#35: Do you really need a VPN?

 

Before widespread internet access, companies would use modems and dial-up services so remote workers could access their internal network as normal, but connecting (slowly) over a phone line. As mobility and broadband became more pervasive, Virtual Private Networks (VPNs) provided a way of accessing data that is held within your place of work – or home, perhaps – when you’re out on the road, establishing an end-to-end secure link over the internet between you and the destination.

At the same time, many of the services we’d rely on moved fully online – like email, shared documents or even business applications, potentially hosted by a 3rd party like Salesforce, Dropbox, Workday or Microsoft. Each of those would be protected using an encrypted and authenticated SSL/TLS connection, just like any other secure website connection.

What do you still have in your home or in your business premises, which you’d need a VPN to access? For organisations with local services or apps, Microsoft has long championed an automatic VPN back to your company HQ, called DirectAccess, but that is now having the sun set on it in favour of a more modern Always On VPN. Many businesses now are all in the cloud, so have nothing internally to connect to – but even as a home user, there may be some relevance.

Securing the connection

When you link using a VPN, everything between you and the endpoint is encrypted through an established “tunnel”, and therefore invisible to the intervening points on the network.

clip_image003

The invisibility of what’s happening in the tunnel could be useful to the user, for example where there’s a policy denying access to certain websites; if you VPN (and that was allowed) then the network owner wouldn’t know what you were sending up and down the connection since it’s encrypted, and therefore might not be able to block your access.

The VPN model illustrated above has all your internet traffic going back to the VPN endpoint and then out onto the internet from there (so it looks to the website you’re accessing like you’re located wherever the VPN endpoint is). There’s generally a performance penalty in doing this since there are additional “hops” involved, and it also means that whatever you’re getting up to on the public internet will be happening through your company’s firewall or your own home router.

Some VPNs give you the option to split traffic, where it routes only certain data down the VPN tunnel, while everything else just goes out onto the internet from the hotel/airport etc network as usual. That reduces the load on the VPN endpoint and its network (since casual browsing traffic isn’t coming in and out, only stuff destined for the internal network it is attached to), and is a bit quicker for the user since they just get their public internet stuff done nearby.

Some companies – mostly VPN vendors or security consultancies, it must be said – would advise that every time you connect your laptop to a public WiFi network (as found in coffee shops, airports, hotels etc), then woe betide you if you don’t access everything through their subscription VPN service. Such services would say you should routinely connect to their endpoint (in whichever country you want) so that everything between you and their server is encrypted, and the local network provider to you has no clue what you’re doing.

NordVPN, probably the market leader for 3rd party services, pushes itself heavily through advertising and tie-ups with leading podcasts and credit card companies, etc.

Securing the connection is one thing, however there’s still the small matter of being tracked in everything you do, potentially having unwanted software downloaded, which a 3rd party VPN might not protect you from, so it’s no silver bullet.

If you don’t use a VPN and you’re accessing a shopping site or online banking, the network provider (eg the Hotel or airport) could see which URL you’re accessing, but since the first thing you’ll do in nearly every browser session is to establish a secure connection between your computer and their website, any prying networking provider would only see that you’re sending gobbledygook data back to a single address out there on the net.

clip_image005

There is a possibility of having a man-in-the-middle attack which steals your data through subterfuge, though there are numerous steps taken to prevent this. If you’re using a VPN then you’re protected, unless you’re unwittingly VPNed into the man in the middle directly, in which case, the whole game’s a bogey.

Pretending to be somewhere you’re not

Some VPN users will use them to appear that they are somewhere else – eg if you’re travelling but want to access a web service which is locked to a given region, like TV streaming services. Lots of Brits in America use VPNs to access the BBC’s iPlayer, for example. There is a “yes, I have a TV license” checkbox, but we all know how effective those kind of prompts are.

Since the traffic from the VPN device or service appears to be from whatever country it’s in, that might be used to circumvent geographic blockers. Streaming companies often have legitimate reasons to restrict access based on where you are (as opposed to just being greedy and horrible).

Since some VPNs are offering ways to not only defeat the geo-blocking, but potentially provide a way around password sharing restrictions, the arms race will continue where content providers will try to stop people using certain services and VPN services will get smarter at not being blocked.

Further reading

If you’re on the road and want to access stuff back in your home, your broadband router might even have a VPN service built in (though do take care that it’s not using out of date security standards). Another option could be to set up an endpoint with OpenVPN. If you have Synology NAS appliance (and they are very good), you can enable the OpenVPN service relatively easilysee here.

Some other things to check out:

· Should You Use a VPN? – Consumer Reports

· Do I Really Need a VPN at Home? | PCMag

· Is a VPN really worth it? | Tom’s Guide (tomsguide.com)

So, back to the original question – do you really need a VPN?

Probably not. But maybe.

You be the judge.

#24: Googly Embalmer

clip_image002

Late last century, when the big tech firms of the day were often led by sometimes spiky characters (McNeally, Gates, Ellison etc), one such luminary famously wrote about the two helmsmen of Microsoft’s push into corporate computing. Ray Noorda, erstwhile CEO of PC networking pioneer Novell famously referred to Bill and Steve as “the Pearly Gates and the Emballmer: one promises you heaven, the other prepares you for the grave”. Thankfully, they didn’t always take themselves too seriously (and here’s the original).

Modern day technology firms have a ruthless attitude to preparing their own products to go 6 feet under. Rapidly killing off failing projects or taking sometimes unpopular and abrupt changes in strategy are the underside of rapid innovation and shifting business models. Two of the most popular posts in the old Tip o’ the Week archive were Tip o’ the Week 350 – Killing me Softly, part I and 353 – Killing me Softly, part II, celebrating some of the old tech that has been and gone.

Apple somewhat aggressively moved the Mac from the Motorola 68000 CPU architecture to Intel X86 and then ARM (at the expense of backwards compatibility – you’re holding it wrong), though hindsight shows both shifts were smart when it came to the ensuing products. Microsoft tried to adopt ARM with Windows 8 and the Surface RT. And we all know how that worked out.

There have been several other attempts at shifting Windows from Intel to ARM architecture, and none have really taken hold – but reports have emerged of a forthcoming Surface Laptop which promises to take the fight back to the MacBook in terms of performance and battery life.

All about the Pod

The term “podcast” (a fusion of iPod and broadcast) might be 20 years old, but the last few years have seen an explosion of content as well-known faces take to putting out regular shows to be streamed, downloaded and listened-to on phones or watched on screens.

Some of the most popular podcasts are depressingly formulaic, but there are so many joyous, informative and hilarious ones that are worth seeking out. It’s no wonder that traditional media is both embracing the format at speed while presumably figuring out how to monetize it.

Google announced last year that they were deep-sixing their popular Google Podcasts mobile app (describing it as a “turndown” like they’re tucking it in for the night rather than euthanising it), in favour of the expanded YouTube Music offering. In some ways, this makes sense as popular podcasts are increasingly using YouTube to also publish video (mostly of headphone-wearing people speaking into a giant mic while looking at 45 degrees to their camera).

clip_image004

Why miss the opportunity to unify the podcast and video publishing process, while also finding ways to sell more adverts to the listeners?

US users had the rug pulled in April but the reprieve for international listeners has recently been announced as coming to an end, and Podcasts will retire for everyone in June 2024.

So what next? The lead contender for iOS users is probably Apple Podcasts, but for Android users or if you’re an existing Google Podcast user then you might want to try other alternatives. YouTube Music is clearly the preferred option in Google’s eyes, but there are many options – Spotify & Amazon Music both have podcasting support and might push fewer ads at paid-for subscribers.

Free podcasting apps and services abound but run the risk of suddenly disappearing or retreating behind a subscription paywall – current front runner is probably Pocket Casts.

For more fun looking at all the other product Google has binned, see Google Graveyard – Killed by Google and check out Microsoft Graveyard – Killed by Microsoft too.

clip_image006

#19: Where have you been?

clip_image002

There are lots of topics that divide people into ‘them’ and ‘us’; politics, religion, fashion, belief in science, PC/Mac, iPhone/Android… just about everything to some extent.

One set of related considerations concern the tendency of Big Tech to track users’ every moves so they can sell advertising and other stuff. Tin-hat wearers will be playing snake on their Nokia 6310 so they don’t have social media companies snooping on them. Ordinary people may passively recognise that using any mobile and a credit card gives away so much about your movements, that they just submit, accept all cookies and don’t really care about trying to be “private”.

If providers give you – the user – enough functionality in exchange for knowing all about you, most people will happily subsume to their free services. If you’re a smartphone user who takes lots of photos and they’re uploaded to the cloud, there’s every likelihood you’ll also be adding GPS coordinates for where the picture was taken, as well as date/time and all the other usual EXIF stuff about the picture, the model of phone and more.

clip_image004Upload those pics to Google Photos (or Apple Photos if you’re an iPhone user) and you can look at all the images you’ve ever taken in a given place, helping you realise both when you visited that place in the past but also giving the easy ability to compare photos over time.

Look at Google Photos in a regular web browser (having signed in with a Google Account) and by clicking Explore, you’ll see your photos grouped by the place they were taken. If you upload photos from a phone or camera which doesn’t have GPS tagging on the pics, you can add location manually.

clip_image006The experience is considerably better using Google apps on a phone, though. Go to the Google Photos app and you’ll see various groupings of photos based on time or on what the has been identified as a “trip to…”, where you’ve clearly taken a cluster of photos in a specific place.

Select the Search option on the lower right, however, and as well as seeing similar place groupings to what you’d get on a PC browser, you can also look at your photos arranged on a map, under the “Your map” heading.

clip_image008Initially, you’ll see a map broadly centred on your current location with splodges of colour which indicate where you’ve taken photos. If you zoom in, you’ll see more specific blobs and a gallery showing only those pictures which feature those particular locations on the map; it’s an incredibly powerful way to look back over the years at how favourite views, landmarks, people or pets might have changed.

There’s no immediate equivalent of the “Your map” functionality when viewing Photos or Maps in a full-size browser – there is a Timeline view in Maps which shows you places you’ve been (regardless of whether you took photos or not), and there is a “My Maps” feature where you can create your own map view and import all kinds of info, such as a list of location coordinates to make a custom route.

Bing Maps, despite spending years trying to be as good as Google, removed the ability to import and export GPS trails unless you’re a developer embedding a map in your site. Boo.

Anyway, back to Google and My Maps (not Your map, they’re mine):

clip_image010

Custom maps – and the photos associated – can be shared with others too, so if building a route map for guidance, photos of key landmarks can be easily inserted to let people know they’re going in the right direction.

#18: Linking Phones and PCs

If you’re using a PC with Windows 10 or 11 and you have a smartphone, it’s worth exploring the Microsoft Phone Link app which lets you interact with the handset from your computer.

Microsoft has made several attempts to link phones and PCs, from the Continuum feature at the twilight of Windows Phone’s life (before it was knifed) to a variety of bespoke apps for Samsung devices and ultimately “Your Phone”. The latter has now evolved and expanded to be “Phone Link”. The array of features varies slightly depending on what OS your phone is using, and which manufacturer it originates from.

The app is likely pre-installed on Windows; make sure it’s up to date. It then needs to pair with a companion app called Link to Windows on your phone – either Android or iOS. For step-by-step instructions on how to set it up, see Sync Your Smartphone to Your Windows Computer.

For Android users, arguably the most compelling quick win is being able to easily access Photos without requiring them to have synced to Google Photos or OneDrive first – while the phone is connected to the PC either via Bluetooth or through the same WiFi network, you can interact with the last 2,000 photos on the device’s camera roll, so copying and pasting them into other apps is a snap.

iPhone users will have to use other means to get their hands on pics, at least for now.

The Phone Link app allows notifications on the device to be seen and managed on PC, which sounds more useful than it really is. It can also set the PC up to use the phone to make and receive calls (think of it like the PC is a smart Bluetooth headset), though some handsets might be a bit flaky. It seems even new phones don’t always provide the right level of support for some features to work well, such as Google nobbling the ability to output to an external display over the USB-C port on Pixel phones (a behaviour which will be fixed, at some point).

Some Android devices will allow you to display and control phone apps on the PC itself (or even mirror the whole phone screen) – which can be very useful, especially if you’re having to input a reasonable amount of text. It’s pretty much always going to be quicker to type on a keyboard than tap on a screen. Other options do abound, though, depending on the apps you use – there’s a native WhatsApp client for the PC, for example, so you could use that rather than relying on Phone Link.

You can use the PC to work with text messages on the phone, even supporting iMessage for Apple devices. Arguably the handiest part is when you get a text message as part of a multi-factor authentication sequence like logging into a bank account. The notification which Phone Link displays includes a “copy” shortcut so you can easily grab the code and paste it into the waiting logon page… even if the phone is on the other side of the room.

#13: New Outlook gets in own way

Many people rely on email for their work, and in some cases the inbox and calendar are the primary tools they use. Gen Z’ers might put up a struggle on entering the workforce, preferring to commune via instant messaging or Tik Tok, but for the most part we know that email isn’t going away. Unless you have an alternative product to sell, that is.

The Outlook application that comes with Microsoft 365 and Office suite has been with us since 1997, but can trace some of its roots back some years before that. Students of history may want to delve into the writings of ex-Office supremo (who went on to bring Windows 8 upon the world), Steven Sinofsky, as he revisits some of the tensions between and the decisions being made by the various development teams. There’s a good one on Outlook’s gestation, or the one where BillG gets presented with the idea for the Office Assistant: 042. Clippy, The F*cking Clown.

In a trope briefly discussed last week, we all know how Microsoft has historically loved to use the same name for wildly different things. “Outlook” is one such case – at various times, the core application which has had quite different capabilities during its growth (especially the difficult second album version, Outlook 98) and the name was associated with a whole slew of other products and/or services.

In the Windows 95 / Internet Explorer 3 days, there was a free app called “Microsoft Internet Mail and News” which combined internet email – POP3, IMAP4 – and the long-dead USENET newsgroup infrastructure based on the NNTP protocol. This was rebranded as “Outlook Express” even though it had nothing to do with the main Outlook application; the actual executable file for Outlook Express was still MSIMN.EXE for its whole life…

clip_image002

[Outlook Express … the solution for all your messaging needs…]

The Exchange Server that sat behind much corporate email added a web view of your mailbox back in 1996, called Exchange Web Access, later renamed Outlook Web Access and then Outlook Web App. As the functionality developed, so the old Hotmail.com service was rebranded Outlook.com, and the functionality of Outlook Web App for Exchange users and the free Outlook.com web client converged to a degree, as Outlook.com was moved to the same Exchange-based Microsoft 365 infrastructure.

Then there’s the mobile Outlook apps – Microsoft acquired email and calendaring companies Acompli and Sunrise Calendar, and folded their stuff into the highly-regarded Outlook mobile applications for iOS and Android.

Finally, when Windows 10 released, there were built-in Mail and Calendar applications; in fact, it was the same application under the hood, but it could be started with different criteria which would set how it looked. This app is still available in the Windows Store and came with OG versions of Windows 11. If you delve back to August 2018 and Tip o’ the Week 445 – Finding Modern App names, you’ll see how to find out what “modern apps” are really called within the system; as it happens, under the hood, the Mail and Calendar app was … ms-outlook.

clip_image004

One Outlook to rule them all

There has been a long held dream in Microsoft of having a replacement for the sometimes creaky old PC Outlook application and the Windows 10/11 Mail & Calendar app, to bring them together under a shiny new application. Sometimes known as “Project Monarch” or “One Outlook”, this new version will use web technologies to effectively be running Outlook Web App but with offline capability, on your PC or Mac.

clip_image006

Spot the difference? The New Outlook above has lots of mail accounts added with different inboxes etc pinned to Favourites. Here’s the same primary mailbox in Outlook Web App:
clip_image008

The New Outlook for Windows has been available in preview for a while, and you might be getting nagged to migrate from Windows Mail to try it out, or if your M365 administrator hasn’t switched off the prompt, you could even be getting it in full-fat Outlook.

clip_image010

Having been in Preview for a while, Microsoft announced in September 2023 that this new client is now generally available, and was to be pre-installed on latest versions of Windows 11. By the end of 2024, the old Mail & Calendar apps on Win10/11 will no longer be supported and won’t be available in the Store anymore. It could be a long time coming to migrate desktop Outlook users to the new-fangled version, but the signalling is saying it’s happening someday.

Check those horses

By all means, have a play with the New Outlook – it’s actually pretty good, if you don’t get 10,000 emails every day; in fact, if you have several accounts, it does a better job of keeping on top of them all than old Outlook does (though, arguably, not as well as Mobile Outlook, which lets you see a single Inbox view of all accounts). If you decide to go for it, then you’ll still have access to the Old Outlook app as well (should you need it), and if you’re moving from Windows Mail to New Outlook and don’t like it then the move back should be smooth too.

But currently, there is a gotcha. And it’s the cold hand of license enforcement mistakenly stopping play.

Users of certain M365 subscriptions – Business Basic, or Exchange Online Plan 1 as two examples, are being blocked from using the New Outlook as their license supposedly doesn’t allow it. There is a confusion having a license for a piece of software, and having the rights to use your software against a separately licensed service.

If you look at Compare All Microsoft 365 Plans, you’ll see that Business Basic include “Web and mobile apps only” for Outlook; another way of putting that is “you don’t get the Office applications on your PC or Mac” by buying that subscription. But what if you had the actual software already, through another route? If you have a M365 Family subscription, you can install the Office apps on 6 machines, and there’s nothing stopping you from connecting to a separately-paid-for M365 Business Basic mailbox from your legitimately-licensed Outlook application.

But New Outlook thinks differently. Trying to add a low-cost M365 mailbox gets you an unhelpful error:

clip_image012

Raise a ticket through official support and you’ll be told “you can access your mailbox by upgrading to a premium subscription”. The irony of “Add all your email accounts” is also not lost (especially since free services like Gmail, Outlook.com and Yahoo! seemingly have no problem), but penny-pinching paid-for Microsoft 365 subscriptions do.

Looking at the Exchange Online Service Description

clip_image014

The service that is being paid for should allow access from “Outlook for Windows”. Regardless of whether that means the full-fat Outlook app that you have to buy, or the freely available “New Outlook”, this document says you can access those mailboxes. But the New Outlook app is now enforcing something different.

Predictably, there are furious users on the internet. The Powers That Be have been made aware and are trying to think up an appropriate way round the issue, apparently. How about, don’t be a Doofus, Rufus? Excellent!

682 – Lens scanning

clip_image002

Continual advances in the quality of smartphone cameras mean that most people don’t use a physical camera any more; unless you are really demanding when it comes to control over digital imagery, phone cameras are good enough for most people, most of the time.

Compact cameras have evolved too, providing phone-beating snaps through better sensors and lenses than could possibly fit in the body of a handheld communicator. More light hitting a larger sensor through a bigger, higher quality lens gives you a better starting position to get a decent picture, though smartphones have powerful software and – increasingly – cloud services available to help improve the photo after it’s been captured. Higher-end cameras are changing, too – even Hasselblad (famed for moon shots but also for the most famous photo of the world) is ditching the DSLR model and going mirrorless. The horror!

clip_image004Marrying high-resolution imaging with powerful software in the palm of your hand does give you access to new capabilities that a generation ago would be almost unimaginable science fiction.

clip_image006Check out Plant Viewer to identify which is weed and which is flower, or Google Lens to capture information from the camera or even just to try to identify whatever you’re pointing it at.

As the world has discovered with ChatGPT and Google’s Bard, responses from AI powered services are not always quite correct, even if they appear convincing.

As any fule kno, this item in question is in fact a Seiko RAF Gen 2 (not a Gen 1), even though Google successfully found one for sale, that looks identical.

Google Lens is available on iPhone and iPad too, and depending on the Camera app you use on Android, it might also be launched clip_image008from there (and most Android devices will launch the Camera app if you double-tap on the power button, so it’s a quick way of getting to Camera, even if the device is locked).

Microsoft Lens is one of the best “Lens” or scanning apps in either mobile store (Fruity | Googly). Formerly “Office Lens”, at one point also available as a Windows app (but now discontinued) and since rebranded somewhat by its listing in the mobile app stores as Microsoft Lens: PDF Scanner, though it can do lots more.

The premise of Microsoft Lens is that clip_image010you can point the camera at something and scan it, by taking a high-resolution photo of the thing and then using the software to manipulate, crop and adjust the image. The most obvious use case is scanning a Document; start the Lens app, lay the doc out as clearly as you can and then step through grabbing each page in turn.

clip_image012The red > icon in the lower right shows how many pages have been captured so far. In earlier versions of the Lens app, you’d try to frame the page at the point of capture but now you just grab the images one-by-one (using the big white button) and do the tidying up later.

Press that red button and you’ll go to the UI where Lens tries to identify the corners of each page, and lets you tweak them by dragging the points. You could retake that individual image or delete it from the set of captures.

Press the confirm button on the lower right and you’ll jump to a review of the captured images, giving the option of rotating or adjusting each one, cropping, applying filters to brighten and sharpen them and so on. Once you’re happy that you have the best-looking images, tap on Done to save your work.

clip_image014You could send all the pictures into a Word or PowerPoint doc, drop them all into OneNote or OneDrive as individual files, or combine all the “pages” into a single PDF and save to your device or to OneDrive.clip_image016

There are other tools on the primary screen of the Lens app, too, if you swipe left to right. The Whiteboard feature lets you grab the contents off the wall and applies a filter to try to flatten the image and make the colours more vibrant.

There’s a Business Card scanner which will use OCR to recognize the text and will drop the image of the card and a standard .VCF contact attachment into OneNote, ready to be added to Outlook or other contact management tool.

The Actions option on the home screen gives access to a set of tools for capturing text and copying it to other applications or reading it out. There’s also a QR code and barcode scanner too.

clip_image018One somewhat hidden feature of Lens could be particularly useful if you’re sitting in a presentation and want to capture the slides for your notes.

clip_image020Start the Lens app, and instead of using the camera to grab the contents and then faff around trimming them, tap the small icon in the bottom left to pick images from your camera roll. This way, you could just snap the slides quickly using the normal camera app and do the assembling and tweaking inside the Lens app, later.

This photo was taken on a 4-year-old Android phone, 3 rows back from the stage at an event using the Camera app with no tweaks or adjustments. It was then opened in Lens, which automatically detected the borders of the screen and extracted just that part of the image into a single, flat picture.

clip_image022That logo on the top right looks familiar…

For more info on Lens, check out the Android and iOS support pages. Oh, and it’s completely free.

679 – Wordlament

clip_image002

Even if you weren’t taken with the viral word puzzle game Wordle, you’ve probably seen the coloured grid that people would share on social media. Sometimes bragging on how lucky smart they were in getting the answer in a couple of goes, or complaining that it was too hard and that they missed out.

It also gives whingeing poms a new thing to complain about on Facebook groups, every time the Wordle answer is a 5-letter American spelling like FAVOR or LITER.

If you’re still playing Wordle each morning, you might have happened across the numerous other -dle games out there, like Quordle (same idea as Wordle but you 9 goes instead of 6, but need to solve 4 squares), Octordle (like Quordle but x8), Kilordle (x1000 – it’s getting silly). Lots of other “guessing things” online games jumped on the bandwagon, too – there’s Heardle (play it while you can – it’s shutting down on 5 May), Worldle, Cardle and, missing out on the ‘-dle’ suffix, Framed. Who needs to be productive anyway?

Wasting time while keeping your brain occupied is a time-honoured tradition, with crossword puzzles featuring in newspapers for over a century. One of the best word puzzle games to appear on mobile phones, originally launching in 2012, was Wordament. Published from a skunkworks project where two guys built it in their spare time (before moving on to be part of Minecraft), it has gone through several evolutions since, and is now available as a Windows app (in the Store, here), on mobile (Googly | Fruity) and it’s also playable in a browser.

clip_image004

In each of these settings, you do need to suffer some pretty intrusive advertising unless you want to pay a few £ a month (or £10 a year) to make them go away.

clip_image006If you want to maximise your time-wasting, you can even play Wordament – and other “Games for Work” – within a Teams meeting.

There are other fun games to play during Teams meetings, too – the familiar “Bingo” being one that could be enjoyed by only those participants “in the know”.

664 – Android apps on Windows

clip_image002Microsoft has a somewhat complicated history with ”mobile apps”. The Windows Phone platform promised much, and though many of the ideas were good, ultimately it went away. The Universal Windows Platform app model was a sound idea in some respects, but when the ‘Phone disappeared, its raison d’être ceased to be.

At one point, there were calls that Windows Phone should be able to run Android apps in emulation, or that Microsoft should embrace Android in other ways. Recent years have seen Microsoft publish a profusion of Android apps, including the excellent Launcher, which takes some of the ideas honed in the Windows Phone UI and makes them available to just about any Android phone.

When the dual-screen Surface Duo phone appeared, it was the first time Microsoft had shipped a device running Android as the base operating system. Recent speculation on the future of the Surface Duo 3 might point to a different form factor, but it’s still very likely going to be running the Android OS.

On the desktop, Windows 11 has been offering Android apps to many users for a little while. Similar in some ways to Windows Subsystem for Linux, which basically lets you run a fully-fledged Linux machine inside your Windows PC, the Windows Subsystem for Android means running Android in a virtual machine and allowing apps to appear in a window alongside native Windows apps.

clip_image004To run Android apps on the WSA on Windows 11, you first need to install the Amazon Appstore. There are many apps in this store, but since it originally started as a walled garden for Amazon’s own Fire tablets, there are gaps. You won’t find many banking apps, for example, and aside from the thousands of garish games, many of the available apps could just be run in a browser on your PC instead.

clip_image006Install the Amazon Appstore app from the app for the Microsoft Store (still with us?), and it adds the bones of the Subsystem for Android too.

The Amazon Appstore app itself is a bit crude – it doesn’t offer much opportunity to filter and sort the apps it presents, so it’s not easy to wade through the many stupid games to find real apps you might want to use. It’s maybe better to peruse what’s available through a browser, and then search specifically within the Appstore app for the app you want to add.

clip_image008clip_image010After you’ve installed your Android apps, you will see them show up individually in Windows’ list of programs, with nothing obvious to differentiate from native apps.

clip_image012Clicking the menu next to an installed Android app then choosing Modify presents a familiar-looking UI (if you have an Android phone) for managing the permissions or the running state of the app.

If you wanted to use Android apps that are not published through the curated Amazon store, you’d need to have access to the Google Play store, and that’s not officially an option with the Windows Subsystem for Android.

There are numerous hacks online to enable Google Play Services (and thus the Googley Store) but getting it installed and running is convoluted, and at least one script has already been subverted with malware, so might be a risky endeavour too. You might want to try running BlueStacks or another Android emulator, to get access to the Google Play store.

645 – mobile ad blocking

It's always DNS

The internet just wouldn’t work without the magic that is the Domain Name System, or DNS. If you are not a networking guru, this service is effectively the index of internet hosts (not just websites but also anything else that offers a service on the net), and is used to find the actual address that your computer will connect to, using a name as the reference.

If you put www.bbc.co.uk into your browser, that means you want to connect to a machine called www which belongs to the domain bbc.co.uk, and a beautiful yet simply elaborate system is used to figure out how to find that domain, get the address(es) of the actual host, and provide the info back to your device so you can connect to it and request information.

Being the one service to bind it all also means DNS is often the thing that brings everything to a halt, eg. if your home router can’t connect to your ISP’s DNS server, then you’re basically unable to communicate with the rest of the world as you’d be unable to find anything (unless you hard-code your machine to use a different DNS, like CloudFlare’s 1.1.1.1 or Google’s 8.8.8.8).

Futzing about with DNS can sometimes bring benefits, though. One such is that for the many webpages which contain embedded adverts or clickbait links, if your browser is unable to connect to the source of the advert, then it might just not show the content at all. On desktop computers, you could use ad blocker browser extensions of all kinds, but on mobile devices your choices are a bit more limited.

Stupid Ad from Microsoft Start appIf you rely on mobile apps like Google News or Microsoft Start, which show content within the app and have no ability to install 3rd party browser extensions, you may have to take more action to block out all the insidious and stupid adverts.

A true geek’s solution at home could be to set up a Pi-hole; a DNS server (traditionally targeted to run on a Raspberry Pi microcomputer, hence the name) which will filter out the garbage by deliberately blocking the URL-to-address resolution of thousands of known advertisers or clickbait providers. Great when you’re on the home network, but what about if on the move and connected to another network?

One possible solution here is to use a provider like NextDNS, which has been described as effectively running a Pi-hole in the cloud for you to use.

Enable NextDNS on AndroidFree for up to 300,000 name resolutions (which sounds like a lot, but in reality, isn’t), it’s a snap to try out and if you sign up, you’ll be given simple instructions on how to plug it into your phone, tablet, desktop or even home router, so as to extend protection to every device connecting through that network.

Insidious ad has been silently blockedDNS queries would be routed to the NextDNS service and if the requested host is from one of a plethora of blocked sites – not just ads, but known trackers, phishing links etc too – then it will simply return a dud response as if the site doesn’t exist.

Your app or browser will either show you an empty box, maybe an inline error frame, or it may silently move on and display nothing at all. Just one small victory!

Using a service like this – others are available – can be switched on or off quickly (in Android, it takes the form of a single switch to configure a Private DNS with a URL unique to your account), and works regardless of whether you’re on Wi-Fi or mobile connectivity.