569 – Password migration

Posted on March 5, 2021 by ewand

One of the problems with free software and particularly free services, is that at some point, they might stop being free. The path of freely-provided online services is littered with companies who gave their service away to get the users, then grappled with the reality that more users means more costs to deliver the service – and if they don’t get enough income from whatever sources they can, the free ride will come to an end. Just look at Photobucket. And every web site that makes you whitelist them in your ad-blocker before you can continue.

The latest in a line of what-used-to-be-free but is now tightening its belt is LastPass, an excellent password manager that has a lot of users but may end up with a good few fewer. The day after the Ides of March, LastPass Free will only allow use on a single device type, so if you currently use it to sync passwords across desktops and tablets or mobiles, then you need to start paying (and maybe you should) or stick to either mobile or desktop.

As soon as the company announced its plans, the web sprung up many articles offering “what is the best alternative to…” type advice. Only a few weeks ago, ToW#561 espoused the virtues of cleaning up your passwords, featuring LastPass and also trailing some features that were coming to an alternative that you might already be using to provide 2 factor authentication on your phone – Microsoft Authenticator.

It’s fairly easy to switch to using Authenticator on your device to also sync passwords and to provide the Auto-Fill function which plugs in usernames/passwords not only to sites on your mobile browser but to other apps too. If you already have a load of passwords set up in LastPass or other locations, there are methods to export them and then import the data into Authenticator.

In the case of LastPass, you sign into the Vault (either through the browser plugin or directly on their website) and under Advanced Options, select the Export function. It will immediately drop a lastpass_export.csv file into your Downloads folder; be very careful with this file as it contains all your usernames & passwords in clear text.

You can get these passwords into Authenticator either by copying the file to your phone (Not a Good Idea) and importing from there, or by installing the Microsoft Autofill extension for Chrome into Edge (remember, Edge is a Chromium browser under the hood), then click on Settings and choose the Import data feature.

Now navigate to your Downloads folder and choose the lastpass_export file. It might take a little while to complete, but when it’s done, make sure you go back to the Downloads folder and hard-delete that CSV file (ie select the file, hold the SHIFT key down and press the Delete key – this makes sure it doesn’t go to the recycle bin). You definitely don’t want that file being left behind, or copied or synced anywhere that is not encrypted.

The LastPass browser extension (like other password managers) remains potentially useful on the desktop as it can help to sync passwords between profiles (eg the Work and Personal profile of Edge, if both have the extension installed and logged in using the same LastPass account), or even between browsers – in the cases you might want to use Chrome for some things and Edge for others.

Edge on the PC does have password sync capabilities, though not quite with the same level of flexibility –

Edge will let you sync passwords, favourites etc if you’re using a Microsoft Account (eg outlook.com) for your Personal profile, and it may do if you have a Microsoft 365 account for your Work Profile.

In a twist of fate, if you pay for a Microsoft 365 Family or a small business environment rather than using the free Microsoft Account, your subscription lacks the Azure Information Protection feature that is required to allow syncing. In which case, a 3^rd party password sync feature may be your best option, even if you choose to use Authenticator on your mobile device, and perhaps do a periodic export/import from LastPass to keep your mobile passwords in sync.

Or best of all, just install the Autofill extension into multiple profiles (or Edge & Chrome), signing into the extension using the same Microsoft Account, to keep the passwords in sync. Tidy.

568 – The Race for Space

Posted on March 5, 2021 by ewand

Nearly 60 years ago, JFK announced the intention to go to the moon, and the huge effort – at one point employing over 400,000 people – had to invent a load of technology to make it happen. The guidance computer on the Eagle module, for example, was the first digital portable computer, without which it would have been impossible for the landing to take place. Then there’s the old myth about how the Americans spent millions inventing a zero-gravity pen, whereas the Russians used a pencil…

The “space race” continued for some years afterwards (the US had Skylab in the 1970s and built the Shuttle, while the USSR built Mir, the first proper space station), before numerous countries decided to pool resources and build the International Space Station.

After unveiling Azure Space in late 2020, the 20th February 2021 – 35 years to the day after the first Mir mission – saw the launch of the ultimate in Edge devices, ensuring Azure reaches the ISS with HPE’s Spaceborne Computer-2. That will be furthest Cloud-Edge computing node until we finally become an interplanetary species, and once again leave the confines of low-Earth orbit.

Edge back on Earth

If you want to make the most of the space on your screen, you should try moving your Windows taskbar to the side rather than the bottom of the screen – follow the science – as it makes more efficient use of the screen real estate, especially if you have a big widescreen monitor. Open Taskbar settings here and choose Taskbar location.

If you’re a vertical taskbar fan, then you’ll like a new feature in the Edge browser, also designed to maximise the use of space – vertical tabs.

If you’re the kind of user who has lots of tabs open at any one time, you’ll notice that the title of each tab is quickly lost when they are arrayed horizontally.

By enabling the vertical tabs feature, a single click will show them to the side of the browser window. Click the < caret to the top right of the tab list and they’ll collapse to icons only until you mouse over again, and the full width will be shown.

The icon to the left of the horizontal tabs switches the display to vertical, and the icon at the top of the vertical list reverts to horizontal.

If you’re using the beta or dev version of Edge, you’ll be able to show the Vertical Tabs button in the Appearance section of the settings:

To enable vertical tabs on the current public release, enter edge://flags/#edge-vertical-tabs into the address bar of the browser and switch on the “experimental” feature; you’ll have to restart the browser for it to take effect, but after that point you’re free to try switching the arrangement.

565 – 88 Edge updates

Posted on February 1, 2021 by ewand

Just over a year ago, the new release of the Edge browser with the Chromium engine was released, and lots of functionality has been shipped since. Much effort has been to differentiate the Edge browser from others, because it integrates better with Microsoft services and other offerings. From synching settings, history, favourites, extensions… to adding protections around passwords and having a great multi-profile experience… it’s been getting better all the time. But 88 updates? That’s crazy!

(it doesn’t necessarily have 88 updates – that was just a ploy to get in the Crazy 88 link above)

The latest version of Edge shipped to mainstream users recently; release 88 is named after the core engine version, so Google shipped Chrome 88 at the same time. Some of the “what’s new” in Chrome will be consistent with Edge, since the rendering engine is the same – like the deprecation of a couple of features; Chrome & Edge no longer have FTP support natively, and they finally killed Flash.

Back to Edge 88 – go to the … menu, then settings | about to find which version you have – there are a bunch of cool things to try out or investigate:

Themes – there are some really nice pre-built themes packaging background images and colour schemes; see them here. You can apply a theme to a specific user profile, which might help you differentiate them from each other – so a Forza or Halo theme applied to your personal profile would change the colour scheme for that one, making it easier to spot which profile you’re using. You can also add themes from the Chrome web store.

Sleeping Tabs – helping to reduce system resource demands, Edge can now make tabs go to sleep if they haven’t been used for a while. You need to switch it on (the plan being that it will be a default in a later version) by going to edge://flags and search for sleep.

If you regularly use websites that fire notifications – like mail, or news readers – then be aware that they will not show when the tab is asleep. Work is underway to report back which sites should not be put to sleep, so Edge will be able to know when it’s a help and when it would be a nuisance.

Passwords – as discussed previously when it was in dev mode, the password monitoring and strong password suggestion features are now generally available. Edge can look for common username/password combinations that are in your cached credentials, but which are known to have been leaked.

If you get a report of such a leak, you should change all of the passwords on affected sites as soon as possible. Looking under Edge Settings / Profile / Passwords, you should see the options to enable both Password Monitor and suggestion. For more info on how the Password Monitor works, check out this MS Research note.

PWAs and Profiles – Progressive Web Apps are increasingly being seen as the way to take a site and treat it like an app; it can show up in Start menu, can be pinned to task bar, will run with a specific icon and name, and won’t have all the UI of a browser, so it looks just like a native app.

To install a PWA on Edge, just go to the … menu on the top right when you’re browsing to a site, and you should see Apps > Install … as an option. You get to give the “app” a name, and it will then look and feel much like a native application.

If you install the PWA in more than one Edge browser profile, there’s a new function that means when you start the app – from the Start menu etc – then you can switch between which profile it should run in (scoping identity, passwords etc within).

PWAs are cool. Unless you’re using Firefox, where PWAs are not cool.

561 – Password clean up

Posted on December 28, 2020 by ewand

As most of us look to put 2020 firmly behind us and take some down-time over the festive season, there may be a list of jobs which get left to this time of year – filling out the annual tax return, maybe, or clearing out that drawer with miscellaneous stuff in it.

You could set your sights higher, even – like gathering all the papers scattered throughout your house (user guides, receipts, utility bills etc etc) and putting them in one place, as recommended by Getting Things Done guru, David Allen.

Or just scan them all in then recycle…

Maybe it’s time to finally sort out all the passwords you use for different websites. Even though Multi-Factor Authentication is gradually replacing the need to enter a username & password every time you access a resource, there’s still often a need to create a username and password combo when you sign up for something. If you’ve used Edge or Chrome to remember your passwords, you might find there are many hundreds of them, and being weak carbon-based lifeforms, we’re quite likely to use the same ones for many sites. Naughty!

There are browser addins and other tools you can use to remember the passwords you use, and (using LastPass as an example) can give you the option of generating something strong and unique at the point of signing up on a site, then syncing that username and password back to a central service so you don’t need to re-enter it next time (or remember something truly unmemorable). LastPass recently announced their 2020 stats – they’ve generated 94 million secure passwords and been used to log in more than 10 billion times.

Microsoft Edge offers some password management capabilities – as well as being able to remember passwords within the Edge browser, and sync them between different machines or mobile devices, Edge is also getting to be capable of suggesting and storing complex passwords for new sign-ups.

Edge is beefing up its password security in other ways, offering proactive warnings if your passwords have shown up in databases of leaked credentials (at the moment, this is a test feature in the dev builds). One-by-one, you can use Edge’s “fix leaked passwords” function to check what the existing password is for each site, and then click a button to jump to the site to reset it – in some cases, going straight to the change password part of the site.

Finally, the password sync feature is getting some extra legs – using the Microsoft Authenticator app on your phone and it’s new beta Autofill feature, you can use that app to provide the username/password for website or even mobile app logins. There’s a Chrome extension too, so if you want to switch back and forth between Edge & Chrome on a PC, your passwords will be available to both.

In some senses, storing passwords and allowing them to be automatically filled in feels like a security risk – anyone with access to your unlocked computer or phone could potentially access your online services. Using Autofill and Authenticator, though, the default setup is to require biometric authentication – so you’ll need a fingerprint or camera, or unlocking with a PIN, before the auto-fill will happen.

Also, it’s more important to have complex passwords that are hard to break or guess, and to have different ones for each and every site or app you use.

This is the final ToW for 2020. Let’s hope ’21 brings us all better luck.

In the meantime, have a great holiday season, stay safe, see you on The Other Side!

560 – Shopping in the Edge

Posted on December 28, 2020 by ewand

The pandemic has undoubtedly accelerated digital transformation and societal change in many ways, bringing years of progression into a few months to quite a few industries. That change felt revolutionary in some – working from home in organisations that previously would have thought it impossible – and in others, like retail, it may have brought forward things that were going to happen eventually.

Online retail has been a clear beneficiary of people spending more time at home (and possibly less time working), in some cases having more money (since they’re not travelling for fun, eating out less – if at all – and so on). One aspect of online shopping that has grown over the last few years has been the use of voucher codes – perhaps as a way of trying to award loyalty while combating the dominance of certain online behemoths.
(It’s a really compelling podcast, that one – well worth a listen).

Websites who offer vouchers will often target them to existing customers, possibly previous customers who haven’t been active for a while – they’d email a time-limited code that could get money off, or free delivery and so on, or add a “money off your next purchase” printed code, in the box with the thing you just bought. People will often share these codes with their family and friends, and inevitably a load of websites sprung up purporting to offer voucher codes, though quite a few seem to be a vector for spam and unwanted advertising.

The Edge browser has recently added a feature which can help to discover active vouchers for a given site – with the idea that they are known to be good, active and not spammy. The idea is that when you go to a site that has current vouchers/coupons, then a little shopping label will appear on the right side of the address bar, with initial pop-out text which disappears after a few seconds, but the badge on the icon indicates how many vouchers are available. At the opposite end of the address bar, you’ll probably see the handbag icon illustrating, on this site, that it’s safe to shop.

Click on the vouchers icon and a pop-up will show the list of coupons; clicking a coupon copies it to the clipboard, ready to paste into some box during the checkout process.

The Shopping feature in Edge has started rolling out, beginning with the various dev and beta channels. To check if it’s on your build, and to enable/disable it, look in edge://settings/privacy and look for the Save time and money… option as pictured above. Right now, the availability of sites with vouchers may seem thin on the ground, but that’s likely a regional thing (ie concentrating on US retailers for now).

An alternative that was previously being pushed somewhat by the Edge team, is Honey – a simple Edge addin which does much the same as the Shopping feature, but more widely supported. On the example given above (from US retailer www.target.com) the orange Honey icon found lots more coupons that had been submitted and supposedly verified by other users saying they worked, and when. As with any of these things, YMMV.

557 – Making URLs more friendly

Posted on November 24, 2020 by ewand

The URL – Uniform Resource Locator, to give its full name – is familiar to everyone as a way of accessing their favourite sources of online titillation, propaganda and knowledge. Most people pronounce the term “yoo arr ell” though some stick to calling it Earl. Few “regular” users have any idea what magic occurs behind the scenes when you enter an address in the browser.

Early browsers might have been pedantic about the user entering the protocol into the address box, since the application wouldn’t know if you wanted to use ftp, gopher or this new-fangled http thing to try to open the page. So you had to spell out the whole address – with the right number of slashes and colons, sometimes even having to get upper and lower case parts of it exactly correct – or just get denied.

Of course, it’s easier to enter URLs these days – a good proportion of end users just type the thing they’re looking for (eg “bbc news”) into the address bar, and it will search on their favourite engine to display a list of results upon which they then click. Others will know that if you enter a term in the address bar and press CTRL+ENTER, the browser will add the www and the .com to either side of it, and on Chrome, the address bar even hides the display of the https://www bit.

Still, pasting a URL into a document or email can sometimes look messy, especially if it’s a link to a file on a Sharepoint or Teams site. Public websites sometimes will have an address which tells the story – like https://www.upi.com/Top_News/Voices/2020/11/19/SpaceXs-Starlink-satellites-are-ruining-stargazing-for-everyone/9351605790233/ – but a new feature in Edge browser aims to make things a whole lot more friendly.

In the latest versions of Edge, instead of pasting the raw address (with all of its slashes, symbols and numbers), when you add a URL into an Office document, the link will use the title of the page as the “text to display” instead of the URL itself. As a result, the UPI story above would look like “SpaceX’s Starlink satellites are ruining stargazing for everyone – UPI.com”.

When pasting a link to a shared document, instead of it showing up like https://microsoft.sharepoint.com/:b:/t/Store%20Planning%20Team/EX3o-R5PRT5Kk-Ndmh5GKFgBx0OfjIWI9d4CGT4nZGi0Dw90980 or similar, Office apps will try to fetch the source document’s details and render its name as the displayed text, hiding the URL under it:

If you’re sending the link in an email, it will even check if all the recipients have permission to open it, and offer to help you fix that by changing the permissions or by attaching the document instead of a link to it. This might even realise the dream that one day, people will stop emailing documents to each other and instead will use proper collaboration tools. We can but hope.

If you’d rather keep the raw URL, paste it into your document using the Paste Options / Text only choice. If you don’t like the new feature, you can switch it off in the Edge settings – navigate to the Share, copy and paste settings, or just enter edge://settings/shareCopyPaste into the browser address bar to jump straight there.

This useful feature was a preview in the Edge beta, but is now part of Edge 87 that released last week.

One potential side effect, though, is if the website you’re looking at doesn’t properly manage its page title (as displayed in the browser tab), it could paste as the wrong thing: some sites might set the title when you search for something, but then not set it properly when you click through into the results. You can always right-click the link and Edit Hyperlink to fix the issue if that occurs, and hope that enough people complain to the site owner so they fix it.

530 – Edge profile switching

Posted on May 28, 2020 by ewand

The New Edge Browser is evolving rapidly – if you’re still using Internet Explorer, then ditch it ASAP and move to a modern browser. If you already use the new Chromium-based Edge, it’s worth looking at the Profiles capability, which lets you keep several sets of browser settings. At a basic level, you could have a Work profile and a Personal profile, and keep usernames, passwords, favourites and so on, separate between each.

There’s a profile photo typically found on the top right of the Edge toolbar, and multiple profiles can be added and managed from there. Or enter edge:settings in the browser’s address bar.

Edge has the ability to sync favourites, passwords, credit cards, collections and other browser data all to other machines with the same profile address – so if you have a home PC and a work laptop, then having a “personal” profile on both could mean that suitable info will roam between the machines, but work specific stuff can be kept on your work profile.

Some capabilities – like syncing history between machines – are “coming soon”.

Lately, some versions of the Edge browser have been updated to sync extensions – like Lastpass, or the OneNote web clipper. Jump to edge://settings/profiles/sync within the browser itself to see the gist.

Having multiple profiles lets you consciously separate home and work stuff, keeping social media, web mail or personal interest stuff in one window, and your boring old Sharepoint sites and PowerBI charts in another. Quickly minimizing your “home” window before sharing your desktop on a Teams call is perhaps the modern equivalent of the Boss Key.

One tricky part is when you go to open a web link – other than from within a browser session itself – then the last window you were using could be the one to launch that site, meaning you might be crossing the streams and opening up work stuff in your personal profile or t’other way round. It’s possible to set a particular profile to be the default, or just let the machine decide.

One recent addition in the Beta channel for Edge – soon to hotfoot its way to the release version – is the automatic detection of work sites being opened in “other” profiles.

If you try to open a site that wants to authenticate using your work or school account but you’re using a different profile, you’d be offered the chance to switch to the correct one, so you can used cached authentication settings, cookies and the likes.

Automatic profile switching is available in Edge versions 83 and beyond – open edge://settings/help in the browser to see what version you have.

526 – Collections in Edge

Posted on April 17, 2020 by ewand

As another week draws to a close, in a world which is starting to feel a lot less like a temporary aberration and a lot more like The New Normal, we continue to look for things that distract, entertain (lots of good stuff on Netflix – dat’s the fact, jack), educate and give us cause us to think of others. Sadly, we lost TBT and Stirling this week, as well as too many others.

But technology marches on, sometimes a bit more slowly than we’d normally expect, and sometimes accelerated – Teams has rolled out the new background effects feature (though not everyone can yet choose a custom image – that’s on its way too, though it’s possible to add your own under the covers – create or find a picture, ideally 1920×1080 pixels, then press Start and enter %APPDATA%\Microsoft\Teams\Backgrounds\Uploads – drop your pic in there and it’ll show up in the list of backgrounds, right at the bottom).

Microsoft Partner Hubdrive’s CTO has kicked off a competition on LinkedIn for the most original / amusing – see #TeamsBackgroundCompetition and maybe even join the fun…

If you’re using the new Chromium-based Edge browser then you might want to keep separate profiles for your distractions, and for your work.

You may also want to give Collections a try – a feature that was in preview and available for Beta users for a while, has made it into the mainstream release.

Collections allows you to quickly add groups of related sites/pages into a kind-of folder which you can add notes to, quickly open or share, and it also keeps a preview of the page so it’s smarter than just favourites or bookmarks.

Look on the toolbar for the + icon to open up the Collections, and it’s pretty self-explanatory from there.

If you’re an Office 365 user, check out Edge PMM Eric Van Aelstyn’s post with some good tips on WFH, especially if it’s not on a work computer, including setting up the Enterprise tab (so you get Office 365 content rather than Microsoft News clickbait).

Eric also espouses using the default Bing search engine with Edge, as it can generate Microsoft Rewards for you – and with a few clicks you can give the reward points to charity.

US based Bingers can switch to Give mode, but UK users appear to have a different method and only a few target charities, but it’s free money you collect by searching, so you might as well give it away to a good cause. Take a look on your rewards page and you can choose to Shop, Win or Donate – select the latter and see if you like the look of any of the charities listed.

519 – Browser battles revisited

Posted on March 20, 2020 by ewand

The “Browser Wars” happened in the late 1990s, and marked a time of intense, er, “competition” between different web browsers. Since then, Google’s Chrome has rather cleaned up and established a seemingly unassailable lead in browser market share.

Still, Edge’s recent release using the Chromium rendering engine – designed to make it comparable with Chrome from a compatibility point of view, yet allowing Microsoft developers to remove Google-services-specific stuff (and replace them, sometimes, with Microsoft-services-specific stuff, many of which will be checked in to the Chromium open-source project.

The Edge browser built on Chromium was released in January, and updates are flowing through to add more functionality – which, exactly, depending on whether you’re running the normal release or you’re on one of several preview or developer (“canary”) versions. Some features are things that were ideally intended to make it to the public release – like synchronizing extensions installed across multiple PCs.

The Edge update won’t be forced out to existing non-Chromium-Edge users (hello, out there!) – or at least there will be a way of stopping it from being pushed out, if you’re an enterprise IT controller who’d rather not have to manage change and things like that.

One of the benefits of Edge being on Chromium is that the extensions which third parties build for the browser should be compatible – and since Google has 2/3^rd of the total market, there are more of them than for other browsers.

There’s an Edge “addons” page which shows a curated list of extensions known to work well with the new Edge, but if you want, you can install anything that’s listed on the Google site.

If you enable the ability to install Chrome extensions into Edge, then refresh/browse to the Chrome store again, you’ll be met with scary warnings, however…

Google has started alerting of a security issue – namely, if the extension is somehow added to the Chrome store and subsequently found to be of dubious intent and posing a security risk, then Google can remotely knobble it on installed machines. They are now warning that if you happen to use a Chromium but-not-Chrome browser – like Edge – then they won’t do this. It seems the extension security scare banner isn’t the only one to try to make Edge users install and switch to Chrome.

Tsk, Tsk.

Also, the Edge browsers published for Android and iOS are receiving updates to make them work more seamlessly with desktop Edge. (See more for Android & iOS)

# 513 – Ship ahoy!

Posted on January 20, 2020 by ewand

tl;dr – there’s a new browser out. Go and install it.

Back in the day, Microsoft nerds (yes, there were some, both in and outside of the company) used to take pride in continually referring to products by their code names long after they’d been released, and by using the most Microspeak.

There used to be a browsable Microspeak Glossary on the Microsoft intranet, and various versions of it online, but they now seem to have withered.

The odd phrase still crops up in contemporary usage, and one which shows its age is RTM.

Historically, at a point in a software product’s lifecycle, the team just needs to ship the thing – some would think it’s the completion of the development, but most developers know nothing is ever finished and therefore nothing would ever ship. Instead, it’s some date that’s been decided, and they work backwards from that date to ship whatever they have at that point. In traditional boxed-software sales, that would mean sending the final code off to be turned into floppy discs, CDs, whatever – in other words, release it to manufacturing. RTM in the CD-era often referred to the “gold code”, as it was burned to a (gold-coloured) recordable CD before being sent to the manufacturing process. So RTM also means the final build of code as well as the process to release it.

Since nobody really buys software on physical media anymore, RTM is something of an anachronism. “RTW” was used for a while, meaning “Release to Web” but it’s a clunky phrase, and has disappeared from use – much like Cisco’s attempt to for a while to talk not about “IoT,” but “Internet of Everything” or “IoE”.

Nowadays, products at the end of their development cycle “go GA” – Generally Available. Much easier.

This week sees the GA/RTW/etc of the new Edge browser, built on the Chromium rendering engine for maximum compatibility and performance, but extended in a host of ways to arguably make it a better browser than the others out there. It’s available for Windows 7 – even though that’s just gone out of support – and it’s also on Win8x and Mac too. Though technically a different code base, the Edge mobile versions have recently been rebranded and the UI tweaked.

If you currently use Edge – or shudder, still use Internet Explorer – then installing the new Edge will migrate your settings, history, passwords etc, but not any extensions you might have. Fear not, though, for the Chromium engine means you can install extensions from both the Microsoft Store and also the Chrome Store too.

For more on the new Edge, see the tips that are shown as part of the install process, read some opinion pieces on whether world+dog seems to think this is a good thing; here, here, here … and here… and, oh, you get the idea.