Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
The Internet

Bulletproof Tool For Golden Age Browsing? 366

An anonymous reader writes "I work in a retirement/assisted living home. Many of the residents had never used the Internet but really find it fascinating once they are given a little training. However, I've stopped introducing it to them because of the drain it puts on me. There are a million and one things that a computer novice can screw up, and I don't have time to solve all of them. These folks don't need any sophistication. and they need only the most basic options. Adjustable text size would be nice, but otherwise — no email, no word processing or editing, no printing — just Internet browsing. This may not seem like a big market, but it's getting bigger every day! Is there an absolutely fool-proof device that can provide this without requiring virus scanners and constant attention?"
This discussion has been archived. No new comments can be posted.

Bulletproof Tool For Golden Age Browsing?

Comments Filter:
  • Turn Off Javascript (Score:4, Informative)

    by eldavojohn ( 898314 ) * <eldavojohn.gmail@com> on Monday September 03, 2007 @11:49PM (#20459559) Journal
    Before I dive in, I have to say that I don't think you adequately explained the requirements here. In one part you seem concerned about configuration, in another you seem concerned about security & finally it seems to come down to being too sophisticated for the user.

    I'm not sure which one you value the most. But, assuming we need all three, I would suggest something like the OLPC as an everything. Yes, it's geared for children but I guess you're kind of dealing with ... well, in some cases degenerated minds. I don't say that to be mean but ironically my four year old cousin and my 80 year old grandfather have some of the same needs when it comes to high tech gadgets.

    One step up from that would be to use a premade Live CD of Ubuntu or Dragonfly or some other easy live Linux OS. You show them how to reboot with it and then they can surf like that. The downside is they can't save anything to disk but the upside is they can't save anything to disk :). Granted, this may violate your sophistication requirement (and destroy caching), it has the huge benefit of going "Oooops, time to simply reboot."

    You know, the last college I attended had labs where you had administrative privileges but they reverted to a system restore point nightly. As a result, there would be screwed up machines but only for a day or week at most.

    But, if we assume you don't want to reboot with a live CD of the OLPC or Ubuntu, you could instead simply turn off cookies & turn off javascript. Why? Because javascript is the devil. I think it has some of the most flawed type casting (if I can call it that) out there today. It's not a "type safe" language. And the proliferation of JSON objects in Javascript is frightening. But once you eliminate cookies & javascript, you also eliminate a lot of functionality.

    I would suggest giving them the flash plugin (pending system requirements) as it's not so bad anymore. That and they'll probably want to watch YouTube videos of their offspring. I think that is a fair trade being as the latest Flash plugin is fairly secure.

    So, I would finally recommend you give them plain jane mozilla firefox with no javascript or cookies & the flash plugin. It probably wouldn't hurt to jack the security meter up to the top and just tell them that sites they can't access are bad sites anyways.

    Once again, I could use more requirements before giving you a final assessment but the above two options sound like they would come pretty close to satisfying your (and their) needs. These were made under the assumptions that these people suffer from learning disabilities in their old age and, as a result, you cannot host training sessions whereby you show them safe & secure internet usage.

    In the end, I predict that some of the users are going to find a way to make it hard for you and them. I suggest starting with the lightest steps and only progressing forward as necessary.
  • Live CD (Score:3, Informative)

    by zogger ( 617870 ) on Monday September 03, 2007 @11:50PM (#20459591) Homepage Journal
    Just use machines with a decent amount of RAM,like a full gig, an optical drive, and one of the mini linux distros like damn small. No hard drive needed. About as simple to do as anything and un-hosable.
  • by aweraw ( 557447 ) * <aweraw@gmail.com> on Monday September 03, 2007 @11:51PM (#20459597) Homepage Journal
    Check out the VMWare browser applicance... basically a disposable OS with browser in a vmware image. If it gets broken, just create another copy - no need to worry about the base system getting hammered with crap.

    VMWare Player is free - have at it!
  • by 808140 ( 808140 ) on Monday September 03, 2007 @11:52PM (#20459607)
    This seems like a no-brainer to me. You don't even need a window manager, although there are some minimalist ones that will do the trick for things like the preferences window, etc. Firefox has font-size adjustment, so that's not a problem, and you can theme gtk to be high contrast with large font sizes in the menu, etc.

    Why make life difficult on yourself?
  • by Verte ( 1053342 ) on Monday September 03, 2007 @11:56PM (#20459647)

    they'll probably want to watch YouTube videos of their offspring.
    YouTube uses Javascript to load the flash plugin. Silly, no? Unfortunately, we're stuck with Javascript for some time now. But, I like the other idea, not having write access to the media from which you boot off.
  • Opera Kiosk Mode (Score:5, Informative)

    by Pap22 ( 1054324 ) on Monday September 03, 2007 @11:59PM (#20459677)
    http://www.opera.com/support/mastering/kiosk/ [opera.com]

    Designed to be used at public terminals. Bonus points for installing it on Linux.
  • by Shados ( 741919 ) on Tuesday September 04, 2007 @12:02AM (#20459709)
    It uses javascript to load Flash because of that issue with IE and plugins because of patents problems. Its the workaround to go around the workaround (wow...) that allows external code to load a plugin without user interaction so you don't have the "Click here to enable this plugin" thingy popping up.

    Wow, thats the most runabout post I ever wrote. Going to bed.
  • Use Kiosk Software (Score:3, Informative)

    by mombodog ( 920359 ) on Tuesday September 04, 2007 @12:03AM (#20459723)
    Software is the answer. http://pcwin.com/popular/Lock_xp_kiosk-1.htm [pcwin.com] Or the Microsoft way http://support.microsoft.com/kb/555463/en-us [microsoft.com]
  • by Anonymous Coward on Tuesday September 04, 2007 @12:06AM (#20459741)
    Just reduce the resoultion to 800x600 or 1024x768. That is hands down the simplest, easiest way to make images and text larger on screen.
  • by Jessta ( 666101 ) on Tuesday September 04, 2007 @12:12AM (#20459799) Homepage
    - Gentoo Linux(minimum system means less things can be broken and less security updates required)
    - ssh (for remote administration)

    - xorg
    - Firefox( I think there is a kiosk mode addon, and you'll have to install security updates every couple of weeks)
    - dwm (remove the status bar and add rules to tag all firefox window the same)
    and run it all as a user with only read/write permission to firefox's cache.

    You can't disable javascript because so many websites stupidly depend on it.
    I've seen some sites that don't display anything if javascript is disabled.

    - Jesse McNelis

  • by Simon80 ( 874052 ) on Tuesday September 04, 2007 @12:13AM (#20459809)
    Firefox in kiosk mode, configured as your X session (i.e. the app that is executed by X when it starts up), on an X server that is reloaded automatically, with all the VTs disabled, is apparently pretty bulletproof in practice.
  • by b17bmbr ( 608864 ) on Tuesday September 04, 2007 @12:20AM (#20459869)
    I know, gonna get ripped, but what the hell...

    set up a pretty decent single computer (running linux of course) and hook several terminals to it. have them either boot up like LTSP or do a small install and get X remotely. they could log in and you can set up what apps they have access to. if they aren'[t computer literate, they won't know firefox on linux from firefox on XP. and it's a bit safer, I'd wager.

    or, remoce (or just unplug) the hard drives and give them boto cd's like ubuntu. or just leve the cd's in the drive. you can make a custom ubuntu cd which has only basic browsing, plus can already be set up for proxies, etc.

    either way, it's gonna be hard to mess up the system. that's my $0.02. more work up front, far less down the road.
  • by WithLove ( 1150737 ) <jdharms&gmail,com> on Tuesday September 04, 2007 @12:20AM (#20459871)
    If you hide the Navigation Toolbar (right click anywhere on toolbar, uncheck Navigation Toolbar) the only interface outside of the web page itself is the tab toolbar. Nothing to mess up there (:
  • by MikeFM ( 12491 ) on Tuesday September 04, 2007 @12:20AM (#20459879) Homepage Journal
    It's not hard to set the virtual machine so that it doesn't commit changes. That's probably the easiest thing to do. No need to create a new copy.
  • A Simple Solution (Score:3, Informative)

    by Soloact ( 805735 ) on Tuesday September 04, 2007 @12:26AM (#20459939) Homepage Journal
    I believe someone already has done something like this with Linux, called "Cl33n Linux" http://cl33n.com/index.html [cl33n.com] It allows browsing and only uses Web Applications and Web Mail if the user wants to do some other type of work. Although it doesn't include Flash, you might be able to include that in a variation. Then install it in kiosks. Hope this helps you in your search. The only other options would be Internet Appliances, such as Compaq's old IA or WebTV.
  • by goombah99 ( 560566 ) on Tuesday September 04, 2007 @01:20AM (#20460333)
    Run Mac OSX. set it to the simple finder mode. There you can lock out all applicatons you don't want them to have. They cannot edit the icons in the dock so what they see is what they get (and they can't accidentally delete them either). And finally if ALL you really want is Browser, you can put it in kiosk mode and even have it boot that way. SO all it is is a browser, up and running when you snap on the machine.

    Now if you are budget minded you could do the same with Linux. Use a Live CD, configure it to boot to a browser. Remove all the other icons and don't give them permission to the apps. One of the very easiest ones to configure this way is DSL linux which has the benefit of booting very very very fast from CD and running on old, memory starved hardware, and being parcimonous about screen realestate. However, for you i'd recomend DSL-N (not DSL) as that is more modern.

    If you are not budget minded, it would be smarter to go with the mac. several reasons
    1) lots of plugins will be easier to use. likepdf support in the browser itself, (flash quicktime silverlight....)

    2) some folks there might want a real computer too. The liveCD linux boot will be constraining. Macs, have faster user switching so you can corral the people who need the simple finder but let other use it in advanced mode.

    3) Eventually they may want to add a few more apps. maybe they want for example to have podcasts. google earth. Watch DVDs

    4) you can keep a mac secure without going crazy. You can even firmware lock it to keep the wiseguys at bay.

    5) it's easier to attach portable disks, second or external screens, cameras, etc... to the mac. No sys admin needed.

    6) If you need support you can call apple and so can they if you are not around.

    7) For desktops there are no cables and they are easy to adjust to viewing angles (like for a wheel chair)

    8) easier to use applications, should they want them.

  • by Zemran ( 3101 ) on Tuesday September 04, 2007 @01:29AM (#20460391) Homepage Journal
    I used to work at a college were we had three classrooms with remote boot PCs. It was great because you could just turn off the power to the whole room without worrying and everytime a class came in the PCs worked as expected. I am still an advocate of remote boot even though it seems to have gone out of fashion. The downside in this senario is that it requires a server. It is only really good for multiple machines. With remote boot you can point home directories to the server and maintain just one machine and any updates are only done once on the image rather than to each machine.
  • Re:Opera Kiosk Mode (Score:3, Informative)

    by AmishMoshr ( 774633 ) on Tuesday September 04, 2007 @01:30AM (#20460393)
    The Epiphany web browser has similar lock-down options under the Gnome desktop. It uses the same underlying rendering system as Firefox so site compatibility is good. I think you have to dig in to gconf-editor to turn all of the restriction options on, but I think from there you can restrict the browser to settings similar to what you seem to want. The interface is, by default, also very minimal which is a bonus for such situations.

    Some example options:
    - Lock to fullscreen mode
    - Disable all protocols except http and https (can specify others to allow)
    - Hide the menubar
    - Disable quit
    - Disable toolbar editing

    Java can be disabled. The pop-up blocker and ad blocker both work well with little to no configuration on the part of the user.

    There was a general Gnome push for kiosk-type support some time ago. I think many of these features stem from that.
  • Security (Score:5, Informative)

    by halcyon1234 ( 834388 ) <halcyon1234@hotmail.com> on Tuesday September 04, 2007 @01:31AM (#20460409) Journal
    There's nothing wrong with wanting to keep the computers safe from the users, but don't neglect the opposite of this.

    As every poster has pointed out, you can rock-solid a computer with Kiosk modes, virtual machines, etc, etc. But if you're going to put a tool like the Internet into the hands of (shall we say) "unskilled" users, you have a responsibility to protect them from the baddies.

    Before anyone gets on the computer for the first time, drill some basic saftey tips into them. Do not give out passwords. Do not give out personal data. Do not give out financial data. Not to anyone, no matter how legit it looks. For many, this is probably their first experience on the internet. You cannot take for granted that they have been ingrained with The Basics. They don't know about Phishing. They don't know people can make a website that looks exactly like their banks' website. They don't know about Nigeran princes. Their bases have only every belonged to them.

    Print out some Golden Rules, and post them in the computer lab/common area/whatever. If the computers are going to be in the resident's apartments, make sure you print out something that can be stuck to the monitory.

    Send them out to play, but not in traffic.

    You can do some things behind the scenes as well. Route everything through a gateway you control. Make sure you have some good security on it. Go grab PeerGuardian's list, and maybe mvps.org's host file. Keep it up to date so that it blocks all the well known phishing sites. Concider blocking any outbound request for an IP address (rather than an URL). Run a mail server with a kickass spam filter, and give them all their own email boxes. (grandpaAbe@shadyacres.com). It also makes it easier to whitelist their friends&family email addresses to let legit attachments through.

    Try running guided tours of the Internet. Don't just pluck them down and say "here you go". Show them good places to go, and how to get there. News sites. Wikipedia. National Geographic's site. Typing Tutor sites. Maybe some instructional courses: How to use Flickr to view and post family albums. How to edit a Wikipedia article about the hometown they grew up in (and know everything about... preserve the knowledge!)

    Do this right, and not only will you have safe comptuers-- but you'll also have safe, happy, productive users.

  • by try_anything ( 880404 ) on Tuesday September 04, 2007 @01:52AM (#20460543)
    The problem with Javascript is not linguistic. The problem with Javascript is that turning it on means downloading code from websites and automatically executing it on your machine. Javascript has a few security limitations, but it can change what you see in the browser, alter your HTTP requests, send and receive HTTP requests and responses on your behalf, and other things that are useful for attackers. Bugs are the least of your worries.
  • by drijen ( 919269 ) on Tuesday September 04, 2007 @02:10AM (#20460635)
    Why make this so difficult? Simply use Deep Freeze http://www.faronics.com/ [faronics.com] or Clean Slate http://www.fortresgrand.com/products/cls/cls.htm [fortresgrand.com].

    When the user is done with the computer, just reboot, and it will be back to its original configuration. If users need a 10MB space or whatever for bookmarks, load them to an internal webpage, or allow that space on a spare computer.

    No mess, no fuss, easy.

    Disclaimer: I used deep freeze on my grandmother's computer because i grew tired of hearing about broken things every time I visited. That was several years back, and I have not heard a peep since.
  • by arivanov ( 12034 ) on Tuesday September 04, 2007 @02:11AM (#20460649) Homepage

    There is an easier way to do it with Linux than live CD. Much higher performance as well.

    Start with a full install of Debian or Ubuntu or any other distribution that strictly complies to the fs standard and does not write into /usr. Build it with separate /,/var,usr and use tmpfs /tmp /var/tmp. Install all necessary plugins. Once you are happy with the result switch /usr to read-only mode. Do not give them a root password and provide sudo instructions for the visiting grandchildren if the golden age customer asks them to install something in addition.

    This has been tested on a Golden Age customer (my mom) and this setup is the first machine she has had so far that does not require any maintenance. It just works regardless of powercuts, cats sleeping on the keyboard, etc. She had a windows before that and it got trojaned with a dialer hijacker which clocked her an insane phone bill. It also worked 10% of the time. During the rest it was suffering from various windowsy degenerative diseases. Prior to that she had a linux with a normal read-write install and she successfully managed to f*** it up by pressing the power button during fsck a couple of times.

  • Re:Live CD (Score:3, Informative)

    by matthew_nourse ( 940642 ) on Tuesday September 04, 2007 @05:03AM (#20461541)
    Some browse-only Live CDs (eg cl33n [cl33n.com] and Webconverger [webconverger.org] just boot, connect to the internet and open Firefox....even less to break than DSL. [Full disclosure: I put cl33n together, originally for new computer users at a local community centre].
  • Easy, there is specialised Web kiosk software that is free and easy to get and use - http://webconverger.com/ [webconverger.com]
  • by AigariusDebian ( 721386 ) <aigarius@nOspAM.debian.org> on Tuesday September 04, 2007 @05:38AM (#20461705) Homepage
    http://webconverger.com/ [webconverger.com] does just that and a bit more to ensure a functional and safe web kiosk experience.
  • XP Embedded? (Score:2, Informative)

    by PalmAndy ( 605595 ) on Tuesday September 04, 2007 @05:55AM (#20461787)
    If you are a serious windows user and you don't want to go the Linux or OSX route try XP Embedded (XPE). I have played with XP Embedded and it has a nice feature where you can lock the hard drive (or flash card). When a user boots all the temporary stuff is created in a RAMDrive. You can install standard software such as Firefox or some office software and then lock any further changes. People can keep their documents etc on a USB stick. When the PC is rebooted then it reverts back to the locked down version. There is even a hibernate once a resume many feature where the OS is loaded from a hibernate image which is extremely fast.

    In an ideal word Linux would be the best bet but XPE has its benefits if you are from a windows background.
  • by vtcodger ( 957785 ) on Tuesday September 04, 2007 @06:25AM (#20461961)
    ***In short, our eyes wear out as we age.***

    You bet they do. I'm nearing 70 and my prebyopia (limited ability to bend the eye's lens) is much less advanced than most of my contemporaries. Still, though I'm sitting about 50cm from the monitor because that's the closest I can focus this year. I have to wear reading glasses to read books except in really bright light because my arms just won't stretch far enough any more.

    The problem is that most geeks and web designers are young and fairly unconscious. They design screens that the elderly can't possibly read at the intended resolution and are difficult to cope with when font sizes are increased. They'll probably figure out that wasn't such a great idea in a few decades (presbyopia often sets in as early as age 45). But that won't help the folks they have unecessarily inconvenienced. And, BTW, not all vision problems in the elderly can be fully corrected with glasses.

  • by WPIDalamar ( 122110 ) on Tuesday September 04, 2007 @07:32AM (#20462365) Homepage
    There's a great project called swfobject that does all the browser/flash player version checking people want javascript for. But the great thing is that it'll fallback to non-javascript methods if not available. I don't know why more sites don't use it.

    http://blog.deconcept.com/swfobject/ [deconcept.com]

Life is a whim of several billion cells to be you for a while.

Working...