Security of the mind

 Security is a very dynamic sort of thing quite often.  It changes a lot over time, but it also often stays the same in many ways.  For the average user out there, they only have the know-how to rely on the OS for all potential security threats.  We all have experience using the internet every single day, but some don't utilize the best security tool on earth...  your own sound judgment. But sound judgment often derives from experience.  From experience comes confidence, and from confidence comes a sound mind.  Confidence should never be cocky though, because that will get you into trouble eventually.

When you consider that Apple hasn't offered a security update for a PowerPC OS since 2009...  we really are on our own with OS X.  But that's okay, because we the users dictate how secure we are through our own habits online.  And I am guilty myself of not having the confidence in some to be their own best security in my past writing here.  I don't know if that ever hurt anyone's confidence back then, but I certainly didn't help it either.  This changes now to a personal policy of encouraging confidence once people are put on the right path.  I'm going to instill confidence rather than fear. 

We notice things much easier when of a calm mind, and awareness is very important with security.  

So the point here is don't allow the lack of security updates on OS X to ever stop you from using it online.  Look no further than TenFourFox for modern web compatibility and security.  We really owe so much to Cameron Kaiser, because he alone has kept Mac OS PowerPC a viable internet platform.  So let's give him the respect he deserves.

I have been away from PowerPC Linux for a few years now, and need to re familiarize myself with it again, so for the next few months at least, my writing will be Mac OS related, and to me that's a great place to start after a two year hiatus here.

So for the next few months I will be doing a series of writings on OS X PowerPC security in 2020/2021, and how to best protect yourself.  To instill in you what I have to offer in me to keep yourself safe on operating systems that are 11+ years old now.  Only now instead of a Sawtooth, I'm using a G4 mini that dual boots Tiger and Leopard.

You're all going to have hardened ceramic armour shells when I'm done with you!  I hope you all can deal with that! 

WebDAV and Goliath

It's been a few years now since Dropbox ceased support for PowerPC and although there was a community workaround that worked for a while, that too fell by the wayside with ongoing developments at Dropbox.

Folder syncing has never been a specific requirement for myself but having convenient access to a central repository across various machines is always useful - for this I use the WebDAV protocol supported by various online storage providers either via Finder in OSX or with the excellent WebDAV client, Goliath (which I personally find delivers faster file transfers.)

So, after signing up to an online storage provider - one that includes WebDAV access - in OSX Finder go to Go/Connect to Server (or press CMD+k) and enter the provider's WebDAV URL and press Connect. Enter your username and password in the next dialogue and tick box to remember password.

All being well, the remote server will be mounted onto the Desktop and be available to all standard file operations just like any attached storage. For convenience, I make an alias of the mounted drive, move it to Documents and drag to the dock to provide instant access in future.
Note - to prevent .DS_Store files cluttering up your remote drive with this method, run the following in Terminal:

defaults write com.apple.desktopservices DSDontWriteNetworkStores true

The procedure is similar when using Goliath - making a new connection, enter URL, username and password and once connected, go File/Save Connection As to save a WebDAV bookmark that can be launched from the dock if desired.

Of course, the advantage of Goliath is that it's available for OS9 too - it's quite remarkable at this late stage to still have the convenience of online connected storage on such an old OS.

In addition, all these online storage providers have a web interface accessible from anywhere and usually have purpose built mobile apps for Android and iOS - in addition, there's always mobile WebDAV clients too - even my beleaguered Windows Phone 10 powered Lumia 930 can get in on the action with it's WebDAV equipped Total Commander file manager!

WebDAV access is a refreshing change in these twilight days of PowerPC - an online service that spans legacy systems and doesn't tax the CPU in any way.

For those wishing for a more Dropbox like folder syncing facility, with a compatible provider, rsync can be utilised for effective backups but for now WebDAV suits me fine.

These are a few WebDAV compatible providers but there will be more - if anyone has any suggestions please ad in the comments:

Adrive

4Shared

SwissDisk

User Agents And The Art Of Online Camouflage

The user agent is a digital calling card presented by a web browser when it visits a website, identifying it and telling the website what content is best served to that particular web browser - the simplest example being the web browser on a mobile device will receive content more proportionally formatted for a smaller, portrait screen whereas when viewed from a laptop or desktop, the web browser will deliver the fully featured site.
This user agent can also inform the web site what features it should deploy - an old browser will perhaps be incapable of rendering certain content, so that content can be effectively cut out.

This all becomes relevant, especially to us PowerPC users, when it's possible to present an alternative user agent from the one your web browser natively employs - preferably to lessen CPU load and rendering times.

This has been a feature for a while with standard browser options or add-ons that facilitate selecting different user agents but what I shall discuss in this post is site specific user agents ie user agents that present themselves on a site by site basis automatically as you browse.

This legacy feature is present in the PPC spins of ArcticFox and IceWeasel but wasn't present in TenFourFox (which I'll utilise here) until I asked the developer to reintroduce it which he very generously did.

In the TenFourFox preferences, I leave the user agent at it's default setting and add site specific user agents with TextWrangler editing the TenFourFox prefs.js file that resides in

~/Library/Application Support/Firefox/Profiles/go96ey5b.default

the last part of that location string may look different on your machine but will always terminate with .default.

This is an example string added to prefs.js:

user_pref("general.useragent.override.youtube.com", "NokiaN90-1/3.0545.5.1 Series60/2.8 Profile/MIDP-2.0 Configuration/CLDC-1.1");

In this instance, browsing to any youtube.com address will invoke the Nokia N90 user agent automatically - presenting a less busy page, free of Youtube's normal CPU hungry "features" and allowing access to the video in 3gp format (more of this in a future post.)

This process is repeated for all the sites you wish to include - a laborious task admittedly but one you'll only have to do once.

User agents can be copied from online sources or you can even use those included within TenFourFox as standard - select one in preferences, then navigate to whatsmyua and copy/paste the string.

Another method for adding site specific user agents is from within the browser itself - navigate to about:config and right click to add a new string. As per the example above, general.useragent.override.youtube.com is added as the preference name, then NokiaN90-1/3.0545.5.1 Series60/2.8 Profile/MIDP-2.0 Configuration/CLDC-1.1 is added as the string value.

Generally, I will use either the oldest browser I can reasonably get away with or a Nokia mobile user agent for sites where I don't need all the CPU sapping bells and whistles - not only does this show mercy to your ageing PPC Mac but also loads pages quicker and in some cases is refreshingly distraction free.

Some example screens of TenFourFox pretending to be otherwise....

Drones beware!

 After a two year hiatus, myself and fiftysixk are returning the blog to an active state.  And we hope the other authors will join us.  

 To help liven things up a bit around here, we have brought in the Dronecatcher himself from the MacRumors PowerPC forum.  That's right...  the guy who can make web video play on a toaster has joined the PowerPC Liberation fold, and I for one am thrilled to have him!  Welcome, Wayne!

I've been thinking of a few different ideas for new content, as I just tricked out my G4 mini.  Stay tuned for something to do with that in the near future.

 If any readers have any ideas for new content, then please share them in the comments.

A hopeful real return

It has been quite a while, over two years to more precise. I hope every one is well and healthy, especially during these trying times.

I have moved into a development position at my employer. My on the job focus revolves around ASP.net, C# and querying Microsoft SQL databases. This has been a wonderful opportunity to learn and self teach. I now have enough experience and theory to branch out to other languages. My goal is to pursue Python, Swift, Objective-C and C++. I have a "27inch iMac" and a 2015 MacBook Air for pursuing Swift. I have set up a 17 inch PowerBook G4 for Python, Objective-C and C++ development. I have no idea what software I would like to build yet. I have time to figure that out, there is plenty of learning to do first. I still have several PowerPC Macs besides the 17 inch PowerBook G4 mentioned earlier.

I will share the journey here. I have documented my current process I go through when setting up a Tiger or Leopard install. You can find them at my git repository. Any software I create will also be hosted there.

I know it has been a while. It is good to be back with all of you. Take care!

Debian PPC Status Update

Earlier this month, the migration of the Debian PPC port from Debian's main archive to the Debian ports archive was completed. The DSAs' shut down of the powerpc buildds on the main archive was a result of the PPC port no longer being a release architecture. With this change, also comes the need to update one's sources.list file. Also keep in mind that if you want to continue running Debian on your PPC hardware and have the latest updates and security fixes, you'll need to be running unstable (a.k.a Sid) on your systems. As frightening as that sounds, running unstable has actually been pretty stable for me since I made the move around 7 months ago.

However, before making the switch, you'll want to install the Debian Ports archive keyring package first, otherwise you'll receive errors about missing public keys for the Debian Ports mirrors (such as ftp.ports.debian.org) when attempting to run apt update. In a small and condensed nutshell, this package provides the public keys needed to verify the signatures on the packages available from the Debian ports mirrors that are digitally signed with the corresponding private keys. See here for a bit more information on Debian's keyrings. To install, run the following:

apt install debian-ports-archive-keyring

Here is what I currently have in my /etc/apt/sources.list file. Feel free to use this as a solid starting point and adapt from there to best fit your needs. Also bear in mind that changes to this file requires sudo privileges.

# Binary Default
deb http://ftp.ports.debian.org/debian-ports/ unstable main 
deb http://ftp.ports.debian.org/debian-ports/ unreleased main 

# Package Source deb-src http://ftp.debian.org/debian/ unstable main

# Non-free firmware deb [arch=all] http://ftp.debian.org/debian/ unstable main contrib non-free

The first two lines provide access to the PPC or PPC64 Debian package binaries (with what few PPC64 binaries exist) for both unstable and unreleased. The package source section allows me to still download a package's source so I could tweak, build and/or install from scratch. Lastly, the non-free firmware entry allows me to still search and download packages from Debian's main archives that are compatible with all architectures (for example: linux-firmware-nonfree). This is especially useful for downloading Nvidia and AMD/Radeon firmware for your graphics card.

For more possible sources.list configurations for your PPC machines, see this mailing list post from John Paul Glaubitz who is basically spearheading a large part of this effort by himself. You have more options to choose from than what I've chosen to include in my own sources.list.

Again, thankfully him and others are willing to keep the port alive for the Debian distribution via the Debian Ports project. Although the chances of PPC ever being re-introduced as a first class release architecture are slim to none, I'm encouraged by the fact that we can still run the latest and greatest with a majority of the packages that are available for Debian.

Of course, there are an infinite numbers of ways you can help contribute to the Debian Ports project including:

• Simply installing and running Debian on your PPC and PPC64 machines
• Submitting bug reports
• Being active on the Debian PPC as well as other Debian ports mailing lists
• Submitting patches for any PPC and PPC64 bugs
• Hosting another mirror for the Debian Ports project

One of the major projects for the PPC and PPC64 ports is migrating the architectures away from the no longer maintained Yaboot (last updated in 2011!) bootloader over to Grub. Any help you can provide in this regard would be much appreciated. If you need the latest installer ISO for PPC or PPC64, you can find those here.

Are you still using Debian on your PPC or PPC64 machines? It's not too late to continue doing so or get started. While you're at it, load up Debian on machines running other architectures such as m68k, hppa, etc. Let's keep this port and others alive for the foreseeable future. I'm sure we're to learn a thing or two along the way.