Nlite and Windows XP

Well, I had my first major experience with Nlite and Windows XP tonight. I installed a new 160 GB Seagate hard drive into Mom’s Compaq Evo 510 and I used Nlite to slipstream SP2 into Windows XP, since SP2 is necessary to properly use a drive that big.

The resulting image was far too big to fit on a CD, so I started pulling stuff out.Mainly I pulled out stuff like Outlook Express, MSN Explorer, and Media Player. I thought about removing Internet Explorer, but since Mom is going to use MS Office, I thought twice about that. Office uses IE for some things. If I’d been building the system for me, I’d pull that too.

I also removed most of the international support. I saw no need for anything other than US English and maybe Spanish, so I pulled the rest.

Installation went fast. Really fast. I laid down Windows XP, Office 2000, and Firefox in less than an hour. I used the Nlite CD to install the OS, and I installed Office and Firefox from a USB flash drive. All I need now is antivirus software and the system would be usable.

It boots lightning fast–we’re talking 20 seconds from POST to a desktop with no hourglass. Installing antivirus software will slow that down, but it’s impressive. Part of that is due to the new hard drive, but it’s a Seagate 7200.10. It’s newer and faster than the five-year-old Western Digital drive the system came with, but the 7200.10 isn’t exactly new technology anymore.

Memory usage isn’t bad either–100 megs at boot. That’ll double or triple once I install antivirus software, but at least I’m starting lower than usual.

I didn’t check disk usage, but I’m sure it’s much lower than the typical 1.5 GB.

I’m a believer. The results make me wonder just how old and slow of a computer I could get away with XP on.

If you have wireless, you need DD-WRT

I picked up a spare Linksys WRT54G recently, and tonight I finally got a chance to try DD-WRT, a free replacement operating system, on it.

Amazing is an understatement. The biggest complaint I usually hear about wireless networking is range (and when people complain about reliability, they almost always mean range), and DD-WRT offers several solutions to this.First of all, DD-WRT allows cheap, ubiquitous routers to serve other functions. Wireless repeaters cost $100. Wireless routers cost $50. DD-WRT lets you turn that $50 router into a repeater, among other things. So if there’s a dead spot in your house, you can pick up another WRT54G (be sure to get the WRT54GL version if you’re buying new; when buying used, you want version 6 or earlier, and version 2 or so is probably the best), load DD-WRT on it, use it as a repeater, and save 50 bucks. Some of the used units on Amazon or eBay already have DD-WRT loaded on them, which can save you some effort.

Second of all, once you load DD-WRT, you can connect to it, click on Wireless, then Advanced Settings, and scroll down to TX Power. The default value is 28. You may want to adjust that.

I was also happy to see that once when I configured my second WRT54G as a wireless bridge, the computer I was using to configure it gained Internet access through it. So a DD-WRT-equipped router can do double duty. If you have a video game console with an Ethernet port on it, you can put one of these routers in the same room with it, run a cable to the device to put the game system online, and at the same time configure the router to serve as a repeater, strengthening your wireless signal. So not only do you save $50 by not having to buy a repeater, it can also mean one less wireless card you have to buy.

The one thing I’ll say about DD-WRT is that when you load it, you need to take precautions. If you follow the instructions, loading it is a safe procedure that only takes a minute or two. But if you don’t follow the instructions, it’s possible to ruin the router. You never want to change firmware using a wireless connection; use a computer connected to a wired port. And with my particular router and the version of DD-WRT I was loading, I had to use Internet Explorer. For some reason Firefox has difficulty getting this particular job done. Also you have to load the factory default settings at one point or another during the configuration. So read the documentation at least twice and make sure you understand everything before you proceed.

I like DD-WRT a lot and I plan to load it on the WRT54G that I have connected to my DSL modem very soon. The main benefit I see is being able to crank the power of the signal up a bit, but there are plenty of other goodies in there that I may end up using. Perhaps more importantly, my WRT54G stopped working with DynDNS at some point, and Cisco/Linksys doesn’t seem to be revising the standard WRT54G firmware anymore. But DD-WRT has an active community behind it, so if something changes, I’m confident that there’ll be a new DD-WRT to take care of me, whether I need it next year or five years from now.

Pay DD-WRT.com a visit, find a compatible router (there are non-Linksys models that are compatible also) and pick one up. It won’t disappoint you.

Optimizing Firefox

Firefox is a better browser than Internet Explorer by a long shot, but at times it’s made me wonder if it’s strayed from its original mission of being a lean, quick, simple browser based on the Mozilla engine.

I’ve seen several “Optimizing Firefox” guides and most of them talk very little about performance, and the ones I did find were not only disappointing, they also appear to be widely copied verbatim without attribution. So here’s what I do to shaq-fu Firefox into shape.Try out Firetune. Firetune is a wizard-like program that configures most of the common Firefox tweaks based on criteria you select. In my case, since I have a P3-700 with 192 megs of RAM, I selected Slow computer/Fast connection on the Performance tab, and Optimize Firefox memory usage on the tab labeled Other useful settings. For me, the payoff was immediate.

Install PDF Download. If you view a PDF file online, Firefox keeps Acrobat in memory essentially forever, where it does nothing but chew up precious memory until the next time you view a PDF, which might be in a minute, or it might be next month. Take control over this behavior by installing PDF Download.

By default, after installing PDF Download, you’ll get a dialog box asking what you want to do when confronted with a PDF file. If you click the View PDF button, it loads it in your OS default PDF viewer. This behavior is less seamless than viewing the PDF directly in your browser, but it’s much better for performance because after you close the file, the viewer unloads from memory. For even better performance, forget about Adobe’s Acrobat Reader and install Foxit Reader, which is much smaller and faster. By default, when you install Foxit Reader, it will make itself your OS default PDF viewer. Trust me, this is what you’ll want.

On my 700 MHz P3 running Windows 2000, PDF documents display in one second with PDF Download and Foxit Reader installed. That’s faster than Acrobat ever was, even if it was already in memory.

I like the combination so much, I went to Tools, PDF Download Options, and set the default action to Open PDF, rather than displaying the dialog box. Now I no longer dread downloading PDFs from the Web.

Optimize memory usage a bit more. Type about:config into a browser window and scroll down to browser.sessionhistory.max_total_viewers. The default value is -1, which will determine the number of pages in your browser history to cache based on the amount of memory you have. I set it to 1, since I do tend to use my browser’s back button a lot. If you almost never find yourself clicking the back button, or you have a very low-memory machine, set this to 0. Each page it stores takes up about 4 megs of RAM.

Clear your downloads. Hit ctrl-j to bring up the download manager and clear it out. Too many entries slows Firefox down, partly because it increases memory usage.

Keep your version current. Often newer versions of software are slower and fatter than the old versions, but newer versions of Firefox are often faster than older versions because memory leaks and performance problems tend to get fixed in newer versions. I don’t recommend running beta or preview release versions, and I’m not all that crazy about .0 versions either (when Firefox 3.0 is released, I’ll wait until version 3.0.0.1 comes out). I just upgraded an old computer that had been running a very early Firefox 1.0 to 2.0.0.4, and the difference is incredible.

For what it’s worth, version 2.0.0.4 (the current version) running with these changes feels very zippy on a P3-700 with 192 megs of RAM.

Replace your Antivirus software with this freebie and regain your performance

Antivirus software is the worst culprit in PC slowdowns. I am not alone in this belief. I don’t suggest going without (not completely) but it’s certainly possible to save lots of money, eliminate subscriptions, eliminate most of the overhead, and still practice (relatively) safe computing while running Windows.

Use Clamwin, the Windows version of ClamAV, and don’t engage in risky behavior (more on that later).Clamwin is free, GPL software, meaning you never have to pay for or renew it. It lacks a realtime scanner, which is the main resource hog for PCs. This may leave you vulnerable to infections, but think about where the majority of infections come from: E-mail, downloads, and drive-by installations. Clamwin comes with hooks into Outlook to scan e-mail attachments for you, and Clamglue is a plugin for Firefox that automatically scans all downloaded files. Of course you’re using Firefox, right? Using a non-Internet Explorer browser is the most effective way to prevent drive-by installations. I don’t use IE on my personal PCs for anything other than running Windows update.

Realtime protection made lots of sense when the main distribution point for viruses was infected floppies, but those days are long gone. This approach protects you against modern viruses without making your multi-gigahertz computer run like a Pentium-75.

I do suggest periodically scanning your system, something that even antivirus packages with realtime protection do. It makes you wonder how much confidence they have in that resource-hogging realtime protection, doesn’t it? Weekly scans are usually adequate; daily scans are better if you suspect some users of your computer engage in risky behavior.

Risky computer behavior

The last virus that ever hit any computer I was using was LoveLetter, which was way back in May 2000. The only reason I got that one was because I had a client who got infected and she just happened to have me in her address book. I don’t know the last time I got a virus before that.

It’s not because I’m lucky, it’s because I’m careful. There are lots of things I don’t do with my computers.

I stay off filesharing networks. Not everything on your favorite MP3-sharing site is what it claims to be, and there are people who believe that if you’re downloading music without paying them for it, they are entirely justified in doing anything they want to you, such as infecting you with a computer virus.

I don’t open e-mail attachments from strangers, or unexpected e-mail attachments from people I know. For that matter, if I don’t recognize the sender of an e-mail message, I probably won’t open it at all, attachment or no attachment.

I don’t run Internet Explorer if I can possibly avoid it. Internet Explorer’s tight integration into the operating system makes it far too easy for people to run software on your computer if you so much as visit a web page. Google tries to identify web pages that might be trying to do this, but a safer option is to use a different web browser that doesn’t understand ActiveX and doesn’t have ties into your underlying operating system.

I don’t install a lot of software downloaded from the Internet. A good rule is not to install any “free” software whatsoever unless it’s licensed under the GNU GPL or another similar open-source license. If you don’t know what that means, learn. Open source means the computer code behind the program is freely available and outside programmers can examine it. If a program distributed that way does anything malicious, someone’s going to figure it out really fast. If I’m going to download and install something that isn’t open source, I only do so when somebody I trust (be it a trusted colleague, a magazine columnist, etc.) recommends it.

I don’t rely on software firewalls. I have a separate cable/DSL router that acts as a firewall and sits between my computers and the Internet. So when the random virus comes around looking for a computer to infect, my firewall doesn’t even speak their language (it doesn’t run Windows and doesn’t have an Intel or AMD processor inside), so the potential infection just bounces right off.

Use a web-based e-mail service instead of a program like Outlook or Outlook Express if you can. If you use something like Yahoo Mail or Hotmail, that company’s servers scan your incoming and outgoing e-mail for viruses, so if someone sends a virus to your Yahoo account, you won’t get it. Does your ISP scan your e-mail for you? If you don’t know, you probably should consider getting your e-mail from someone else. Your antivirus should catch it, of course, but it never hurts to have someone else looking out for you too.

If you avoid these practices, you can join me in throwing out your commercial, for-pay antivirus software and reclaim a lot of computer performance too.

The best defragmenter for Windows NT, 2000, XP and Vista

Want Diskeeper’s features without ponying up 50 bucks?

Sorry, I can’t help you. The combination of My Defrag, Scandefrag, and Pagedefrag is better and it’s free.

Scandefrag defragments your system during the boot process, as early as it can. It works better on NT-based systems like Windows 2000 and XP than it does on 98 or ME. All it does is launch the other tools.

Pagedefrag is, of course, a classic. It’s just convenient to bundle it up with these other tools. This tool defragments your registry and swap file(s) at boot time, which is the only time the system allows it.

My Defrag (actually Jerrod Kessels’ defrag) is, to put it simply, the best general purpose defragmenter for Windows NT, 2000 and XP that I’ve ever seen. Period.

If My Defrag can’t do an ideal job, it does the best it can do. Some defragmenters leave a file alone if they can’t defragment it, but this one will defragment as much as possible and move it as close to the front of the disk as possible, where performance is much better. On full disks, this is important. Since ideal conditions almost never exist (except when a system is first built), a defragmenter’s performance under less than ideal conditions is very important.

The most exciting thing about My Defrag is its ability to sort files. I like Sort alphabetically.

Sorting alphabetically (the -a7 switch) helps because it uses the full pathname. This means all of your files that are part of, say, Mozilla Firefox will be put as close together on the disk as possible, so when you launch Firefox, all of those files are close together and the disk head doesn’t have to move around a lot. The result is an application that launches faster.

So how often should you defragment? Once a year, I would do a boot-time defragmentation with Scandefrag to whip the Registry and swap files into shape. When that finishes, I would run My Defrag in full optimization mode, with file sorting. If you make a major change to your system (say, upgrading your office suite), do a quick defragmentation after the install and a full defragmentation a month or so after.

As part of your routine system maintenance, a faster, automatic defrag with no options specified is a good idea on occasion. The author says to do it no more than once a day and I agree. In my experience, once a week or even once a month is almost always fine. The way My Defrag works, the system shouldn’t get terribly fragmented on a daily basis, even if you use your system heavily. Defragmenting too frequently can shorten a hard disk’s life expectancy, although the occasional defragmentation seems to help it. I defragment a few times a year (and always have), and I generally get five or six years out of a hard disk, which is a year or two longer than most experts say to expect.

Don’t waste your money on any other tools. Download this trio, install it, use it, and watch your system performance climb.

A better registry cleaner

Note: I wrote this back in the Windows XP days. It worked really well under XP, but if you’re going to run the registry cleaner portion in Windows 7 or Windows 10, be sure to create a restore point first.

I’ve been messing around with a registry cleaner called CCleaner. I like it a lot better than the commercial tools that used to come with Norton Utilities and the like, and I like it better than the freebies that we used to use like Microsoft’s Regclean.

And you’ll never beat the price.CCleaner runs on Windows 95, 98, 98SE, ME, NT4, 2000, XP, and Vista.

One thing that I liked about it is that the program is intelligent and relatively dummy-proof. If you click around and do all of the defaults, it’s not likely to harm your computer. I inadvertently wiped out my Firefox browser history (I wanted to keep that) but that’s not a showstopper. It will populate itself again in a few weeks. Unlike commercial utility suites, where I’ve written 20-page explanations how to use them safely, this program doesn’t really need any explanation.

CCleaner actually does more than just clean up the Registry, although it does a fine job of that. It also does a great job of weeding out useless temporary files. I ran it on my old laptop and it found 386 megabytes of junk on my crowded C drive. I’ve been manually cleaning it up by searching it by hand, and I think I do a pretty good job of finding a lot of stuff, but what can I say? The program found 386 megs of stuff that I didn’t.

There are three benefits to getting rid of that cruft. First, Windows needs quite a bit of free space just to function properly. When you start getting too little free space, the system just acts goofy. Second, large numbers of temp files in the system directory just seem to make the system act funny. This was a bigger problem in Windows 9x than in the newer NT-based Windows versions, but there’s still no reason to have hundreds of those laying around. In my desktop support days, just getting rid of temp files used to clear up all sorts of mysterious problems. And finally, not having all those large and useless files on the disk makes your defragmentation programs work better. Those programs need free space to work with, and they don’t have to work as hard when they don’t have hundreds of extra worthless files to move around.

Cleaning the Registry is another important job, since a lot of uninstallation programs don’t do a very thorough job of cleaning up after themselves. The extra bloat chews up memory and slows down searches for the legitimate data the programs you actually use need. Since I tend not to install many programs and I use most of the ones I do install, CCleaner didn’t find a whole lot in my Registry, but it found some stuff to clean up.

So what happened after I ran it? The most noticeable effects were that my Start menu was a lot peppier, and my Web browsers loaded and ran a little bit faster. I understand the Web browser speedup, but the Start menu puzzled me a bit. Not that I’m complaining–it’s irritating when you press Start and have to wait for your list of programs to come up.

CCleaner isn’t a miracle worker and it won’t turn my P3-700 into a Core Duo, but the two systems I’ve run it on do run noticeably faster afterward. It was certainly more than worth the 10 minutes it took for me to download it and run it on each.

So what about the commercial utilities suites? Skip them. In this day and age, there are better, free alternatives for everything those utilities suites could do. CCleaner is one of the superstars. In coming days, I’ll talk about free substitutes for the other most important components of the utility suites.

Firefox simplifies Tinyurl

This is cool. Steve DeLassus finds stuff and I blog it. If you like Tinyurl, there’s a Firefox extension that’s going to make you like it a lot more. If you don’t know what Tinyurl is, read on and you’ll be using it almost every day.First, why Tinyurl is useful: Ever try to give someone a web address, and you end up with something that’s three lines long? Items on Ebay are probably the worst. You try to e-mail it to someone, or post it on a discussion board, and the long length messes up the formatting, or the address gets chopped up and people have to copy and paste the thing back together again–if they think to try it.

Tinyurl is a web page you can visit, punch in any obnoxious address of any length, and it spits out an address that’s a few characters long, which can be easily passed along and won’t mess anything up.

Nice, eh? But what if you don’t want to visit tinyurl.com over and over again?

Install the TinyURL extension for Firefox, that’s what. Then you can just push a button to turn whatever page you’re viewing into a tinyurl and it goes straight to the clipboard. Push a button, then paste, and you’ve got it. What could be easier?

Firefox popups got you down?

In case you haven’t read it elsewhere, Flash and other plugins allow popups in Firefox, even if you have popups disabled. Here’s how to disable popups from plugins.

I made the change (it takes 30 seconds) and the sites that had been getting popups through to me aren’t anymore.

Need a cheap NAS? Grab this floppy and an old Pentium and you’ve got it

I wanted to build a small-as-possible Linux for the purpose of creating a lightweight NAS a few years back. I even downloaded the uclibc development tools and started compiling for the purpose of doing it. Then I got distracted.

I guess it doesn’t matter. I think NASLite had beaten me to the punch anyway.Here’s how it works. You download the appropriate floppy for the network type (SMB for Windows networks, NFS for Unix) and network card you have. You find an old PC. As long as it has PCI slots, it’ll work. Drop in the NIC if there isn’t one there already, and then drop in as many as four IDE hard drives. (The disk will reformat the drives if there’s anything there, so make sure they’re new or scratch drives beforehand.) If the BIOS doesn’t support the drives because they’re too big, disable them in the BIOS. Don’t worry, Linux controls the drives directly so you don’t need the BIOS. Boot off the floppy, and it joins the network and you’ve got a bunch of disk space for the cost of the drives and possibly the NIC.

Nice, huh?

This isn’t suitable for use in most corporate environments since it creates wide-open storage (it might work well as a big file dump, so long as people realize there’s no security there, but I’ve learned the hard way that users tend not to listen, or at least not remember, when they’re told such things). For home networks it’s fine, unless you’ve got wireless, in which case anyone who can get into your wireless network would also be able to get to your NAS.

Even then, it’s useful if what you want is a central repository for programs like Irfanview and Mozilla Firefox that you install on all your PCs and want to keep handy.

At any rate, if you’re creative and careful and have a Linux box and know how to use the dd command (or have a fairly up-to-date copy of WinImage) to copy a 1.72-meg disk image to a floppy, this is a useful tool for you.

Another meaningless security report…

So Symantec is saying that IE is more secure than Mozilla-based browsers because there were 25 security vulnerabilities disclosed in the first half of 2005 for Mozilla, as opposed to 13 for IE.

Such reports are fine for Clueless Information Officers. Let’s analyze this like someone who actually knows what to do with that thing that sits between your ears.First and foremost, Mozilla lacks tight integration into the operating system, making it fundamentally less dangerous. Internet Explorer is like a bank that leaves its vault open after hours because it locked the front door. Since Mozilla lacks those ties that go directly into the operating system, it’s like a bank that locks the front door and the vault. The more locks the crook has to crack, the better.

Also, past performance isn’t necessarily an indication of future gains. People who invest know this all too well. Remember, the first half of 2005 was when Mozilla was seeing explosive growth. It was still a young product and had a lot of things to shake out.

But the potential is certainly there. Let’s look at Apache vs. IIS. You see fewer Apache vulnerabilities than IIS, even though Apache’s source code is visible for everyone to see, and even though Apache is a much larger market. Mozilla has this same potential.

In the meantime, Mozilla is still a minority browser. Since most hackers these days are motivated by profits, they’re going to do the same thing any other businessman does: Look for volume. Internet Explorer still has 12 times the exposure that Mozilla does. And Internet Explorer is often used in corporate environments, since many corporate intranets rely on IE-specific technology. That makes it an attractive target, since it’s easier to get through a browser than it is a corporate firewall. And once you do manage to get in, there’s a lot more good stuff inside a corporate LAN than there is inside a home LAN.

And by Symantec’s own admission, “at the time of writing, no widespread exploitation of any browser except Microsoft Internet Explorer has occurred.”

That tells us the Mozilla developers are working faster than the would-be Mozilla hackers, and it also suggests that hackers are looking harder at Internet Explorer.

Also, Symantec is being selective about the flaws it’s looking at. The article states that it only counts confirmed flaws. IE has 19 unconfirmed flaws versus 3 unconfirmed flaws for Mozilla. So IE has 19 unconfirmed and unfixed flaws plus 13 confirmed flaws, for a total of 32. Mozilla has 25 confirmed flaws plus 3 unconfirmed and unfixed, for a total of 28.

I don’t know about anyone else, but I’m more concerned about those unconfirmed and unfixed ones. As long as I’m running the current version of either browser, I’m protected against those 25 big bad flaws (for Mozilla) or the 13 (for IE) from earlier in the year. I can’t do anything about those 19 unfixed Internet Explorer flaws.

Frankly, I think Symantec is just trying to get a headline on a slow news day, and maybe trying to kiss up a bit to Microsoft, with whom it’s always had a very close relationship since Symantec traditionally has been willing to write the pieces of software that Microsoft for whatever reason doesn’t want to touch.

I’m sticking with Mozilla Firefox. Not only is it the safer browser when you look at the things that actually matter, it’s also the better one.