAS, and AFP seems to limit your ability to do even simple file management operations. Connect to the same NAS as an SMB (Samba) server and you get the permissions you need. I suspect iTunes uses the AFP protocol. So it won’t modify file metadata and album art if the file is on a NAS. Yep, this was one of those I-learned-more-than-I-ever-wanted-know exercises.
There’s a free program called Kid3 that will handle metadata editing of file on a NAS. It looks basic, but it does the business. Once you’ve edited the metadata in Kid3, you have to close Kid3 to release the files, delete the original entry in the iTunes catalogue and repeat File->Add to Library. The new metadata and album art will appear in iTunes.
However, in a fine demonstration of the utter irrationality of consumer thinking, since I've just avoided spending up to £1,000 on kit I don't need, I can treat myself to some kit I might want. Or some more CDs. Or a music subscription. Cue next post.
(1) Libraries have books. Catalogues are databases that provide details of a book and a pointer to its location in the library. What we really want is a music catalogue program, which is what the Big 3 seem to be. If you don’t want iTunes to make space-hogging copies, turn off the “copy music into the iTunes Media folder when adding to library” option. It’s hidden on the Advanced Tab in options.
Thursday, 27 July 2017
Streaming Near CD-Quality Internet and NAS Music for Cheapies
I have streamed music on You Tube to my hi-fi via the headphone socket of my ASUS netbook (which I have now retired) but never really liked the sound, and the ASUS was horribly slow loading You Tube pages. I started to look at various options to improve this, and then it hit me. Because, you know, I’m really smart and quick and down with modern technology.
I already have a high-quality device that will stream music from all sorts of sources. In fact I have two. The iPhone and iPad. All the streaming services have apps: Netflix, Amazon, You Tube, Google Play, Spotify, Beats, Apple Music… And there's an app called File Manager to play music stored on a NAS or a computer.
There’s only one upgrade I need, which is to put a decent DAC between the iDevice and the amplifier. The entry-level hi-fi DAC seems to be the £89 Dragonfly Black, attached via the £40 Apple Lightning Camera Adapter, which lets you power the phone and DAC from the transformer. I ordered those from Amazon, collected it from Doddle, took it home, plugged it all in, and…. instant hi-fi happiness.
As far as my slightly tired ears are concerned.
The final piece of the cheapie jigsaw is an app that streams music from a NAS or other computers. That’s File Manager Pro for iOS: the Pro upgrade gives you access to more than one device. File Manager Pro lets your iDevice access NAS and computers (it spotted my NAS, but you may need to set up others devices by IP address), and it gives you a simple Explorer interface to navigate round the files. Click the first music file in a directory and it will be cached and start playing. File Manager is smart enough to recognise that you probably want to play the other music files it can find in that directory and carries on caching and playing. Viola! NAS streaming.
You can now stream anything an iDevice can play from any computer on your network, plus music from any music streaming service that provides an iDevice app. You’re getting close-to-CD quality via the Dragonfly.
Is that it? This is where it gets embarrassing. My CD player has a USB port on the front. I’ve always thought it was for USB drives, and would be looking for files, and go off in a huff when it couldn’t find any. But hey, try anything once. I plugged in the Lightning-to-USB cable, navigated to a music folder with File Explorer and pressed play. Guess what? it works. My CD player is even better than the Dragonfly. As, to be fair, I would expect from the mid-range Marantz CD 6005. However, the Dragonfly is going to improve my listening when I’m streaming but not using the hi-fi. Like when I’m sitting in the garden. And you may not have a CD player with streaming USB input, so you should still get the Dragonfly.
For £130 if you have a recent generation smartphone, or £309 if you don't, you can stream near-CD quality music to your hi-fi from all those internet services, and you can stream any music you have on NAS or computers as well.
Yes. Almost. And certainly for less than £130, assuming you have an iDevice.
What’s missing is the library-style interface. That's for the next post.
PS: In case you have been rolling your eyes and being like "Dude, just use iTunes on your computer", here's why you're missing the point. The quality of output signal from a Mac headphone socket is not good enough: it's muffled and you will quite quickly get tired hearing it over a hi-fi. You still need the hi-fi DAC. Second, who said you had a computer? Third, even if you do, do you really want five or ten metres of USB 3 cable between you using your computer on the sofa and the DAC on a shelf? Also, that's about £60 of cable. That you are never going to use for anything else.
There are no high-quality DACs that can be streamed to from a computer over wif-if or ethernet. What does are media devices like the Apple TV or the WD TV. Take one look at the price and you know the DAC isn't going to be hi-if quality.
I know there are Internet Radios. The user interface is horrible. The upgrade path is, what upgrade path? Be serious.
I already have a high-quality device that will stream music from all sorts of sources. In fact I have two. The iPhone and iPad. All the streaming services have apps: Netflix, Amazon, You Tube, Google Play, Spotify, Beats, Apple Music… And there's an app called File Manager to play music stored on a NAS or a computer.
There’s only one upgrade I need, which is to put a decent DAC between the iDevice and the amplifier. The entry-level hi-fi DAC seems to be the £89 Dragonfly Black, attached via the £40 Apple Lightning Camera Adapter, which lets you power the phone and DAC from the transformer. I ordered those from Amazon, collected it from Doddle, took it home, plugged it all in, and…. instant hi-fi happiness.
As far as my slightly tired ears are concerned.
The final piece of the cheapie jigsaw is an app that streams music from a NAS or other computers. That’s File Manager Pro for iOS: the Pro upgrade gives you access to more than one device. File Manager Pro lets your iDevice access NAS and computers (it spotted my NAS, but you may need to set up others devices by IP address), and it gives you a simple Explorer interface to navigate round the files. Click the first music file in a directory and it will be cached and start playing. File Manager is smart enough to recognise that you probably want to play the other music files it can find in that directory and carries on caching and playing. Viola! NAS streaming.
You can now stream anything an iDevice can play from any computer on your network, plus music from any music streaming service that provides an iDevice app. You’re getting close-to-CD quality via the Dragonfly.
Is that it? This is where it gets embarrassing. My CD player has a USB port on the front. I’ve always thought it was for USB drives, and would be looking for files, and go off in a huff when it couldn’t find any. But hey, try anything once. I plugged in the Lightning-to-USB cable, navigated to a music folder with File Explorer and pressed play. Guess what? it works. My CD player is even better than the Dragonfly. As, to be fair, I would expect from the mid-range Marantz CD 6005. However, the Dragonfly is going to improve my listening when I’m streaming but not using the hi-fi. Like when I’m sitting in the garden. And you may not have a CD player with streaming USB input, so you should still get the Dragonfly.
For £130 if you have a recent generation smartphone, or £309 if you don't, you can stream near-CD quality music to your hi-fi from all those internet services, and you can stream any music you have on NAS or computers as well.
Yes. Almost. And certainly for less than £130, assuming you have an iDevice.
What’s missing is the library-style interface. That's for the next post.
PS: In case you have been rolling your eyes and being like "Dude, just use iTunes on your computer", here's why you're missing the point. The quality of output signal from a Mac headphone socket is not good enough: it's muffled and you will quite quickly get tired hearing it over a hi-fi. You still need the hi-fi DAC. Second, who said you had a computer? Third, even if you do, do you really want five or ten metres of USB 3 cable between you using your computer on the sofa and the DAC on a shelf? Also, that's about £60 of cable. That you are never going to use for anything else.
There are no high-quality DACs that can be streamed to from a computer over wif-if or ethernet. What does are media devices like the Apple TV or the WD TV. Take one look at the price and you know the DAC isn't going to be hi-if quality.
I know there are Internet Radios. The user interface is horrible. The upgrade path is, what upgrade path? Be serious.
Monday, 24 July 2017
Revising My Computer Security
A few weeks ago one of our in-house digital security people gave a presentation. He was not singing the usual tunes and had some interesting things to say, so I looked again at my security and privacy arrangements.
The public discussion about privacy is about keeping the prying eyes of the government and advertisers away from what you're up to. That's because no-one wants to say that the privacy you really need is from your wife, children, extended family, friends, and housemates. That doesn't sound sharey-carey-trusting-loving, but until the day the last person who likes to embarrass their mates is swinging from a tree, we're going to need that privacy.
I'm a single-occupancy household, so I don't need to lock my computers against my fellow trusted dwellers. On the other hand, I take two devices, the phone and the iPad, out with me most days, so those should have security enabled.
Also, I should do my bit to maintain herd immunity. Herd immunity happens when a high enough proportion of a group of animals has immunity from a disease that it can't spread. Maintaining herd immunity is why mothers who refuse to get MMR jabs for their darling ones are not exercising personal choice, but being irresponsible. If the word goes round the amateur villain chat boards that they have to steal twenty phones to find one that has no security and can be exploited, they will decide the odds aren't worth it.
For a long time I didn't do my part. There was nothing on any device I took out of the house that could be used to steal from me. Then along came PayPal, banking apps, Apple Pay and password managers.
I lock my work laptop every time I step away from my desk, and that's in a reasonably secure corporate environment. However, that's what my employer insists I do, and there are folk whose job it is to wander around spotting unlocked, unattended computers: it's part of my job, and I'm being paid to do it.
But then, I don't mind being locked out of my work thoughts. I do mind about being locked out of my personal thoughts. If that makes sense.
Anyway, as a result of the guru's advice, I made a few changes.
Apparently, advertisers put all sorts of tracking gizmos and other crapware on our machines. Some of it for people who have postcodes in Kaliningrad. I want to avoid that, so I put Adblock Plus on both my iOS devices, which improved the browsing experience as well. I have it on all my laptop browsers already.
I put my serious passwords into LastPass and have that on the devices I use to run my life. Caveat: LastPass doesn't sign you out after N minutes of inactivity. Signing out is manual. This is a mistake on their part. If you don't sign out, anyone who can get into your phone has access to the password manager that's still open because you forgot to sign out. As soon as you put a password manager on a device, you must activate the physical access security on that device. And sign out of the password manager anyway.
So I trained my phone to recognise my thumbprint, giving me a HTF (Do They Do That) moment. Folklore says it can tell if the Mafia cut off your finger and are using that. I'd like to know how that's done.
The guru has F-Secure on his phone. I met Mikko Hypponen, on a flight to Helsinki back in the day. He's a great ambassador for his company, but I still don't like active scanners. I use the default Windows Defender and the default Windows or OS X firewalls. I don't run McAffee, Norton or F-Secure. On iOS there's no point because of the way iOS sandboxes apps. On Windows or OS X, scanners are an operational overhead with little benefit. I read somewhere that the pros don't do use any. Instead they practice safe computing:
Just because I've cleared the cache or deleted the file, doesn't mean it's gone. Deleting is one thing, shredding is another. Here's the thing: file shredding and free / slack space wiping works on conventional hard drives (HDDs) but is iffy, if not discouraged on modern SSDs. It's not even clear what 'secure delete' in means on an SSD. There are encrypted drives that use a key which gets wiped, and unless the NSA or the Chinese are after you, guessing at the key is going to be computationally unfeasible. Most SSDs are not encrypted.
If you want to store large amounts of personal or private data, do it on a conventional hard drive. The you can shred-and-wipe, and it's gone. As soon as an SSD gets involved, you can't be sure the data won't still be there.
On Windows I use CC Cleaner to shred files in the Wastebin after deletion. Every now and then, I over-write the spare space on the drive as well. A three-pass wipe will do fine. The disk recovery people can work wonders with a physically damaged drive. The stuff they have works at bit-level. If you have, however, written random bits all over the drive, all they will get back are random bits. And no, on a modern 2.5-inch multi-gigabyte drive, all those tricks invented in the 1980's don't work.
My work laptop encrypts my Documents folder, but leaves the rest alone, which is sensible. On my personal computers, I'm not so sure. I might forget the password.
Encrypted files on personal computers are a red rag to anyone who wants to pick a fight. Encrypted files will be assumed to be the worst thing the person finding them wants them to be. Why else you you encrypt the stuff if it wasn't stolen company data / classified government documents / illegally-downloaded movies / whatever. Anyway, unless you are a journalist, very rich or have high-profile lawyers, you can be compelled to de-crypt it all by US Immigration, the Police, an Anton Pillar order, your wife, anyone with a gun... you get the idea.
(It occurs to me that the most secure personal laptop is one of those Lenovos or Dells that only corporates buy, dressed up with a corporate logon and two layers of passwords. Create at least two other user profiles and fill them with encrypted junk, suggesting that you are the third person to be using this computer. Make sure none of the software is within two releases of the latest version. Put on an old VT terminal emulator, McAffee, and make IE9 the default browser. Add a sticky label declaring that the Asset ID is BG788453TD, remove one of the keys (say Z) on the keyboard, and everybody will assume you work for a large financial services company and this is your work computer.)
While we're talking about encryptions, the guru suggested using Signal to communicate, or WhatsApp, which uses the Signal protocols. Use any end-to-end encrypted communication, as long as it is well-known. The quickest way to get GCHQ interested in you is to use fancy e-mail encryption, or a program known only to people who have attended Black Hat more than twice. I have WhatsApp, use the regular message app on the iPhone, and have a totally boring life.
All this stuff is free, by the way.
The public discussion about privacy is about keeping the prying eyes of the government and advertisers away from what you're up to. That's because no-one wants to say that the privacy you really need is from your wife, children, extended family, friends, and housemates. That doesn't sound sharey-carey-trusting-loving, but until the day the last person who likes to embarrass their mates is swinging from a tree, we're going to need that privacy.
I'm a single-occupancy household, so I don't need to lock my computers against my fellow trusted dwellers. On the other hand, I take two devices, the phone and the iPad, out with me most days, so those should have security enabled.
Also, I should do my bit to maintain herd immunity. Herd immunity happens when a high enough proportion of a group of animals has immunity from a disease that it can't spread. Maintaining herd immunity is why mothers who refuse to get MMR jabs for their darling ones are not exercising personal choice, but being irresponsible. If the word goes round the amateur villain chat boards that they have to steal twenty phones to find one that has no security and can be exploited, they will decide the odds aren't worth it.
For a long time I didn't do my part. There was nothing on any device I took out of the house that could be used to steal from me. Then along came PayPal, banking apps, Apple Pay and password managers.
I lock my work laptop every time I step away from my desk, and that's in a reasonably secure corporate environment. However, that's what my employer insists I do, and there are folk whose job it is to wander around spotting unlocked, unattended computers: it's part of my job, and I'm being paid to do it.
But then, I don't mind being locked out of my work thoughts. I do mind about being locked out of my personal thoughts. If that makes sense.
Anyway, as a result of the guru's advice, I made a few changes.
Apparently, advertisers put all sorts of tracking gizmos and other crapware on our machines. Some of it for people who have postcodes in Kaliningrad. I want to avoid that, so I put Adblock Plus on both my iOS devices, which improved the browsing experience as well. I have it on all my laptop browsers already.
I put my serious passwords into LastPass and have that on the devices I use to run my life. Caveat: LastPass doesn't sign you out after N minutes of inactivity. Signing out is manual. This is a mistake on their part. If you don't sign out, anyone who can get into your phone has access to the password manager that's still open because you forgot to sign out. As soon as you put a password manager on a device, you must activate the physical access security on that device. And sign out of the password manager anyway.
So I trained my phone to recognise my thumbprint, giving me a HTF (Do They Do That) moment. Folklore says it can tell if the Mafia cut off your finger and are using that. I'd like to know how that's done.
The guru has F-Secure on his phone. I met Mikko Hypponen, on a flight to Helsinki back in the day. He's a great ambassador for his company, but I still don't like active scanners. I use the default Windows Defender and the default Windows or OS X firewalls. I don't run McAffee, Norton or F-Secure. On iOS there's no point because of the way iOS sandboxes apps. On Windows or OS X, scanners are an operational overhead with little benefit. I read somewhere that the pros don't do use any. Instead they practice safe computing:
Don't visit dodgy websites, ignore any website that tells you your computer has viruses or your files are corrupt, and anybody who wants your passwords. Don't open e-mails from people or companies you don't know, and only download from the original supplier. Here I will tell you nothing have to do on sites which English not best used.I clean out browsing history, caches and other stuff with CC Cleaner on Windows, and Clean My Mac for OS X. Cache cleaners for iOS are still lacking in functionality.
Just because I've cleared the cache or deleted the file, doesn't mean it's gone. Deleting is one thing, shredding is another. Here's the thing: file shredding and free / slack space wiping works on conventional hard drives (HDDs) but is iffy, if not discouraged on modern SSDs. It's not even clear what 'secure delete' in means on an SSD. There are encrypted drives that use a key which gets wiped, and unless the NSA or the Chinese are after you, guessing at the key is going to be computationally unfeasible. Most SSDs are not encrypted.
If you want to store large amounts of personal or private data, do it on a conventional hard drive. The you can shred-and-wipe, and it's gone. As soon as an SSD gets involved, you can't be sure the data won't still be there.
On Windows I use CC Cleaner to shred files in the Wastebin after deletion. Every now and then, I over-write the spare space on the drive as well. A three-pass wipe will do fine. The disk recovery people can work wonders with a physically damaged drive. The stuff they have works at bit-level. If you have, however, written random bits all over the drive, all they will get back are random bits. And no, on a modern 2.5-inch multi-gigabyte drive, all those tricks invented in the 1980's don't work.
My work laptop encrypts my Documents folder, but leaves the rest alone, which is sensible. On my personal computers, I'm not so sure. I might forget the password.
Encrypted files on personal computers are a red rag to anyone who wants to pick a fight. Encrypted files will be assumed to be the worst thing the person finding them wants them to be. Why else you you encrypt the stuff if it wasn't stolen company data / classified government documents / illegally-downloaded movies / whatever. Anyway, unless you are a journalist, very rich or have high-profile lawyers, you can be compelled to de-crypt it all by US Immigration, the Police, an Anton Pillar order, your wife, anyone with a gun... you get the idea.
(It occurs to me that the most secure personal laptop is one of those Lenovos or Dells that only corporates buy, dressed up with a corporate logon and two layers of passwords. Create at least two other user profiles and fill them with encrypted junk, suggesting that you are the third person to be using this computer. Make sure none of the software is within two releases of the latest version. Put on an old VT terminal emulator, McAffee, and make IE9 the default browser. Add a sticky label declaring that the Asset ID is BG788453TD, remove one of the keys (say Z) on the keyboard, and everybody will assume you work for a large financial services company and this is your work computer.)
While we're talking about encryptions, the guru suggested using Signal to communicate, or WhatsApp, which uses the Signal protocols. Use any end-to-end encrypted communication, as long as it is well-known. The quickest way to get GCHQ interested in you is to use fancy e-mail encryption, or a program known only to people who have attended Black Hat more than twice. I have WhatsApp, use the regular message app on the iPhone, and have a totally boring life.
All this stuff is free, by the way.
Thursday, 20 July 2017
Sticky Whimsy
These were on the seats on my station one morning in June 2014. People don't do things like that anymore.
How am I doing in my relentless drive to avoid anything political? Not too bad? I feel I'm about half-way through the detox. The longer essays on various but non-political subjects will return.
Monday, 17 July 2017
Never You Done That and Other Songs by Dave Wakling
Dave Wakling was the man behind many of the best songs of The Beat and General Public. He is, in my not-so-humble-opinion, one of the finest songwriters this Isle of Fine Songwriters has produced. Why he has not been inducted into Rock ’n Roll Halls of Fame is something that cries out for explanation.
I was listening to The Beat’s second album, Special Beat Service, recently, and as always was surprised and enchanted by this track:
The lyrics are wonderfully ambiguous. "She said to leave it till the end of the party / Do it now, you know there's never a next time / How come the feeling that it's only just started / Pull back your cover, I could love you for all time / But do it now, you know there's never a next time". Which exactly gets the ambiguity of what I and many others felt, back then in the Naughty Eighties, when meeting someone at a party for the first time and experiencing that immediate attraction. No-one else gets this the way he does.
He is the author of the best single lyric I know: “Each time we kiss you’re the perfect stranger”. You either know exactly what that means, or you won’t understand the explanation. Here’s the song.
This is about the perfect love. “Well who would have guessed, well I guess I should / The second night would be as good”. There are a zillion writers who tell us that sex gets better with intimacy and familiarity, and I have to say that was never my experience. The first night was always the best. Other nights may have many good and different moments, but a good first time is a moment unto itself. And Dave Wakling was the only songwriter (I’ve heard) who has spoken about this.
But maybe, as a commentator at a lyric site suggested, the song was about booze. (Drugs are never as good the second time, I am reliably informed. Booze can be. Each time I sipped a glass of Jack Daniels, it was the perfect stranger.) There’s nothing in Wakling’s biography to suggest he had a drinking problem. But even if he wrote it as a love-song to a woman, maybe my inner drunk heard it as a song about drinking?
In the end, do I care? These and others are wonderful songs, like no other written by anyone else. If you haven’t heard his stuff, go listen.
I was listening to The Beat’s second album, Special Beat Service, recently, and as always was surprised and enchanted by this track:
The lyrics are wonderfully ambiguous. "She said to leave it till the end of the party / Do it now, you know there's never a next time / How come the feeling that it's only just started / Pull back your cover, I could love you for all time / But do it now, you know there's never a next time". Which exactly gets the ambiguity of what I and many others felt, back then in the Naughty Eighties, when meeting someone at a party for the first time and experiencing that immediate attraction. No-one else gets this the way he does.
He is the author of the best single lyric I know: “Each time we kiss you’re the perfect stranger”. You either know exactly what that means, or you won’t understand the explanation. Here’s the song.
This is about the perfect love. “Well who would have guessed, well I guess I should / The second night would be as good”. There are a zillion writers who tell us that sex gets better with intimacy and familiarity, and I have to say that was never my experience. The first night was always the best. Other nights may have many good and different moments, but a good first time is a moment unto itself. And Dave Wakling was the only songwriter (I’ve heard) who has spoken about this.
But maybe, as a commentator at a lyric site suggested, the song was about booze. (Drugs are never as good the second time, I am reliably informed. Booze can be. Each time I sipped a glass of Jack Daniels, it was the perfect stranger.) There’s nothing in Wakling’s biography to suggest he had a drinking problem. But even if he wrote it as a love-song to a woman, maybe my inner drunk heard it as a song about drinking?
In the end, do I care? These and others are wonderful songs, like no other written by anyone else. If you haven’t heard his stuff, go listen.
Subscribe to:
Posts (Atom)