<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Paradigm Consulting Co. &#187; Security</title>
	<atom:link href="http://blog.paradigmcc.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.paradigmcc.com</link>
	<description>Information technology and security advice for small businesses.</description>
	<lastBuildDate>Wed, 25 Jan 2012 00:10:39 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>How To Recognize a Nigerian Scam</title>
		<link>http://blog.paradigmcc.com/2011/12/08/how-to-recognize-a-nigerian-scam/</link>
		<comments>http://blog.paradigmcc.com/2011/12/08/how-to-recognize-a-nigerian-scam/#comments</comments>
		<pubDate>Thu, 08 Dec 2011 14:32:49 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Scams]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=556</guid>
		<description><![CDATA[It's quite simple, really - if it sounds too good to be true, it probably is. Here's an email one of our staff received in response to an inquiry to a Craigslist apartment listing. See if you can spot the red flags.]]></description>
			<content:encoded><![CDATA[<p>It&#8217;s quite simple, really &#8211; if it sounds too good to be true, it probably is. Here&#8217;s an email one of our staff received in response to an inquiry to a Craigslist apartment listing. See if you can spot the red flags.<span id="more-556"></span> For your reference, comparable apartments are listing for approximately $950-1,150/mo.</p>
<blockquote><p>&nbsp;</p>
<div lang="x-western">
<div><span style="font-family: georgia,serif;">Hello</span></div>
<div><span style="font-family: georgia,serif;"> </span></div>
<div><span style="font-family: georgia,serif;">i would like you to know that it is still very much available for rent, i am only willing to give it out to a Good and Responsible person. Its indeed a lovely and comfortable home and available to move in as soon as possible May the Peace of the Good Lord be with you for considering my home. </span></div>
<div><span style="font-family: georgia,serif;"> </span></div>
<div><span style="font-family: georgia,serif;">Fees:</span></div>
<div><span style="font-family: georgia,serif;">Per Month : $800 ( Including Utilities )</span></div>
<div><span style="font-family: georgia,serif;">Management Security / Deposit : $300. ( REFUNDABLE )</span></div>
<div><span style="font-family: georgia,serif;">1 Bedrooms</span></div>
<div><span style="font-family: georgia,serif;">1.5 Bath</span></div>
<div><span style="font-family: georgia,serif;"># Central Air Conditioning</span></div>
<div><span style="font-family: georgia,serif;"> </span></div>
<div><span style="font-family: georgia,serif;">APARTMENT FEATURES:</span></div>
<div><span style="font-family: georgia,serif;">** True 1 Bedroom **</span></div>
<div><span style="font-family: georgia,serif;">** Hardwood Floors **</span></div>
<div><span style="font-family: georgia,serif;">** BIG Living Room Shared W/ Kitchen **</span></div>
<div><span style="font-family: georgia,serif;">** Brand New Cabinets-Stove &amp; Refrigerator**</span></div>
<div><span style="font-family: georgia,serif;"> </span></div>
<div><span style="font-family: georgia,serif;">The followings are included in the monthly rent:</span></div>
<div><span style="font-family: georgia,serif;">-Heat</span></div>
<div><span style="font-family: georgia,serif;">-Hot Water</span></div>
<div><span style="font-family: georgia,serif;">-Electric</span></div>
<div><span style="font-family: georgia,serif;">-Separate private entrance</span></div>
<div><span style="font-family: georgia,serif;">-Homeowner in Charge</span></div>
<div><span style="font-family: georgia,serif;">-Brandnew stove, refrigerator, cabinets, countertops</span></div>
<div><span style="font-family: georgia,serif;">-Own Thermostat</span></div>
<div><span style="font-family: georgia,serif;">-Parking space</span></div>
<div><span style="font-family: georgia,serif;">-Washer &amp; Dryer on premises</span></div>
<div><span style="font-family: georgia,serif;"> </span></div>
<div><span style="font-family: georgia,serif;">I would like you to know that i am giving this home out to you because i just relocated to West Africa , Nigeria for the Missionary work and have a 4 years course.. so my family and i have decided that we would be moving to our other home when we get back.</span></div>
<div><span style="font-family: georgia,serif;">I would like you to send me the below details:</span></div>
<div><span style="font-family: georgia,serif;"> </span></div>
<div><span style="font-family: georgia,serif;">Full name :</span></div>
<div><span style="font-family: georgia,serif;">Present address :</span></div>
<div><span style="font-family: georgia,serif;">Occupation :</span></div>
<div><span style="font-family: georgia,serif;">Age :</span></div>
<div><span style="font-family: georgia,serif;">Phone Number :</span></div>
<div><span style="font-family: georgia,serif;">When you are planning on moving in :</span></div>
<div><span style="font-family: georgia,serif;">Credit Statues :</span></div>
<div><span style="font-family: georgia,serif;">Period of time you are planning to stay, cos i wont be moving back to it:</span></div>
<div><span style="font-family: georgia,serif;"><br />
</span></div>
<div><span style="font-family: georgia,serif;">There is no Registration fee and agency fee, since you are dealing directly with me the Landlord. The Security Deposit would be needed as a Security Bond in order for the keys and paperwork along side with Lease Contract agreement to be sent to you&#8230; Electric Bills and water bills have been paid for, so i would also need to send the receipts to you, would in case it would be needed. </span></div>
<div><span style="font-family: georgia,serif;"> </span></div>
<div><span style="font-family: georgia,serif;">I would like you to know that you are free to contact me at any time. After i receive this details, i would get back to you soonest and then let you know my terms. Pets are allowed. I hope to hear from you soonest.</span></div>
<div><span style="font-family: georgia,serif;"><br />
</span></div>
<div><span style="font-family: georgia,serif;">God Bless</span></div>
<div><span style="font-family: georgia,serif;">Rev Mark Wilson</span></div>
<div><span style="font-family: georgia,serif;"><br />
</span></div>
<div><span style="font-family: georgia,serif;">Call Me: 0112348094431350 OR +2348094431350</span></div>
</div>
</blockquote>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/12/08/how-to-recognize-a-nigerian-scam/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Know Your Browser</title>
		<link>http://blog.paradigmcc.com/2011/12/06/know-your-browser/</link>
		<comments>http://blog.paradigmcc.com/2011/12/06/know-your-browser/#comments</comments>
		<pubDate>Tue, 06 Dec 2011 18:50:15 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web Browsers]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=545</guid>
		<description><![CDATA[Lately I've noticed several of my clients entering URLs into the search bar in their browser. This is both inefficient and potentially harmful. ]]></description>
			<content:encoded><![CDATA[<p>Lately I&#8217;ve noticed several of my clients entering URLs into the search bar in their browser. This is both inefficient and potentially harmful.</p>
<p>For example, if you want to go to Dropbox.com or Facebook.com, it&#8217;s faster and safer to type &#8220;drobox.com&#8221; or &#8220;facebook.com&#8221; into the address bar than in the search bar. Why? Because if you already know the address, you&#8217;re wasting time searching for it. This is like calling information and asking &#8220;what is the number for 802-234-6368?&#8221; You already know the number!</p>
<div id="attachment_547" class="wp-caption alignright" style="width: 160px"><a href="http://blog.paradigmcc.com/wp-content/uploads/2011/12/dropbox-Google-Search.jpg"><img class="size-thumbnail wp-image-547 " title="dropbox - Google Search" src="http://blog.paradigmcc.com/wp-content/uploads/2011/12/dropbox-Google-Search-150x150.jpg" alt="" width="150" height="150" /></a><p class="wp-caption-text">Which is a search result and which is an ad?</p></div>
<p>Potentially more concerning is the risk that someone may be gaming the results of the search you perform. For instance, someone could take out a malicious ad on a URL, e.g., &#8220;facebook.com&#8221; so that when you search for Facebook.com, a link to their site is returned along with the other search results. Many users don&#8217;t know the difference between the main website they are looking for and the plethora of other results that are returned, and just click on the first link they see.</p>
<p><a href="http://blog.paradigmcc.com/wp-content/uploads/2011/12/Mozilla-Firefox-Start-Page-2.jpg"><img class="size-thumbnail wp-image-551 alignleft" title="Mozilla Firefox Start Page-2" src="http://blog.paradigmcc.com/wp-content/uploads/2011/12/Mozilla-Firefox-Start-Page-2-150x150.jpg" alt="" width="150" height="150" /></a>The thumbnail at left highlights the location of the URL bar versus the search bar in Mozilla Firefox. Note that they are close, and it&#8217;s easy to mistake one for the other. Apple Safari looks very similar. However, Google Chrome and Internet Explorer have taken to combining the search bar and URL into one. That way, if you type a valid URL, you get the resulting website, but if not, the browser does a search for you instead. I like this simplified approach.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/12/06/know-your-browser/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MySQL.com Hacked</title>
		<link>http://blog.paradigmcc.com/2011/10/02/mysql-com-hacked/</link>
		<comments>http://blog.paradigmcc.com/2011/10/02/mysql-com-hacked/#comments</comments>
		<pubDate>Mon, 03 Oct 2011 00:00:24 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Database]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=535</guid>
		<description><![CDATA[Last week, the website for MySQL, the world&#8217;s most popular open-source database server which is now a division of Oracle, was hacked. While this likely doesn&#8217;t affect most of our blog&#8217;s readers, it goes to serve as a valuable example of why running a web content filter on your network is vital to information security. [...]]]></description>
			<content:encoded><![CDATA[<p>Last week, the website for <a href="http://mysq.com">MySQL</a>, the world&#8217;s most popular open-source database server which is now a division of <a href="http://oracle.com">Oracle</a>, was <a title="MySQL.com hacked" href="https://www.computerworld.com/s/article/9220295/MySQL.com_hacked_to_serve_malware?taxonomyId=17">hacked</a>. While this likely doesn&#8217;t affect most of our blog&#8217;s readers, it goes to serve as a valuable example of why running a web content filter on your network is vital to information security. MySQL.com is a legitimate business website with a good reputation. However, it was compromised by hackers, essentially turning the website into a platform for distributing malware to anyone who visited the site. Keep this in mind the next time you think that you don&#8217;t need a web content filter because you only visit &#8220;legitimate websites.&#8221;</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/10/02/mysql-com-hacked/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Version 8.2 of Astaro Security Gateway</title>
		<link>http://blog.paradigmcc.com/2011/07/22/version-8-2-of-astaro-security-gateway/</link>
		<comments>http://blog.paradigmcc.com/2011/07/22/version-8-2-of-astaro-security-gateway/#comments</comments>
		<pubDate>Fri, 22 Jul 2011 13:35:32 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[System Administration]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=526</guid>
		<description><![CDATA[Today, Astaro (a division of Sophos) released version 8.2 of their Astaro Security Gateway. ]]></description>
			<content:encoded><![CDATA[<p>Today, Astaro (a division of Sophos) released version 8.2 of their Astaro Security Gateway. As <a title="Astaro Security Gateway v 8.2" href="http://www.astaro.com/blog/up2date/ASG8200" target="_blank">announced on their blog</a>, highlights include:</p>
<ul>
<li>A new web reporting engine*</li>
<li>Support for 3G/UMTS USB modems</li>
<li>Web Application Security form hardening</li>
<li>Next Generation Firewall/Application control features.</li>
</ul>
<p>These are some of the 60 new features in this release. If you run an Astaro Security Gateway, this upgrade is definitely worth checking out. And if you don&#8217;t yet run an Astaro Security Gateway, <a href="http://para1.com/contact">contact us</a> so we can set you up with a free trial.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/07/22/version-8-2-of-astaro-security-gateway/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Should You Change Your Password? (Trick Question)</title>
		<link>http://blog.paradigmcc.com/2011/07/13/should-you-change-your-password-trick-question/</link>
		<comments>http://blog.paradigmcc.com/2011/07/13/should-you-change-your-password-trick-question/#comments</comments>
		<pubDate>Wed, 13 Jul 2011 12:33:55 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Email]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=522</guid>
		<description><![CDATA[Here's a great website that everyone (yes, that means you) should check out: https://shouldichangemypassword.com/ ]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s a great website that everyone (yes, that means you) should check out: <a title="Should I Change My Password?" href="https://shouldichangemypassword.com/" target="_blank">https://shouldichangemypassword.com/</a> <span id="more-522"></span>From the site&#8217;s homepage:</p>
<blockquote><p><strong>ShouldIChangeMyPassword.com</strong> has been created to help the average person check if their password(s) may have been compromised and need to be changed.</p>
<p>This site uses a number of databases that have been released by hackers to the public. No passwords are stored in the <strong>ShouldIChangeMyPassword.com</strong> database.</p>
<p>This website is made available as a public service.</p></blockquote>
<p>After doing some <a title="A simple Google Query for Gmail addresses in a SQL database" href="https://encrypted.google.com/search?q=filetype%3ASQL+%40gmail.com" target="_blank">very simple Google searching</a>, the author of this site decided to do a genuine public service by making it known if your email address has been compromised. He did this by looking at plain, unencrypted database files which contained email addresses and their passwords. You should check this site immediately and see if yours is listed. Then, regardless of the results, change your email password. (Admit it &#8211; you haven&#8217;t changed it in a long time, have you?)<br />
<script src="http://connect.facebook.net/en_US/all.js#xfbml=1"></script><fb:like href="http://blog.paradigmcc.com/2011/07/13/should-you-change-your-password-trick-question/" layout="button_count" show_faces="false" width="100" font="trebuchet ms"></fb:like></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/07/13/should-you-change-your-password-trick-question/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Don&#8217;t Assume Dropbox Is Secure</title>
		<link>http://blog.paradigmcc.com/2011/06/25/dont-assume-dropbox-is-secure/</link>
		<comments>http://blog.paradigmcc.com/2011/06/25/dont-assume-dropbox-is-secure/#comments</comments>
		<pubDate>Sat, 25 Jun 2011 22:49:20 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Desktop Software]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=517</guid>
		<description><![CDATA[As always, there is a tradeoff between security and convenience. What you need to decide is how inconvenient it would be, not if you had to decrypt your data before restoring it, but if someone else got their hands on your data. ]]></description>
			<content:encoded><![CDATA[<p><a title="Dropbox" href="http://dropbox.com" target="_blank">Dropbox</a>, a very popular online file storage solution, <a title="Dropbox doesn't require a password?" href="http://www.wired.com/threatlevel/2011/06/dropbox/" target="_blank">recently made a big mistake</a>, allowing any user to log in to their service without a password. This means that if you have a Dropbox account and I tried to log in as you, with your email address instead of my own, I would have been granted access to your files. No fancy hackery needed<span id="more-517"></span>, just getting your email address correct was all that was needed. Simple, huh? This comes on the heels of <a title="Dropbox CAN access your data" href="http://www.wired.com/threatlevel/2011/05/dropbox-ftc/" target="_blank">Dropbox&#8217;s recent admission</a> that, contrary to what they told their users for years, they <em>can</em> access your data files.</p>
<p>Dropbox&#8217;s admissions should serve as wakeup calls for users of all online services. We&#8217;ve seen cases before where Google and others have rapidly complied with government requests for access to users&#8217; online data. In short, if you put your data on someone else&#8217;s servers, unless you have used your own encryption prior to doing so, you should assume that your data could be accessed by someone else.</p>
<p>I use Dropbox myself. I don&#8217;t put anything there that is  super-secret unless it&#8217;s encrypted first, however. How can you do this? A  variety of programs exist to enable this. If you only want to use an  online storage solution for backups, you can use <a title="Truecrypt" href="http://truecrypt.org" target="_blank">Truecrypt</a> to easily encrypt files or a volume before it gets backed up. This means I need to have Truecrypt on a Linux, Mac, or Windows PC to be able to decrypt the data should I need to restore it, and I can&#8217;t, for instance, use my iPhone to do so. This has never proven to be a problem, however, as I don&#8217;t generally attempt to, for instance, restore Quickbooks backups on my iPhone.</p>
<p>As always, there is a tradeoff between security and convenience. What you need to decide is how inconvenient it would be, not if you had to decrypt your data before restoring it, but if someone else got their hands on your data.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/06/25/dont-assume-dropbox-is-secure/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Phishing Scam du Jour</title>
		<link>http://blog.paradigmcc.com/2011/04/24/phishing-scam-du-jour/</link>
		<comments>http://blog.paradigmcc.com/2011/04/24/phishing-scam-du-jour/#comments</comments>
		<pubDate>Sun, 24 Apr 2011 13:46:11 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Phishing]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=504</guid>
		<description><![CDATA[Today I found this little gem in my inbox. The hardest thing to believe is that people are still actually falling for these things.]]></description>
			<content:encoded><![CDATA[<p>Today I found this little gem in my inbox. Rather than repeating the text, I&#8217;ll just put the actual image, which I received, embedded in the body of the email. The hardest thing to believe is that people are still actually falling for these things.</p>
<p><a href="http://blog.paradigmcc.com/wp-content/uploads/2011/04/WINNER-OF-2010-FIFA-WORLD-CUP.jpg"><img class="alignnone size-large wp-image-505" title="WINNER OF 2010 FIFA WORLD CUP" src="http://blog.paradigmcc.com/wp-content/uploads/2011/04/WINNER-OF-2010-FIFA-WORLD-CUP-678x1024.jpg" alt="WINNER OF 2010 FIFA WORLD CUP" width="450" height="679" /></a></p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/04/24/phishing-scam-du-jour/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Beware Fake Delivery Confirmation Scams</title>
		<link>http://blog.paradigmcc.com/2011/04/01/beware-fake-delivery-confirmation-scams/</link>
		<comments>http://blog.paradigmcc.com/2011/04/01/beware-fake-delivery-confirmation-scams/#comments</comments>
		<pubDate>Fri, 01 Apr 2011 12:30:05 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Business]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=493</guid>
		<description><![CDATA[In 2008, and again last year around the holiday season, we saw a lot of emails purporting to be from the "United Postal Service" with an attached file claiming to be the tracking or delivery confirmation information for your shipment. They were fake, and they're back.]]></description>
			<content:encoded><![CDATA[<p>In 2008, and again last year around the holiday season, we saw a lot of emails purporting to be from the &#8220;United Postal Service&#8221; with an attached file claiming to be the tracking or delivery confirmation information for your shipment. They were fake, and they&#8217;re back.</p>
<p><span id="more-493"></span>As reported on the <a title="Cyberjungle March 28, 2011" href="https://datasecurityblog.wordpress.com/2011/03/27/march-28-2011-episode-206/" target="_blank">Cyberjungle Podcast</a> and <a title="WebRoot" href="http://blog.webroot.com/2011/03/21/shipping-confirmations-back-on-the-radar/" target="_blank">Webroot&#8217;s Blog</a>, these fake shipping <img class="alignright" title="Fake shipping confirmations" src="https://webrootblog.files.wordpress.com/2011/03/20110319_shipconf_opener_icons.png" alt="Fake shipping confirmations" width="224" height="144" />confirmation documents are nothing more than <a title="Malware" href="https://secure.wikimedia.org/wikipedia/en/wiki/Malware" target="_blank">malware</a> designed to hijack your computer. A few years ago, these emails were very easy to spot because of their typos and obvious content problems. Have you ever heard of the &#8220;United Postal Service?&#8221; Neither have I. However, they seem to be refining the content using real company names now, e.g., FedEx, DHL, and the United Parcel (as opposed to Postal) Service.</p>
<p>Bear in mind the following:</p>
<ul>
<li>Do not open attachments in email unless you are explicitly expecting them. This does not mean &#8220;sometimes they send me something so I open it.&#8221; It means &#8220;John P. is sending me the spreadsheet right now, so I will open it.&#8221;</li>
<li>Do not click links in emails. Links in emails are trivial to forge. See one of <a title="Don't Click Links" href="http://blog.paradigmcc.com/2009/04/10/security-tip-dont-click-on-links-and-dont-send-them-either/" target="_blank">our first posts on the subject for an explanation</a>.</li>
<li>These companies do not email attachments with your shipping confirmations. They may send you a tracking number. If this is the case, and you receive a tracking number, do the following:</li>
</ul>
<ol>
<li>Copy the tracking number out of the email</li>
<li>Open a web browser and manually type in the website address of the shipping company, e.g., www.UPS.com, www.DHL.com, www.FedEx.com.</li>
<li>Find the box to track your shipment and paste the tracking number into the box.</li>
</ol>
<p><a href="http://blog.paradigmcc.com/wp-content/uploads/2011/04/fedex.png"><img class="size-medium wp-image-494 alignleft" title="FedEx" src="http://blog.paradigmcc.com/wp-content/uploads/2011/04/fedex-253x300.png" alt="FedEx" width="152" height="180" /></a><a href="http://blog.paradigmcc.com/wp-content/uploads/2011/04/ups.png"><img class="alignright size-medium wp-image-495" title="UPS" src="http://blog.paradigmcc.com/wp-content/uploads/2011/04/ups-285x300.png" alt="UPS" width="171" height="180" /></a></p>
<p><a href="http://blog.paradigmcc.com/wp-content/uploads/2011/04/usps.png"><img class="alignnone size-medium wp-image-496" title="USPS" src="http://blog.paradigmcc.com/wp-content/uploads/2011/04/usps-300x108.png" alt="USPS" width="300" height="108" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/04/01/beware-fake-delivery-confirmation-scams/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook Alert: &#8220;New teacher&#8221; or &#8220;Panties&#8221; Videos Are Not What They Seem</title>
		<link>http://blog.paradigmcc.com/2011/03/20/facebook-alert-new-teacher-or-panties-videos-are-not-what-they-seem/</link>
		<comments>http://blog.paradigmcc.com/2011/03/20/facebook-alert-new-teacher-or-panties-videos-are-not-what-they-seem/#comments</comments>
		<pubDate>Mon, 21 Mar 2011 02:52:24 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Social Networking]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=479</guid>
		<description><![CDATA[We appear to have another Facebook malware or, at very least, scam, running rampant. ]]></description>
			<content:encoded><![CDATA[<p>We appear to have another Facebook malware or, at very least, scam,  running rampant. If the frequency with which I&#8217;m seeing this pop up on  my friends&#8217; profiles is any indicated, this one&#8217;s spreading quickly. If  you see any links for videos with subjects like &#8220;New Teacher From  Behind&#8221; or &#8220;When Panties Go Bad&#8221; (or anything else that seems a little  too racy to actually have been posted by one of your friends), do not  click it.</p>
<p><a href="http://blog.paradigmcc.com/wp-content/uploads/2011/03/fbscam.jpg"><img class="alignnone size-medium wp-image-482" title="Don't Click These" src="http://blog.paradigmcc.com/wp-content/uploads/2011/03/fbscam-300x192.jpg" alt="Don't Click These" width="300" height="192" /></a></p>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/03/20/facebook-alert-new-teacher-or-panties-videos-are-not-what-they-seem/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>What Would a Data Breach Cost Your Business?</title>
		<link>http://blog.paradigmcc.com/2011/03/18/what-would-a-data-breach-cost-your-business/</link>
		<comments>http://blog.paradigmcc.com/2011/03/18/what-would-a-data-breach-cost-your-business/#comments</comments>
		<pubDate>Fri, 18 Mar 2011 13:05:21 +0000</pubDate>
		<dc:creator>Peter Nikolaidis</dc:creator>
				<category><![CDATA[Business]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://blog.paradigmcc.com/?p=472</guid>
		<description><![CDATA[Have you ever wondered what a data breach would cost your company? I mean, really sat down and thought "if hackers managed to compromise our system and walk away with all of our data, what would the damages be, what would it cost us, and how would we recover?" Symantec has released a new website to help you determine the cost of a breach for your business.]]></description>
			<content:encoded><![CDATA[<p>Have you ever wondered what a data breach would cost your company? I mean, really sat down and thought &#8220;if hackers managed to compromise our system and walk away with all of our data, what would the damages be, what would it cost us, and how would we recover?&#8221; Symantec has released a new website to help you determine the cost of a breach for your business. <span id="more-472"></span></p>
<p>The site, available at <a title="Data Breach Calculator" href="http://databreachcalculator.com" target="_blank">http://databreachcalculator.com</a>, asks you a very simple set of questions to estimate the cost of a breach for your business.</p>
<p>Incidentally, if you are wondering exactly what a breach is, or why you should be concerned about it, I highly recommend Michael Santarcangelo&#8217;s book, &#8220;<a title="Into the Breach" href="http://www.amazon.com/gp/product/0981636306/ref=as_li_ss_tl?ie=UTF8&amp;tag=nikolaidiscom-20&amp;linkCode=as2&amp;camp=1789&amp;creative=390957&amp;creativeASIN=0981636306" target="_blank">Into the Breach</a>,&#8221; which takes a very non-technical approach at explaining it in terms anyone can understand.</p>
<p>The Data Breach Calculator starts with the following:</p>
<blockquote><p>Since 2005, The Ponemon Institute has examined the cost incurred by organizations, across industry sectors, after experiencing a data breach. The results were not hypothetical responses. They represent cost estimates for activities resulting from actual data loss incidents.</p>
<p>Based on five years of trend data, we have created a calculator that will estimate how much a data breach could cost your organization. We can calculate:</p>
<ul>
<li>The likelihood that your company will experience a data breach in the next 12 months.</li>
<li>The cost per record in the event of a data breach at your Company.</li>
<li>The cost of a data breach at your company.</li>
</ul>
</blockquote>
<p>The site asks you ten simple questions which any business owner should be able to answer within one or two minutes. While it is geared toward larger enterprises, evidenced by the fact that the smallest company size you can specify is &#8220;fewer than 500,&#8221; this is still a valuable tool to get an idea of just what sort of risk your organization may be facing in the event of a breach.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.paradigmcc.com/2011/03/18/what-would-a-data-breach-cost-your-business/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

