tag:blogger.com,1999:blog-115737612024-03-07T13:36:15.961-08:00Chris Quirke's BlogFreelance troubleshooter of non-corporate PCsChris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.comBlogger171125tag:blogger.com,1999:blog-11573761.post-79367112885318626372022-08-17T04:17:00.001-07:002022-08-17T04:18:40.877-07:00Ten Four Jembe Patterns<p style="text-align: left;"><span style="font-family: verdana;">Drummers may contemplate the "oil and water" nature of 3 vs. 2 or 4 - does one play one over the other at the same pulse as a round, pad out a 3/4 bar pattern to 4/4, or stretch the 3-beat pulse to match the bar length? In practice, one does all of these things, but the easiest to learn first, is to hold the same pulse and allow the bar lines to fall where they may, creating a "round" ("where's the One?") effect that is less confusing (and easier to notate) than changing the pulse.</span></p><span style="font-family: verdana;">I came up with part 1 of "Ten Four" as an exercise, and much later, woke up with part 2 in my head, without realizing it was also the same 3+3+4/4 signature. I added part 3 as a stick drum part to complete the song, along with a cross-beat call, and matching pure 3/4 and 4/4 patterns to drop on top.</span><div><br /><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: inherit;">Ten-Four cross-call, 4-beat to 3-beat ("krunk a dunk - GuDuGu, PaTaPa, go!") </span></div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></div><div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">F Ss BbB SsS (3-beat follows...)</div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_|_-_|_-_|_-_-_|_-_-_|_-_-_...</div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four pattern 1 (jembe, alternating hands)</span></div><div><br /></div><div><div>B TtT F TtT B B TtS B TtT F TtT B B TtS B TtT F TtT B B TtS ...</div><div>|_-_-_:_-_-_:_-_-_-_| |_-_-_:_-_-_:_-_-_-_|_-_-_:_-_-_:_-_-_-_ ...</div><div><br /></div></div></div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four pattern 2</span> (jembe, alternating hands)</div><div><br /></div><div><div>B TtT TtTtT TtTtS S B TtT TtTtT TtTtS S B TtT TtTtT TtTtS S ...</div><div>|_-_-_:_-_-_:_-_-_-_| |_-_-_:_-_-_:_-_-_-_|_-_-_:_-_-_:_-_-_-_ ...</div><div><br /></div></div></div><div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four pattern 3 (jembe, fixed hands)</span></div><div><br /></div><div><div>B B s B B s BBs BBs B B s B B s BBs BBs B B s B B s BBs BBs ...</div><div>|_-_-_:_-_-_:_-_-_-_| |_-_-_:_-_-_:_-_:_-_|_-_-_:_-_-_:_-_:_-_ ...</div><div><br /></div></div></div></div><div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: inherit;">Ten-Four pattern 3 (2 stick drums, or 1 stick drum with mute as alternate sound)</span></div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></div><div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">X X O X X O XXO XXO X X O X X O XXO XXO X X O X X O XXO XXO ...</div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_:_-_-_:_-_-_-_| |_-_-_:_-_-_:_-_:_-_|_-_-_:_-_-_:_-_:_-_ ...</div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></div><div><br /></div>Once up and running, add these alternate hand for a "round" effect...</div><div><br /><span style="background-color: #f6f6f6; font-family: inherit; font-size: 12.87px;">Ten-Four "Jan Pierewiet" 3-beat</span></div><div><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;">B TtS </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> ...<br /></span><span style="font-family: courier;">|_-_-_ </span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_...</span></p><div><span style="background-color: #f6f6f6; font-family: inherit; font-size: 12.87px;">Ten-Four 4-beat</span></div><div><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;">B B StS </span><span style="font-family: courier;">B B StS B B StS B B StS B B StS B B StS</span><span style="font-family: courier;"> ...<br /></span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_ ...</span></p><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: inherit;">Ten-Four pattern -1 (offset variation of pattern 1)</span></div></div><div style="font-size: 12.87px;"><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><br /></div><div><div><span style="font-family: courier;">TtT B TtT F TtT B B TtT B TtT F TtT B B TtT B TtT F TtT B B ...</span></div><div><span style="font-family: courier;">|_-_-_:_-_-_:_-_-_-_| |_-_-_:_-_-_:_-_-_-_|_-_-_:_-_-_:_-_-_-_ ...</span></div><div><span style="font-family: courier;"><br /></span></div><p style="text-align: left;"><span style="font-family: inherit;">As yet I haven't tried a bell pattern with this, but perhaps this would work, picking out the "1 and then 2 and then " 6/8 pulse over the 3/4 sub-bars of the thing:</span></p><p style="text-align: left;"><span style="font-family: inherit;">Ten-Four bell 1</span></p><div><div style="text-align: left;"><span style="font-family: courier;">x x x x x x x x x x x x x x x x x x ...</span></div><div><span style="font-family: courier;">|__-__:__-__:_-_-_-_| |__-__:__-__:_-_-_-_|__-__:__-__:_-_-_-_ ...</span></div><p style="text-align: left;"><span style="font-family: inherit;">...or...</span></p><p style="text-align: left;"><span style="font-family: inherit;">Ten-Four bell 2</span></p></div><div><div><div style="text-align: left;"><span style="font-family: courier;">x x x x x x x x x x x x x x x x x x x x x x x x ...</span></div><div><span style="font-family: courier;">|__-__:__-__:_-_-_-_| |__-__:__-__:_-_-_-_|__-__:__-__:_-_-_-_ ...</span></div></div><div><span style="font-family: courier;"><br /></span></div><div><span style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;">...or something more spacious or kinky to taste.</span></div><div><span style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><br /></span></div><div><span style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;">PS: For those who prefer vocal notation, those patterns again...</span></div><div><span style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><br /></span></div><div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four cross-call, 4-beat to 3-beat ("krunk a dunk - GuDuGu, PaTaPa, go!") </span></div><div style="background-color: #f6f6f6; font-family: courier;"><br /></div><div style="font-size: medium;"><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">Pre. Te Pe . . Gu Du Gu . Pa Ta Pa </div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__.__-__.__-__.__|__.__-__.__|__.__-__.__</div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four pattern 1 (jembe, alternating hands)</span></div><div><br /></div><div><div>Gu . Pe Te Pe . Pre. Pe Te Pe . Gu . Gu . Pe Te Pa .</div><div>|__.__-__.__-__.__|__.__-__.__-__.__|__.__-__.__-__.__-__.__</div><div><br /></div></div></div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four pattern 2</span> (jembe, alternating hands)</div><div><br /></div><div><div><div>Gu . Pe Te Pe . Pe Te Pe Te Pe . Pe Te Pe Te Pa . Pa .</div><div>|__.__-__.__-__.__|__.__-__.__-__.__|__.__-__.__-__.__-__.__</div><div><br /></div></div></div></div><div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four pattern 3 (jembe, fixed hands)</span></div><div><br /></div><div><div><div>Gu . Gu . Ta . Gu . Gu . Ta . Gu Gu Ta . Gu Gu Ta .</div><div>|__.__-__.__-__.__|__.__-__.__-__.__|__.__-__.__|__.__-__.__</div><div><br /></div></div></div></div></div><div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: inherit;">Ten-Four "Jan Pierewiet" 3-beat</span></div><div style="background-color: #f6f6f6; font-size: 12.87px;"><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><br /></div><div><div><span style="font-family: courier;">Gu . Pe Te Pa . </span></div><div><span style="font-family: courier;">|__.__-__.__-__.__</span></div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><br style="font-family: courier;" /></div></div></div><div style="background-color: #f6f6f6; font-size: 12.87px;"><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four 4-beat</span></div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><div><br /></div><div><div><span style="font-family: courier;">Gu . Gu . Pe Te Pe . </span></div><div><span style="font-family: courier;">|__.__-__.__-__.__</span><span style="font-family: courier;">-__.__</span></div><div><br style="font-family: courier;" /></div></div></div><div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><span style="font-family: inherit;">Ten-Four pattern -1 (jembe, alternating hands)</span></div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><br /></div><div><div><span style="font-family: courier;">Pe Te Pe . Gu . Pe Te Pe . Pre. Pe Te Pe . Gu . Gu . </span></div><div><span style="font-family: courier;">|__.__-__.__-__.__|__.__-__.__-__.__|__.__-__.__-__.__-__.__</span></div><div style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif;"><br style="font-family: courier;" /></div></div></div></div><div><span style="font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;">Enjoy!</span></div></div></div></div></div></div></div></div></div></div></div>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com3tag:blogger.com,1999:blog-11573761.post-66257714445358022962022-08-16T05:22:00.003-07:002022-08-16T05:33:08.315-07:00PB Session 15 Aug 2022<p>These are the patterns we played as the PB Drummers 15 August 2022, and what we can learn from them! Notation is described <a href="http://cquirke.blogspot.com/2022/05/jembe-notation-redux.html">here</a>, with the reasons for yet another notation <a href="http://cquirke.blogspot.com/2022/05/why-yet-another-jembe-notation.html">here</a>.</p><p>We started with <b>Djina Foli</b>, the "<a href="http://cquirke.blogspot.com/2022/05/some-jembe-patterns.html">space-clearing song</a>" as taught by <a href="http://cquirke.blogspot.com/2022/05/songs-from-tims-session.html">Tim</a> in the city. It's a tough pattern to start with, unless you've played it before; I remember struggling to remember it, especially as Tim makes a point of not really teaching it, but it has a performative purpose. </p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><b>Djina foli </b>space-clearing song; West Africa, 4-beat</p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;">B T B Tt Tt S S B Tt Tt S <br /></span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span></p><p>We play Tim's version, with a couple of tweaks; changing the slaps and tones of the call into a call and response, and using an in-pattern signal to indicate when the call is repeated in the middle of the song, then again at the end.</p><p>Then we did an <a href="http://cquirke.blogspot.com/2022/05/some-jembe-patterns.html">anchor, call and response</a>, which teaches several useful things. I don't know where the main pattern comes from, but I remember Glynnis and Craig from Bevil's circle playing it as a pattern series several years ago. </p><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: inherit;">Anchor (call-and-response game) 4-beat, ends on the next "one"</span></div><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"></p><div style="background-color: #f6f6f6; font-size: 12.87px;"><span style="font-family: courier;"></span></div><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"></p><p style="background-color: #f6f6f6; font-size: 12.87px;"><span style="font-family: courier;">B Tb bTtB </span><span style="font-family: courier;">B Tb bTtB </span><span style="font-family: courier;">B Tb bTtB </span><span style="font-family: courier;"> </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_-_| </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: inherit;">Response A (call-and-response game) 4-beat, follows the "one"</span></div><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"></p><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;"></span></div><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"></p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;"></span></p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;"> TtTtS </span><span style="font-family: courier;"> TtTtS </span><span style="font-family: courier;"> </span><span style="font-family: courier;"> ...<br /></span><span style="font-family: courier;"></span><span style="font-family: courier;">|___--!_| </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><div><span style="font-family: inherit;">Response B (call-and-response game) 4-beat, follows the "one"</span></div><p style="font-family: "Times New Roman";"></p><div style="font-family: "Times New Roman";"><span style="font-family: courier;"></span></div><p style="font-family: "Times New Roman";"></p><p style="font-family: "Times New Roman";"><span style="font-family: courier;"></span></p><p style="font-family: "Times New Roman";"><span style="font-family: courier;"> F F </span><span style="font-family: courier;"> F F ...</span><span style="font-family: courier;"><br /></span><span style="font-family: courier;"></span><span style="font-family: courier;">|_-_-_-_| </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p></div><p>The pattern itself helps break out of the expectation that emphasis beats (in this case, bass) will always fall on the strong hand, as typical beginner patterns tend to leave the weak hand "lazy". I've arranged it as a call-and-response exercise, from which one may learn how to "frame", i.e. to return to the correct point in the flow when existing a solo. </p><p>From the start, we've played 4-beat and 3-beat patterns, and the next exercise is how to switch between these, via my "<b>cross-call</b>". We started with a 4-beat "Baladi pattern 2" (a pattern that goes with Baladi, tho not actually part of Baladi itself)...</p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;">Added to Baladi; Middle-Eastern influence, 3+3+2 4-beat</p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;">B TtT B TtT TtT </span><span style="font-family: courier;">B TtT B TtT TtT </span><span style="font-family: courier;">B TtT B TtT TtT </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_:_</span><span style="font-family: courier;">-_-_:_-_</span><span style="font-family: courier;"> </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><p>...then after the cross-call...</p><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: inherit;">Cross-call, 4-beat to 3-beat ("krunk a dunk - GuDuGu, PaTaPa, go!") </span></div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></div><div style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><div>F Ss BbB SsS (3-beat follows...)</div><div>|_-_-_|_-_|_-_|_-_-_|_-_-_|_-_-_...</div></div><p>...switched to "Jan Pierewiet", an easy 3-beat that feels unambiguously 3/4. </p><p><span style="background-color: #f6f6f6; font-family: inherit; font-size: 12.87px;">Jan Pierewiet 3-beat</span></p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;">B TtS </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> ...<br /></span><span style="font-family: courier;">|_-_-_ </span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_...</span></p><p>The cross-call also starts "Ten Four", which we'll do later; that song preserves the same "simple time" pulse, while teaching how different bar lengths can create a "round" effect. For now, flipping from 4-beat to 3-beat bar lengths without losing the pulse is a good start! One can link any 4-beats to 3-beats via the cross-call; I chose these patterns as they are so similar, also to show how one can extend or truncate patterns to fit different bar lengths.</p><p>Once the 3-beat was rolling as a "1 and 2 and 3 and " 3/4, I threw in some "1 - then 2 - then " swing and "1 and then 2 and then " 6/8 cross-currents, before we blended in Mboshi:</p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: inherit;">Mboshi part 2 (Congo) 3-beat</span></p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;">B B TtS S Tt </span><span style="font-family: courier;">B B TtS S Tt</span><span style="font-family: courier;">B B TtS S Tt</span><span style="font-family: courier;">B B TtS S Tt</span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;"> </span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_...</span></p><p>Next, we did some <b>rumbles</b> and <b>drop-in patterns</b>, as Manan teaches in the city, based mainly on the main pattern from Jembe that we first learn as Bevil's "Pineapple Apricot".</p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;">Jembe pattern 1 (West African) 4-beat</p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><p>Alas, I'm not Manan, so couldn't do the voice signals accurately for the entry timing!</p><p>We did <b>Kuku </b>next, adding two of Bevil's patterns to enjoy how these fit together. The main pattern of Kuku teaches how to hold space in a pattern, without pinching it short; deliberately pinching space (especially between slaps) is how one can signal to speed up the tempo.</p><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><b>Kuku</b>; full moon song, Ivory Coast, 4-beat</div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><br /></div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><div><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">...</span></div><div><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">...<br /></span></div></div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><br /></div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;">Kuku, Bevil's response pattern</div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><br /></div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><div><span style="font-family: courier;">B B S s Ss </span><span style="font-family: courier;">B B S s Ss </span><span style="font-family: courier;">B B S s Ss </span><span style="font-family: courier;"> </span><span style="font-family: courier;">...</span></div><div><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">...<br /></span></div></div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;"><br /></span></div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;">Kuku, Bevil's response-to-response pattern</div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><br /></div><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><div><span style="font-family: courier;"> TtB b B Tt S </span><span style="font-family: courier;"> TtB b B Tt S </span><span style="font-family: courier;"> TtB b B Tt S </span><span style="font-family: courier;">...</span></div><div><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">...</span></div></div><p>We haven't taught the third of these patterns yet, but that's what I was adding in. That pattern is unusual in that it has no beat on the "one", thus useful to teach that oddity.</p><p>We returned to call-and-response with <b>Frooa</b>, an easy 4-beat <a href="http://cquirke.blogspot.com/2022/05/songs-from-tims-session.html">pattern</a> that has two "pass the part" parts, of which we did the first. It also has a nice additional pattern that I added at the end. </p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><b>Frooa</b>; "pass the part", West Africa, 4-beat</p><p style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><span style="font-family: courier;">B TtB S </span><span style="font-family: courier;">B TtB S </span><span style="font-family: courier;">B TtB S </span><span style="font-family: courier;">B TtB S </span><span style="font-family: courier;">B TtB S </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><div style="background-color: #f6f6f6; font-family: Trebuchet, "Trebuchet MS", Arial, sans-serif; font-size: 12.87px;"><p>Frooa; passed part 1</p><p><span style="font-family: courier;">TtTtS S </span><span style="font-family: courier;">B TtB S </span><span style="font-family: courier;"><b>TtTtS S </b></span><span style="font-family: courier;">B TtB S </span><span style="font-family: courier;">B TtB S </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">1_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;"><b>1_-_-_-_</b></span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p></div><p>Whereas "anchor, call and response" teaches how to drop in from not playing, and correctly frame for exit, Frooa's "pass the part" teaches how to switch patterns mid-flow, and how to still hear one pattern in your head while playing something else!</p><p>We ended the session with bells, then "Bevil's Song" <span style="font-family: inherit;">(sequential parts, change on hand-wave), 4-beat...</span></p><div><div><span style="font-family: courier;">B B Tt B </span><span style="font-family: courier;">B B Tt B </span><span style="font-family: courier;">B B Tt B ...</span></div><div style="font-family: courier;">|_-_-_-_|_-_-_-_ |_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_...</div><div style="font-family: courier;"><br /></div><div><div style="font-family: courier;">B B Tt B Ss B B Tt B Ss B B Tt B Ss ...</div><div style="font-family: courier;">|_-_-_-_|_-_-_-_ |_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_...</div><div style="font-family: courier;"><br /></div><div style="font-family: courier;"><div>B B Tt B TtTt B B Tt B TtTt B B Tt B TtTt ...</div><div>|_-_-_-_|_-_-_-_ |_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_...</div><div><br /></div></div><div><div style="font-family: courier;">B B Tt B TtTtTt B B Tt B TtTtTtB B Tt B TtTtTt...</div><div style="font-family: courier;">|_-_-_-_|_-_-_-_ |_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_...</div><p style="text-align: left;"><span style="font-family: inherit;">...brought the session to a close.</span></p></div></div></div><p><br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-77093356224646590942022-08-12T01:30:00.000-07:002022-08-12T01:30:10.721-07:00Emaul Attackments: .HTM vs. .PDF Risk<p>My bank used to send statements via email as .PDF, but now sometimes switch to .HTM(L) file attachments instead. Here's why that's an elevation of risk...</p><p>Both HTML and .PDF files can contain auto-running JavaScript, elevating the risk from "reading a document" to "running a program". But whereas one can (and should) disable JavaScript in Acrobat Reader, it's <a href="https://www.enablejavascript.io/en/how-to-enable-javascript-on-microsoft-edge">impractical</a> to do that for the web browsers that typically "open" HTML files. </p><p>Microsoft's Chromium-based Edge <a href="https://docs.microsoft.com/en-us/deployedge/microsoft-edge-pdf">does</a> <a href=" https://techhelpnotes.com/execute-javascript-in-pdf-file-in-ms-edge-2/">not</a> <a href="https://m365admin.handsontek.net/microsoft-edge-pdf-support-for-javascript-and-xml-forms-architecture-xfa-based-forms/">run</a> JavaScript in .pdf files, at least <a href="https://www.zdnet.com/article/microsoft-edge-gets-better-support-for-web-apps-and-pdfs/">as at</a> August 2022, so these files are still safer than HTML even if "opened" in Edge.</p><p>Inspecting the bank's HTML "statement" in Notepad shows JavaScript followed by an encrypted mass of content, which could be (and do) anything. Here's the start of a "real" bank statement "document"...</p><p><span style="font-family: courier;">-script type="text/javascript"-<br />document.write(decodeURIComponent(atob('JTNDaHRtb... </span></p><p>...munged to invalidate HTML syntax for safety; here's a suspected malware sample...</p><p><span style="font-family: courier;">-script type="text/javascript"-<br />document.write(decodeURIComponent(atob('JUVGJUJCJUJGJT...</span></p><p>...can you tell the difference? Why should I have to trust embedded code to "read a statement"?</p><p>Automated messages containing attachments and/or links are always hi-risk, as it's so easy to forge what the recipient sees as "message text" - and already I see fake "email statements" from "my bank", given the message dates don't correlate with statements as seen via the bank's web site.</p><p>So, let's hope the bank re-thinks this strategy, rather than reprise "<a href="http://cquirke.blogspot.com/2006/09/banking-on-java.html">Banking On Java</a>"</p><h3 style="text-align: left;">The HTML problem</h3><p>Using HTML everywhere as "rich text" for "documents" started with the "everything is a web page" mania of Windows 98, where HTML Application files (.hta) abounded, and HTML Templates (Folder.htt) were dropped into file system directories and namespace folders to create a "web" look. This was when Internet Explorer was meshed deeply into Windows, to support Microsoft's claims it was not a separate bundled program competing unfairly with Netscape. HTML also became the new .chm Help at this time.</p><p>Using HTML as rich text for "documents" creates a wide safety gap between the low skills needed to use a system, and the higher skills needed to use it safely. The seeds of this lie in the <a href="https://en.wikipedia.org/wiki/Object-oriented_programming">Object</a> <a href="https://www.techtarget.com/searchapparchitecture/definition/object-oriented-programming-OOP">Oriented</a> <a href="https://www.freecodecamp.org/news/object-oriented-programming-concepts-21bb035f7260/">Programming</a> concept, where "documents" are "<a href="https://gomakethings.com/everything-is-an-object-in-javascript/">objects</a>", and all objects can have Methods (code) and Properties (variables). Normal programming practice is to interface with such objects by asking their methods to expose their internals - and so "reading a document" becomes "run code".</p><h3 style="text-align: left;">JavaScript</h3><p>How <a href="https://heimdalsecurity.com/blog/javascript-malware-explained/">risky</a> is <a href="https://security.stackexchange.com/questions/20140/javascript-malware-how-does-it-work-and-how-can-it-be-mitigated">JavaScript</a> - doesn't it just work safely within a single document or page? Well, it's powerful enough to be the sole code for Progressive Web Apps, that are expected to become ubiquitous as the "desktop" programs we use today - and <a href=" https://therecord.media/new-javascript-malware-works-as-a-rat-dispenser/">malware</a> <a href="https://www.bleepingcomputer.com/news/security/stealthy-new-javascript-malware-infects-windows-pcs-with-rats/">use</a> is <a href="https://itnext.io/how-companies-are-hacked-via-malicious-javascript-code-12aa82560bdc?gi=7d1949bbd5fa">already</a> <a href="https://github.com/HynekPetrak/javascript-malware-collection">rife</a>.</p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-85907272214298987232022-06-16T02:52:00.001-07:002022-06-17T00:47:01.967-07:00Rewinding a Computer<p>Here's a thought experiment, based on a simple computer a la Turing. Start with three parts:</p><p></p><ul style="text-align: left;"><li>Read-Only Memory (populated with code)</li><li>Processor (interprets code, a la Turing)</li><li>RAM Memory (empty)</li></ul><p></p><p>Consider the ROM as the input, the RAM as the output, and the processor as the functional engine. Add to this, a clock to sequence the processor's interpretation of the ROM, and a known start point to run the code. There are no external inputs, so everything that happens in the RAM is purely the result of the code in the ROM - thus dependent on the nature of the processor, and contents of ROM.</p><p>Consider the system as a pair of 3D cubes, with the following axes:</p><p></p><ul style="text-align: left;"><li>X axis, data in memory cells</li><li>Y axis, address of memory cells</li><li>Z axis, states at successive clock pulses</li></ul><p></p><p>As such, the ROM (input) would be the same 2D X x Y array repeated for all clock pulses along the Z axis, whereas the RAM would start off as undefined (or zero, if we assume empty cells to hold that value) until completely or partially painted in by code activity.</p><p>The simple case is where code interpretation is limited to the ROM; the larger case is where code within writable RAM can also be interpreted. The overall code will either:</p><p></p><ol style="text-align: left;"><li>Continue running indefinitely (open system, e.g. the irrational number Pi)</li><li>Fall into a repeating loop (closed, e.g. 1/3 expressed in decimal)</li><li>Stop (closed. e.g. 1/100 expressed in decimal)</li></ol><p></p><p>We'll avoid the Halting Problem by assuming case (3) for starters, which may also require us to consider only the simple case, where only the code in the ROM is interpreted. Now, the questions...</p><p></p><ul style="text-align: left;"><li>If we gather only the full 3D X-Y-Z array of the RAM, can we deduce the ROM?</li><li>If we know both 3D RAM and 2D ROM arrays, can we deduce the processor?</li><li>Do these answers change, if pre-used ("empty") RAM values are known?</li><li>Do these answers change, if pre-used RAM values remain flagged?</li></ul><p></p><h3 style="text-align: left;">The elephant in the room</h3><p>The processor can be considered a complicated operator that takes an input value, and produces an output value - but if each output value may arise from different inputs, then the processor is not a function - it is "blurry", in the same sense that quantum particles are blurred as waves.</p><p>We manufacture our processors, i.e. they arise from a template of arbitrary pattern, as opposed to "crafted" (one-off creation with no template retained for re-use). In contrast, "naturally-arising" processors may grow from a recursive self-similarity basis, which we may expect to be easier to derive from the output.</p><h3 style="text-align: left;">Examples</h3><p>One example would be the ZX Spectrum running a program that ignores external inputs. This 1982 home computer had a 16k ROM, either 16k or 48k or RAM, and a Zilog Z80 processor clocked at 3.5MHz, 16-bit addressing, 8-bit data bus. So, the "size" of the system would be 0-65535 on the Y axis, 0-255 on the X axis, and 3.5 million x seconds to end of runtime on the Z axis.</p><p>That's a far larger computational mass than the initial program "seed", so needs a larger computer to fully model it; so far, so in keeping with our info-theory, and probably doable on today's hardware.</p><p>Another example is how the genotype is converted to the phenotype, where the nature of the processor is largely unknown. Ironically, the way "ROM" DNA is read to run-time mRNA, for ribosomes to "knit" mRNA into protein threads, is closer to Turing's endless-tape model than our Z80 processor!</p><h3 style="text-align: left;">Reverse computing is hard</h3><p>It always seems harder to reverse computing, as seen through a series of problems successively conquered as our computational power grows. OCR is harder than printing fonts, speech recognition is harder than text-to-speech, etc. In each of these models of the external "real world", the generated output is easier to read than the "real thing", as it's quantized into a narrower set of possibilities.</p><p>This applies to attempts to understand the universe, via models that need the "It's as if..." disclaimer, rather than the unwarranted arrogance of "It is...". We can only model the universe in our heads (including peer-to-peer and computational extensions thereof); the universe itself can only be passed by value (the part we experience, as local copy), not by reference (complete, writable).</p><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p><p><br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-71029564882564034252022-06-03T03:34:00.001-07:002022-06-03T03:34:35.661-07:00Disable ALL WiFi Auto-Connect!<p>Windows 10 and 11 both duhfault to auto-connecting every "secure" WiFi network they can detect, relying on the absence of "remembered" key to block unintended connections. This logic is often expressed in <a href="https://answers.microsoft.com/en-us/windows/forum/all/disabling-the-auto-connecting-of-unknown-networks/74ef2d68-e047-4d81-a08d-f4fbdc1def63">forum</a> <a href="https://answers.microsoft.com/en-us/windows/forum/all/wifi-automatic-connect-options/bd84e0cb-a926-49cc-b24b-f8a9dcc33ed2">threads</a>, when folks post that they want to stop <i>all</i> WiFi Auto-Connect, rather than <a href="https://www.makeuseof.com/stop-windows-10-automatically-connecting-to-wi-fi-network/">stepping</a> <a href="https://www.faqforge.com/windows/windows-10/disable-automatic-wi-fi-connections-windows-10/">on</a> <a href="https://www.thewindowsclub.com/stop-windows-10-from-connecting-automatically-to-wi-fi-network">ants</a> one at a time, or disabling the WiFi adapter. </p><p>Even when command-line methods are offered, they all involve naming the specific WiFi network you want to "fix"; useless for control over <i>all </i>networks that may be discovered, other than the few you may want to actually use.</p><p>As it is, you can't access Properties for a WiFi network until it's connected, so you can't even attempt to UNcheck "yes, let's stick our fingers in the electricity socket without asking first". Not having they key to connect may prevent unwanted connections, but also places that network beyond Settings control. Entering a key to connect to an unwanted network may let you in to its Properties and thus ability to UNcheck "Auto-connect when in range", but now you have the risk of a "remembered" key. Either way, you're forced to take more risk than should be the case.</p><h3 style="text-align: left;">Cannot connect to this network</h3><p>I suspect this behavior may be a cause of the "Cannot connect to this network" problem. In my case, I have a distant main router and a closer slave router; the slave hosts two WiFi networks, one of which is limited to Internet access only, for safer guest use. All three WiFi networks use WPA2, but the "full access" slave router WiFi network has never had a key entered. None of these networks are to "Auto-connect", but without the key, this setting cannot be applied to the full-access slave router network.</p><p>Sometimes (no predictable pattern) when starting a laptop close to the slave router, manually connecting the guest network will fail with a "Cannot connect..." message. All other "secure" networks within range are found defaulted to [x] Connect Automatically, and clearing these checkboxes does not "stick".</p><p>Sometimes temporarily checking Auto-connect for the intended connection will work; other times, nothing works short of "just" restarting Windows. The same intermittent failure pattern affects two different Win10 laptops, set up in the same way. When connected via (unwanted) Auto-connect, clearing the Auto-connect checkbox sometimes drops the connection and the whole mess starts again.</p><h3 style="text-align: left;">Meta-bug</h3><p>Lacking a way to set behavior of newly-spawned entities, before they are spawned, is a common meta-bug that often creates exploit opportunities. This WiFi issue is just another instance of this meta-level bug.</p><p>Windows has become hell-bent on connecting to the Internet, from OOBE's lure of "a little WiFi here...", the constant pressure to "just" auto-sign in to an online Microsoft Account, and the duhfault behavior of all "secure" WiFi networks to auto-connect on the basis that a missing key is safety enough.</p><p>I wish Microsoft would respect the "My" in "My Computer", and at least offer solid settings to stay off networks and the Internet until this is initiated by the user!</p><p><br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-85740678725859079382022-05-22T02:21:00.005-07:002022-05-23T06:11:26.033-07:00Songs from Tim's Session<p>We took our village jembe group to the city for the first time, dropping in on Tim's session, where we jumped into over a dozen songs. Here's <a href="http://cquirke.blogspot.com/2022/05/jembe-notation-redux.html">notation</a> for the patterns we played...</p><p><b>Djina foli </b>space-clearing song; West Africa, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B T B Tt Tt S S B Tt Tt S <br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span></p><div>End call for above</div><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><span style="background-color: transparent; font-family: courier;">F Ss S sS </span><span style="background-color: transparent; font-family: courier;">SsSsS TtTtT </span><span style="background-color: transparent; font-family: courier;"> SsSsS </span><span style="background-color: transparent; font-family: courier;"> TtTtT B T B.</span><br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><span style="font-family: courier;">|_-_-_-_|_-_|_-_-_-_|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_|_-_-.</span></span></p><div><b>Jembe</b>; West Africa, 4-beat</div><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p><b>Sabari</b>; Woman's Song, Mali, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B SsTtB Ss sSs </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B SsTtB Ss sSs</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B SsTtB Ss sSs</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>Funky Samba; South America, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">T T B t t bBbB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">T T B t t bBbB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">T T B t t bBbB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p><b>Baladi</b>; Middle East, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B TtS B TtS Ts </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B TtS B TtS Ts</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B TtS B TtS Ts</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_!_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_!_-!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>Added to Baladi; Middle-Eastern influence, 3+3+2 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtT B TtT TtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtT B TtT TtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtT B TtT TtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_:_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">-_-_:_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>Added to Baladi; solo pattern, 4-beat; original "fixed hands"...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tB tB B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tB tB B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tB tB B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|___--!_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>...or Tim's alternating hands</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tb tB B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tb tB B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tb tB B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|___--!_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>Added to Baladi; exit solo pattern, fixed hands...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BBsBBsB B Ss Ss </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BBsBBsB B Ss Ss </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BBsBBsB B Ss Ss </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_!_-!-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>...or Tim's alternating hands</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BbSbBsB B Ss sS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BbSbBsB B Ss sS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BbSbBsB B Ss sS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><div><b>Tiriba</b>; dance song, Guinea, 3-beat</div><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B tS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtT S Bs bS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtT S Bs bS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtT S Bs bS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtT S Bs bS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SbTtBs bTt </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SbTtBs bTt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SbTtBs bTt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B SbTtBs bTt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p>Tiriba pattern 3 again, lazy-hands for less "shoulder-burn"</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B sBtTbS BtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B sBtTbS BtT</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B sBtTbS BtT</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B sBtTbS BtT</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_!_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|!_-__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p><b>Maraka</b>; warrior's song, Mali, 3-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtS BsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtS BsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtS BsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtS BsTtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|!-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p>Maraka call "gu-za pe-ta" pattern...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S Ts b </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S Ts b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S Ts b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S Ts b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S Ts b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S Ts b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S Ts b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-__ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p>...same as above, driving the pulse from strong hand...</p><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S tS b </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S tS b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S tS b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S tS b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S tS b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S tS b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S tS b</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__!__ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__!__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__!__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__!__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__!__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__!__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__!__</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></div><p>Maraka response "triplet trick" pattern</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtTbSs </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtTbSs</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtTbSs</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtTbSs</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtTbSs</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtTbSs</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtTbSs</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|__-!! </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">_!!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">_!!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">_!!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">_!!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">_!!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">_!!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p><b>Frooa</b>; "pass the part", West Africa, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><div><p>Frooa; passed part 1</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">TtTtS S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><b>TtTtS S </b></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">1_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><b>1_-_-_-_</b></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p></div><div><p>Frooa; passed part 2...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">TtTtS S T S TtTtS S S S S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">2_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span></p></div><div>...in context:</div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></span></div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><b>TtTtS S T S TtTtS S S S S </b></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B TtB S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></div><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><b><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">2_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span></b><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p><b>Sofa</b>; warrior's song (narrative solos?), Mali, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">TtTt S Ss Sb S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">TtTt S Ss Sb S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">TtTt S Ss Sb S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><div>Sofa accompaniment; "Is; it is what it is", 4-beat</div><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S sS Tt </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S sS Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S sS Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S sS Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">S sS Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p>Sofa Solo 1; a child's idea of battle?</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtS BtS BtStBtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtS BtS BtStBtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">BtS BtS BtStBtS </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p><b>Fanga</b>; West African, "Ashe Ashe" vocal, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B t tT B B Tt </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B t tT B B Tt </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B t tT B B Tt </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>Fanga after-break instrumental pattern, de-emphasising bass </p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B bB TtB B B Tt </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B bB TtB B B Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B bB TtB B B Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_!!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_!!</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p><b>Shangaan</b>; jembe adaptation of Southern African stick-drumming song, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B T b TtTtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B T b TtTtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B T b TtTtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>Shangaan "second round" pattern...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> TtTtB B t B Bt tB BtB <br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span></p><p>...both "round" parts in context...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B T b TtTtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B T b TtTtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B T b TtTtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B T b TtTtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> TtTtB B t B Bt tB BtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> TtTtB B t B Bt tB BtB ...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p>Shangaan "dotted-time" solo...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">TtStTsTtStTsTtStTtStTsTtS BtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_!_-!-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-!-_!_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_!_-!-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></p><p>...without the "ghost tones" for pulse-count timing...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> S s S s S S s S BtB </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p>...variant of above...</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">TtS s S s Ss S s S tB B </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><p><b>Qwenu</b>; dance song, Ghana, 4-beat</p><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">b TtT b T b T </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">b TtT b T b T </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">b TtT b T b T </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p><div><p><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt Tt </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt Tt</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></p></div><div><b>Wamila</b>; celebration song, Ghana, "Balobi" and "Aiii-ya" vocal, 4-beat</div><div><br /></div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt tT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt tT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt tT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt tT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt tT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_...</span></div><div><b><br /></b></div><div><b>Barawieliele (</b>"Let The Work Begin"); West Africa, 4-beat</div><div><br /></div><div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B BtB T B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B BtB T B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B BtB T B TtTtT </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></div></div><div><b><br /></b></div><div><b>Kuku</b>; full moon song, Ivory Coast, 4-beat</div><div><br /></div><div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B Tt S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span></div></div><div><br /></div><div>Kuku, Bevil's response pattern</div><div><br /></div><div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B S s Ss </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B S s Ss </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">B B S s Ss </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span></div></div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"><br /></span></div><div>Kuku, Bevil's response-to-response pattern</div><div><br /></div><div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> TtB b B Tt S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> TtB b B Tt S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;"> TtB b B Tt S </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...</span></div><div><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_ </span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">|_-_-_-_</span><span style="background-color: #f6f6f6; font-family: courier; font-size: 12.87px;">...<br /></span></div></div><div><br /></div><p>Some of these songs have more patterns that we will come to in time!</p><p><br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-33613156169915511792022-05-20T04:33:00.001-07:002022-05-20T04:33:57.393-07:00Lesson 0: A Simple Pulse<p>If interested in hand drumming, you can start here, before you even see a jembe!</p><p>To get started with "big beats", just walk - your feet will play <a href="https://www.kindpng.com/imgv/JTRiTJ_beths-music-notes-crotchets-hd-png-download/">crotchets</a> as you do so, and we can notate that as...</p><p><span style="font-family: courier;">F f F f F f F f F f F f F f F f ...<br />|_-_-_-_-_-_</span><span style="font-family: courier;">-_-_-_-_</span><span style="font-family: courier;">-_-_-_-_-_-_</span><span style="font-family: courier;">...</span></p><p>...where F = strong foot, f = weak foot (usually corresponding with strong and weak hands; more folks are right-handed than left-handed). These "big beats" are what you stomp to, when listening to "doef" dance music. Foot stomping and walking on the spot don't work for me, as well as an unbounded natural walk!</p><p>Your two hands are more agile, and can play twice as fast; try that as you walk, so that each strong hand slaps your body whenever one of your feet hit the ground. Using H and h for hands, we have:</p><p><span style="font-family: courier;">HhHh</span><span style="font-family: courier;">HhHh</span><span style="font-family: courier;">HhHh</span><span style="font-family: courier;">HhHh</span><span style="font-family: courier;">HhHh</span><span style="font-family: courier;">Hh</span><span style="font-family: courier;">HhHh</span><span style="font-family: courier;">Hh</span><span style="font-family: courier;">HhHh</span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">F f F f F f F f F f F f F f F f ...<br /></span><span style="font-family: courier;">|_-_-_-_-_-_</span><span style="font-family: courier;">-_-_-_-_</span><span style="font-family: courier;">-_-_-_-_-_-_</span><span style="font-family: courier;">...</span></p><div><span style="font-family: inherit;">More opportunities to practice; anywhere you are standing sitting is good, using your legs, sink, steering wheel etc. as the "drum skin". </span></div><div><span style="font-family: inherit;"><br /></span></div><div><span style="font-family: inherit;">Practice alternating hands evenly, for your first pulse; just as sitting on a motorcycle is an essential skill before anything else, so this is to drumming!</span></div><div><span style="font-family: inherit;"><br /></span></div><div><span style="font-family: inherit;"><br /></span></div>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-3580724943014708862022-05-18T04:02:00.006-07:002022-05-18T07:54:01.270-07:00Some Jembe Patterns<p><a href="http://cquirke.blogspot.com/2022/05/jembe-notation-redux.html">Notation</a> for some jembe patterns from our circle...</p><p>Pineapple Apricot (thanks, Bevil) 4-beat</p><p><span style="font-family: courier;">B TtTtT </span><span style="font-family: courier;">B TtTtT</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtTtT</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtTtT</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtTtT</span><span style="font-family: courier;"> ...<br /><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></span></p><p>Jembe pattern 1 (West African) 4-beat</p><p><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">B SsTtS </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><p><span style="font-family: inherit;">Pa ta boom 2-beat (also part of Jembe song)</span></p><p><span style="font-family: courier;"></span></p><p><span style="font-family: courier;">B Tt Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt...<br /></span><span style="font-family: courier;">|_-_ </span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_...</span></p><div><span style="font-family: inherit;">Pa ta boom boom boom 4-beat</span></div><div><span style="font-family: courier;"><p style="font-family: "Times New Roman";"><span style="font-family: courier;">B TtB TtB B B Tt </span><span style="font-family: courier;">B TtB TtB B B Tt</span><span style="font-family: courier;">B TtB TtB B B Tt</span><span style="font-family: courier;">...<br /><span style="font-family: courier;">|_-_-_-_|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_|_-_-_-_...</span></span></p></span></div><p><span style="font-family: inherit;">Jan Pierewiet 3-beat</span></p><p><span style="font-family: courier;">B TtS </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> ...<br /></span><span style="font-family: courier;">|_-_-_ </span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_...</span></p><p><span style="font-family: inherit;">6-8 triplets 3-beat</span></p><p><span style="font-family: courier;">BtTbTt </span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt...<br /></span><span style="font-family: courier;">|__-__ </span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__...</span></p><p><span style="font-family: inherit;">Gun gun pete 3-beat</span></p><p><span style="font-family: courier;">B B Tt </span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt...<br /></span><span style="font-family: courier;">|_-_-_ </span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_...</span></p><p><span style="font-family: inherit;">Mboshi part 2 (Congo) 3-beat</span></p><p><span style="font-family: courier;">B B TtS S Tt </span><span style="font-family: courier;">B B TtS S Tt</span><span style="font-family: courier;">B B TtS S Tt</span><span style="font-family: courier;">B B TtS S Tt</span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;"> </span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_...</span></p><p><span style="font-family: inherit;">Kuku pattern 1 (West African) 4-beat</span></p><p><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">B Tt S </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">...</span></p><div><span><p style="font-family: "Times New Roman";"><span style="font-family: inherit;">Kuku pattern a la Bevil (West African) 4-beat</span></p><p style="font-family: "Times New Roman";"><span style="font-family: courier;">B B S s Ss </span><span style="font-family: courier;">B B S s Ss </span><span style="font-family: courier;">B B S s Ss </span><span style="font-family: courier;"> </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;"> </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><div><span style="font-family: inherit;">Anchor (call-and-response game) 4-beat, ends on the next "one"</span></div></span></div><p></p><div style="-webkit-text-stroke-width: 0px; color: black; font-family: "Times New Roman"; font-style: normal; font-variant-caps: normal; font-variant-ligatures: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration-color: initial; text-decoration-style: initial; text-decoration-thickness: initial; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;"><span style="font-family: courier;"></span></div><p></p><p style="-webkit-text-stroke-width: 0px; color: black; font-family: "Times New Roman"; font-style: normal; font-variant-caps: normal; font-variant-ligatures: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-decoration-color: initial; text-decoration-style: initial; text-decoration-thickness: initial; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;"><span style="font-family: courier;">B Tb bTtB </span><span style="font-family: courier;">B Tb bTtB </span><span style="font-family: courier;">B Tb bTtB </span><span style="font-family: courier;"> </span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_-_| </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><div><span style="font-family: inherit;">Response A (call-and-response game) 4-beat, follows the "one"</span></div><p></p><div><span style="font-family: courier;"></span></div><p></p><p><span style="font-family: courier;"></span></p><p><span style="font-family: courier;"> TtTtS </span><span style="font-family: courier;"> TtTtS </span><span style="font-family: courier;"> </span><span style="font-family: courier;"> ...<br /></span><span style="font-family: courier;"></span><span style="font-family: courier;">|___--!_| </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><div><span><div><span style="font-family: inherit;">Response B (call-and-response game) 4-beat, follows the "one"</span></div><p style="font-family: "Times New Roman";"></p><div style="font-family: "Times New Roman";"><span style="font-family: courier;"></span></div><p style="font-family: "Times New Roman";"></p><p style="font-family: "Times New Roman";"><span style="font-family: courier;"></span></p><p style="font-family: "Times New Roman";"><span style="font-family: courier;"> F F </span><span style="font-family: courier;"> F F ...</span><span style="font-family: courier;"><br /></span><span style="font-family: courier;"></span><span style="font-family: courier;">|_-_-_-_| </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><div><span style="font-family: inherit;">(Note: I have not checked the timing accuracy of the following, via <a href="http://www.threechords.com/hammerhead/hotstepper.shtml">HotStepper</a>...)</span></div><div><span style="font-family: inherit;"><br /></span></div><div><span style="font-family: inherit;">4-beat Call ("now we come to the end of the song")</span></div><div style="font-family: courier;"><br /></div><span style="font-family: courier;">F Ss S sS SsS S</span></span></div><div><span><span style="font-family: courier;">|_-_-_-_|_-_-_-_!<br /></span><div style="font-family: courier;"><br /></div><div><span style="font-family: inherit;">Cross-call, 4-beat to 3-beat ("krunk a dunk - GuDuGu, PaTaPa, go!") </span></div><div style="font-family: courier;"><br /></div><div style="font-family: courier;"><div><span>F Ss BbB SsS (3-beat follows...)</span></div><div><span>|_-_-_|_-_|_-_|_-_-_|_-_-_|_-_-_...<br /><div><br /></div></span></div></div><div><span style="font-family: inherit;">3-beat Call ("krunk a dunk a dunk...") </span></div><div style="font-family: courier;"><br /></div><div style="font-family: courier;">F Ss Ss Ss F</div><div style="font-family: courier;">|_-_-_|_-_-_!</div><div style="font-family: courier;"><br /></div><div><span style="font-family: inherit;">Space-clearing song (West African) 4-beat</span></div><div style="font-family: courier;"><br /></div><div style="font-family: courier;">B T B Tt Tt S S B Tt Tt S </div><div style="font-family: courier;">|_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_</div><div style="font-family: courier;"><br /></div><div><div><span><div><span style="font-family: inherit;">Call and responses for above</span></div><div style="font-family: courier;"><br /></div><span style="font-family: courier;">F Ss S sS </span></span></div><div><span><span style="font-family: courier;"> SsSsS </span></span><span style="font-family: courier;"> SsSsS </span><span style="font-family: courier;"> </span></div><div><span style="font-family: courier;"> TtTtT</span><span style="font-family: courier;"> </span><span style="font-family: courier;"> TtTtT</span><span style="font-family: courier;"> </span></div><div><span><span style="font-family: courier;">|_-_-_-_|_-_-_-_|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_!(to song)</span><br /><div style="font-family: courier;"><br /></div><div><span style="font-family: inherit;">Bevil's song (sequential parts, change on hand-wave) 4-beat</span></div></span></div></div><div><div><br /></div><div><span style="font-family: courier;">B B Tt B </span><span style="font-family: courier;">B B Tt B </span><span style="font-family: courier;">B B Tt B ...</span></div><div style="font-family: courier;">|_-_-_-_|_-_-_-_ |_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_...</div><div style="font-family: courier;"><br /></div><div><div style="font-family: courier;"><span style="font-family: courier;">B B Tt B Ss </span>B B Tt B Ss B B Tt B Ss ...</div><div style="font-family: courier;">|_-_-_-_|_-_-_-_ |_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_...</div><div style="font-family: courier;"><br /></div><div style="font-family: courier;"><div><span style="font-family: courier;">B B Tt B TtTt </span>B B Tt B TtTt B B Tt B TtTt ...</div><div>|_-_-_-_|_-_-_-_ |_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_...</div><div><br /></div></div><div style="font-family: courier;"><div><span style="font-family: courier;">B B Tt B TtTtTt </span>B B Tt B TtTtTtB B Tt B TtTtTt...</div><div>|_-_-_-_|_-_-_-_ |_-_-_-_|_-_-_-_|_-_-_-_|_-_-_-_...</div><div><br /></div></div><div><span style="font-family: inherit;">In most of the above, I first show the pattern on its own, then an arbitrary space, then the same pattern as repeated, to show how it may loop back on itself. This is helpful for patterns such as Pa Ta Boom (which actually starts on the "boom") where the tail runs into the next "one".</span></div><div><span style="font-family: inherit;"><br /></span></div></div></div></span></div>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-13835654501317949442022-05-18T02:39:00.003-07:002022-05-18T02:56:01.881-07:00Jembe Notation Redux<p>To read the patterns and songs on this site, you'll need to understand this notation:</p><p>B = strong-hand Bass (open palm in center of drum skin)<br />b = weak-hand Bass</p><p>T = strong-hand Tone (closed flat hand at rim of drum skin)<br />t = weak-hand Tone</p><p>S = strong-hand Slap (hand flick at rim of drum skin)<br />s = weak-hand Slap<br /></p><p>F = two-hand Flam</p><p>Capital letters for strong hand, small letters for weak hand. This doesn't say anything about loud or quiet; look to the line below the hand beats, for the start of the bar (the "one") and the feel of the pulse. </p><p>Try these examples:</p><p><span style="font-family: courier;">B TtTtT </span><span style="font-family: courier;">B TtTtT</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtTtT</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtTtT</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtTtT</span><span style="font-family: courier;"> ...<br /></span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><p><span style="font-family: courier;">B TtS </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B TtS</span><span style="font-family: courier;"> ...<br /></span><span style="font-family: courier;">|_-_-_ </span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_...</span></p><p><span style="font-family: courier;">BtTbTt </span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt</span><span style="font-family: courier;">BtTbTt...<br /></span><span style="font-family: courier;">|__-__ </span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__...</span></p><p><span style="font-family: courier;">B B Tt </span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt</span><span style="font-family: courier;">B B Tt...<br /></span><span style="font-family: courier;">|_-_-_ </span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_</span><span style="font-family: courier;">|_-_-_...</span></p><p><span style="font-family: courier;">B Tt </span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt</span><span style="font-family: courier;">B Tt...<br /></span><span style="font-family: courier;">|_-_ </span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_</span><span style="font-family: courier;">|_-_...</span></p><p><span style="font-family: courier;">B TtB TtB B B Tt </span><span style="font-family: courier;">B TtB TtB B B Tt</span><span style="font-family: courier;">B TtB TtB B B Tt</span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_-_-_-_|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_|_-_-_-_...</span></p><p>You may wonder <a href="http://cquirke.blogspot.com/2022/05/why-yet-another-jembe-notation.html">why we need</a> yet another notation, and why I post patterns here rather than Facebook or WhatsApp?</p><p>I avoid Facebook and WhatsApp so I can use <a href="https://en.wikipedia.org/wiki/Monospaced_font#:~:text=A%20monospaced%20font%2C%20also%20called,and%20spacings%20have%20different%20widths.">fixed-pitched</a> fonts to keep the spacing correct. Almost all web site comment sections can do this, but to do this in WhatsApp, I have to write this...</p><p><span style="font-family: courier;">B Tt<br />|_-_</span></p><p><span style="font-family: inherit;">...like this...</span></p><p><span style="font-family: inherit;">```B Tt```<br />```|_-_```</span></p><p>...which I find too tedious to bother - like going to the pre-<a href="https://en.wikipedia.org/wiki/WYSIWYG">WYSIWYG</a> days of <a href="http://www.wordstar.org/index.php/wsemu-documentation/wsemu-commands-and-menus/1-wordstar-emulator-full-version-command-list">WordStar</a> for DOS.</p><p><br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-37060967363723127542022-05-18T02:14:00.000-07:002022-05-18T02:14:01.174-07:00Why Yet Another Jembe Notation<p>Notation systems abound, so why do we need yet another one? Let's look at what is already out there...</p><h3 style="text-align: left;">Blob and Stave</h3><p>Western classical <a href="https://en.wikipedia.org/wiki/Musical_notation">music notation</a> seems to have evolved on an ad-hoc basis, from notating early vocal church music. This was slow, so the first note <a href="https://en.wikipedia.org/wiki/List_of_musical_symbols">symbols</a> started with a <a href="https://en.wikipedia.org/wiki/Double_whole_note">Breve</a> spanning 2 bars, then dividing down from there to <a href="https://en.wikipedia.org/wiki/Whole_note">Semi-Breves</a>, <a href="https://en.wikipedia.org/wiki/Half_note">Minims</a>, <a href="https://en.wikipedia.org/wiki/Quarter_note">Crotchets</a>, <a href="https://en.wikipedia.org/wiki/Eighth_note">Quavers</a> and halves of those from there.</p><p>All of this happened in the age of the quill pen, a "dot" of which would make a line, rather than a dot. It's remained that way, since ye olde <a href="https://en.wikipedia.org/wiki/Gothic_script">gothic script</a>!</p><p>Notating jembe patterns this way is possible, in the same way running in a scuba suit is possible. Just as those long flippers cripple attempts to run, so the assumption that all note times arise by dividing by two is as crippling for most of the world's rhythms. Dividing the "big beats" of a stomping foot into three instead of two, should not be treated as a "special case"! American attempts to modernize this, actually make things worse; now these note values are described as fractions of a four-four bar, increasing the Western lock-in to what they call the "simple time signatures".</p><p>But the killer issue with this notation, is that one cannot type it in plain text, nor can one read it directly to voice. That's why you don't see music notation symbols here; would require scratching around in fonts that may not be present on systems used to read this post. The same hassle applies to the pretty symbols used by <a href="http://www.moosware.net/PercussionStudio/">Percussion Studio</a>, as adopted for some books of jembe patterns. Next!</p><h3 style="text-align: left;">Vocal Notation</h3><p>West African patterns are traditionally notated as an oral tradition:</p><p>Gun - strong-hand bass (center of drum)<br />Dun - weak-hand bass</p><p>Pe - strong-hand tone (flat hand at rim)<br />Te - weak-hand tone</p><p>Pa - strong-hand slap (hand flick at rim)<br />Ta - weak-hand slap</p><p>Pre - two-hand tone flam<br />Pra - two-hand slap flam</p><p>These phrases alternate in the mouth as easily as their hand actions do on the drum skin; alternating hands is mechanically efficient and thus the most common handing, especially when at the same place on the drum. </p><p>Jembe circles will usually use this method to teach patterns, but it's still clumsy to write; the phrases have different lengths, and a pattern can span much of a line of text. So, not ideal for email.</p><h3 style="text-align: left;">Notation Used Here</h3><p>Western notation is to drumming what Roman numerals are to arithmetic; there's little correlation between spacing on a line, and for what it encodes. It's easy to see that 200 is a bigger number than 18; less obvious when written written as CC vs. XVIII, and the same applies to "blob and stave".</p><p>Most of the less formal notations involve spacing symbols to represent the flow of time, e.g....</p><p>Gun . Pa Ta Pe Te Pa .</p><p>...and as long as one can use a fixed-pitch font (a given in plain text, and nearly every blog comment facility, with Facebook and WhatsApp being abnormally useless in that regard), one can ensure accurate spacing, so that lines of patterns can fit into each other, e.g:</p><p><span style="font-family: courier;">Gun| . |Pa |Ta |Pe |Te |Pa | . |<br />Gun| . |Pe |Te |Gun | . |Pe |Te |</span></p><p>Now we're getting somewhere, but it's still a bit tedious having to space things out and add extra characters to separate stuff. Also, HTML (increasingly used everywhere) is cavalier with white space, so any double spaces are likely to be "optimized" to a single space.</p><p>So on this site, I'll use the following notation, where each instruction is a single character that tells you exactly what to do - what you read is what you do, rather than what you read is what it sounds like, requiring another step to convert that to what you do. Strong-hand actions in Caps, weak-hand actions in lower case, B for bass, T for tone, S for slap and F for flams. Not quite ideal, as F may be tone flams (more common, so the default) or slap flams, but so far, so good!</p><p><span style="font-family: courier;">B_SsTtS_<br />B_TtB_Tt</span></p><p>It's tempting to assume Caps are louder than small letters, but this isn't the case; the weak hand beats are not always quieter, it depends on the pattern. Also, some patterns "wrap around", and that's not easy to see when notated as a single bar, as above.</p><p>We can fix the first problem by adding an optional line under the hand actions, to show the dynamics; also an opportunity to add bar lines, sub-bars where applicable, or numbering for bars if needed.</p><p><span style="font-family: courier;">B_SsTtS_<br />|_-_-_-_</span></p><p><span style="font-family: courier;">B_TtB_Tt<br /></span><span style="font-family: courier;">|_-_-_-_</span></p><p>We fix the second problem by repeating the pattern as played, so it can wrap around: </p><p><span style="font-family: courier;">B_SsTtS_ </span><span style="font-family: courier;">B_SsTtS_</span><span style="font-family: courier;">B_SsTtS_</span><span style="font-family: courier;">B_SsTtS_</span><span style="font-family: courier;">B_SsTtS_...</span><span style="font-family: courier;"><br />|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><p><span style="font-family: courier;">B_TtB_Tt </span><span style="font-family: courier;">B_TtB_Tt</span><span style="font-family: courier;">B_TtB_Tt</span><span style="font-family: courier;">B_TtB_Tt</span><span style="font-family: courier;">B_TtB_Tt...</span><span style="font-family: courier;"><br /></span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_</span><span style="font-family: courier;">|_-_-_-_...</span></p><div>Now we're really getting somewhere! We can use : for sub-bar separators, and ! for especially loud beats... but most of the time, the emphasis line is simply the feel of the time signature.</div><div><br /></div><h3 style="text-align: left;">Examples</h3><p>After a while, just looking at the notation gives clues as to how to approach it. Alternating hands will show as alternating Upper and lower case; playing "primitives" or fixed hands would look different. </p><p>You can also see potential difficulties; patterns that start with a weak hand on the "one", one-drop where the "one" is not played, wrap-arounds where the pattern doesn't end on a space, and challenging hand movements, such as flam-to-bass. Here are some examples...</p><p>4-beat 4-4 Jembe pattern 1<br /><span style="font-family: courier;">B_SsTtS_ </span><span style="font-family: courier;">B_SsTtS_</span><span style="font-family: courier;">B_SsTtS_</span><span style="font-family: courier;">B_SsTtS_</span><span style="font-family: courier;">B_SsTtS_...<br /></span><span style="font-family: courier;">|_-_-_-_ </span><span style="font-family: courier;">1_-_-_-_</span><span style="font-family: courier;">2_-_-_-_</span><span style="font-family: courier;">3_-_-_-_</span><span style="font-family: courier;">1_-_-_-_...</span></p><div>3-beat 3-4 "Jan Pierewiet"<br /><span style="font-family: courier;">B_TtS_ </span><span style="font-family: courier;">B_TtS_</span><span style="font-family: courier;">B_TtS_</span><span style="font-family: courier;">B_TtS_</span><span style="font-family: courier;">B_TtS_</span><span style="font-family: courier;">B_TtS_</span><span style="font-family: courier;">...</span></div><div><span style="font-family: courier;">|_-_-_ </span><span style="font-family: courier;">1_-_-_</span><span style="font-family: courier;">2_-_-_</span><span style="font-family: courier;">3_-_-_</span><span style="font-family: courier;">4_-_-_</span><span style="font-family: courier;">1_-_-_</span><span style="font-family: courier;">...</span></div><div><span style="font-family: courier;"><br /></span></div><div>The above shows how different bar lengths can predictably drift in and out of sync, when played at the same tempo (beat timings)... as long as HTML rendering doesn't "eat spaces". Plain text is best!</div><p>3-beat 3-4 slow "triplet trick"<br /><span style="font-family: courier;">B_t_T_</span><span style="font-family: courier;">b_T_t_</span><span style="font-family: courier;"> </span><span style="font-family: courier;">B_t_T_</span><span style="font-family: courier;">b_T_t_</span><span style="font-family: courier;">B_t_T_</span><span style="font-family: courier;">b_T_t_</span><span style="font-family: courier;">B_t_T_</span><span style="font-family: courier;">b_T_t_</span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">A_-_-_</span><span style="font-family: courier;">B_-_-_</span><span style="font-family: courier;"> </span><span style="font-family: courier;">A_-_-_</span><span style="font-family: courier;">B_-_-_</span><span style="font-family: courier;">A_-_-_</span><span style="font-family: courier;">B_-_-_</span><span style="font-family: courier;">A_-_-_</span><span style="font-family: courier;">B_-_-_</span><span style="font-family: courier;">...</span></p><div>3-beat 6-8 fast "triplet trick"<br /><span style="font-family: courier;">BtTbTtBtTbTt</span><span style="font-family: courier;"> </span><span style="font-family: courier;">BtTbTtBtTbTt</span><span style="font-family: courier;">BtTbTtBtTbTt</span><span style="font-family: courier;">BtTbTtBtTbTt</span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;"> </span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">|__-__</span><span style="font-family: courier;">...</span></div><div><span style="font-family: courier;"><br /></span></div><div>Above you see the difference between 6 divided by 3 for "1 and 2 and 3 and " waltz (3-4) timing, vs. 6 divided by 2 for "1 and then 2 and then " "6-8" timing. Yes, "blob and stave" blows a fuse when asked to divide by 3; we have to count six quavers instead! Given the frequent ambiguity in the most interesting patterns, I prefer to speak of "3 beats" and "4 beats" rather than Western signatures.</div><p><a href="https://en.wikipedia.org/wiki/Bo_Diddley_beat">Bo Diddley</a>-style additive 3+3+2 4-beat 4-4 timing<br /><span style="font-family: courier;">BtTbTtB_ </span><span style="font-family: courier;">BtTbTtB_</span><span style="font-family: courier;">BtTbTtB_</span><span style="font-family: courier;">BtTbTtB_</span><span style="font-family: courier;">BtTbTtB_</span><span style="font-family: courier;">BtTbTtB_</span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|__:__:_ </span><span style="font-family: courier;">|__-__-_</span><span style="font-family: courier;">|__-__-_</span><span style="font-family: courier;">|__-__-_</span><span style="font-family: courier;">|__-__-_</span><span style="font-family: courier;">|__-__-_</span><span style="font-family: courier;">...</span></p><div><span style="font-family: inherit;">A similar additive approach to 3-beat<br /></span><span style="font-family: courier;">TbTTbb </span><span style="font-family: courier;">TbTTbb</span><span style="font-family: courier;">TbTTbb</span><span style="font-family: courier;">TbTTbb</span><span style="font-family: courier;">TbTTbb</span><span style="font-family: courier;">TbTTbb</span><span style="font-family: courier;">TbTTbb</span><span style="font-family: courier;">TbTTbb</span><span style="font-family: courier;">...<br /></span><span style="font-family: courier;">|_:___ </span><span style="font-family: courier;">|_-___</span><span style="font-family: courier;">|_-___</span><span style="font-family: courier;">|_-___</span><span style="font-family: courier;">|_-___</span><span style="font-family: courier;">|_-___</span><span style="font-family: courier;">|_-___</span><span style="font-family: courier;">|_-___</span><span style="font-family: courier;">...</span></div><div><span style="font-family: courier;"><br /></span></div><div>You can see the last pattern breaks the "alternating hands" rule that usually suits symmetrical drumming best. I find for arbitrary timings and pulses, fixed-hands may work better; it also helps drive the divide-by-three pulse, as the strong hand is on the louder beats of the pulse.</div><p>I'll probably post more on pulses and handings later :-)</p><p><br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-30857858509125438962022-05-18T00:34:00.000-07:002022-05-18T00:34:02.656-07:00Jembe Drumming!<p>Starting a new section on jembe drumming, with our local drumming circle in mind; it will be a place to look up the patterns and songs we play, with perhaps some bonus waffle thrown in.</p><p>Most of what I've learned has been via word of mouth, or playing the jembe, which is in keeping with the traditions of the instrument as I understand it.</p><p>The jembe is to hand drumming what the guitar is to toned instruments; it comes from a particular culture, but is such a great instrument that possible uses fan outwards far beyond that starting point!</p><p><br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-75372122357425190772021-08-20T04:17:00.001-07:002021-08-20T04:17:44.548-07:00Egde Changes How URLs are Copy-and-Pasted<p>Edge <a href="https://support.microsoft.com/en-us/microsoft-edge/improved-copy-and-paste-of-urls-in-microsoft-edge-d3bd3956-603a-0033-1fbc-9588a30645b4">changes</a> <a href="https://support.microsoft.com/en-us/microsoft-edge/improved-copy-and-paste-of-urls-in-microsoft-edge-d3bd3956-603a-0033-1fbc-9588a30645b4">how</a> <a href="https://answers.microsoft.com/en-us/microsoftedge/forum/all/introducing-link-format-a-new-copy-and-paste/694e7e5c-5807-490c-907a-1cd0ab6a8cac?rtAction=1629383164048">URLs</a> <a href="https://techcommunity.microsoft.com/t5/articles/announcing-a-new-way-to-paste-urls-link-format/m-p/1600094">are</a> Copied and Pasted, by taking the page's title to overly the actual link as the visible clickable text. </p><h4 style="text-align: left;">Reliability failure</h4><p>How this works in practice, depends on the target application into which the link is Pasted. You may see the actual URL there, as you'd have expected, or the page title as plain text, or (as Edge intended) the page title as clickable text that launches the actual URL if clicked.</p><p>What happens when these new links are Copied and Pasted back into Edge (or elsewhere) may be a second point of failure, or at least breaking the principle of "<a href="https://en.wikipedia.org/wiki/Principle_of_least_astonishment">least</a> <a href="https://www.userfocus.co.uk/articles/the-principle-of-least-surprise.html">surprise</a>". Instead of navigating to the actual URL, you may see search results based on the visible text, if considered invalid as a URL.</p><h4 style="text-align: left;">Exploitability</h4><p>HTML is inherently exploitable, in that arbitrary visible text can "spoof" the hidden underlying URL. This is especially true when the visible text appears to be a valid URL, leading the user to expect this is the actual URL that will be reached when clicking the link. HTML typically applies a blue color and underlines visible characters to indicate a clickable link, but neither of these visible cues apply to whitespace, allowing unexpectedly large click-risk surfaces, spoofing users who click such space to merely select that window or pane.</p><p>The new handling of links by Edge adds opportunities to spoof users, given that Edge is trusting web pages to set how the hidden URL will be presented to the user. When this visible text is valid as a URL. it will automate launching that URL when pasted back into a web browser, which can in turn hide the nature of the exploit. For example, the text "http : / / microsoft.com" over actual URL "http : / / google.com" will correctly launch Microsoft's site when pasted back into a web browser that processes the visible text, but launch the Google site when pasted into a web browser that processes the hidden URL. Try this: <a href="http://google.com">http://microsoft.com</a></p><p>HTML risks had already escalated to include hidden autorunning <a href="https://en.wikipedia.org/wiki/JavaScript">JavaScript</a> and <a href="https://en.wikipedia.org/wiki/ActiveX">ActiveX</a>, when Windows 98 fell in love with the web, to use HTML <a href="https://docs.microsoft.com/en-us/windows/win32/lwef/web-view">everywhere</a> as "rich text"; <a href="https://edu.gcfglobal.org/en/windows98/windows-explorer-and-my-computer/1/">local</a> <a href="http://www.helpwithwindows.com/windows98/start-122.html">folders</a>, <a href="https://en.wikipedia.org/wiki/Active_Desktop">active</a> desktop, .<a href="https://en.wikipedia.org/wiki/Microsoft_Compiled_HTML_Help">chm Help</a> files, Outlook Express and <a href="https://support.microsoft.com/en-us/office/fixes-or-workarounds-for-recent-issues-in-outlook-for-pc-ecf61305-f84f-4e13-bb73-95a214ac1230">Outlook</a> <a href="https://askleo.com/virus-by-looking-at-email/">email</a> "<a href="https://www.datanumen.com/blogs/viruses-can-enter-through-outlook-even-if-you-just-view-a-compromised-email/">message</a> text", etc. Today's "HTML" not only <a href="https://www.techaheadcorp.com/blog/history-of-javascript/">relies</a> on <a href="https://blog.bitsrc.io/a-brief-history-of-javascript-from-netscape-to-frameworks-74bf4774eeef">JavaScript</a>, but can install <a href="https://web.dev/progressive-web-apps/">PWA</a> (Progressive Web Apps) <a href="https://www.creativebloq.com/features/9-amazing-pwa-secrets">that</a> <a href="https://www.goodbarber.com/blog/progressive-web-apps-everything-you-need-to-know-a895/">can</a> <a href="https://developers.google.com/web/ilt/pwa/introduction-to-service-worker">silently</a> <a href="https://developers.google.com/web/fundamentals/primers/service-workers">run</a> <a href="https://developer.mozilla.org/en-US/docs/Web/Progressive_web_apps/Offline_Service_workers">underfoot</a> when the web browser appears to have been "closed".</p><h4 style="text-align: left;">How to turn off the new feature</h4><p>You may want to turn off the new feature, as part of risk management, and several sites give <a href="https://www.theverge.com/21591476/edge-chromium-browser-copy-and-paste-url-hyperlink-default-change-how-to">advice</a> how to do this, <a href="https://www.tenforums.com/tutorials/164477-change-default-behavior-copy-paste-urls-microsoft-edge.html">including</a> via Regedit. This <a href="https://admx.help/">site</a> is especially useful for managing all sorts of settings via Group Policy for sysadmin overlords, or Regedit for the rest of us on Windows Home.</p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhohiKyEXiksgGrRdMdoaNkIwc1z6RO3DcgZD_qk7NjkavdpXe77xtO_qVktgc3fya9GzeiG_gSj6K-AWY2XVGmb3VpYgmwXRhz6PjKKp1HhRIOoTXwFnNhyphenhyphenMmma8NvIvURJy3k/s735/Edge+Settings+Share-Copy-Paste.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Screen grab of Edge, Settings, "Share Copy Paste"" border="0" data-original-height="562" data-original-width="735" height="245" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhohiKyEXiksgGrRdMdoaNkIwc1z6RO3DcgZD_qk7NjkavdpXe77xtO_qVktgc3fya9GzeiG_gSj6K-AWY2XVGmb3VpYgmwXRhz6PjKKp1HhRIOoTXwFnNhyphenhyphenMmma8NvIvURJy3k/w320-h245/Edge+Settings+Share-Copy-Paste.jpg" width="320" /></a></div><br /><p><br /></p><p>So far I haven't seen a Regedit for the extra switch within the visible Edge, Settings, "Share, Copy and Paste" UI, i.e. "Use the format selected above when copying links from within web pages". The text that follows is helpful to tease out what this means; as I understand it, it's links you copy from the page rather than the URL address bar of the browser - and points to the common "grope-ahead" risk scenario, i.e. where software takes risk on behalf of the user, that the user did not indicate an intention to take.</p><h4 style="text-align: left;">Grope-ahead risks</h4><p>For example, if you set the shell to open items with a <a href="https://www.howtogeek.com/657251/how-to-enable-single-click-to-open-icons-on-windows-10/#:~:text=Enabling%20the%20Single%2DClick%20Feature%20in%20Windows%2010&text=Search%20for%20%E2%80%9CFile%20Explorer%2C%E2%80%9D,to%20Select)%E2%80%9D%20radio%20button.">single click</a> (as would happen in a web page), then it's far harder for a user to select a known-malware file to delete it, when the system jumps ahead and "opens" the file (thus running the malware) just because the user selected it.</p><p>The above example exploits by-design vulnerability, and such vulnerabilities take notoriously long to be fixed, if ever they are - e.g. years of auto-running hidden macros in "documents", since Microsoft called the <a href="https://www.f-secure.com/v-descs/concept.shtml">Concept</a> PoC a "<a href="https://kb.iu.edu/d/afxx">prank</a> <a href="https://kb.iu.edu/d/afxv">macro</a>" rather than "<a href="https://ivanlef0u.fr/repo/madchat/vxdevl/vdat/tumisc41.htm">virus</a>", and initially responded by offering a clean-up tool written specifically for Concept, as if there would <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/macro-malware">never</a> be <a href="https://www.youtube.com/watch?v=JoYkbKBlbQk">other</a> <a href="https://en.wikipedia.org/wiki/Macro_virus">macro</a> <a href="https://www.f-secure.com/v-descs/thus.shtml">vir</a>.. uh, "prank macros". </p><p>Grope-ahead risks grow when you consider exploits of code defects; consider the shell's "Preview" pane, indexers, integrated filters that kick in when simply listing files in a folder, etc. The OS behaves like a crawling infant, putting whatever it finds in its mouth to see what they taste like; too bad if it's the wrong end of a loose power cord! This breaks the rule: Do not trust arbitrary content, especially from "the edge".</p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-9256808204109260742021-08-07T03:09:00.002-07:002021-08-07T03:09:50.383-07:00SSD Seen as Hard Drive in Windows 10<p>SSDs may still be seen and treated as hard drives, even in the latest Windows 10, if within a USB housing combined with interface-restricted (e.g. USB 2.0) speed.</p><p>This echoes the old difficulties with <a href="http://cquirke.blogspot.com/2020/11/ssds-and-windows-7.html">SSDs in Windows 7</a>, which we hoped were history. I discovered this unexpected issue when attaching a SATA SSD within USB enclosure via a USB 2.0 powered hub, and suspect two factors are at work; USB blocking SATA storage identification, and the constrained speed causing the <a href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc770542(v=ws.11)">WEI engine</a> to report the storage as "too slow to be an SSD". </p><p>The result; right-clicking the drive and going Tools, Optimize shows Defrag rather than Optimize for the drive letters on the externally-connected SSD.</p><p>You could use this issue to deliberately Defrag an SSD, as may be required to solve an NTFS problem, where there are too many fragmented cluster chains to hold as NTFS <a href="https://en.wikipedia.org/wiki/Extent_(file_systems)">Extents</a>. Hopefully this would be before NTFS has already blindly painted itself into a corner, from which ChkDsk fails to "fix".</p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-61525133610685692492020-11-18T01:24:00.004-08:002020-11-18T01:57:04.445-08:00SSDs and Windows 7<p><i><b>Geek summary</b></i>: This post attempts to collect all you need to use SATA SSD in Windows 7</p><ol style="text-align: left;"><li>Check CMOS Setup SATA is AHCI, not IDE or RAID (no TRIM)</li><li>Check whether SSD is listed for Defrag</li><li>Check/refresh WEI Storage score; should be > 5.9</li><li>Check SuperFetch and PreFetch via Regedit; DWORD 0</li><li>Check SuperFetch via Services; ?Disable</li><li>Admin Cmd: fsutil behavior query disabledeletenotify = 0</li></ol><p style="text-align: left;"></p><p>Windows abstracts <a href="https://blog.elcomsoft.com/2019/01/life-after-trim-using-factory-access-mode-for-imaging-ssd-drives/">SSDs</a> and disk drives together as "storage", although the two technologies are completely different, with different gamuts of strengths and weaknesses. Windows Vista, XP and older will treat SSDs as if they were hard drives, which will shorten their life due to increased write operations.</p><p>Windows 7 can safely use SSDs, but the process is less transparent than it is on Windows 8.x and Windows 10, so you have to <a href="https://web.archive.org/web/20140206154059/http://support.microsoft.com/kb/2727880">dig</a> <a href="https://superuser.com/questions/74896/confirming-that-windows-7-is-using-ssd-optimizations/1088697#1088697">deeper</a> to ensure all is set and working as it <a href="https://www.howtogeek.com/256859/dont-waste-time-optimizing-your-ssd-windows-knows-what-its-doing/">should</a> be.</p><h4 style="text-align: left;">AHCI vs. IDE and RAID <br /></h4>SSDs that connect via <a href="https://www.howtogeek.com/238253/what-is-a-pcie-ssd-and-do-you-need-one/">PCI-e</a> or <a href="http://M.2">M.2</a> slots are beyond the scope of this
post; I <a href="https://www.reddit.com/r/techsupport/comments/48qpun/windows_7_installer_doesnt_recognize_my_m2_ssd/">don't expect</a> Windows 7 to "see" these interfaces at all,
especially if the M.2 <a href="https://www.dell.com/support/article/en-za/sln300689/requirements-to-install-windows-7-on-m2-drives-in-non-volatile-memory-express-nvme-storage-environments?lang=en">SSD</a> is <a href="https://www.ubackup.com/windows-7/install-windows-7-to-nvme-4348.html">NVMe</a>. Motherboards new enough to include
an M.2 slot, are probably "too new" for Windows 7 anyway.<br /><p><a href="https://www.computerhope.com/issues/ch000192.htm">CMOS Setup</a> can set SATA to operate as legacy IDE, AHCI, or RAID. Windows 7 may only apply TRIM via AHCI mode, but switching between these modes may cause the next Windows 7 boot to <a href="https://support.microsoft.com/en-us/help/922976/error-message-occurs-after-you-change-the-sata-mode-of-the-boot-drive">fail</a> on a BSoD, so <a href="https://www.prime-expert.com/articles/a12/change-from-ide-to-ahci-without-reinstalling-windows/">ensure</a> <a href="https://hetmanrecovery.com/recovery_news/how-to-enable-ahci-mode-for-sata-in-the-bios-without-reinstalling-windows.htm">Windows</a> is <a href="https://tunecomp.net/enable-ahci-without-reinstalling-os-windows-10-7/">OK</a> for <a href="https://en.wikipedia.org/wiki/Advanced_Host_Controller_Interface">AHCI</a> before changing this setting in CMOS!</p><p>Note: <a href="https://en.wikipedia.org/wiki/BartPE">Bart PE</a> and Windows XP and older will need "F6 diskette" boot drivers added in order to boot in AHCI mode, else with fail with the same BSoD. </p><p>While in CMOS Setup, you may also want to disable Hot Plugging (eSATA) for SATA ports connecting to internal drives, so these are not shown as "removable" in the Safe To Remove UI. This is far easier than <a href="https://doubtsolver.com/internal-hard-drive-showing-in-safely-remove-hardware/">chasing</a> <a href="https://superuser.com/questions/1010792/internal-hard-drives-showing-as-removable-in-windows-10/1280002">registry</a> <a href="https://www.tenforums.com/drivers-hardware/129585-remove-internal-hard-drive-safely-remove-hardware-eject-media.html">settings</a> <a href="http://etc.">etc.</a> via methods that vary with Windows version, Microsoft vs. Intel drivers, etc. as it fixes the issue at its source.<br /></p><h4 style="text-align: left;">Does Windows 7 see drive as SSD?</h4><p>This is easy to determine; right-click a drive letter, Properties, Tools tab, Defrag, drill into Schedule, Drives, and see if the driver letters from the SSD are listed. If they are, Windows 7 is seeing and treating these as hard drives; bad news! If they are not listed to be selected, they are seen as SSD, OK. </p><p>Note that you'll still see SSD drive letters listed to be manually defragged in Windows 7 - but even if you leave Scheduled Defrag enabled, the SSD won't be defragged automatically, which is good.<br /></p><p>This is where Windows 8.x/10 are so much better; "Defrag" is now "Optimize", each drive is listed as SSD or Hard Drive, and the Optimize operation will show as Defrag or TRIM. But while Windows 7 may have the right clue behind the scenes, everything is still UI'd as if SSDs don't exist!</p><h4 style="text-align: left;">Does Windows 7 see the speed?</h4><p><a href="https://en.wikipedia.org/wiki/ReadyBoost">ReadyBoost</a>, <a href="https://en.wikipedia.org/wiki/Prefetcher">Prefetch</a> and <a href="https://en.wikipedia.org/wiki/Windows_Vista_I/O_technologies#SuperFetch">SuperFetch</a> are storage behaviors that are enabled or disabled according to the detected speed of the storage device. This is tested by the <a href="https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc770542(v=ws.11)">WinSat</a> CLI <a href="https://en.wikipedia.org/wiki/Windows_System_Assessment_Tool">tool</a>, which is in turn called by the <a href="https://www.makeuseof.com/tag/check-windows-experience-score-windows-10/">Windows Experience Index</a> (WEI) UI. Subsystem scores are shown by WEI up to the 7.9 maximum value, but are stored in the registry as decimal integer values; e.g. the typical hard drive score shown as 5.9 is stored in the registry as 59 decimal.<br /></p><p>WinSat and WEI are not updated automatically, so the old hard drive score may persist, causing a newly-added SSD to be treated as if it were a slower hard drive; Prefetch and Superfetch will be enabled to help speed it up, while ReadyBoost will be disabled as the drive will still be considered too slow to speed up anything else.</p><p>There are <a href="https://www.tenforums.com/tutorials/99821-enable-disable-superfetch-windows.html">registry</a> entries to manage <a href="https://tweaks.com/windows/37028/disable-prefetch-for-low-memory-systems/">Prefetch</a> <a href="https://www.technipages.com/windows-enable-disable-superfetch">and</a> <a href="https://www.makeuseof.com/tag/what-is-superfetch/">Superfetch</a>, but in my experience they don't "stick", so it's better to tackle the root of this issue by refreshing the WEI scores. This <b><i><a href="https://www.hanselman.com/blog/the-real-and-complete-story-does-windows-defragment-your-ssd">post</a></i></b> suggests why; the behaviors periodically check the storage speed score and act accordingly, and this may include overriding the registry settings that "control" these behaviors. </p><p>However, manually re-testing the storage speed, either via the WEI UI or digging into WinSat, <a href="https://neosmart.net/wiki/system-restore-the-parameter-is-incorrect/">may</a> <a href="https://forums.anandtech.com/threads/windows-experience-index-error-failed-to-properly-assess-the-disk-the-parameter-is-incorrect.2574041/">fail</a>. <a href="https://www.sevenforums.com/performance-maintenance/134044-wei-error-disc-performance.html">Probable</a> <a href="https://www.sevenforums.com/performance-maintenance/189150-wei-error-failed-properly-access-disk.html">causes</a> <a href="https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/windows-experience-index-error-failed-to-properly/5ea905db-adc0-473e-9a01-f0b74686cf71?auth=1">include</a> boot-time storage filter drivers as part of resident antivirus, and can thus affect Safe Mode, where such drivers remain integrated. There is a <a href="https://support.microsoft.com/en-us/help/2569601/restore-operation-by-using-backup-and-restore-may-fail-in-windows-7-sp">Microsoft</a> <a href="https://support.microsoft.com/en-za/help/2687862/the-parameter-is-incorrect-error-message-when-you-run-winsat-in-window">Hotfix</a> for this, but as it's no longer <a href="https://support.microsoft.com/en-us/windows/this-hotfix-is-no-longer-available-24b7929a-eacd-c259-f6fa-d626aad3236a">available</a> from Microsoft, you have to <a href="http://thehotfixshare.net/board/index.php?showtopic=17231">grope</a> for it <a href="http://thehotfixshare.net/board/index.php?autocom=downloads&showfile=14795">elsewhere</a>. After checking the digital signature and uploading to <a href="https://www.virustotal.com/gui/">VirusTotal</a> for safety, I installed the Hotfix, and WEI then worked without having to uninstall Avast on my client's PC (disabling Avast did not fix the problem).</p><p>I also tried editing the storage score via Regedit; that was ignored, and a good thing too - else "price hero" PC vendors could more easily <a href="https://www.sevenforums.com/tutorials/91911-windows-experience-index-change-score-manually.html">fake</a> these scores to hide poor performance!</p><p>I didn't delve into ReadyBoost, but found <a href="https://docs.microsoft.com/en-us/archive/blogs/markmoro/dipping-my-toe-into-the-xbootmgr-water">these</a> <a href="https://docs.microsoft.com/en-us/archive/blogs/markmoro/xbootmgr-part-2-readyboot-basics">interesting</a> <a href="https://docs.microsoft.com/en-us/archive/blogs/markmoro/slow-windows-7-boot-one-readyboot-fix-that-youll-want-to-apply-probably-anyways">posts</a>. <br /></p><h4 style="text-align: left;">Is TRIM enabled?</h4><p>The following details are from my fuzzy memory, and are not required for
the scope of this "how to" reference; search and read up multiple sources for more accurate information. <br /></p><p>At the SSD firmware level, there is no <a href="https://www.thessdreview.com/daily-news/latest-buzz/garbage-collection-and-trim-in-ssds-explained-an-ssd-primer/">awareness</a> of partitions, file systems, whether things are deleted or not, so any block which has ever been written and/or has non-zero contents, will be preserved by the firmware. Flash memory blocks are large, and the firmware's <a href="https://www.ontrack.com/en-us/blog/wear-leveling">wear-leveling</a> <a href="https://www.atpinc.com/blog/how-SSD-wear-leveling-works">logic</a> may spread writes to unused blocks first, which are also faster to write (hence best out-the-box performance and benchmarks). Eventually, all blocks will have been used (even if the drive has never contained much data), and <a href="https://en.wikipedia.org/wiki/Write_amplification">write amplification</a> may set in.</p><p><a href="https://en.wikipedia.org/wiki/Trim_(computing)">TRIM</a> is an SSD firmware feature that optimizes write operations, by
adding awareness of what blocks need not be preserved and/or can be
erased and/or zero'd out. Windows 7+ can send the firmware "hints" as to what blocks are to be considered deleted, so the firmware can better inform its internal <a href="https://datarecovery.com/rd/garbage-collection-ssd-simple-explanation/">garbage</a> <a href="https://getprostorage.com/blog/ssd-garbage-collection-trim/">collection</a> <a href="https://www.atpinc.com/blog/trim-garbage-collection-ssd-endurance-wai-waf">etc</a>. - but it's a <a href="https://idioms.thefreedictionary.com/you+can+lead+a+horse+to+water%2C+but+you+can%27t+make+it+drink">horse-and-water</a> situation as to whether the firmware will apply these "hints" immediately, enqueue them for action when "idle", lose them from the queue when it fills up before "idle", or ignore them completely.</p><p>Windows 7 sends these hints to the SSD, if this "as admin" command...</p><blockquote><p>fsutil behavior query disabledeletenotify</p></blockquote><p>...returns the value 0. It's far <a href="https://superuser.com/questions/74896/confirming-that-windows-7-is-using-ssd-optimizations/1088697#1088697">harder</a> to <a href="https://www.thessdreview.com/daily-news/latest-buzz/trimcheck-does-your-ssd-really-have-trim-working/">determine</a> whether the SSD firmware is actually doing TRIM at all, and I've not delved into such detail; hopefully we can assume recent SSDs should "just work" for TRIM?</p><p>Windows 7 has no UI to initiate a TRIM (strictly speaking, a "re-trim" operation to send hints to the SSD in the hope its firmware will TRIM). Once again, Windows 8.x/10 are far better at this; the updated "Defrag" (now "Optimize") UI shows SSDs as such, and that it is TRIM rather than Defrag that happens when an SSD is Optimized. These newer OSs also improve the chances that the SSD firmware will actually TRIM, by sending re-trim hints when idle, etc.</p><h4 style="text-align: left;">TRIM, NTFS and Defrag</h4><p>In Windows 10, TRIM requires <a href="https://en.wikipedia.org/wiki/NTFS">NTFS</a>, and presumably this is the case behind Windows 7's opaque UI also. Ironically, the design of NTFS means it needs Defrag, though less often, for different reasons, and with different logic to be effective.</p><p>The SSD itself doesn't need Defrag at all; not only is there no head travel to optimize, the actual location of data within flash memory addressing is most likely scrambled by the SSD firmware wear-leveling logic. TRIM helps clean up the garbage, whereas Defrag just <a href="https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/should-an-ssd-drive-be-defragmented-or-is-trim/253f8082-57ef-477b-bbb4-c9a4bac036e8?auth=1&page=2">moves the garbage around</a>.</p><p>But whereas FAT<i>xx</i> file systems set aside a fixed and duplicated <a href="https://www.ntfs.com/fat-allocation.htm">File Allocation Tables</a> to hold cluster chaining information, NTFS attempts to improve scalability by holding pointers to each <a href="https://en.wikipedia.org/wiki/Extent_(file_systems)">extent</a> (i.e. run of contiguous <a href="https://docs.microsoft.com/en-us/windows/win32/fileio/clusters-and-extents">clusters</a>) within each file or directory's metadata. </p><p>This is fine when the cluster chain is unfragmented; the overhead is the same as a FAT<i>xx</i> directory entry (one pointer, to the start of the cluster chain), effectively dumping the FAT tables for free. But a fragmented file needs an additional metadata pointer for each fragment, and that can bloat the metadata into <a href="https://support.microsoft.com/en-za/help/967351/a-heavily-fragmented-file-in-an-ntfs-volume-may-not-grow-beyond-a-cert">trouble</a>.</p><p>For this reason, Windows 10 <i><a href="https://www.hanselman.com/blog/the-real-and-complete-story-does-windows-defragment-your-ssd/comments#comments-start">will</a> </i>do some sort of defrag on SSD volumes where the Volume Shadow Copy service is active, once a month or so, to prevent NTFS from blowing itself up. This wouldn't be necessary for FAT<i>xx</i>, but Windows won't TRIM FAT<i>xx</i>, so you can't avoid the issue.</p><p>Volume Shadow Copy (<a href="https://docs.microsoft.com/en-us/windows-server/storage/file-server/volume-shadow-copy-service">VSC</a>) is the engine behind <a href="https://www.tenforums.com/tutorials/4533-turn-off-system-protection-drives-windows-10-a.html">System Protection</a>, <a href="https://en.wikipedia.org/wiki/System_Restore">System Restore</a>, <a href="https://support.microsoft.com/en-us/windows/file-history-in-windows-5de0e203-ebae-05ab-db85-d5aa0a199255">File History</a>, and the <a href="https://docs.microsoft.com/en-us/windows-server/storage/file-server/volume-shadow-copy-service">ability</a> to back up files that are "in use". It creates and populates "\System Volume Information", where ChkDsk results are also stored. You may be able to avoid VSC by disabling System Protection, either entirely or for particular volumes that are on SSD.</p><p>Windows 7 may predate this awareness of the need to defrag NTFS, and so there may be reason to do a manual Defrag of SSD volumes, though rarely; perhaps twice a year or so? </p><p>However, the standard Defrag logic will not defrag <a href="https://arstechnica.com/civis/viewtopic.php?f=15&t=238696">files</a> <a href="https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/defrag-files-large-than-64-mb/6c9bc4ac-f911-4515-b131-6bec9def3971">larger</a> <a href="https://www.sevenforums.com/performance-maintenance/406946-windows-disk-defrag-defrag-larger-than-64mb.html">than</a> 64M - exactly the files that are most likely to blow up NTFS, as they will have the largest number of metadata cluster chain pointers. Concurrent write operations will do the most damage, and huge slowly-growing files (hello, Outlook .pst) are most likely to get into trouble. VSC increases the risk of concurrent writes, which is probably why Windows 10 takes that as a cue to surreptitiously defrag SSD volumes, at the risk of horrified Internet posters screaming "never defrag an SSD!!"</p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-55716455642610886632020-11-14T23:09:00.000-08:002020-11-14T23:09:51.476-08:00Intel 10nm GPU Driver Blanks BCD Boot Menu<p>This is the second case of a brand new laptop based on Intel's 10nm <a href="https://www.theverge.com/2019/8/1/20748224/intel-first-10nm-ice-lake-11-cpu-processor-laptop-decoder-ring">10xxGx</a> processors, in which the Intel Display Adapter driver causes the BCD {BootMrg} menu to be invisible (black-on-black), though still working. Here's how to demonstrate the bug:<br /></p><ol><li>Run<a href="https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/bcdedit"> BCDEdit</a> from an "<a href="https://www.digitalcitizen.life/run-as-admin/">As</a> <a href="https://www.techspot.com/guides/1718-run-as-administrator-explained/">Admin</a>" <a href="https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/cmd">Cmd</a> or <a href="https://docs.microsoft.com/en-us/powershell/scripting/overview?view=powershell-7.1">PowerShell</a></li><li><a href="https://docs.microsoft.com/en-us/windows-hardware/drivers/devtest/adding-boot-entries">Add</a> an OSLoader entry to <a href="https://docs.microsoft.com/en-us/windows-hardware/drivers/devtest/boot-options-in-windows">BCD</a> {BootMgr}, so BCD boot menu will be invoked</li><li>Set the <a href="https://docs.microsoft.com/en-us/windows-hardware/drivers/devtest/changing-the-boot-menu-time-out">Timeout</a> to 15 or so<br /></li><li>Restart system from cold, i.e. not "<a href="https://www.howtogeek.com/243901/the-pros-and-cons-of-windows-10s-fast-startup-mode/">Fast</a> <a href="https://www.windowscentral.com/how-disable-windows-10-fast-startup">Startup</a>", Resume from Sleep or Hibernate, etc.</li><li>Rotating dots will vanish to blank black screen, where you should have seen the boot menu</li><li>Wait for timeout or press Enter; system will boot as expected</li><li><a href="https://support.microsoft.com/en-us/windows/open-device-manager-a7f2db46-faaf-24f0-8b7b-9e4a6032fc8c">Device Manager</a>, select Intel Display Adapter, Disable</li><li>Repeat from (4), menu will now appear as it should, OK</li><li>Device Manager, select Intel Display Adapter, Enable</li><li>Repeat from (4), menu will fail to be visible again</li></ol><p>The current case is a <a href="https://www.dell.com/za/enterprise/p/inspiron-15-3593-laptop/pd">Dell Inspiron 3593</a> based on <a href="https://ark.intel.com/content/www/us/en/ark/products/196597/intel-core-i7-1065g7-processor-8m-cache-up-to-3-90-ghz.html">i7-1065G7</a>, whereas the first case was an <a href="https://www.asus.com/za/Laptops/ASUS-Laptop-15-X509JA/">Asus X509JA-i541GT</a> based on<a href="https://ark.intel.com/content/www/us/en/ark/products/196603/intel-core-i5-1035g1-processor-6m-cache-up-to-3-60-ghz.html"> i5-1035G1</a>. Both processors are 10nm but have <a href="https://en.wikipedia.org/wiki/Intel_Graphics_Technology#Ice_Lake">different</a> integrated GPUs. Windows 10 <a href="https://en.wikipedia.org/wiki/Windows_10_version_history">versions</a> <a href="https://en.wikipedia.org/wiki/Windows_10_version_history_(version_1909)">1909</a> (Dell original), <a href="https://en.wikipedia.org/wiki/Windows_10_version_history_(version_2004)">2004</a> (Asus updated) and <a href="https://en.wikipedia.org/wiki/Windows_10_version_history#Version_20H2_(October_2020_Update)">20H2</a> (Dell updated) equally affected.</p><p>Click the link words to drill down into detail, and <b><i><a href="https://cquirke.blogspot.com/2020/09/invisible-bcd-boot-menu-intel-graphics.html">here</a></i></b> for a fuller description of the problem. <br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-23190865723347579472020-11-14T00:19:00.001-08:002020-11-14T06:09:05.113-08:00Don't Kick Away The Ladder<p><span style="font-size: small;"><b><i>You climb a ladder onto the roof, then kick away the ladder. <br />How do you safely get down to put the ladder back up so you can safely get down?</i></b></span></p><p>Such an obvious f-up, you wonder why I need write this post. Like a cartoon character who runs off a cliff, panics while briefly suspended in mid-air, then inevitably plunges to a cartoon death; surely, system designers aren't that stupid? </p><p>Examples abound, especially in the age of <a href="https://www.zdnet.com/article/intel-were-ending-all-legacy-bios-support-by-2020/">Class 3</a> <a href="https://www.anandtech.com/show/12068/intel-to-remove-bios-support-from-uefi-by-2020">UEFI</a> that forces us to share these stupid risks. The "Extensibility" of UEFI allows code to be integrated before <a href="https://www.techradar.com/best/best-antivirus-rescue-disk">any</a> <a href="https://www.lifewire.com/free-bootable-antivirus-tools-2625785">OS</a> <a href="https://www.makeuseof.com/tag/free-bootable-antivirus-malware-disks/">can</a> <a href="https://www.digitalcitizen.life/top-free-bootable-antivirus-rescue-discs-windows-pcs/">boot</a>, and this code can persist into the OS runtime, so it's hard to see how this can be "<a href="http://lreese.dotsenkoweb.com/2019/02/13/firmware-security-uefi-class-3-improves-protection/">more secure</a>" when fundamentally unsafe. Years of (U)EFI's <a href="https://lwn.net/Articles/525307/">buggy</a> "<a href="https://blog.fpmurphy.com/2013/02/the-samsung-uefi-brick-issue.html">growing</a> <a href="https://www.anandtech.com/show/6734/samsung-laptop-uefi-bugs-not-just-for-linux">up</a> <a href="https://www.imore.com/scattered-reports-suggest-efi-firmware-issue-may-be-bricking-some-macs-when-updating-catalina">in</a> <a href="https://9to5mac.com/2019/10/24/efi-firmware/">public</a>" <a href="https://www.valuewalk.com/2019/10/macos-catalina-is-bricking-some-macs-thanks-to-damaged-efi-firmware/">makes</a> <a href="https://www.ifixit.com/Wiki/Mac_bricked_by_Catalina">it</a> clear such code is <a href="https://mjg59.dreamwidth.org/10014.html">insufficiently</a> trivial to be free of exploitable bugs. A ladder should be trivial enough to never break; flaky firmware can break systems in ways that cannot be fixed!<br /></p><p>I'm setting up a new Dell laptop, and in the firmware setup, is an on-by-default option to allow UEFI firmware to connect to the Internet and grope for "updates", before any OS is booted from which malware could be <a href="https://www.techsupportall.com/best-bootable-antivirus-rescue-severely-infected-computer/">tackled</a>, as if <a href="https://www.csoonline.com/article/3191947/supply-chain-attacks-show-why-you-should-be-wary-of-third-party-providers.html">vendor</a> <a href="https://en.wikipedia.org/wiki/Supply_chain_attack">supply-chain</a> <a href="https://www.tenable.com/blog/a-look-at-the-vulnerability-to-exploit-supply-chain">attacks</a> <a href="https://www.mitre.org/sites/default/files/publications/supply-chain-attack-framework-14-0228.pdf">had</a> <a href="https://searchsecurity.techtarget.com/news/252472771/Another-CCleaner-attack-hits-Avast-supply-chain">not</a> <a href="https://www.securityweek.com/avast-discloses-new-supply-chain-attack-attempt">already</a> <a href="https://thenextweb.com/security/2019/10/22/supply-chains-show-their-weaknesses-following-avast-and-nordvpn-attacks/">happened</a>. Specifically, if attempts to boot Windows fail successively "too many times", the firmware will try to launch Dell's repair, and if that in turn fails, will try to download the repair material via the Internet.<br /></p><p>This Dell laptop also suffers from <a href="https://cquirke.blogspot.com/2020/09/invisible-bcd-boot-menu-intel-graphics.html">this bug</a>, based as it is on the same <a href="https://en.wikipedia.org/wiki/Ice_Lake_(microprocessor)">10nm</a> <a href="https://www.theverge.com/2019/8/1/20748224/intel-first-10nm-ice-lake-11-cpu-processor-laptop-decoder-ring">Intel</a> <a href="https://www.digitaltrends.com/computing/intel-comet-lake-vs-ice-lake/">processor</a> <a href="https://www.techradar.com/news/intel-ice-lake">family</a>. The problem applies to both the original Windows 10 1909 installation, and after this was upgraded to <a href="https://docs.microsoft.com/en-us/windows/release-information/status-windows-10-20h2">20H2</a> as per current Media Creation Tool. The .iso created by this tool no longer fits a standard DVDR disc, so a bootable USB stick was created instead, and the file set copied from there. </p><p>The laptop's nice NVMe SSD can't be seen from my rescue WinPE boot discs, nor from a freshly-downloaded Kaspersky Rescue Disk; none of these can see the drive via the PCI interface. Once again, the ladder is kicked away; crucial boot-time code should "always just work", i.e. standard trivial code baked into the firmware, not requiring "special drivers" to work. </p><p>As it is, the nature of the UEFI <a href="https://cquirke.blogspot.com/2020/09/invisible-bcd-boot-menu-intel-graphics.html">display bug</a> demonstrates how a setting at the top of the ladder (Windows 10 Device Manager, enabling or disabling the Intel display adapter) kicks away the bottom of the ladder (OS-level setting affects pre-OS UEFI, such that pre-OS BCD boot menu fails to display).</p><p>Do we really have to wait for more shoes to drop?<br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-89910020334220176682020-10-26T22:48:00.000-07:002020-10-26T22:48:17.147-07:00Firefox Memory Leaks<p> I use Firefox without extensions and plugins, and find it "leaks memory"; specifically, the memory footprint as seen via Win10 Ctl+Alt+Del Task Manager increases towards 2G over days of mult-tab use, whereupon the entire system slows down and becomes less responsive, while Firefox becomes as crabby as a sleepless toddler (prolly for much the same reasons).</p><p>For this reason, I use 32-bit Firefox, to limit its address range and thus impact on the rest of the system. Going 64-bit would only "solve" the problem in the same way a bigger gas tank would "solve" a leak, i.e. delay the onset of inevitable problems. 32 bits can address a 4G range, halved to 2G for signed offset addressing as is likely for Firefox's internal memory (mis-)management.</p><p>So when I saw "<a href="https://www.mozilla.org/en-US/security/advisories/mfsa2020-45/#CVE-2020-15254">CVE-2020-15254: Undefined behavior in bounded channel of crossbeam rust crate</a>" (seriously, WTF is a "crossbeam rust crate"?), I went Aha! And when I read "The impact on Firefox is undetermined", I went Aha! again, as in "geez Mozilla, don't you know Firefox leaks like a tennis net in a wind tunnel, haven't you even begun to wonder why?"</p><p>At the meta level, there's a familiar problem of per-instance vs. aggregate cost; since the days of DOS and Borland's program compilers, it's been "do we frequently ask the OS for small memory allocations, or do we seldom ask for large allocations and manages the details in-house?". Do you pull cash from an ATM for each cash purchase, or do you draw once a week and manage your own wallet of cash?</p><p>Such details may be managed in-house by Firefox developers, or more it's more likely "sub-contracted out" to some 3rd-party generic code library, prolly whatever came with the source code compiler or other development tools. As a cross-platform program, this is less likely to be handed off to the platform-specific OS; in fact, platform independence is a strong reason for in-house memory management.</p><p>Which brings us to another meta-level problem; "black box" code re-usability. The idea is that such blocks of code should hide their internal details and only expose a limited surface that is trivial enough to rely on (if all non-trivial code has bugs, keep all crucial code trivial!) but in practice they always leak, and such leaks may be exploitable - hence the CVE number.</p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-71885880545980986102020-09-26T00:38:00.001-07:002020-09-26T00:39:06.263-07:00Invisible BCD Boot Menu; Intel Graphics Driver<p><b>Geek summary</b>: First post-install Win10 update of Intel Graphics drivers for <a href="https://ark.intel.com/content/www/us/en/ark/products/196603/intel-core-i5-1035g1-processor-6m-cache-up-to-3-60-ghz.html">i5-1035G1</a> renders the BCD <a href="https://docs.microsoft.com/en-us/windows-hardware/drivers/devtest/adding-boot-entries">Boot Menu</a> invisible, although it still works. Fixed if Device Manager, Display Adapter is Disabled; problem reproduced if Enabled, effects taking place after Windows restart.</p><p>I suspect the cause is failure of the driver to attain color values when started in the raw EFI context, as using the Win10 Settings, Recovery, <a href="https://www.laptopmag.com/articles/windows-10-advanced-startup-options-menu">Advanced</a> UI will show the boot menu in proper color. That UI reaches a different boot menu, with the normal boot menu seen via Other Operating Systems UI, without restarting through raw EFI boot. Either the first menu applies the needed color settings, or bypassing the raw EFI phase preserves the successful Win10 OS context.<br /></p><p>Test system where problem encountered; brand new Asus laptop based on new 10nm 10xxGx series processor, specifically i5-1035G1. Not encountered in a new desktop PC built on Gigabyte motherboard with Pentium Gold <a href="https://ark.intel.com/content/www/us/en/ark/products/199287/intel-pentium-gold-g6500-processor-4m-cache-4-10-ghz.html">G6400</a> processor, also as set up last week.</p><h4 style="text-align: left;">Background<br /></h4><p>EFI boot from internal storage enters that storage via {bootmgr}, which displays a boot menu if there are more than one OSLoader entry in the "DisplayOrder". By default there's only one entry to boot Windows 10, so this boot menu is normally bypassed, and the bug is thus unobserved.</p><p>As part of my standard setup, I <a href="https://www.howtogeek.com/245175/how-to-add-safe-mode-to-the-windows-8-and-10-boot-menu/">add</a> <a href="https://www.tenforums.com/tutorials/17159-add-safe-mode-boot-options-windows-10-a.html">boot</a> <a href="https://www.thewindowsclub.com/add-safe-mode-to-boot-menu-options-in-windows-10">entries</a> for Safe Mode and Safe Cmd, to float these less-destructive troubleshooting opportunities above the deceptively-named "Refresh Your PC" (a bit more than a F5 web page "refresh") and "Reset Your PC" (far beyond pressing the Reset button to force a bad-exit Restart) bear-traps that you'd have to walk past to eventually find the Safe Modes. This causes {bootmgr} to display the BCD Boot Menu for the <a href="https://docs.microsoft.com/en-us/windows-hardware/drivers/devtest/changing-the-boot-menu-time-out">Timeout</a> seconds, thus revealing the bug.</p><h4 style="text-align: left;">Failure pattern</h4><p>This particular system displays a GUI "Asus" image during the EFI firmware phase of the boot process, which fades before the BCD Boot Menu appears. As this logo fades, the color undergoes a subtle shift to a less-blue hue of white; possibly a switch to greyscale, rather than a Win10 "night light" setting (as changing that setting does not change this behavior). When the failure pattern is not in effect, the Asus logo does not change hue as it fades.<br /></p><p>Normally, you'd then see the Boot Menu, but instead, the screen stays black. There's still display signal present, and if if blindly use the arrow keys before pressing Enter, the menu works; you'd load whichever menu item you'd blindly selected. If you use the trackpad or a mouse to move the mouse pointer, it will appear as the expected white arrow, and blindly clicking will also succeed in selecting and launching a menu entry. </p><p>If you do nothing, the screen remains black for Timeout seconds and then boots normally. The initial impression is that the system has "hung" or "crashed" (untrue, as safely tested by pressing Caps Lock to toggle the keyboard LED) or that the system is way slower to boot than expected, especially for an NVMe SSD.</p><h4 style="text-align: left;">Problem onset</h4><p>I set up systems offline, to limit problems to one system rather than whatever is being pushed from the entire Internet. During this phase, the BCD Boot Menu worked normally as expected, both before and after upgrading the "new laptop" Windows 10 version to a <a href="https://www.microsoft.com/en-gb/software-download/windows10">freshly-made</a> version <a href="https://docs.microsoft.com/en-us/windows/whats-new/whats-new-windows-10-version-2004">2004</a>.<br /></p><p>Problem only appeared after attempting to disable Asus's aggressive <a href="https://www.reddit.com/r/ASUS/comments/eit60v/asus_laptop_background_processes_what_are_they/">underfootware</a>, and initially I ascribed it to this and quickly reversed <a href="https://www.raymond.cc/blog/disable-third-party-services-and-programs-for-clean-boot-in-windows/">changes</a> back to the default non-Microsoft Services, Startup entries, and <a href="https://www.wikihow.com/Open-Task-Scheduler-in-Windows-10">Scheduled</a> <a href="https://docs.microsoft.com/en-us/windows/win32/taskschd/task-scheduler-start-page">Tasks</a>. However, this was also the first Restart after going online and letting Windows Update pull down and install updates, <a href="https://answers.microsoft.com/en-us/windows/forum/all/windows-update-keeps-installing-older-drivers/010ed96e-acd3-4265-a414-c1489012e3bb">which</a> <a href="https://www.extremetech.com/extreme/211515-windows-10-attempts-to-install-drivers-for-hardware-you-no-longer-have">included</a> "<a href="https://www.ghacks.net/2017/06/03/stop-windows-from-installing-drivers-for-specific-devices/">driver</a> <a href="https://www.tomshardware.com/news/how-to-stop-automatic-driver-updates-windows">updates</a>", which in turn <a href="https://www.pandasecurity.com/mediacenter/news/dear-microsoft-stop-pushing-potentially-unwanted-software-through-windows-update/">included</a> OEM programs <a href="https://www.tenforums.com/windows-updates-activation/124629-how-remove-unwanted-oem-windows-driver-app-updates.html">now</a> <a href="https://www.tomshardware.com/news/how-to-stop-automatic-driver-updates-windows">pushed</a> <a href="https://www.techrepublic.com/article/ftdi-abuses-windows-update-pushing-driver-that-breaks-counterfeit-chips/">as</a> "drivers" to evade user management via Settings, Apps or Control Panel, Programs and Features.</p><h4 style="text-align: left;">The fix<br /></h4><p>BIOS update, re-defaulting CMOS Setup settings, power off at the mains, holding down Power switch (part of keyboard) for 20+ seconds, BCDEdit nudge to {bootmgr} do not fix. Device Manager, Display Adapter, Update Driver reports the latest (thus surely the "best") driver is already installed, and the Rollback Driver button is greyed out.</p><p>What fixes the problem, is Device Manager, Display Adapter, Disable and then a Shudown UI, Restart to put this change into effect across the EFI boot phase. Enabling the Display Adapter reproduces the failure pattern after the Restart; the problem remains present until Display Adapter is Disabled again.</p><p>Note; I also <a href="https://www.windowscentral.com/how-disable-windows-10-fast-startup">disable</a> the Windows 10 "<a href="https://www.howtogeek.com/243901/the-pros-and-cons-of-windows-10s-fast-startup-mode/">Fast</a> <a href="https://help.uaudio.com/hc/en-us/articles/213195423-How-To-Disable-Fast-Startup-in-Windows-10">Startup</a>" <a href="https://support.microsoft.com/en-za/help/4011287/windows-updates-not-install-with-fast-startup">setting</a> <a href="https://www.tenforums.com/general-support/144870-1909-fast-startup-setting-gone-but-why-would-ms-enable-default.html">via</a> <a href="https://www.tenforums.com/general-support/134756-1903-changed-fast-startup-settings.html">the</a> <a href="https://www.asus.com/us/support/FAQ/1031533/">convoluted</a> Settings, Power UI required. So at least we know we're not resuming a flawed system runtime after a <a href="https://petri.com/how-to-disable-windows-10-fast-startup-and-why-you-might-want-to">fake</a> "shutdown".</p><h4 style="text-align: left;">Likely cause</h4><p>I suspect the Intel graphics driver depends on context established by Windows, which is absent (nul pointer, anyone?) when the driver is run from raw EFI. It either sets an incorrect graphics mode, or draws color values from zero'd memory such that "ink" and "paper" are both black.<br /></p><h4 style="text-align: left;">Safety implications</h4><p><a href="https://hothardware.com/news/intel-sunset-legacy-bios-support-2020-favor-uefi-class-3">Class 3</a> <a href="https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface">UEFI</a> <a href="http://www.pcdied.com/BIOS/UEFI-bull-crap.html">forces</a> <a href="https://www.anandtech.com/show/12068/intel-to-remove-bios-support-from-uefi-by-2020">EFI</a> boot, and thus all the flaky complexities of "Extensibility". Whereas the ancient BIOS/MBR code was sufficiently trivial to be free of <a href="https://uefi.blogspot.com/2017/01/firmware-bugs-and-firmware-updates.html">bugs</a>, <a href="https://www.anandtech.com/show/6713/samsung-laptops-bricked-by-booting-linux-using-uefi">EFI</a> <a href="https://askubuntu.com/questions/1202449/strange-bug-when-booting-legacy-bios-and-efi-uefi-compatible-usb-grub-drive">is</a> <a href="https://www.computerworld.com/article/3528302/the-mess-behind-microsoft-s-yanked-uefi-patch-kb-4524244.html">not</a>, <a href="https://lwn.net/Articles/525307/">and</a> <a href="https://threatpost.com/billions-of-devices-impacted-secure-boot-bypass/157843/">adds</a> <a href="https://www.qubes-os.org/doc/uefi-troubleshooting/">the</a> <a href="https://www.cyberscoop.com/secure-boot-flaw-grub-vulnerability-eclypsium/">risk</a> of malware positioning itself to run before any OS or storage device can boot.</p><p>The fact that a Windows driver can poison the pre-OS EFI boot process is worrying, especially as the choice of driver to load is either read by pre-OS EFI from Windows, or has been latched into pre-OS EFI behavior by a setting applied from within Windows.</p><h4 style="text-align: left;">Scenario 1<br /></h4><p></p><p>EFI executable <a href="https://www.lifewire.com/efi-file-2620983">.efi files</a> are able to read the Windows registry, and do so, as the <a href="https://renenyffenegger.ch/notes/Windows/registry/tree/HKEY_LOCAL_MACHINE/BCD00000000/index">BCD</a> <a href="http://www.mistyprojects.co.uk/documents/BCDEdit/files/bcd_as_registry_hive.htm">is</a> <a href="http://techgenix.com/bcdbootconfigurationdatabasenotes/">in</a> <a href="https://blog.elsdoerfer.name/2010/02/22/windows-bcd-file-is-just-a-registry-hive/">fact</a> a Windows registry hive in structure. However, {bootmgr} is expected to be OS-agnostic, as at the time the Boot Menu is displayed, no decision has been taken as to what OS to boot - could be any version of installed Windows, a PreOS WinPE, a Linux, anything. So the code that runs before the Boot Menu should not dip into Windows registry hives, e.g. to load drivers or pull variables such as the colors to use for the boot menu, etc.</p><p>In fact, safest would be for pre-OS {bootmgr} code to use the lowest default screen resolution, rather than loading any 3rd-party "drivers" for a "better visual experience". This is a similar safety issue as code integration into "safe modes" (e.g. <a href="https://answers.microsoft.com/en-us/windows/forum/all/stuck-on-screensaver/934fdc3b-846a-4d5e-b78e-bee0a51d1c18">screen savers</a>).</p><h4 style="text-align: left;">Scenario 2</h4><p>When a device driver is selected in Windows, e.g. by disabling or enabling a Display Adapter, Windows may also be changing drivers within firmware EFI. If so, then a different EFI driver will load, depending on that Windows setting, and a buggy EFI display driver could cause the problem directly, rather than via using null data.</p><p>All this is hard to assess, as modern systems blur hardware, firmware, "BIOS", drivers and OSs. Everything is now likely to contain non-trivial and thus buggy code, and everything is treated as a black-box object that may "leak". The interface programming model is supposed to blacken the boxes of the object-orientated model, hiding the gooey details more effectively; instead of the "calling code" examining exposed variables (object Properties), it now asks the object to return these variables (object Methods), trutsing the object's code to do that - which is not a great safety/security idea.</p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-5071744868465120712020-09-04T23:00:00.000-07:002020-09-04T23:00:06.007-07:00The Clutch Effect<p>I'll start from the familiar, then delve into the implications.</p><p>You have a stack of paper, with a sheet near the bottom peeking out. You grab that, and pull gently and slowly; the whole stack moves towards you. You grab it and pull hard and fast; just that sheet emerges, leaving the rest of the pile where it is.</p><p>So you scale that up to the "<a href="https://www.google.com/search?client=firefox-b-d&q=Tablecloth+trick">tablecloth trick</a>". <a href="https://www.youtube.com/watch?v=43R1k8vHCh0&feature=share">Disaster</a>!</p><p>You have an old car with a shot clutch. If you accelerate slowly and gently, the clutch "works" and the car accelerates proportionally in line with your expectations, based on the engine's revs and selected gear. But if you stomp the gas, the engine revs speed up nicely but the car doesn't move much faster.</p><p>You have <a href="https://kidshealth.org/en/parents/diabetes-mellitus.html">Diabetes Mellitus</a> ("peeing lots of sweet urine", as per the <i><a href="https://www.davebevan.net/blog/2017/8/7/the-tyranny-of-the-measurable">tyranny</a> <a href="https://danielmiessler.com/projects/reading/summary-the-tyranny-of-metrics/">of </a><a href="http://therecoveringpolitician.com/friends/ronaldg/ron-granieri-on-the-tyranny-of-the-measurable">the</a> <a href="https://safetyrisk.net/the-tyranny-of-metrics/">measurable</a></i>... a topic for another day). If you digest carbs <a href="https://www.gisymbol.com/about-glycemic-index/">slowly</a>, you may be OK; if you digest fast, less so.</p><p>You're piloting a fighter aircraft, pursued by a guided missile, and you try to turn and climb to evade it - but at 9G, you black out. The human-free missile has no such limitations.</p><p>You're a 1kg block of whatever, moving through space a nudge above zero. Your experience is vastly different to that of a similar block moving a nudge below <i>c</i>. <a href="https://cquirke.wordpress.com/2020/05/03/cquirke-says/">See</a> "The universe has two speeds <em>c</em>, and zero; everything else is just a rounding error" for that and more.</p><p>You're a man carrying a bucket of water, and at that familiar scale, a liquid generally sinks to fill a container, with a flat surface on top that usually <a href="https://chem.libretexts.org/Bookshelves/Physical_and_Theoretical_Chemistry_Textbook_Maps/Supplemental_Modules_(Physical_and_Theoretical_Chemistry)/Physical_Properties_of_Matter/States_of_Matter/Properties_of_Liquids/Surface_Tension">curls</a> upwards a bit round the rim, unless it's mercury, which curves downwards instead. Contrast that with an ant <a href="https://www.google.com/search?q=Ant+carrying+water&client=firefox-b-d&sxsrf=ALeKk01Xur-KqtW6KjHTzSfv3RugUo6oIA:1599283245610&source=lnms&tbm=isch&sa=X&ved=2ahUKEwiivP-totHrAhUQTxUIHfFDApgQ_AUoAXoECA4QAw&biw=1219&bih=916">carrying</a> a bead of water; though the scale isn't that much smaller than our familiar, the experience is already very different, and the opposite of how liquid helium <a href="https://www.google.com/imgres?imgurl=https%3A%2F%2Fwww.hicodenver.com%2Fwp-content%2Fuploads%2F2017%2F12%2Fluquid.jpg&imgrefurl=https%3A%2F%2Fwww.hicodenver.com%2F2017%2F12%2Fstrange-but-true-superfluid-helium-can-climb-walls%2F&tbnid=HD7r1hodetGWJM&vet=12ahUKEwiovdPpotHrAhUJ7xoKHUaiBn8QMygGegUIARCtAQ..i&docid=xGB-WgrdcMPBJM&w=480&h=360&q=liquid%20helium%20climbing%20out%20of%20container&client=firefox-b-d&ved=2ahUKEwiovdPpotHrAhUJ7xoKHUaiBn8QMygGegUIARCtAQ">climbs</a> out of its container.</p><p>You're a steady DC current, flowing effortlessly through a <a href="https://en.wikipedia.org/wiki/Inductor">coil</a> but stopping dead at a <a href="https://en.wikipedia.org/wiki/Capacitor">capacitor</a>. You're perfect (i.e. highest frequency) AC, skipping effortlessly across a capacitor but stopping dead at a coil. So far, so good... now you're a bolt of lightning striking a phone line, frying almost everything in an old 286 PC, yet the monitor remains unscathed - because the 90 degree bend of the thick copper wires at the graphic <a href="https://blog.krusher.net/en/2018/09/graphics-cards-of-the-ibm-era/">card</a>'s signal port melted before the current to reach it. What's going on here, if lightning is DC? Yes, but that very fast rise time behaves more like perfect AC... so to protect against lightning, tie knots in your cables - big ju-ju, <a href="https://gizmodo.com/what-do-those-mysterious-lumps-on-your-cables-do-5871162">works</a> good!</p><p>What's common to all these scenarios that I've clumped together as "the clutch effect"? It ties in with layers of <a href="http://cquirke.blogspot.com/2017/04/layers-of-abstraction-quines-and.html">abstraction</a>, within which certain models work (e.g. <a href="https://en.wikipedia.org/wiki/Newton%27s_laws_of_motion">Newtonian</a> motion and speeds near 0) but beyond which, different models may be needed (e.g. <a href="https://en.wikipedia.org/wiki/Theory_of_relativity">Relativity</a> at speeds near <i>c</i>).<br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-84121297440893180232020-08-28T00:45:00.000-07:002020-08-28T00:45:45.029-07:00PDF: Safe, Print; Pick One<p>Geek summary: If you print a .pdf and "enable all features", you're enabling all risks! <br /></p><p>Adobe's PDF is a significant edge-facing <a href="https://www.google.com/search?client=firefox-b-d&sxsrf=ALeKk02nxx_tGdn3fIglZHqqctz2mG0gYw%3A1598600224927&ei=ILRIX_79N-uj1fAP5YS_oA8&q=pdf+exploits&oq=pdf+exploits&gs_lcp=CgZwc3ktYWIQAzICCAAyBggAEBYQHjIGCAAQFhAeMgYIABAWEB4yBggAEBYQHjIGCAAQFhAeMgYIABAWEB4yBggAEBYQHjIGCAAQFhAeMgYIABAWEB46BAgAEEc6BAgjECc6BQgAEJECOggILhCxAxCDAToICAAQsQMQgwE6CwguELEDEMcBEKMCOgIILjoECAAQQzoHCAAQsQMQQzoECAAQClDHwxFY9IASYLaDEmgCcAF4AIABygOIAfQfkgEHMi00LjcuMZgBAKABAaoBB2d3cy13aXrAAQE&sclient=psy-ab&ved=0ahUKEwj-ja30sb3rAhXrURUIHWXCD_QQ4dUDCAw&uact=5">risk</a>, and unlike their <a href="https://www.google.com/search?client=safari&bih=916&biw=1219&hl=en&sxsrf=ALeKk009zrVADJFf5azac5u5E68Tkfz5Dw%3A1598593194696&ei=qphIX4KKKo-jULfAg7gP&q=adobe+flash+exploits&oq=adobe+flash+exploits&gs_lcp=CgZwc3ktYWIQAzIGCAAQBxAeMgIIADoECAAQR1CBE1j5HGCtIWgAcAJ4AIABkwOIAaAPkgEHMi0yLjMuMZgBAKABAaoBB2d3cy13aXrAAQE&sclient=psy-ab&ved=0ahUKEwiCh4rcl73rAhWPERQKHTfgAPcQ4dUDCAw&uact=5">wretched</a> <a href="https://www.adobe.com/africa/products/flashplayer/end-of-life.html#">Flash</a>, no signs of it going away soon.</p><h3 style="text-align: left;">The email risk <br /></h3><p>"Opening" a .<a href="https://www.titanhq.com/blog/pdf-the-vehicle-of-choice-for-malware-and-fraud/">pdf</a> in a web browser is risky enough, but a <a href="https://www.zdnet.com/article/hackers-use-phoney-invoice-email-to-trick-you-into-downloading-malware/">bigger</a> <a href="https://blog.reversinglabs.com/blog/the-pdf-invoice-that-phished-you">risk</a> are all those automated .<a href="https://www.mailguard.com.au/blog/plain-text-email-contains-multi-staged-phishing-invoice-scam">pdf</a> <a href="https://help.redtailtechnology.com/hc/en-us/articles/203966980-Spam-Alert-ADP-Invoice-PDF-Malware?mobile_site=false">emaul</a> <a href="https://help.redtailtechnology.com/hc/en-us/articles/203966980-Spam-Alert-ADP-Invoice-PDF-Malware?mobile_site=false">attackments</a>; "<a href="https://www.metacompliance.com/blog/scam-of-the-week-fake-invoices-scam-spreads-emotet-malware/">invoices</a>" <a href="https://www.lessaccounting.com/blog/invoice-template-pdf/">spawned</a> <a href="https://www.freshbooks.com/hub/invoicing/make-pdf-invoice">by</a> <a href="http://help.accounting.sageone.co.za/en_za/accounting/emailing-tax-invoices-and-credit-notes.html">generic</a> <a href="https://www.accountingtools.com/articles/2017/5/4/invoice-in-pdf-format">accounting</a> <a href="https://www.patriotsoftware.com/accounting/training/help/emailing-invoices-customers/">packages</a>, "forms to print, sign, scan and return", etc. Even if there's a pretense at certificate-based "security", the sender still expects the recipient to trsut a handful of easily-forged pixels, boilerplate text, and a From: address as being "from someone you know".</p><p>Evaluating risk of incoming email links and attachments needs <a href="https://en.wikipedia.org/wiki/Turing_test">proof</a> of trusted human intent to send, not just which human's system appears to have sent it, as <a href="https://www.opswat.com/blog/most-destructive-malware-all-time">malware</a> is likely to spread via <a href="https://www.zdnet.com/article/emotet-malware-gang-is-mass-harvesting-millions-of-emails-in-mysterious-campaign/">harvested</a> addresses that can be used to populate both the From:, and the To:, CC: and BCC: sides of the fence. When both From: and To: addresses are harvested on the same infected system, the malware will <i>most likely</i> be "From: someone you know"!<br /></p><p>Digital signatures proving it came from that user's system don't address that problem; you need to read the message "text" to see if the <a href="https://theconversation.com/turing-test-why-it-still-matters-123468">human</a> sender <a href="https://theconversation.com/person-or-computer-could-you-pass-the-turing-test-6769">intended</a> to send the message and the attached file(s). A smart sender will write such text, but the lazy, clueless or disinterested will not; when the accounting program or whatever pops up a boilerplate message (typically "you need Adobe Reader to open this file" with a link that one hopes doesn't point to a malware server), they'll just click Send without changing (personalizing) this text at all.</p><p>So we have all these near-identical boilerplate messages bouncing around, telling users to "open" files and/or click links to install software, with attached .pdf - and those files are exploitable enough, without the need to trigger heuristics by faking the file type to "open" raw code.</p><h3 style="text-align: left;"><b>Risky "data files"</b></h3><p>Risks from "data" files stem from the <a href="https://www.indeed.com/career-advice/career-development/what-is-object-oriented-programming">object</a> <a href="https://www.educative.io/blog/object-oriented-programming">model</a>, that treats everything as an object, and all objects can have Properties (internal variables) and Methods (internal code) that other objects can use. The human user is just another "<a href="https://en.wikipedia.org/wiki/Component_Object_Model">object</a>" that happens to be at the end of peripheral UI <a href="https://en.wikipedia.org/wiki/Human_interface_device">input</a> <a href="https://docs.microsoft.com/en-us/windows-hardware/drivers/hid/">devices</a>.</p><p>This is the code equivalent of dumbing down user concepts of "read", "edit" and "run" to just "open"; the same safety-oblivious mindset underlies both, and the <a href="https://blog.ndepend.com/programming-interface-simple-explanation/">interface</a> programming model makes this worse by swinging from reading exposed Properties to running Methods to return these. That implies the object is now trsuted to run code, to get anything out of it.</p><p>Specifically, .pdf is designed to run <a href="https://www.adobe.com/content/dam/acom/en/devnet/acrobat/pdfs/js_api_reference.pdf">JavaScript</a> hidden from the user, and even if this script is <a href="https://helpx.adobe.com/africa/acrobat/using/javascripts-pdfs-security-risk.html">prevented</a> from "doing anything nasty", it <a href="https://d3gpjj9d20n0p3.cloudfront.net/fortiguard/research/Adobe_Readers_Custom_Memory_Management_a_Heap_of_Trouble.pdf">can</a> be <a href="https://securitynews.sonicwall.com/xmlpost/exploit-for-pdf-vulnerability-cve-2018-4990-exists-in-the-wild/">leveraged</a> to set up the <a href="https://css.csail.mit.edu/6.858/2018/readings/nozzle.pdf">stack</a> to climb the exploit ladder to running raw code. If you look in the Acrobat (Reader) Edit, Preferences section, you'll see other exploit opportunities such as <a href="https://helpx.adobe.com/acrobat/using/playing-video-audio-multimedia-formats.html">multimedia</a>, "opening" other file types, etc.</p><p>These risks have been obviously non-theoretical since the <a href="https://www.f-secure.com/v-descs/concept.shtml">Concept</a> "prank macro" and <a href="http://www.cs.ucc.ie/~gavin/cs607/pdf/WordMacro2.pdf">subsequent</a> <a href="https://www.f-secure.com/v-descs/thus.shtml">destructive</a> (including hardware-killing <a href="https://en.wikipedia.org/wiki/CIH_(computer_virus)">CIH</a> payload) Word and other MS Office <a href="http://virus.wikidot.com/melissa">macro</a> <a href="https://www.f-secure.com/v-descs/iis.shtml">malware</a>, yet that didn't stop Adobe baking the same risk into the .pdf <a href="https://en.wikipedia.org/wiki/History_of_the_Portable_Document_Format_(PDF)">standard</a> years later. </p><p>Today's reading suggests Microsoft quickly <a href="https://www.fastcompany.com/90500378/iloveyou-virus-microsoft-steven-sinofsky-book">saw</a> the risks, but at the time, I remember the first response had two purposes; reassure users this was "not a virus" but just a "prank macro", and provide a removal method specific to that <a href="https://kb.iu.edu/d/afxv">particular</a> vir.. uh, "prank macro", as if there'd never be <a href="https://www.nytimes.com/1998/12/21/business/e-mail-virus-preys-on-microsoft-word.html">another</a> one. It took years to (more or less) fix that "works as designed, won't fix" easy exploitability, and that happy period of easy scripting arguably established the commercial viability of malware.<br /></p><h3 style="text-align: left;"><b>Protected Mode<br /></b></h3><p></p><p>Fortunately, we have Adobe's <a href="https://helpx.adobe.com/africa/acrobat/using/protected-view-feature-pdfs-windows.html">Protected</a> <a href="https://helpx.adobe.com/reader/using/protected-mode-windows.html">Mode</a> to keep us safe - at least until we <a href="https://community.adobe.com/t5/acrobat-reader/how-to-print-safely-from-protected-view/td-p/10117040?page=1">print</a>.</p><p>I've always been creeped out when "reading" a .pdf and having to print it out, when that asks me to "enable all features". What "features"? Allowing the "data file" to drop and run code? Apparently yes, this is exactly what happens if this actually exits Protected Mode (not that Adobe tells you this in that happy "enable all features" dialog box).</p><p>It's also good to ensure you use Reader and not the full Acrobat as your default .pdf "open" file association, as full Acrobat duhfaults to <a href="https://helpx.adobe.com/africa/acrobat/using/protected-view-feature-pdfs-windows.html">disabling</a> Protected Mode!<br /></p><p>I hope you've been clicking this article's implicit links along the way, as that's where I "show my workings" as to how I understand this situation. </p><p>Now consider how many of those links "opened" a .pdf in your web browser... <br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-54119407165258026052020-08-18T00:00:00.000-07:002020-08-18T00:02:55.424-07:00Wisdom Of The Ages<p>Starting a new project? </p><p>Ask a 10-year-old if it's ethical</p><p></p><p></p><p>Ask a 20-year-old how to do it</p><p>Ask a 30-year-old how to do it better</p><p>Ask a 40-year-old who can do it for you<br /></p><p></p><p>Ask a 50-year-old how to get away with it<br /></p><p></p><p>Ask a 60-year-old why it's not worth the bother</p><p><br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-3264343158097184052020-08-15T21:51:00.005-07:002020-08-15T22:25:40.531-07:00Weakly Horrorscope<p>As competitive animals, we are naturally fearful. Secular fundamentalists such as I should also be modest, if true to their faith. Accordingly, I weakly offer my horroscope...</p><h4 style="text-align: left;">Sunday</h4><p>A time to consider the stars* and other large matter(s).</p><h4 style="text-align: left;">Moonday</h4><p>Scaling down to rocks large enough to pull themselves round; most detectable when orbiting stars, planets (e.g. moons of Jupiter) or each other (e.g. Luna, Charon). </p><h4 style="text-align: left;">Twosday</h4><p>Duality; a deeply ingrained falsehood?</p><h4 style="text-align: left;">Windsday</h4><p>Your climate matters, at least to you; handle with care.</p><h4 style="text-align: left;">Thorsday</h4><p>Ponder human hostility, from GBV to WW3.</p><h4 style="text-align: left;">Faraday</h4><p>Cage yourself from technology and self-reference for a moment!</p><h4 style="text-align: left;">Scatterday</h4><p>Alter your state; zoom out for insight instead of drill-down taxonomy.</p><p>* As in "Twinkle twinkle little**..." rather than "dancing with the...". Snap to grid, humanists/populists!</p><p>** Why "little"?</p><p>After Scatterday, you'd need a day in the sun to recover ;-) <br /></p>Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com1tag:blogger.com,1999:blog-11573761.post-43428587019122958272020-04-28T01:59:00.000-07:002020-04-28T09:15:29.593-07:00Trump, Coronavirus, Disinfectants<br />
OK, let's put <a href="https://www.bbc.com/news/world-us-canada-52407177">this</a> <a href="https://www.theguardian.com/us-news/2020/apr/25/donald-trump-coronavirus-disinfectant-sarcastic-tipping-point">one</a> <a href="https://www.bbc.com/news/world-us-canada-52450692">to</a> <a href="https://edition.cnn.com/2020/04/27/politics/donald-trump-disinfectants-coronavirus/index.html">bed</a> quickly... the challenge with viruses is not destroying them; that is easy. It's how to target them within an infected host, without damaging the host.<br />
<br />
I can understand the frustration that causes one to wish it were possible to call in an air-strike, but that only works if the enemy and your friends are not mixed. So, general <a href="https://cquirke.wordpress.com/2020/04/26/biology/">biocidal</a> strategies are great outside the body, but useless within... unless they can be focused on the target. That's ID-specific policing and sniping, not a carpet-bombing airstrike!<br />
<br />
<h3>
Internal intelligence</h3>
<br />
Humans have two intelligent systems, only one of which we experience as our consciousness; the one that stems from the animal strategy of physically moving around.<br />
<br />
The <a href="https://en.wikipedia.org/wiki/Memory_B_cell">other</a> <a href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6102609/">intelligence</a> defends the self internally, and has deeper roots than multicellular animals. This is the immune system, the highest level of which crafts particular-shaped proteins to bind specifically to stuff that isn't white-listed as part of the body's own organic chemicals. It is this that is expected to give post-infection immunity, at least until the virus mutates beyond recognition (as RNS viruses like Influenza and Coronavirus tend to do), and this is is the basis for vaccination as a pre-infection defense.<br />
<br />
<h3>
Why not antmicrobial drugs?</h3>
<h3>
</h3>
<h3>
</h3>
Larger infective agents such as bacteria are easy to attack using simpler chemistry, because their core biological processes involve proteins sufficiently different to our own, so they can be specifically targeted without harming the host.<br />
<br />
Viruses are different, because they are pure genetic information that use the host cell processes to reproduce. So, all those biological processes you can uniquely attack in bacteria, are <i>your own</i> processes when it comes to how a virus "lives".<br />
<br />
Viruses coat their genetic material in protein(s) coded within its genetic material. This coating may both hide the genetic material from the host immune system, and bind the virus to the targeted cells of the host. Aside from our internal immune systems figuring out how to target this protein and/or genetic material within, cruder chemistry could find ways to disrupt the process whereby the virus binds to host cells, and target that as a means of treatment.<br />
<br />
I'm starting to write more about biology <a href="https://cquirke.wordpress.com/category/effing-the-ineffable-2/">here</a>, starting with <a href="https://cquirke.wordpress.com/2020/04/26/biology/">how it works</a>, and how the biosphere <a href="https://cquirke.wordpress.com/2020/04/26/biosphere-and-infosphere/">compares</a> with the infosphere, etc.<br />
<br />
Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com0tag:blogger.com,1999:blog-11573761.post-66599874032997767562020-04-09T00:00:00.000-07:002020-04-09T00:24:51.961-07:00Win10 Temp .evtx Flood Revisited<br />
Executive summary of <a href="https://cquirke.blogspot.com/2020/04/win10-bug-evtx-files-rapidly-fills-c.html">this bug</a>: To curb rapid free space loss to %Windir%\Temp\*.evtx , do this:<br />
<ul>
<li>Regedit, HKLM\System\CCS\Services\AppXSvc, chrange Start from 3 to 4 (Disable)</li>
<li>"Lifeboat" batch file to Del %WinDir%\Temp\*.evtx every 15 secs, loop forever</li>
<li>"Run As Admin" desktop shortcut to batch file, for rapid emergency access</li>
</ul>
This is a workaround, not a cure; the cure must come from Microsoft as a meta-level bugfix of the Microsoft Store and App subsystem present in Windows 8.x and 10. It's not enough to "step on ants" on a case-by-case basis via Feedback, Help or Support - and it's not a matter of fixing particular Apps that trigger the problem, as the bug lies not in what causes this error handling response, but in the error handling logic itself; endless, rapid, and uncotrolled retries and logging.<br />
<h4>
Why has this bug persisted for years?</h4>
Current Troubleshooters miss the issue entirely, making it harder to visualize the problem. Storage Sense may launch appropriately, and show a massive Temporary Files footprint, but the bulk of this is not shown within the sub-categories that are offered to be cleared.<br />
<br />
Space management utilities such as <a href="https://www.jam-software.com/treesize_free">TreeSize</a> or <a href="https://windirstat.net/">Windows Directory Statistics</a> can't normally "see" into %WinDir%\Temp due to permissions issues that require "Run As Admin", making it harder for even tech-literate users to track down the problem.<br />
<br />
Because the bug is in code that is infrequently invoked, there hasn't been a massive single outbreak of cases to attract the vendor attention we need. As a "blind spot" to both vendor (not handled by Storage Sense) and user ("As Admin" blocks on inspecting %WinDir%\Temp), it's both under- and inadequately-reported; most threads run for pages before the .evtx files are seen, so that an accurate description of the bug is slower to surface As the usual end-point is "I dunno, just try re-installing Windows, maybe that will fix it", no "clean cure" emerges, so new victims may just give up.<br />
<br />
However, when you do find threads on this problem, you <a href="https://answers.microsoft.com/en-us/protect/forum/all/help-pc-is-creating-temporary-files-every-second/afc8ed23-2ae9-4d8a-95db-995d578f89c5">see</a> <a href="https://answers.microsoft.com/en-us/windows/forum/windows_10-files/the-temp-folder-keeps-filling-up-my-c-drive-please/27710071-0f71-4db1-a8f7-f25a4b3f941f">hundreds</a> of "I have the same question" victims, so it's not so rare that we can forget about it. As an unexpected bug in an exposed surface, it may be an exploitable vulnerability as well.<br />
<h4>
Metro, Modern, UWP...</h4>
When a vendor keeps shuffling the branding of a feature or product, it suggests attempts to re-launch it after initially being <a href="https://www.theverge.com/2019/5/30/18645609/microsofts-universal-windows-app-dead-microsoft-store-windows-store">rejected</a> in the marketplace. We've seen that with MSN, and we're seeing that with "Metro", "Modern", "<a href="https://docs.microsoft.com/en-us/windows/uwp/get-started/universal-application-platform-guide">Universal Windows Platform</a>" and <a href="https://www.zdnet.com/article/microsoft-wants-to-close-the-uwp-win32-divide-with-windows-apps/">evolving</a> <a href="https://www.thurrott.com/dev/206351/microsoft-confirms-uwp-is-not-the-future-of-windows-apps">drifts</a> <a href="https://www.windowscentral.com/microsoft-uwp-not-dead-evolved">from</a> <a href="https://www.windowscentral.com/what-makes-uwp">there</a>.<br />
<br />
<a href="https://en.wikipedia.org/wiki/Universal_Windows_Platform">UWP</a> is a new subset platform added to Windows 8 to bridge the UI and platform divide between PCs and sub-PC mobile devices, so that programs could run both on large screens with keyboard and mouse, and tiny screens prodded by fat fingers.<br />
<br />
The original form as added to Windows 8 was a grotesque throwback to Windows before 3.x, i.e. before there really was "windows". Apps ran full-screen, with no visible UI to close them, and screen space was wasted on massive UI elements to work on tiny touch screens. The first Apps didn't do anything better than properly-behaved Windows "desktop" programs, so there was nothing to attract PC users, and everything "called home" all the time, pushing you into losing anonymity and accepting the increased risks of being permanently logged into a Microsoft online Account. Just why does a Calculator App need to access the Internet, anyway?<br />
<br />
By Windows 10, Apps can at least be windowed, finally catching up with the Windows 3.yuk UI feature set, but UWP still feels like an unwanted blob stuck on what we'd rather use instead.<br />
<h4>
The UWP installer/updater subsystem </h4>
The nature of UWP seems to be to run underfoot, similar to the way it's not UI-obvious on a smartphone as to what apps are still running in the background.<br />
<br />
In particular, UWP appears to have a separate installer and updater subsystem, outside Windows Update and related user controls. Compare installation and update activity as shown in Reliability, with what you see in Windows Update History, to see what I mean.<br />
<br />
So in effect, Windows 10 has the Windows "desktop" .exe and .msi installation system, the UWP App system, and added to that by MS Office, "Click To Run". The last two appear to be not only the least documented for our troubleshooting purposes, but the most invasive and buggiest as well.<br />
<br />
It's "coding 101" to never fall into an endless loop, exhaust resources such as storage space, or lack situational awareness such as how often you are doing something, how long it takes to do, and whether it is worked. The ".evtx flood bug" is such an embarrassing failure at so many of these points, undermining confidence in the UWP App system for developers, techs, and users.<br />
<br />
<br />Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com1tag:blogger.com,1999:blog-11573761.post-7615339634915956142020-04-03T09:28:00.004-07:002020-04-03T09:34:30.904-07:00Win10 Bug: .evtx Files Rapidly Fills C: Free Space<br />
This <a href="https://www.reddit.com/r/techsupport/comments/bn951g/windows_creating_gigabytes_upon_gigabytes_of_evtx/">very</a> <a href="https://answers.microsoft.com/en-us/windows/forum/windows_10-performance/axinstsv-filling-up-c-drive-with-temp-files-after/e793c8c6-d452-4b15-b685-42a19fc1f337">nasty</a> Windows 10 <a href="https://answers.microsoft.com/en-us/windows/forum/all/windows-temp-folders-keep-increasing-causing-c/31205344-93d5-46fd-871e-73a2e3a6d4c5">bug</a> <a href="https://answers.microsoft.com/en-us/windows/forum/all/temp-files-160gb-cleanup-only-shows-about-1gb/1d25d9f1-127f-4047-95cd-d996daa8fa9e">has</a> <a href="https://answers.microsoft.com/en-us/protect/forum/all/help-pc-is-creating-temporary-files-every-second/afc8ed23-2ae9-4d8a-95db-995d578f89c5">been</a> <a href="https://answers.microsoft.com/en-us/windows/forum/windows_10-files/the-temp-folder-keeps-filling-up-my-c-drive-please/27710071-0f71-4db1-a8f7-f25a4b3f941f">around</a> <a href="https://superuser.com/questions/1400224/20gb-of-temporary-files-only-50mb-in-temp-folder">for</a> <a href="https://superuser.com/questions/1497919/appx-deployment-for-microsoft-surfacehub-fails">over</a> <a href="https://superuser.com/questions/1375602/temp-folder-filling-up-with-appx-files-and-canot-be-stopped">two</a> <a href="https://superuser.com/questions/1371229/low-disk-space-after-filling-up-c-windows-temp-with-evtx-and-txt-files">years</a> at least; crippling, often associated with "Feature Updates", i.e. new versions of Windows 10, and still there from at least as far back as 1803, to current 1909.<br />
<br />
Note that each of those hyperlinked words in the previous paragraph, is a link to a forum thread on this issue, so while it not be common enough "all at once" to attract attention and get fixed, it's always around, and always eating systems - no magic bullets, typical advice is a shrug and "just re-install Windows" or equally-hi-impact brute-force "fixes".<br />
<br />
I suspect it's a generic category of bug within the Microsoft Store and UWP Apps subsystem, regardless of which of these Apps is the "cause" of the problem on any particular system. Never use Apps, Microsoft Store, or UWP stuff? Too bad, that "updater" or "installer" will still flood your drive with pointless error messages and make it impossible to use your PC.<br />
<br />
<h4>
What you will see</h4>
The bug presents as an inexplicable runaway filling of free space on the C: drive, no matter how much free space you had there before. Disk Cleanup doesn't show the bulk that needs to be cleared; Settings, Storage Sense may pop up and show the material as in "Temporary Files", yet not in any of the checkbox sub-categories offered to be cleared.<br />
<br />
Users will then turn to Windows Directory Statistics (WDS) and/or TreeView or similar, and may get side-tracked into arguing which is better, etc. I use WDS, and it will show a massive "Unknown" accounting for the lost storage space. If I right-click WDS and "Run As Admin", I will then see this bulk as thousands of small files (between 68k and 20M) within %WinDir%\Temp<br />
<br />
Most of these will be .evtx files, as "opened" by Event Logger; the rest will be .txt files, and these will be date-stamped as being spawned several times a minute, if not every few seconds, until the free space is exhausted. Deleting these doesn't help; they will immediately start flooding again.<br />
<br />
<h4>
What appears to be cause</h4>
<br />
<a href="http://batcmd.com/windows/10/services/appxsvc/">AppXSvc</a> <a href="https://www.tenforums.com/general-support/152516-appx-deployment-service-appxsvc-runs-startup-normal.html">is</a> a Windows <a href="https://docs.microsoft.com/en-us/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server">service</a> that "deploys UWP Apps"; I found little documentation of the service, but finds this Fortnet zero-day <a href="https://fortiguard.com/zeroday/FG-VD-18-151">alert</a>, FWIW. Looking at...<br />
<br />
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppXSvc<br />
<br />
...via Regedit, we see the following <a href="https://www.itprotoday.com/compute-engines/what-are-errorcontrol-start-and-type-values-under-services-subkeys">settings</a>:<br />
<br />
Start = 3, i.e. Manual<br />
Type = 32 (0x20), i.e. can share address space with other
services of the same type <br />
ErrorControl = 1, i.e. warn but do not abort starting Windows<br />
<br />
So, something else starts it all the time, as it's always running yet not set to start automatically.<br />
<br />
Recovery actions, as seen via the Services UI (where everything is "greyed out"), appear reasonable...<br />
<br />
1st failure: Restart the service<br />
2nd failure: Restart the service<br />
3rd and subsequent failures: Take no action <br />
<br />
...so if this service repeatedly falls on its ass, it should stop running, limiting the impact to at most 2 sets of .evtx and related error logging files in %WinDir%\Temp. So what's going wrong, here?<br />
<br />
I suspect whatever is starting this wretched (and for most of us who only use "real" Windows preograms, totally useless) service isn't paying any attention to those Recovery actions, and is just endlessly banging away, restarting the service "Manually". If each time the service considers itself to have been launched for the first time, it will always "Restart the service".<br />
<br />
Also, in one of the two cases I've seen first-hand (manual Media Creation Tool upgrade to 1909 from inside Windows), I noticed odd behavior in the Services UI. Specifically, the service Properties (as seen via Services UI) offered to Start the service, even though Ctl+Alt+Del Task Manager showed it to be still running. If the service and/or managing code gets confused about whether it's running or not, that too may screw up the "FFS stop trying to start the &^$& thing, it's already failed 3 times" logic.<br />
<br />
The other system I saw and managed via TeamViewer, was after an auto-upgrade to 1903. On that system, setting the AppXSvc Start value to 4 (Disable) will hopefully kill the service, plus I wrote a brute-force batch file set to "Run As Admin" as follows:<br />
<blockquote class="tr_bq">
@Echo Off<br />
Set Secs=15<br />
Set Mask=*.evtx<br />
Echo.<br />
Echo Deleting %WinDir%\Temp\%Mask% files every %Secs% seconds...<br />
:LoopForever<br />
Echo.<br />
Del %WinDir%\Temp\%Mask%<br />
Echo.<br />
Timeout 15<br />
GoTo LoopForever</blockquote>
None of this a proper fix, especially on an SSD where you don't want tends of thousands of pointless file writes every hour or few. At the basic level, Microsoft needs to muzzle the UWP App subsystem so it doesn't stomp all over the system willy-nilly, and ensure that every logging process has a basic LIFO clue so as not to consume all available storage space. A specific fix would be nice, too, but we also need a more respectful vendor-to-user relationship.<br />
<br />
PS: What is it with HTML text editing (e.g. in Blogger) that messes up blank line spacing around subheadings, etc.?<br />
<br />
<br />
<br />
<br />Chris Quirkehttp://www.blogger.com/profile/05538828571660803875noreply@blogger.com1