Search This Blog

Wednesday, August 12, 2020

use target="_blank" rel="noopener noreferrer" to prevent fraud and page hijacking

When searching Google, you're presented with results that seemingly has direct links.   You see them by mousing over the links and the true url is displayed in the browser's status bar:



For all hyperlinks, Google inserts a click and onmousedown event in order for the href hyperlink address to quickly change to their /url data collector link.  This tallies the number of advertising clicks and you can understand how /url is Google's most valued, ahem, url.

Note that there are readily available browser plugins which cripple google's url bait-and-switch events in order to circumvent tracking.  These plugins make google work more like the DuckDuckGo.com engine which doesn't track you near as much.

Speaking of url links, when you click one, search engines do not employ a target="_blank" to open a new windows (or tab).  You have to right-click->open in new tab if you want that to happen.   Normally the search engine page politely goes away and is replaced with your destination website like how normal links work since day one.

However, if your browser was to open up a new tab with the use of the target="_blank" function, then that new page could certainly be capable of hijacking the previous page.  The new page can run javascript to cause it's parent page's location to go somewhere else like a phishing site.  This is because the default permission is to allow for a new windows/tabs to have control of it's parent window/tabs.  Image if a rogue site silently replaced your parent page with a look-a-like scam page?  So, to protect us normal citizens,  browsers employed the new "noopener" parameter.

The noopener keyword for the rel attribute of the <a>, <area>, and <form> elements instructs the browser to navigate to the target resource without granting the new browsing context access to the document that opened it — by not setting the Window.opener property on the opened window (it returns null).

There is a nice write up on why you need to use "noopener noreferrer" IMMEDIATELY on all your external links: https://www.reliablesoft.net/noreferrer-noopener/

Monday, June 15, 2020

Uninstall VMWare Player

Uninstall
C:\ProgramData\VMware\VMware Player\Uninstaller\bootstrap.lua  

or

C:\ProgramData\VMware\VMware Workstation\Uninstaller\bootstrap.lua   

using a text editor and comment out line

CheckForMSHyperV()  

with two dashes, so it will become

--CheckForMSHyperV()  

Friday, March 27, 2020

Generac Generator - Insulation Falling Down - FIX

The other day I noticed the heat insulation had soaked up moisture and came partially unglued from the roof of the generator.

After squeezing out the water the glue was fortunately still tacky and stuck it back to the roof.  I ordered some 23.6-44.5 inch curtain rods from ebay.   This should keep the insulation buttoned up for cheap!

Tuesday, March 24, 2020

Tuesday, February 11, 2020

New Windows Computer - Ulcer

Spiny wheel. Thanks for your patience.
Spiny wheel. We're still working.
Spiny wheel. Please don't turn off your device.
Spiny wheel. Still setting things up.

repeat.... repeat.... repeat.... repeat.... repeat.... repeat....
repeat.... repeat.... repeat.... repeat.... repeat.... repeat....
repeat.... repeat........................

OK, we got through this part of setup...... Now let's see what's new
from Windows.

wait... wait... wait..... finally it's done.

So, the out-of-box experience is fine for most new systems but this
particular one just took a while.  Microsoft, I don't mind it doing what
it needs to do, but some status info showing real progress would help
people's nerves worldwide.

Wednesday, June 26, 2019

Windows Defender and Thunderbird

Because Windows Defender bogs down Thunderbird for no good reason, you can to disable real-time protection temporarily to get back to work:

1. Click Windows button and type 'Windows Defender settings'
2. Click on the Defender Security  Center
3. Click on Virus & threat protection
4. Click on Virus & threat protection settings

...correct! they didn't make the organization of Widows Defender intuitively easy did they?!

5. Turn Real-time protection off





You can add your Thunderbird profile directory into the "Add or remove exclusions" list and this should let you turn Real-time protection back on.

Microsoft, fix this!

Friday, June 7, 2019

Braun Mechanic light plastic crack

Tilting the light bar of Harbor Freight's Braun 390 lumen magnetic led work light (Part # 63958) can cause the plastic to fracture at it's base.   Therefore use the base, not the end of the light, to tilt the light bar.  

In this image, I used two zip ties to strengthen the plastic base.   The manufacturer needs to make this metal.

Update: 3d printing a tight fitted sleeve part is another way to go.  PLA plastic is some hard stuff.

Thursday, April 4, 2019

Thunderbird Unresponsive script

This is not a howto fix but a gripe.    When moving large amounts of emails within Thunderbird, you'll frequently get this popup:



Of course, you want to click Continue so it completes but you'll also also want to see future LEGIT warnings too.  Mozilla folks should look into not displaying fake "unresponsive script" messages when the program is indeed actively moving the emails just fine.   This is too unnerving and a bug!

Wednesday, March 13, 2019

Check Your Vendor's TLS Certificate Expiration Dates

If you run a business that takes credit cards, then it's a pretty cool day when your credit card processor lets their SSL/TLS certificates expire.  Not only did they let this happen on one of their domains, it happened again on another important one.



Remember the day when you ran a business without needing to be dependent on this many variables?

Wednesday, March 6, 2019

The referenced assembly is not installed on your system

Press the WINDOWSKEY + R
It should give you a run box.
paste this into the field and click OK

%userprofile%\Appdata\Local\Apps\2.0

Browse into these folders and if all the files you see pertain to the
program you're having trouble with, then just delete all the folders
within the 2.0 directory.   Your program should then work.