Tag Archives: security

Philosophy of Advanced Stacker PLUS

ASP14e-500

Coming soon…

Our 14e release is imminent. But after looking at our survey results and the most recently reported issues, we thought it wise to provide some hints to help you use the current software and to help you understand tradeoffs we made.

Our most commonly reported issue is something we struggled with. In an attempt to help users understand features we caused confusion. What are we talking about?  There are pop up windows: some of which should be Continued some of which should be Stopped. The only notification tool that works across all versions of Photoshop reliably doesn’t allow much customization, so when confronted with each of these dialogs, its understandable why some people click Stop when they should Continue and click Continue when they should Stop. The pop-up window below was the worst. We added highlighting to make it easy to see the difference, but we can’t use color or graphics on the actual pop-up without creating compatibility problems.  Do you notice the difference?

ASP14d_NotStop

This dialog indicates that the Watermark Alignment is not set… click CONTINUE

ASP14d_DoStop

If you stop on the first dialog, the layers needed to do stacking are not created and you will get errors the first of which is usually “Move is not currently available”

Move Not Available

Move Not Available

Once there is any kind of error it’s time to Stop and restart because manipulating layers in Photoshop is a little fragile.  The good news is the first pop-up can be turned off. The better news is that in 14e we have already turned it off for you. In fact in 14e we’ve trimmed down interaction as much as possible but still kept the awesome extra features.  Here is how to turn off the first pop-up (the one regarding Watermark Alignment) in version 14d and earlier.

Stop the Pop

Stop the Pop – disable the “Stop” step in Align My Watermark

Power of the Batch

The Advanced Stacker PLUS derives much of it’s power from two key things: Photoshop’s ability to batch process images AND Photoshop’s ability to open just about any image format on the planet.  Batch processing works because it is possible to use File -> Automate -> Batch to hurl a handful or a folder full of images at customized scripts and actions.  While Adobe Photoshop Elements has a “batch processor” there is no way to do operations other than those that are built-in to the software and that’s why ASP doesn’t support Elements.

One of the weaknesses of using Photoshop’s captive power is that it requires exploiting the tool in ways that are “allowed”.  While we like Adobe Photoshop CC, there are still many people who are very happy with older, non-cloud versions of Photoshop like CS3 or CS4.  We chose to not abandon that 35% of our customers so we support ALL CS versions of Photoshop on both Mac and PC. and that means we limit our actions and scripts to features that are common across all those versions and platforms. Readers may not be aware, for example, that while Adobe has published tools for customizing the interface, those tools have generally only supported the “latest” version of software. Indeed one of the most used tools (Configurator) has been abandoned and is no longer supported.

Another tradeoff has been in how we document our features. For example the File -> Automate -> Batch method of stacking a folder full of files is workable, if inelegant. But we use the Photoshop Bridge method of feeding the stacker and like it much more for several significant reasons.  One huge advantage of using Bridge is that you can actually see the content of the files. Another obvious advantage is that you are not constrained by what’s in your folder. If you have 29 shots from one sequence and 120 of another sequence you don’t have to split those shots between folders. And, in fact, with Bridge to select files you don’t have to use the same stacking method for all the files of one set, or have files from only one folder!

A word about 14E

As noted above, version 14E is imminent. Surprisingly the biggest obstacle has not been the additional features, the primary obstacle has been packaging and delivering the content. Windows 8.1 and Mac OSX 10.9 have gotten very protective of their machines and throw up many roadblocks to try to keep your machine safe from viruses and trojans. This means we had to invest $1500 dollars to become an LLC, get signed up for the Mac developer plan, get a Mac code signing certificate and get a code signing certificate for Windows, too! That doesn’t include acquiring a Mac or polishing the scripts and installers on each machine. Here is what the problem looks like on a Windows PC using Internet Explorer without signed code (it’s just as bad with Safari on Mac).

ASP_IE_RunAnyway

In fact, on both machines even though the code is signed (proving its provenance), you are still likely to get a warning like “This is not a commonly downloaded file”. It might be easier if we could email it to you, right? Except that Google, Yahoo and many others will not deliver an email that includes any executable content.

Both PCs and Macs have reached this point described in a Mac advertisement from 2009 that pokes fun at Vista’s intrusive safety system. Guess what… both machines are becoming like this because there are so many, uh, jerks out there eager to harm you electronically.

Our holy grail has been to create a single deliverable package that works both on a PC and on your Mac that we can document clearly, simply and as completely as possible.  That was probably too high a goal.

What’s coming in 14e?

  • Installation now is as simple as clicking.
  • EXIF data for the first image is preserved
  • New stacking mode of Ultra Streaks
  • Streamlined pop-ups to the minimum
  • Fully supports paths on both PC and Mac
  • Installation works for ALL versions of Photoshop CS you have installed on your machine
  • A price increase. But current owners will get the upgrade for free.
  • Some features we’re keeping under wraps for now.

What’s In a Website?

I thought I’d take a moment or two, because I’m often asked, about how I’ve set up a website and what pitfalls I face.  This is NOT meant to be a primer on how to set up a website.  And to be frank, unless you’re willing to pay me, I am NOT offering to assist you with the process, sorry – but hey, this advice is free!

Here is the basic outline of what is needed:

  • Buy the domain(s) you want.
  • Arrange for your site to be hosted
  • Pick a tool/product/system for keeping the website running.
  • Add the features you want – including plugins
  • Backup the site
  • Do regular maintenance
  • Be vigilant about spam and security
  • Handle the occasional disaster, misdeed, or dead-end.

I purchased all of my dozen or so domain names from GoDaddy.com. GoDaddy’s salacious advertising turns my stomach. Their abrasive founder, Bob Parson, is widely – and probably fairly – excoriated for his antics.  But until recently I’ll have to say GoDaddy has been cheap and efficient with good support.  How they could afford to spend 20 minutes on the phone with me when I had only purchased $20 worth of product is perplexing.  I’ve used other “registrars” to get domain names. None I found were as inexpensive or efficient. Indeed there is no point in spending more on a domain name than you have to, so don’t.

What’s In a (Domain) Name

A domain name is nothing more than a handle that can be used to “find you” on the internet. Aim for a domain that is:

  1. Memorable
  2. Unique and easy to say and spell (If you get the domain sqakizamazula nobody is going to find you by name if they manage to remember it!)
  3. Not too similar to other domains (what about misspellings? You might want to get those, too)
  4. Amenable to keeping your private information private
  5. Inexpensive  – no need to pay more than about $15 a year for a domain name.
  6. Appropriate for what you’ll use it for?  (If you’re not on TV it doesn’t make sense to get a .TV domain)

When you buy a domain name, you’re required to give personal contact information. Not surprisingly there are many spammy/scammy businesses that grab that information to automate calling and emailing you… so you will want a “private registration” – that is a service that keeps your information secure – at additional cost, of course. Some domains, however, like all .US domains do not allow private registration.  And because “StarCircleAcademy” is a bit long and not always properly remembered, I made sure to also grab StarTrailAcademy, StarTrailsAcademy, and StarCirclesAcademy.com.  You can point many names at the same place.

One BIG benefit to having your own domain is that all the email addresses for that domain are yours! Oh, and as long as you keep that domain, you’ll never have to worry about changing your email address.  Even if I move to Timbuktu – which is NOT planned – I can still be Steven(at)StarTrailsAcademy.com  or SuperHandsomeFellow(at)StarTrailAcademy.com

Not all domain providers bundle in email for free, so beware.

What is a Host?

I host (store) my files on a GoDaddy.com server, however a series of recent misfortunes has me looking at HostGator.com as a better alternative. There are many choices for hosting. I won’t describe them all, but here they are roughly ordered by cost – lowest to highest:  economy-shared, performance-shared, private address shared, private resources, and dedicated.  In the last category basically what one is paying for is a machine that is used exclusively by you. Performance of any shared solution may range from sluggish to extremely sluggish.  And there is a HUGE downside to being on a shared machine.  A shared machine basically means it houses lots of websites, not just yours. You share bandwidth, hardware, and an Internet Address. The downside is that there are many tools that find websites that have malware on them and “Blacklist” those sites. This happened to me recently. Apparently a compromised website running on the same server as mine (with the same IP address) ticked off the Consolidate Block List and all hundred or so websites on the server were effectively inaccessible.

GoDaddy’s solution to this problem was… Gee, that’s too bad. If you want to pay us for a private address or move to a dedicated machine at an extra $6 monthly cost we can do that for you. It will only take 24 to 72 hours.  It actually took 3.  Unfortunately one of the tools I want to use on my website requires an intricate, and painfully laborious series of steps to configure it.  HostGator charges about the same for hosting and has all the support set to go.

What Tool?

A website can be created in many ways. Early on I used tools like Microsoft FrontPage (later became Expressions) and Dreamweaver to create websites.  You get a lot of control using tools like that, but you pay a high manual overhead to keep things up to date – and you better know something about HTML and JavaScript or you’ll have a dull site. After a while interactive online site builders became available. None of the ones I’d seen look interesting or unique.  There is a huge amount of complexity involved in creating and maintaining a “swanky site”. After the manual tools, and the online site builders there arose an armada of Content Management Systems (CMS). Joomla, BBoard, and so on. But I elected WordPress because: A. It’s free (mostly), B. It’s widely supported on hosts, C. It’s flexible enough and configurable enough, D. It’s pretty easy to use – unless you want to do fancy things.

Getting the Features

As I noted, WordPress has lots and lots of free and almost free customizations you can add. Some are really nifty. Some, like the scads of useless iPhone Apps will disappear soon after you test drive them.  My most recent addition is the “WordPress eStore”.  I had looked at many things including ZenCart and others. Honestly, though I wanted something less painful to set up and manage.  Unfortunately setting up WP eStore has taken me more than a week of twiddling to get close to what I want… but it’s still not there.  Other things I’ve added in (and many that I’ve customize) include the Meetup Events (see the margin in the right), a Gallery of Flickr images, maps and much more.  All of these required effort, and in most cases you really do need to understand HTML well enough to fix/correct/update.

Fight The Spam

I get three kinds of comment spam: blocked, sneaky, and low-brow. Several WordPress plugins block the majority of the automated junk. For example 1,105 bits of blocked spam have accrued in my queue in less than a month. As my site popularity grows, so do the automated comment spam attempts. About once or twice a week a spam item makes it through the filters. I have turned on WordPress comment moderation so that I must approve all comments.  So far I’ve described the auto-rejected spam (blocked), the sneaky spam I have to mark as SPAM and the last type is from well-meaning people who sometimes post four or five comments that basically say nothing at all or things that are self-contradictory – not you, of course!  Hey, I welcome your comment if it helps people understand, but if you just want to be argumentative or hawk your photos get your own site!  Sorry, was that harsh?

The Disasters

Things break. Sometimes they break in mild ways – like a single article that I could no longer open until I completed some upgrades. Sometimes the breakage is spectacular like the whole site going offline – or forgetting my password, or putting an embarrassing typographical mistake in my articles.  Or configuring a plugin incorrectly…   Backups and maintenance are meant to overcome these issues, but of course they pop up at the worst of times… like when WordPress DEMANDED that I upgrade it in the hours before I got on a plane to a place where I’d have no internet for two weeks!

To make matters worse, I had just published in a private location the details for an upcoming Field Expedition and blasted out the link in an email.  As luck would have it the flight had on-board WiFi so I could spend some $ and fix the problem instead of catching up on my sleep. As worse luck would have it, the on-board WiFi was broken 🙁

In a Nutshell

Setting up and maintaining a website is not for the faint of heart or the technology illiterate. It can be a huge time waster.  On the other hand had I not done it, well you wouldn’t be here, would you?!

If after all this you’re thinking that with a little of my help you’d like to set up your own site, please re-read the first paragraph. 😉