Archive for the ‘Business’ Category

What is the Purpose of Information Security? 60 Minutes Knows

Wednesday, November 11th, 2009

I do not watch television, but a friend of mine pointed me to this week’s episode of CBS’ news documentary program 60 Minutes. This is a very good, low-tech illustration of the potential security threats which information security professionals are battling. This is the kind of stuff we are trying to prevent when we throw around terms like “malware,” “firewalls,” “intrusion prevention,” “audits,” and “security policy.”

While the show focuses on threats to the federal government and utilities, the same exact threats and methods of attack face every small business network on the Internet as well.

Bank Sued for Losses Due to Alleged Weak Security

Tuesday, September 29th, 2009

In a previous post, I wrote how small businesses are being scammed by European cyber-hackers. In a related story, Computerworld reports how Pacto Construction Co. in Portland, ME is suing Ocean Bank of Delaware because the company lost hundreds of thousands of dollars due to allegedly weak security on the part of Ocean’s online banking system.

The main alleged weakness is the lack of two-factor authentication by Ocean Bank. While I am not sure that this places all of the blame in Ocean’s hands, and I think that Patco should be at least partially responsible for their losses if it is found that their own systems were compromised, a victory by the plaintiff in this case could set an interesting precedent to financial institutions who have not implemented strong authentication mechanisms in their online services. Banks and credit unions – take note! However, a victory by the defendant will likely send a very different signal, more to the tune of “If you bank online, you take your chances.” Small businesses and individuals – take note!

This week’s Data Security Podcast also has an excellent interview with the attorney who filed the suit on behalf of Patco.

Reasons to Keep Your Hardware Current

Friday, September 11th, 2009

Too often, we come across clients whose systems are out-dated. A general rule of thumb that we try to follow is replacing desktop systems every 3 years, servers every 5 years. These are general rules, and they don’t always apply. Here are some reasons you may need a hardware replacement now.

  1. (more…)

Small Businesses Losing Millions to European Cyber-Gangs

Friday, August 28th, 2009

This week, the Washingon Post reported a fascinating story on how “organized cyber-gangs in Eastern Europe are increasingly preying on small and mid-size companies in the United States.” They appear to be targeting small businesses for the simple reason that they are easier nuts to crack than large financial institutions. (more…)

FairPoint Accused of Falsfying Readiness Tests

Wednesday, August 26th, 2009

This article broke yesterday, in which an alleged whistleblower claims that FairPoint falsified the tests that showed its readiness to take over Verizon’s New England landlines.

“The account from an alleged FairPoint Communications insider may explain why telecommunications regulators in northern New England were surprised when FairPoint customers complained so vigorously after the firm took over phone lines from Verizon early this year.”

There’s some other interesting filler in this post, but it concludes with this:

After studying the pile of complaints from FairPoint customers, earlier this month the Vermont Public Service Board asked FairPoint to “show cause” why its license to do business in the state shouldn’t be revoked.

The only question that has to be raised is, ifwhen FairPoint is evicted from this state, who will take over?

AT&T: We Don’t Want Your Business

Friday, August 21st, 2009

This week, at a client’s request, I am reviewing their entire telecommunications spending. I decided to look at four different vendors to compare their offerings. The first one I looked at was AT&T, to see if they had a comparable long distance package. (more…)

“XYZ Technology is Dead.”

Friday, July 10th, 2009

I frequently hear security professionals and pundits proclaim that such and such a technology “is dead.” Lately, I’ve heard that “antivirus is dead,” “Intrusion Prevention Systems (IPS) are dead.” A while back it was “firewalls are dead,” and “SSL is dead.” People who utter phrases like this are doing a disservice to the security community. (more…)

Microsoft Office 2007 Document Compatibility

Friday, June 19th, 2009

If you’ve purchased Microsoft Office recently, you got version 2007 (unless you’re on a Macintosh). Office 2007 represents a “great leap forward” according to some (in Microsoft marketing), but from my perspective, it’s a lot of change, and a lot higher system requirements for not a lot of new, useful features.

One of the “feature” of Office 2007 is the new document format. Like previous versions of office, this latest version uses a format that older versions cannot read. This makes perfect sense on two levels. The file format was made after the older versions were released, so they didn’t know about it, so they can’t read it. Also, from a sales perspective, it makes sense because if Alice runs Office 2007 and Bob runs Office 2003, Bob must then upgrade to Office 2007 to read Alice’s documents.

Or must Bob? (more…)

You Can Never Have Too Much Memory

Friday, June 12th, 2009

This will be a short post on the virtues of keeping your computer hardware current. Even today, I still see older computers which would be perfectly capable of doing their job, but because of a lack of enough memory, they grind along at a glacial pace, causing significant employee productivity loss.task_manager

How can you tell if your machine could benefit from a memory upgrade? First off, if you hear your computer’s hard drive running hard, or see the hard drive indicator light on a lot, particularly if you have multiple applications running, that’s  a good sign. Another is to use the Task Manager, a utility included with all versions of Windows, to see how much memory your computer is using. The best time to do this is to during the middle of your work day, when you have the most applications running. In Windows, simply press Ctrl-Shift-Esc and you should see something like the image to the right. Pay attention to the “Available” number under “Physical Memory.” If this number is lower than, say, 256,000, your machine could probably benefit from a memory upgrade.

Techspeak alert! Note that if you have a standard, 32-bit version of Windows (2000, XP, 2003, Vista, 2008, or 7), the maximum memory that your system can use is 4GB, minus the amount of memory used by your video card. So if you have a fancy video card for gaming or CAD or some other applicaiton which requires a high-end card, however much memory is on that card counts against the total amount in your system. If you find that you need more than 4GB of memory in your system, then you need to run a 64-bit version of Windows to use it, otherwise your computer will simply see 4GB as the maximum available, unless your computer supports Address Window Extensions to do some backflips to allow it to see more than 4GB of memory.

What is “Unified Threat Management?”

Friday, June 5th, 2009

“Unified Threat Management” is a buzzphrase (that is, a few buzzwords strung together) heard a lot in networking and network security. Essentially, this is something (usually a device) which combines several network security services, including email filtering, web content filtering, firewalling, intrusion detection/prevention, and others. A UTM device can provide other services as well, such as VPN (Virtual Private Networking) support, to allow your remote workers to securely connect to your office. UTMs frequently seen in small businesses because they (usually) carry a lower cost than purchasing and managing several separate devices or software packages to perform the same functions. (more…)