Tuesday, September 14, 2010

Unlawful Entry

Since Microsoft decided to stop supporting Windows XP SP2 version last July by not providing any further patch fixes to new vulnerabilities that come into existence and said that it will still support XP SP3 until 2014, I thought it would be time to have a little discussion on a few things involving protecting your environment.

As we all know that for many centuries, there have been criminals all over the world on the streets with different motives for different forms of crime. They have all had different motivations, whether it's as serious as hurting others or finding ways of stealing personal information for money. As the internet and enterprise networks have evolved over time, some of these criminals have expanded their horizons to include online theft and cyber warfare.

Some questions that I have received in the past would include the following: "Why would anyone want to do such a thing to people online?" For the same reasons that these same individuals have been doing this before the invention of the internet. They don't care if their victim happens to be the nicest person in the community. They don't have passion for people's livelihoods and they thrive on vulnerability and chaos.

Take for instance, there are the shoplifters whom in online land can often be referred to as the kiddie scripters. In the land of street crime, they maybe referred to as juvenile gangs where they may setup a dare to do something that is damaging and dangerous to the rest of us. Things like throwing a brick through someone's car window without stealing any valuables inside would be a prime example just to cause some damage for someone else. Kiddie scripters in the land of the internet often tamper with vulnerabilities in software code or internet vulnerabilities but don't necessarily go after any imperative data.

Then we get to the more high profile criminals that like to go after other people's personal information such as social security numbers, first and last names, phone numbers, mailing address, etc. They can do this by sifting through garbage out on the streets, through mailboxes, and anywhere that they can find this information online. Like someone I had heard was giving a presentation on this a number of years ago, if they want something badly enough, they will find ways to get to it.

One prime example back in the days of college, there was a time when someone who I was acquainted with but tended to keep my guard up for the most part decided to commit a crime. What was the first thing he thought of? The living quarters on campus had some co ed dormitories and he had already gained the trust of my roommate's friends. So in their own opinions, he would never do anything unspeakable. He was a student himself at another location who was studying law enforcement at the same time that I was. Here is what he had done, although what he had done did not go as smoothly because there was a security perimeter in place when he had performed his less than acceptable actions. He used social engineering to get himself into the entry point because many of those students had seen him before and quite frequently because they had assumed that he was a student of the campus and lived in that dorm himself. So he gained access into the building and used a brute force attack to get into our apartment. Some may ask, how did I know he was coming? In his case, he left a trail of evidence on our answering machine but he was not counting on someone being there as a prime witness to what he was trying to do. Security perimeters were already set in motion so that by the time he got into the room, security was already right behind him. The point here to be made though is that some security measures were ignored which allowed him to get into the hall which in this case would be like a router on the network. There were no access control lists on this device so to speak to prevent him from getting in. Many security measures should have taken place to first off educate these students about watching who they let in, etc. That was of course the next step taken after I filed a police report on him to ensure that he would not make that attempt ever again with anyone else at any place or time.

One thing to use discretion with is social networks including Linked IN, Facebook, MySpace, Twitter. They are great avenues for promoting events, however, posting too much information on your profiles can give these malicious people plenty of opportunities for social engineering. For example, I heard from this one friend of mine that while they were away on vacation, someone had taken off with their mailbox. Here she discovers that her son had posted all over his facebook page that they were out of state on vacation for 2 weeks. Now depending on how well they know their settings, some information gets posted on there that not only their friends can see, other individuals can see as well.

Another thing when considering hiring someone to protect your networks, be sure to keep up with current events that are going on with other companies. I had heard that there was one company that had an insider that hacked into their network and he was fired for tampering with their data and made it to the media. Some other company hired him on 6 months later. Now they might have found it impressive that he could understand a great deal about vulnerabilities but there is a 99% chance that this same person will try the same thing with their network. This is like handing the keys of your home to a person that you just discovered from the media that they had already broken into someone else's home. That 6 month period doesn't seem long enough for this person to make a dramatic change in their behavior.

I read somewhere that 75% of attacks start through the web browser which does make sense to me because it is one of a few other applications that relies on an open port to run and gain access to information off of the internet. There are several others but this is one of the main ones because web browsers rely on different pieces of software codes and plug ins to allow it to work dynamically.

Some others have mentioned to mainly focus on application security because of coding vulnerabilities with certain programming languages and not focus so much on the operating system. Now I don't agree with that entirely. Depending on the environment, many other factors need to be taken into consideration. For example, if you are using the internet and you happen to be in a networked environment, it's imperative to use security guidelines to not only protect your data, but everything else which you wouldn't want to pay high costs for when things get damaged because one decided to forgo imperative security measures. Even if there is no significant data information on one system that these hackers would be after, they can still use these unpatched systems to bring into their methods of attack.

Just like the increase in criminal gangs has become even more high risk, so are blended threats in the online world. What I mean by blended threats is where these online cyber criminals take advantage of different virus types and blend the threat together to cause an even greater headache on systems. What the street gangs and the cyber gangs have in common is the following:

1. They case the joint where they plan on causing damage, attacking, or committing some type of monetary crime. If they want to go in without being detected, they plan things out possibly one to 2 months ahead prior to committing the crime.

2. What do both of these groups look for? Areas that lack the greatest amount of security. With online hackers, they can take advantage of free online monitoring tools for monitoring things like network traffic. They are great tools for the Network Administrators but they are a double edged sword because when they get into the wrong hands, there is no telling what will happen unless someone is willing to go in and monitor these situations.

For example, there was an unusual murder mystery that occurred in my hometown many years ago where a woman who had been a nurse up at the hospital went missing one day while the children were left behind on a curb at a shopping mall. She and her husband had just bought a nice large van with minimum visibility to be able to see inside of it and almost sound proof so that it would not draw too much attention to anyone on the outside if things were somewhat noisy from within the van. What this gang was looking for was a way to hide themselves while committing the crime in broad daylight. They studied everything for over a month at this one particular shopping center to see what it lacked. The main thing was that it lacked in a great amount of security. One could not see one security guard patroling the area for miles around. In summary, this was an inside attack meaning: they knew who their victim was, they gained her trust and she was made vulnerable because she was letting her guard down. Therefore, she was attacked.

In the case of the online hacker, they are looking for the same thing. A lack of best security practices on both the internet and the network. Security starts at the borders first. Those would include firewalls, routers, servers, switches, etc. Just like the security of the US from foreign invasion needs to start by being controlled at this Nation's Borders, so does protecting your network. Like an illegal immigrant can enter into our country when security at the borders is lacking, that's how a threat can break into a network system if one has weak configuration settings such as weak passwords, systems that are not updated with the latest patches, and the firewall is not configured properly to secure any ports in use.

One other thing to keep in mind is even though this might be costly to consider implementing strong security measures, it can be even more costly and time consuming when an intruder makes that unlawful entry.

Monday, August 2, 2010

Benefits of Networking

Today my topic is focusing on what the benefits of networking are. Several years ago I joined Linked In and connected with different individuals of whom I either knew of prior to the creation of this account and connect to those of whom I met along the way. Now I understand that people may only want to connect with people that they already know which is fine, however, that may not be enough to just connect to these people. I believe that the entire idea was to follow up with these individuals that you connect to since that is what the whole purpose of this social media business is all about.


We all want to connect to people for various reasons whether it's to help grow our business or pursue job opportunities. I'm one of those individuals who went beyond my comfort zone to join this online social media and have attended multiple events not only just to connect with people, but to learn something new every day while getting out there. So far I've met many different people, some who are entrepreneurs, others who are in transition, etc.


Now I understand that some people are busy with keeping up with their businesses and then there are some who are trying to get out there. During these tough economic times, there were also times that I was feeling like nothing was happening. In order for me to get through these winds of change, I would often turn to other people along the way in order to get through this and then I would give my time to the community to keep me going and focus on other people's needs for awhile. We can only do so much about what is going on right now in the world and can only hope that the leaders of this country are making their best efforts to help bring this country back on it's feet. What we can do however, is try helping each other out in the best way we know how. I've discovered this through introducing people to each other and volunteering my time within the community. Sure there were some things that I've never experienced before, however, if you know me well enough, that's never stopped me from accepting new challenges and it feels great each time I've allowed myself to step outside my comfort zone.


For example, I've been in the Information Technology field for approximately 10 years now and decided that there were some things that I could volunteer for out in the community to stay busy and to make me feel good about the things that I was working on. Along the way, I've met many different people that I've probably would not have had the chance to meet had I stayed within my comfort zone all of that entire time.


The one thing that comes to mind was a PC Refurbishing non profit organization that I signed up for within the Cuyahoga County Board of Developmental Disabilities. What this program is based upon is local businesses within the area donating their pc equipment to this program. Volunteer PC technicians would assess the hardware parts as they come in from different organizations. They pull out the hard drives and wipe them with the Department of Defense wiping tool and replace any parts on the CPU that are not functioning. Occasionally, we receive laptop donations, however, sometimes the most challenging thing we face is not having enough hardware parts on the laptops themselves to put together a decent running laptop. We make the best of the situation.


Over the past year, I've spent countless hours giving my time to this group and have met many different technicians with remarkable skill sets. As a team, we have managed to combine our expertise and work together to come up with some fantastic results. These machines are then donated to people with disabilities. One of our technicians donates his time teaching a class on pc usage to these people and everyone enjoys his enthusiasm, kindness, and patience towards everyone. Henry managed to get acknowledged for all of his time and hard work that he puts into his role. This place can bring such an amazing transformation to each person who has the chance to volunteer something to the community. This happens to be better than dwelling on how that one past company let you go after so many years of loyalty that you had given to them. Believe me, I've spent a great deal of time listening attentively to these individuals and I understand what you have been going through.

Now is your chance to get out there and believe me when I say that you will get more out of everything when you give. This does not have to be anything extravagant, simply just introducing two people that might benefit from each other. One man had mentioned in a conversation that he felt that people around him didn't trust him enough to do his job. My question for him is what does he do to earn the trust of others? Volunteering is one of the many ways that you can do this if you are job seeking or for those that just started working somewhere, start proving to your employers what you can do for them and start earning their trust by being honest and true to yourself. After all, we need to start thinking, what can I bring to the table for these people?


We also have a mentor who starts out the new technicians with the guidelines for building machines, handling pickups of donated systems, and distributing them to the consumers when they come in with requests. His background is in eletrical engineering and he has truly demonstrated his compassion for helping other people and knows how to bring out the strengths in everyone that he teaches.


Also, I had mentioned Cleveland GiveCamp in my last blog and there is one additional recurring one that comes around every year. The American Diabetes Association fund raising event with Patti Clair. For anyone who is interested in volunteering, that event is very exciting to volunteer for in that it brings different healthcare organizations together for a good cause. Cleveland Clinic is a bronze sponsor of this event.


Committee members come up with very creative ideas for raising funds for this event. One example that stands out in my mind is with Stephanie Steirn's Fencing event that takes place exactly one weekend prior to the Step Out Walk that will be taking place this year on October 2nd. She has come up with many other creative ideas in both the past and the present.


Like Pat Lyden from the Suicide Prevention Education Alliance for Teens once said, "You Get What You Give". I believe I've also heard something similar along those lines from a movie titled, "Pay It Forward".


I hope to see that there will be more indivuduals taking the time to follow up with one another. Please take the time to reach out and go beyond just making contact connections on Linked IN. For when you start reaching out to others is when you will start seeing results. This doesn't happen overnight, it takes time.


One comment that I received when someone was trying to introduce themselves to a few people on here was, they don't know that particular individual. Well here is my take on this as well. I agree that people should introduce themselves properly first before trying to add another person on Linked IN. On the other end of the spectrum, if a person appears to be reaching out to connect and they are doing it appropriately, it may be a better idea to get yourself introduced by a mutual contact that you both know or taking the time to attend these networking events first and introduce yourself there. Now if you want to expand your network, then it might be a good idea to take the time to meet new people instead of just making assumptions about a person. That's part of the purpose of networking. Yes it's about who you know, however, it's also about getting to know those individuals that you might not know as well in order to find out who they are because that might be the person that gets you to a great lead. If you really think about it, when going to work for a company, it's imperative to get to know your team.





Until next blog.....

Wednesday, July 21, 2010

Life Runs On Code

Today, I decided to emphasize the meaning behind the phrase, "Life Runs On Code". I first came upon this quote when I happened to win a t-shirt prize from Microsoft at one of the user group events that I attend often. Since the year 2001, I've started to notice more how life often depends on code. September 11th is a primary example of that. Many often refer to that as the "911" incident. Well as we all know that 911 was most often used as a call for emergency situations.



There are many books out there that have been written in mystery or what one would refer to as codes, such as "The Da Vinci Code as an example. Microsoft primarily uses the expression, "Life Runs On Code" to emphasize their Development Software Platforms. Sometimes codes have often been used throughout the course of history to send messages to individuals in the future of what to look for.



Last weekend from July 16 through 18th, I spent the weekend attending an event called "Cleveland GiveCamp" which was a very interesting hands on opportunity. The event was very significant in that it brought together 21 non profit organizations and many volunteers within the Information Technology Industry to help support a great cause. 21 of these non profit organizations ranging from a Fire Department to a Suicide Prevention Alliance Education group were there anxiously awaiting for web developers, database administrators, and project managers to form into a team in the hopes of creating a new website or making improvements to existing ones.



What turned out to be special about this particular event is that all of these non profit organizations were given a team of experts to volunteer their time for 54 hours to bring ideas to the table. Each team had a diverse group ranging from college students to experienced IT Professionals each coming together to show great team spirit. I truly enjoyed myself as I stepped up to a new challenge of working with things that I've never worked with in the past. Word Press suddenly became the next cool thing to look into. Several of the men and women were either attending or recent graduates from Case Western University, while others were graduates from Akron and Kent. Each individual within the group brought their own enthusiasm and strengths to this team which is something that has not been seen in awhile.



I had met Pat Lyden, the Executive Director for SPEA and she seemed to be thrilled to have improvements made to their website. Most of the content that was originally on it was not targeted towards the specific audience that she wanted this to be focused on. After enhancements were made to this website, the content was more focused on teens. Our entire team worked diligently and carefully to make every possible improvement that was necessary to make this website stand out and be more easily found.

Here is the compliment that she made specifically about our team:

" RE: A Million Thanks!!!‏

Dear Mary, Doreen, Mike, Tom, David, Ben and Scott,
What a weekend! WOW!
I hope that you are rested after our Give Camp marathon. I can’t thank you enough for devoting your weekend to building a new website for SPEA!!!
I feel enormously blessed to have been selected by Give Camp, and to have had each of you on my Team. Each of you made a huge contribution and you worked tirelessly on SPEA’s behalf. Our website is BEAUTIFUL and it is quite sophisticated. I absolutely love it, and I know that it will transform the way that SPEA does business. Our fundraising will be transformed, thanks to the visual appeal of the site, its ability to interact with Facebook, its Newsletter sign-up function and its five ways to donate online: Into the Light Walk, Links for Life registration/donation, Honor a Loved One, Fund Our Greatest Need and Create a Personal Fundraising Page.

Scott, the design is beautiful! Mary, I’m so happy that our Facebook is cool looking now and thanks to Tom is connected to our site in a cool way.
Doreen, Mike, Tom, Ben and David, you did an amazing job of programming. I am in awe!

A Million Thanks!
Most gratefully,
Pat


Ms Pat Lyden
Executive Director
Suicide Prevention Education Alliance (SPEA)



Sunday was the last day of the event when it was time to wrap up these projects and each team was ready to present the tools they used to make very creative websites or make the existing website that a non profit organization had to make it stand out and more unique. After our presenter gave his presentation, Pat immediately went up to the microphone and said, "This is the best team that I ever worked with" and the feeling behind what she said was great.



As all of the photographers went around the room over the entire weekend snapping all of their pictures to showcase each person's talent, they managed to put together a fabulous and fun youtube video to capture the entire 3 day event and all of the hard work that went into it.



Our entire team got a gracious thank you from Pat Lyden on both facebook and via email when she wanted to make sure that everyone had the final steps working in motion. I'm glad that I had the chance to take on this new challenge and learn some unique features of Word Press and the detail steps of modifying a website.

I will always remember Pat Lyden's quote: "You Get What You Give."



Next week, I will blog about the existing project that I am working on with a colleague which is setting up a software accounting package. More details to come.......



One last thing, I forgot to mention that last month, my cousin Kelli Stack who is a former Silver Medalist Olympian had been visiting the Cleveland Indians Stadium, made a pitch, and was excited to be signing autographs for her fans. She had posted some very interesting blogs while she made her trip up to Vancouver this past year for the 2010 Olympics as an Ice Hockey Player. I've been very proud of her accomplishments as well.

Thursday, May 27, 2010

Achievements











Achievements are something that everyone should try to pursue. Does not matter what type of achievement it is, whether it's small or huge, as long as it makes a positive difference.

Over the past year, I can honestly say that there were some changes that I went through with this economy being tough. There were some small achievements that I accomplished along the way that made me feel that I could extend beyond my comfort zone. There are different ways that I have managed to think outside the box just to meet different business professionals that I never had the opportunity to meet before while constantly working.

For example, I had the opportunity to network more and not just within the Greater PC User's Group, I also became familiar with other groups such as the Northeast Ohio SPIN, Information Security Systems Association, and the Northeast Ohio Think Tank Group.

I've attended numerous webcasts, participated in all of these monthly events that focus on the future of the Information Technology World that seems to centralize around Virtualization and not just with one vendor. This is coming from different vendors.

Just on a side note, I started to notice a relative of mine's growing into a leaderhip role within this community as well. For the past several years, she made big accomplishments in this world with achieving her Gold Medals for the World Championships, then a Silver Medal at the 2010 World Olympics in the US Women's Ice Hockey Team. When a former manager of mine suggested that I get in front of as many people as I can, I never realized that it would be down at Progressive Field standing in line waiting for this cousin to start signing autographs.

Yes if you find yourself related to someone famous, be prepared to have a crowd surround you with questions about them. With 80 family and friends gathered on one side of the ballpark, it was very impressive to watch this young athlete throw her first pitch to the Mascot of the Cleveland Indians. I can honestly say, that the Indians could use her help right now.

Anyway, back to focusing on the future. Some people might say that we need to focus on the here and now, but we must be able to focus on what will unfold in the near future, otherwise, these other countries will start becoming more advanced than we are right at this moment.

There are some new things that I would like to focus on right now in order to think outside of the box once again. There is a need to step outside this comfort zone and more than one person needs to do this, otherwise, we could find ourselves behind the times.

Sunday, February 14, 2010

Chasing the Olympic Dream, my cousin Kelli Stack

I thought that it was about time to update my blog to let people know how things are going right now. As some of you may have found out, I managed to find an IT Project and so far have found it to be very interesting. This is a big learning curve for me in the IT area, however, I'm enjoying every minute of it and have been informed that I'm doing very well which is nice to hear.

Also, this week starts the Winter Olympics 2010 and I get to hear wonderful things about this cousin of mine, Kelli Stack who is currently playing a forward on the Women's US Hockey Team. For the past 2 years, she has helped this team achieve an outstanding winning status with several goals which earned them 2 Gold Medals at previous games over the last several years.

I got to hear how Kelli enjoyed the opening ceremonies and she gets to play her first game on Sunday, February 14th at the 2010 Winter Olympics in Vancouver. I'm very proud of her mainly because I know that she is very passionate about her career. This has been her dream ever since she was a little girl and I myself had a similar dream of being on the ice with figure skating but I later found my passion in IT. Interestingly enough, I had the opportunity of winning several times over the course of last year different things and the one that surprised me the most was the opportunity for private ice skating lessons with a former Olympian Silver Medalist. Just for fun, I will schedule that and see how I do with it since it's been quite some time that I have been on the ice myself. That was probably the most interesting time that I had was when I was taking lessons and felt really good gliding around on the ice.

Another interesting thing is that this has been quite an "ice breaker". Being able to go to some of these networking events and casually mention the Olympics and non chalantly mention that there is a relative that I am aware of who is currently going to be in this special event. Just to see interesting by standers raise their eyebrows in surprise at the news. The smiles on people's faces just to hear something like that and the fact that this is a young and successful woman.

Just the idea that when you find what you are most passionate about, is where you will end up succeeding. If you hate what you are doing, things will be tougher. If you love what you are doing, it makes all the difference in the world. Only liking half of what you are doing can also be a big challenge. It's imperative to research everything involved with the career path you choose before jumping in.

The idea here is not about the fame or the money involved with Kelli's career. It's all about her enthusiasm, her hard work, and what she is most passionate about that has made her the successful person that she is today. This has nothing to do with age, money, and not even fame: this is all about what you find that you are most passionate about in life. If you love to take care of people, you can be a nurse or a doctor. If you love to solve mysteries, you can pursue the type of career that involves what you are best at doing.

Anyway, just some things to think about as I enjoy watching some of these games and continue to explore opportunities.