15-5:   TV 15 Host Win • 15.1.3937 ... Under Advanced > General advanced settings, set "Check for new version" to "Never" and set "Install new versions automatically" to "No automatic updates"..... One good reason to block updates: As of Feb 2022, the current version (15.26.4) requires creation of a TeamViewer account to set up unattended access. An account is free, but it's an unnecessary hurdle.
15-6:   TV 15 Host Mac ... In settings, disable checking for new versions and disable automatic installation of new versions.
Marin: Apple, Applied Comp, Archrival, Banana Republic, Barnes & Noble, Batteries & Bulbs, Bed Bath, Best Buy, Book Passage, Container Store, DMV, Electronics Plus, Goodman, library, Luggage Center, post office SSK in MV & SR, REI, Staples, Smart & Final, Video Only, Vitamin Shoppe San Francisco: Banana Republic, Barnes & Noble, Central Computers, library, Staples South Bay: Banana Republic, Barnes & Noble, Central Computers, Levi's, library, Staples
Feb 2022: For a PDF created in greyscale via scanning at a Fedex Office store, Adobe Acrobat Reader says this when printing is attempted:
"A font package is required to display this document correctly..." The solution was this extended font pack (or Asian language font pack): https://ardownload2.adobe.com/pub/adobe/acrobat/win/AcrobatDC/2100120135/AcroRdrALSDx64_2100120135_all_DC.msi
• Windows 10 Safe Mode:
       To make Safe Mode permanently available via F8 during bootup, run this in an administrative command window:
            bcdedit /set {default} bootmenupolicy legacy
Three ways to enter Windows 10 Safe Mode ad hoc:
       Method 1: Run msconfig and under the Boot tab, check Safe boot and restart. (Reverse this setting when you're done.)
       Method 2: From the Start menu or the lock screen, hold down the Shift key while clicking Restart, then choose Troubleshoot > Advanced Options > Startup Settings > Startup, then choose an option by number.
       Method 3: During bootup, force the computer off. Do this three times, and on the next boot, Startup Repair runs. Choose Advanced Option > Troubleshoot > Advanced Options > Startup Settings > Restart, then choose an option by number.
• If OneDrive makes one of its folder the Desktop folder, restore the Windows default by going to:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Desktop
...and changing it to %USERPROFILE%\Desktop Log out and log back in to see the change.
• Display seconds on the taskbar clock (Windows 10): In the registry under HKEY_CURRENT_USER / Software / Microsoft / Windows / CurrentVersion / Explorer / Advanced, create (or modify existing) DWORD (32-bit) Value ShowSecondsInSystemClock with a value of 1. Effective upon next login.
• Set interval for system clock NTP time synching: In the registry under Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient, set DWORD SpecialPollInterval to the interval in seconds (decimal).
• Google Chrome sync disabling: In regedit, go to (or create) DWORD 32-bit SyncDisabled under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome ... Change the value to 1 (disable). (0 is enabled.) No reboot required after the change.
• In VirtualBox version 6.1.18 r142142 (for Windows), a Windows 10 virtual machine installation fails (by freezing at a late stage) if "Enable Network Adapter" is checked and "Not attached" is selected. So the best ways to prevent internet access for a new VM (and thereby avoid Windows activation failure or the automatic download of Windows updates) are either to only uncheck "Enable Network Adapter" or to disconnect the host machine from the internet.
• A Windows 10 Pro upgrade license is available (as of March 2021) for $60 at: https://www.cdw.com/product/windows-10-pro-upgrade-license/3799403
• To turn off Windows 10's real-time malware protection, go to Settings / Update & Security / Windows Security / Virus & threat protection / Virus & threat protection settings / Manage settings / Real-time protection and change to Off ........ If left on, this feature routinely deletes ProduKey.
• Disabling the Windows 10 volume banner ... It's apparently related to browser settings, even for non-browser contexts.
- In Chromium-based browsers (Chrome, Edge, Vivaldi):
Go to chrome://flags/#hardware-media-key-handling
Set Hardware Media Key Handling to Disabled
Restart the browser to apply the changes.
- In Firefox: In SETTINGS > GENERAL > BROWSING, uncheck
"Control media via keyboard, headset, or virtual interface".
• To rename a batch of files in Windows, open PowerShell as Administrator, go to the directory containg the files, and run dir | rename-item -NewName {$_.name -replace "old","new"} , where old is the part of the filename to be replaced and new is the replacement.
• To remove a printer or driver in Windows, in a RUN box, enter printmanagement.msc to open Print Management, right-click the target, and remove it.
• To remove a printer driver in Windows, in a RUN box, enter printui.exe /s to open Print Server Properties, then go to the Drivers tab, highlight the printer driver, and remove it.
• Block Windows 10 updates: In regedit go to HKLM\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc
and change REG_DWORD Start to a Value data of 4, then on the left, right-click the
WaaSMedicSvc folder, choose Permissions, choose user System, check all available Deny boxes, and acknowledge any warning that pops
up....... Do the same for HKLM\SYSTEM\CurrentControlSet\Services\wuauserv....... Close regedit, reboot, and confirm that the services Windows Update and Windows Update Medic Service (sometimes called WaasMedicService) are absent from the computer’s main Services list ...... Initiate the update process manually and confirm that it fails.
Troubleshooting Outlook
• Update Microsoft Outlook via Windows Update.
• Under Programs and Features, have Outlook attempt to repair itself (first a quick repair, then an online repair).
• Use ScanPST.exe to repair a PST or OST file.
• Use System Restore to revert the machine to a date prior to the problem's arisal.
• Start Outlook in Safe Mode by either (A) holding down CTRL and clicking the Outlook shortcut or (B) in a Run box, entering "outlook /safe" (without the quotation marks).
• Create a new Outlook profile.
• Switch to a different Windows user.
• Uninstall and reinstall Outlook (or all of Microsoft 365).
Mac
• Mac / Windows special-key equivalents:
     Control = Ctrl
     Option = Alt
     Command (cloverleaf) = Windows
     Delete = Backspace
• Mac: Switching tabs within current window:
     CTRL + TAB
• Mac: Switching windows within an application:
     CMD + `   [back quote symbol]
• Mac screenshots:
    CMD + SHIFT + 4 for the crosshair pointer. To select, left-click and drag.
    CMD + SHIFT + 5 for the selection box. Resize, then click "Capture".
• Prevent a MacBook from turning on automatically when the lid opens or power is attached: in Terminal, run this: sudo nvram AutoBoot=%00
• To enable TeamViewer on recent versions of MacOS, install the program, then go to System Preferences > Security & Privacy, choose the Privacy tab, and in the left-hand list, scroll to Accessibility and click it once to highlight it. If TeamViewer appears unchecked in the list on the right, click the padlock in the lower left corner of the window (and if prompted enter the user's password and click the Unlock button), check the box to the left of TeamViewer, and click the padlock again to relock the settings .................... Go back to the main System Preferences screen, choose Security & Privacy again, then the Privacy tab, then on the left, scroll to Screen Recording and click it once to highlight it. If TeamViewer appears unchecked in the list on the right, click the padlock in the lower left (and if prompted enter the user's password and click the Unlock button), and check the box to the left of TeamViewer .................... You might get a warning that TeamViewer won't be able to record the screen until it is quit and restarted. If screen recording allowed TeamViewer in instantly, the message is wrong and you should click the Later button. If screen recording didn't instantly let TeamViewer work, then click Quit Now, and restart TeamViewer. When done in Security & Privacy, click the padlock again to relock the settings .................... If TeamViewer's access to keyboard, mouse, and screen are not complete, you can review the settings from the TeamViewer menu along the top of the screen, under Help > Check system access.
• Target disk mode: To enter it, turn on the computer while pressing "T". Connect a second Mac via a Thunderbolt cable, Firewire cable, or maybe a USB cable.
• Macintosh recovery mode, target disk mode, diagnostic mode, root user access, setting time to enable installation of older version of OS
• MacOS install from external drive: While pressing the Option key, press the power button; choose the installer's drive; use Disk Utility to check the target drive's SMART status & to confirm that the drive is Mac formatted; use Terminal to set a date about a year after the OS version was released: "date MMDDHHMMYYYY"; reboot if necessary
• MacOS forgotten password change: While pressing the Command & R keys, press the power button; in Recovery Mode, choose UTILITIES>TERMINAL; in Terminal type resetpassword and press Enter; in the Reset Password box choose the hard drive and then the user, and do the reset ..... This won't work if File Vault or a firmware password is on.
• MacOS internet recovery (probably incomplete instructions): If local installation of MacOS fails, use GPARTED to first remove all partitions and then create an HFS+ partition. Then use the Mac's Disk Utility to change that partition to the first type offered, which might be "HFS+ (journaled)". This might force internet recovery.
• To kill an application that doesn't respond to QUIT or FORCE QUIT, open Terminal, run ps -ax , find the application's PID, and run kill [PID]
• Numbers that trigger Android junk screening: 800-547-8531 (used by PayPal's automated two-factor authentication), 205-890-9720, 301-735-2318, 775-254-8745 • Sonic voicemail online setup instructions - March 30 2022 (PDF) (pw: zap2) • Tracfone plans as of March 2021 (PNG)
• Telephone headsets, Insignia brand (a Best Buy house brand):
     RJ9 model: NS-MCHMRJ9P2 ... SKU: 5796300 ... $25
     3/16" model: NS-MCHM25PB ... SKU: 5788200 ... $25
• Panasonic cordless phones ..... Handset registration: Press MENU # 1 3 0, press Locator for 5 seconds, press OK ..... Handset deregistration: Press MENU # 1 3 1 ..... Alternate registration method for some Panasonics: Press the base's locator button for 5 seconds, then place the handset into the base's charger. Registration is immediate. • Getting an email with CNAM for each call, via VOIP.MS - May 2022 (PDF) (pw: zap2)
• When tethering an iPhone to a computer via USB, the connection might not work until the computer's ethernet is disabled in Network and Sharing Center / Change Adapter Settings
• Nomorobo numbers: 202-729-9229 and 202-813-1600 (might prompt for 2-digit code)
• Comcast call forwarding:
      Always: *72 *73 (home and business)
      Busy: *90 *91 (business only)
      No Answ: *92 *93 (business only)
      Unreach: *58 *59 (business only)
      Manual for Comcast call forwarding
• SIM card codes: The 3 digits after 891 or 8901 indicate the carrier:
AT&T · 030 150 170 253 283 410 560 680
T-Mobile · 026 160 210 230 240 260 270 310 490 580
Sprint · 120 333 877
Verizon · 004 005 012 433 444 480 483 486 487 489 808
• SIM card labels: In Word, use 3-point Arial with 3-point line spacing. Use colored paper and a modern laser printer. Attach with Scotch tape. ..... Line 1: 222.333.4444 .... Line 2: CELLCO NAME .... LINES 3 & 4: The SIM card number
• Tracfone SIMs: Tracfone SIMs for Verizon are activatable for a year after retail sale (per Tracfone tech support). The online activation process will accept an expired SIM but then probably generate an "invalid SIM" error on the phone. When I called about that error, Tracfone tech support didn't (and maybe can't) check for an expired SIM, and they were mystified by the problem.......... Tracfone SIMs for T-Mobile come stamped with an expiration date about 3 years in the future.......... I haven't yet tested Tracfone SIMs for ATT.
• Always busy:
     800-555-9939 (since 2014 or earlier) (but not busy from all phones)
     612-376-5740 (since 2007 or earlier) (but not as of Dec 2021)
• Android phone field test mode: Dial *#*#4636#*#*
• IPhone field test mode: Dial *3001#12345#* and send ... Choose LTE > Serving Cell Meas > rsrp0
• T-Mobile - view current call forwarding destination: *#67# , SEND
• T-Mobile Scam Block ..... deactivate: #632#, SEND ..... activate: #662#, SEND ..... T-Mobile postpaid accounts qualify to use their Scam Shield app, which I haven't tried and suspect is unnecessary.
• Android Spam and Call Screen: Phone app > dot menu > Settings > Spam and Call Screen:
.....Turn off "See caller and spam ID" and "Verified calls". Then enter Call Screen and change each setting to "Ring phone".
• iPhone backups location in Windows 10 ... C:\Users\USER\AppData\Roaming\Apple Computer\MobileSync\Backup • Google Voice cellular voicemail setup (PDF)
• Grandstream ringtone:  f1=400,f2=450,c=40/20 -40/200;
• Grandstream ATA IP address readback: ***02
• Grandstream ATA WAN access toggle: ***12 then 9 to toggle
• Grandstream ATA Validate invite: no
• Grandstream dial plans:
{ <=1510>[2-9]xxxxxx | 1[2-9]xx[2-9]xxxxxx | 011[2-9]x. | 10xx | *97 | *75xx | 4443 }
{ <=1>[2-9]xx[2-9]xxxxxx | 1[2-9]xx[2-9]xxxxxx | 011[2-9]x. | 10xx | *97 | *75xx | 4443 }
• VOIP.MS encryption (between endpoint & VOIP.MS server)
- - - - - - - - - - - - - - - - - - - VOIP.MS control panel:
  Edit Sub Account > Advanced Options
    > Encrypted SIP Traffic: Yes Grandstream phone:
  Account X > SIP Settings > Basic Settings
    > SIP Transport: TLS/TCP
  Account X > Audio Settings
    > SRTP Mode: Enabled and Forced
  Account X > Audio Settings
    > SRTP Key Length: AES 128&256 bit
        (128 is required but choosing 128&256 allows
        for any future upgrade by VOIP.MS to 256)
  Reboot if necessary Grandstream ATA:
  SIP Transport: TLS
  SRTP Mode: Enabled and forced
  Reboot if necessary GS Wave app:
  Settings > Account Settings > Account X > SIP SETTINGS     > Transmission Protocol: TLS
  Settings > Account Settings > Account X > CODEC SETTINGS     > SRTP Mode: Enabled And Forced
As with ATT email, Fastmail requires a unique password ("app password") for each email instance on clients. Generate one at SETTINGS > ACCOUNT > PASSWORD & SECURITY > THIRD-PARTY APPS > NEW APP PASSWORD.
ATT / SBCGlobal Email
Server settings for IMAP (from Thunderbird but they probably work for all clients):
     imap.mail.att.net ... 993 ... SSL/TLS ... Normal password
     smtp.mail.att.net ... 587 ... STARTTLS ... Normal password
• As of Dec 2021: When the Outlook client attempts to set up an ATT email account automatically, it fetches defective IMAP and SMTP settings from Microsoft. Force it to use the settings above instead.
• If an ATT email security key is re-used to establish a link to a client IMAP account, it might appear at first to work but turn out to be unable to send or receive. So it's best to create a new security key each time.
In March 2021, someone’s Mac Mail became unable to access SBCGlobal email for an unknown reason.
Our failed attempts to get into the webmail at ATT.NET locked us out. The lockout appears to last indefinitely: it doesn’t clear itself. We needed ATT tech support (877-SBC-DSL5) to give us a temporary 6-digit password to use to log in to the webmail account at ATT.NET. Upon login, the system required creation of a new permanent password. That new password worked for logging in at ATT.NET, but it didn’t work in Thunderbird. However, although the ATT rep said that the secure mail key wouldn’t solve the Thunderbird problem, Thunderbird succeeded with the secure mail key as the password. Apparently ATT uses custom account security that resembles OAuth (or is OAuth, implemented uniquely). At least some reps don’t know this.
Security keys are listed in the customer’s account profile at ATT.COM (not ATT.NET). In the upper right, click ACCOUNT then MANAGE PROFILE. At the bottom of the profile page under MY LINKED ACCOUNTS, click MANAGE SECURE MAIL KEY. A customer account can have many security keys. Each instance of each email client requires its own key, and key is usable only once. The format is 16 lower-case letters. Once a key is created and revealed, for security it can’t be read again by the customer: only deleted if desired. (Also, the system won’t allow the key itself to be used in the key’s nickname field.)
ATT’s note in this section is: You may have to use a secure mail key to access your AT&T email with some email applications. To change a secure mail key, just delete it and add a new one.
That covers the basics. Note that in iPhone Mail (and maybe in other email programs), trying to enter a new password for a previously installed account may not work. On an iPhone, an attempt for ATT brought up the standard OAuth login window (which is typical for Gmail and other email providers), but it refused the password (security key) repeatedly. I deleted the ATT email account from the iPhone, then re-added it from scratch; this technique succeeded and didn’t bring up an OAuth login window (whose appearance for an ATT email account may be a strong indication that login failure awaits).
-----------------------------------------------------------------------------
Gmail requires user permission for the use of email client programs:
• At myaccount.google.com , go to Security > Less secure app access and turn it on. (Google's hair-trigger security sometimes undoes this setting.)
-----------------------------------------------------------------------------
Comcast email requires user permission for the use of email client programs:
• At connect.xfinity.com , go to COG > Email Settings > Security and check "Allow access to my Xfinity Connect email through third-party programs."
-----------------------------------------------------------------------------
Outlook email requires user permission for the use of POP (but not for IMAP):
• At outlook.live.com , go to COG > View all Outlook settings > Mail > Sync email > POP and IMAP > POP options > Let devices and apps use POP, choose Yes and save.
-----------------------------------------------------------------------------
• Fixing a Yahoo Mail account after hacking (September 2020)
Click the username icon and go to ACCOUNT INFO, then...
1. Under ACCOUNT SECURITY, remove any suspicious email addresses or phone numbers. Add a cellphone number if necessary. Then change the account password.
2. Under RECENT ACTIVITY, check for any recent non-local logins.
Click the SETTINGS gear icon, then...
3. Under SETTINGS > MORE SETTINGS > MAILBOXES > MAILBOX LIST, click the email address, then in the column to the right, remove any suspicious “reply-to” address and turn off any suspicious email forwarding.
4. Look for any filters or rules that might be forwarding email.
5. Consider sending an email to all contacts if they’re in danger of being defrauded by a scammer’s email. (However, Yahoo may prevent further mass mailings after about 4 mailings of 100 each if it views the mailings as possible spam.)
6. Do a virus scan on the user’s computer(s).
---------------------------------------------------------------- Mailman setting for Google Voice messages regarding car
The key to blocking spurious messages is to use a GV number in a distant area code and block messages from numbers in that area code with this in Mailman:
• Privacy options > Spam filters > Header filters > Spam Filter Regexp
subject: *New voicemail from \(XXX\)*
subject: *New missed call from \(XXX\)*
...where XXX is a placeholder for the area code of the GV number.
• Action: Discard
• Submit Your Changes
Thunderbird
• HTML for a Thunderbird email template
• Thunderbird custom user-interface colors can be specified in:
AppData\Roaming\Thunderbird\Profiles\xxxxxxx.default\chrome\userChrome.css
The file doesn't exist by default, so it might have to be created.
It's a text file containing precisely the text between the rows of dots below.
(See the underlying HTML for a more readable arrangement of the text.)
.................................................
/* set default namespace to XUL */
@namespace url("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul");
/* Color and style of selected messages */
treechildren:-moz-tree-cell-text(selected) {
color: #000000 !important;
font-weight: 400; !important;
}
/* Change background color of unread messages */
treechildren::-moz-tree-cell(unread) {
background-color: #e6fffe !important;
font-weight: 400; !important;
}
treechildren::-moz-tree-cell(unread,selected) {
background-color: #e6fffe !important;
font-weight: 400; !important;
}
treechildren::-moz-tree-cell(selected) {
background-color: #faffc6 !important;
font-weight: 400; !important;
}
.....................................
• Thunderbird signature (see the underlying HTML):
................................................
Then either...
• 7z Option: Use 7-Zip to copy the altered file into a new password-protected 7z archive (folder). Don't encrypt the file names within it.* Email the folder. The recipient should have 7-Zip installed and use it to access the folder. In the extracted folder, change the file’s suffix from JPG to EXE, then run it.
• ZIP Option: Use 7-Zip to copy the altered file into a new password-protected ZIP folder. Email the folder. The recipient should have 7-Zip installed and use it to extract the folder. In the extracted folder, change the file’s suffix from JPG to EXE, then run it.
Notes:
• *Gmail accepts encrypted 7z attachments only if the filenames are unencrypted. Gmail insists on seeing the file types inside but can't tell whether the types are fudged, as they are in the methods above.
• For email in general, the larger the attachment, the longer the delivery time. Example: an email with a 23-MB attachment took 5 minutes to arrive.
• 7-Zip doesn't exist for Macs. Keka might work instead: Keka
--------------------------------------------------------------------------------
• FUTURE ADDITIONS: Check-digit formulas, TP-Link powerline utility, barcode generators, QR code generators, email privacy checker,
FM Fool, TV Fool, Radio Locator, Public Radio Fan, Netsolver, Wireshark, Produkey, Nirsoft, Rufus, OpenVPN setup,
Microsoft365 email administration (MX & aliases), Foxit virtual PDF printer, Comcast: 68.87.66.200, USNO time numbers, pingscript, HTML syntax,
Spinrite ISO, Cocosenor ISO, Pogostick ISO, iPhone & iPad power & ethernet combo: A1277 & A 1619, Task Scheduler with Sendmail,
WinToUSB, Portable Apps, SMART on Ubuntu live DVD, Sandisk flash drive encryption, ImgBurn, Ishihara plate
generator, Speccy, HTTrack website downloader, Mac date setting in Terminal: date MMDDHHMMYYYY, YouTube URL
timepoint marking, car registration, car insurance, medical insurance, optical prescription, leases, DMV
driver record, ethernet 568B wiring, sync iPhone contacts with Outlook via iCloud for Windows, copying the
autocomplete history from an old Outlook to a new Outlook, ActivePresenter by Atomi, file-splitting program
(France), PhotoRec (France), DiskDrill file recovery, Windows 10 built-in file recovery, cable modem signal levels, Thunderbird add-ons and their settings, browser setup:
last site visited & always load fresh & memory management, blocking Firefox updates via the registry, blocking
Chrome updates in registry and services and Task Scheduler, OpenVPN notes including GUI installer and log access
and connection naming, Firefox and Thunderbird extensions and their specific settings, ActivePresenter by Atomi,
FAT and NTFS and EXFAT and Apple: drivers and interoperability, URL shortening at Amazon and Best Buy and Ebay,
credit card number check digit algorithm, MS Intellitype, MS Intellipoint, HP 48G Calculator, how to make PLS files,
Zoom's minimum specs for a computer to be capable of allowing virtual backgrounds, Rufus bootable flash drive maker,
Windows XP service pack 3
• CrystalDisk info
PLS file creation template: Insert the full streaming URL after "File1=", then save the file as type PLS (or save as type TXT, then change the suffix to PLS).
[playlist]
NumberOfEntries=1
File1=
Title1=No Title
Length1=-1