Saturday, May 29, 2010

Is It A Question Of Scruples Or Simply A Profit Motive?

Over the years, it has been described as malware, scareware, or simply put, computer virus. We are referring to the insidious application that installs itself in your computer, then prompts you to purchase a special program to clean up the multiple installed "at-risk" programs that were found on your computer. Whether you've heard it referred to as Windows XP Antivirus 2009 or Antivirus 2010, it is still the same rip-off mechanism.

Has Any Progress Been Made In Curtailing This Blight?

On Wednesday, May 26, 2010, three men were charged by the U.S. Department of Justice for allegedly operating a massive scareware distribution ring. Apparently, one of the three men, identified as Shaileshkumar "Sam" Jain, was CEO of Innovative Marketing, a Ukrainian company which initially sold counterfeit software products, then developed scareware products, amongst which was Antivirus 2008. Innovative Marketing is accused of marketing over one million copies of their fake antivirus products to end-users around the world.

Fake Antivirus, as it is referred to has become the scourge of the data security world. Only a limited number of malware detection products have been able to identify and remove these programs. In general, they slow down computers, display pop-ups and constantly offer to clean up your computer by downloading their products (which, of course, are available for a fee paid online with your credit card). Can you spell S-C-A-M?

According to a report in PC World, Innovative Marketing made more than $100 million through the sale of scareware antivirus products. The Federal Trade Commission (FTC) managed to stop further distribution of some of Jain's scareware by putting the hosting company out of business. Joseph Bochner, an attorney who brought a class action suit against Jain and his business partners kept trying to get the Federal Government involved, but they told him it was not a criminal matter. It wasn't until the Department of Justice took the case that he saw some results. Eventhough Jain was arrested in 2008, he skipped bail and is believed to be residing in the Ukraine. The Department of Justice has, since, filed international money laundering charges against him in order to prosecute their case overseas.

Is It Still Status Quo?

You still need to be "on guard" whenever you work at your computer. The mechanism used by many of the fake antivirus programs is a screen which closely resembles a Windows pop-up message. Don't be fooled by this ploy. When you go online and download programs, make sure you are accessing a reputable site. If you see an e-mail that says you need to provide your password, be wary. It is only though common sense and a general awareness of inconsistency that you may detect and avoid such traps.

Keep the following in mind:
  1. If the offer seems to good to be true, it probably is.

  2. If the message appears to be a Windows pop-up, remember that Microsoft will NOT be sending you to a third party site.

  3. If you are immediately prompted for payment online, be suspicious and question it. Try to confer with a colleague or friend. Don't be afraid to ask questions. If there is no phone number in the website that can answer your questions, don't release your credit card information.

  4. Always check to see if the https appears on the top of the page and a lock icon to demonstrate a secure site. It can still be bogus, but if it has https, it adds to the creditbility of the site.

  5. Envision yourself requesting a refund because you are unsatisfied with the product. Is there any information available to you initially that would enable you to get the refund? Make sure that you can find this information.

  6. P.T. Barnum said, "There's a sucker born every minute." These thieves stake their reputations upon such premises. Don't be easily fooled. Think before you jump to divulge your personal information and you'll avoid being the victim.

I have mentioned it repeatedly throughout my blog posts: You must take precautions not to become a victim by being more aware of the changes around you and in your computer. If you see something that appears wrong, start with that as your premise and determine whether your initial impression is accurate or incorrect. It is better for you to act as if something is not right vs. continuing as if nothing had ever happened. This will save you much frustration later on when you DON'T have to resolve ID THEFT or CREDIT CARD FRAUD. Everything we do gives us an option. By making a choice, you can better determine the outcome. Decide not to become a victim and to notice when something doesn't sit right with you. If you can't determine if something is wrong, don't hesitate to ask for assistance. It is well worth the risk of embarassment vs the cost of repair. If you have questions about technology or wish to learn more, feel free to visit us at www.tech4now.com or contact fred@tech4now.com.

Saturday, May 22, 2010

Does Your Photocopier Have A Dirty Little Secret?

In March's blog article, "Keeping Safe Online and Avoiding Identity Theft," we discussed the concept of identity theft. The likelihood of its occurrence was based upon the ignorance or recklessness of the end user inadvertently releasing personal information out on the Internet. Last month, CBS News Chief Investigative Correspondent, Armen Keteyian exposed a feature built into most high-end copiers since 2002...a hard drive.

Why would a hard drive be of such great concern?

Apparently, the hard drives retain copies of all images processed by the machines. The result of such a practice is the potential release of highly classified, confidential information to a non-restrictive, uncontrolled situation. By situation, I refer to the aftermarket aspect of the copier business. Many copiers are leased by businesses to use them with the least amount of issues during their first three years in production. Typically, at the end of the lease period, the device is returned and a new one is put in its place.

Why Do I Care If My Lawyer, Accountant, or Doctor Leases A Copier?

In his video, Mr. Keteyian interviews a consultant from Sacramento, CA who demonstrates how easy it is to extract tens of thousands of images from the hard drives once you buy one from an "off lease" reseller. As it works out, the copier companies do not typically erase the drives once the copies are made. This translates into your unbeknown "archiving" of images.

The Federal Government has laws to protect your privacy. The question in your mind should be why isn't this covered?! During the interview, Ed McLaughlin, President of Sharp Imaging, revealed their own survey, commissioned in 2008, found that 60% of Americans were not aware of the fact that the images are stored on a hard drive. He noted that the industry, in general, has failed to inform the general public of the potential risks involved with copiers--"It's falling on deaf ears or people don't feel it's important" or they have the approach, "We'll take care of it later." Sharp Imaging, like many other manufacturers, offers a feature to automatically erase the image from a hard drive, but it costs $500 for that option. Why should that cost extra?!

The Findings

Apparently, this secret was not effectively brought forth to a number of businesses and government offices that leased the machines in the exposé. Insurance companies, police departments, doctors' offices and other businesses were "exposed" to be ignorant of this fact. Based upon the information discovered on these copiers, it appears that there would be a number of Federal or State Regulations that are being violated. If the end user of the machine is unaware of the risk due to a tiny mention within a boilerplate text manual page not observed at time of purchase, one must ask "Who is responsible for the security of the information stored in these machines?"

The warehouses that resell the machines sell the off-lease equipment at prices as low as $300, yet the manufacturer wants to sell the "self-clearing" feature for $500. So, where would the expense need to be borne? Should the Lessee or Vendor be the one expected to clean the machine? Should it remain as an option for whomever whether they want to extract and destroy the hard drive in the copier? Frankly, I believe there are too many options that are left unaddressed. At this time, identity theft from recovered copier hard drives is not recognized as a prevalent crime; however, given its new level of publicity, it may become a greater threat. Hopefully, the same level of publicity will convince the powers-that-be to enact legislation that will make it mandatory for one of the parties involved to protect the copier users from themselves--if not, then voluntarily.

The Prospect of Identity Theft

Many of the exposed documents found on the copiers included social security numbers, bank account numbers, birth certificates, and income tax forms. If you believe that your information may have become compromised by virtue of an inadvertent release in a copier's hard drive, you should take the necessary precautions to protect yourself. For a detailed punch list, visit www.ftc.org/idtheft. There, you may read articles, watch videos and link to other sites that will inform you and educate you to become a wiser consumer. Not all ID Theft happens online, you need to know more to protect yourself and your loved ones. If you would like to learn more about concerns of modern day life or computer use, feel free to follow us on this blog or visit our website for newletters and articles related to technology's risks and benefits.

Saturday, May 15, 2010

You Knew There Was Something About It That Did Not Sit Right With You...

For a number of years, the Recording Industry Association of America (RIAA) has been contending with the filesharing utility programs available over the Internet. Some folks would say that it was an OK thing to do because they did not want to pay for the music. Often, they would justify it to themselves as they would cite that the musicians still gave concerts and, in the case of the Grateful Dead, even allowed members of the audience to record audio and video of the performances. The biggest question to arise from this practice is "How do they make money if there music is available free over the 'Net?

Someone's Gotta Pay For It


Recording an album or even a single is an expensive proposition. After the performer pays for the years of practice, the bookings and the travel, then the decision to record may come up. To record an album, besides composing the music and copyrighting it, the recording sessions include the expense of the studio, the cost for the recording staff, then the production of the actual media. When it's all over, the outlay is huge, the only way to recover it is often through the sales of the music. If you remove that from the equation, where is the motivation?


Enter the concept of Intellectual Property

Regardless of the work, be it an e-book, a recording or an audio book, it should be considered intellectual property. Works that are copyrighted (or patented) are so to protect their creator from plagiarism, theft, and lost revenue. Recently, concerns have been voiced, in general, about e-books reducing the earnings potential for authors regarding the Kindle(r) and the iPad(r). It is not the device itself, but the fact that e-books typically generate less revenue for the authors inasmuch as royalties are paid at a lower rate (see video).

Furthermore, the music industry is fighting back hard against the file sharing utility providers. The most visible case in recent news has been RIAA vs LimeWire. Limewire has been around for a few years and has enabled its users to exchange files easily over the Internet. As a result of such practices, organizations like RIAA have pursued lawsuits to restrict or remove such capabilities. Years ago, in 2001, a similar action was pressed by A&M Records against Napster. Effectively, the RIAA pushed to restrict peer-to-peer networking over the Internet. There was a panel of eighteen law professors that suggested restricting the concept of peer-to-peer networking over the Internet was not in the public's best interest; however, the judge had set a condition upon Napster to control the passing of files. Napster, although it made a respectable effort, was found by the judge not to have done enough, thus it had to pay out $26 million to songwriters and music publishers. Napster declared bankruptcy in 2002 as a result of the action.

What will happen in the long run?

This is a wide open discussion. The concept of public good is challenged by the search for private benefit. It doesn't matter whether it is software piracy out of China, "free" music downloads to your iPod, or the sharing of electronic media that can be "found" to put on your personal digital assistant (PDA) or Blackberry. The public must become educated in the delineation between public domain and private property. You may argue that once something is in access of the public for an extended time, it becomes public domain, but, pro tempore (in the meantime), people still need a reason to invent, create and design things that are engaging, useful, and attractive for others to want. Afterall, where is capitalism without the ability of the market forces to play out and allow the "promoter" to derive benefit.

As a Systems Integrator and Managed Services Provider (MSP), we have made the business decision to help our clients maintain licensing compliance with their software vendors. We do our best to protect our clients as they acquire business tools in an ongoing basis, to help them comply to avoid potential costly litigation from software companies that may learn of possible non-compliance issues from disgruntled employees or ruthless competitors. Given the penalties levied against those that disregard such infringements, we would rather help our clients spend a little now to be safe rather than lead them on a path that could lead to expense and public embarassment. If you feel that your company may had issues, please feel free to contact us. We can help you review your installed software and make a legitimate effort to clean up what may become a potential liability. We can be reached at (201) 797-5050 or support@tech4now.com. And, as always, if you found this to be a useful or engaging article or if you feel otherwise, we'd love to hear from your. For more information on issues in IT, visit our website at http://www.tech4now.com/.

Friday, May 7, 2010

The Concept Of Privacy In A Modern Context

I am the youngest of three siblings. Growing up, whenever someone had to make a private phone call, one would announce to the whole household that you did not want to be interrupted, we then went into a room that had a phone, and closed the door. Today, it's much different.


The Differences and their Nuances


Bob Dylan wrote a song in the sixties called "The Times They-Are-A-Changin." The song has become the ballad for change and a warning to those determined to live in the past for they will "sink like a stone." No matter what I may do each day, I am amazed at how quickly technology changes and legislation penned around it grows.


A Slight Tangent


I attended a conference on Thursday in which a panel of experts discussed the concerns, potential, and history of data security and privacy. Why, today, while speaking with my oldest child another aspect of privacy crossed my mind--texting. I asked him, "If you can call someone by telephone at any time and, basically, from anywhere without interruptions, why do you text?" As a person that uses a Blackberry to review e-mail messages while riding as a passenger in a car, I should be more enlightened, but I asked him with an open mind and got an answer that I had not anticipated..."Dad, there are too many times when people around me are listening in on what I may say. If I text someone, I know that others will not be aware of my 'conversation,' nor do I have to seek a quiet location to communicate--it's more private that way."

Okay, so I now have a little more insight into his mindset. Why did I share that with you? As I mentioned, earlier this week, I was at a conference discussing the modern day concerns of privacy. How many newspaper articles have you read in the past few months in which it was discovered that someone stole a list, or lost a computer with a list, or simply had their network breached (and then the list was stolen)? Between the measures taken to comply with Sarbanes-Oxley (SOx), Graham-Leach-Bliley, Personal Credit Information (PCI), Private Identifiable Information (PII), and Federal Rules of Civil Procedure (FRCP), one can get overwhelmed with security and privacy concerns. What can be done?


A Great Concept To Address The Situation


Imagine the position of a lawyer or a doctor. You have a client or patient that you have been communicating with online--there are extensive threads of e-mails that have gone out with private details and confidential information. Perhaps, you have sent a copy of an X-ray or an MRI to another doctor on his/her behalf. During one of your "sends," you inadvertantly click on a wrong addressee, press SEND and off it goes. Some choice four letter words exit your mouth and the thought registers, "How can I UNDO this?"

In most instances, you can't UNLESS you have a special service or mechanism in place. The service would allow you to send the message to your correspondent without actually sending them the content. What exactly does this mean? Think of a visit to a website. You click on a hyperlink and are directed to a controlled URL that not only may restrict your access via password/login, but may control the extent of information that is revealed to you based upon your authentication level. A simple example would be an e-mail is sent to your client/patient. You realized, after the fact, that your diagnosis of the situation was "off" due to incomplete details. You want the client/patient to ignore the message, but you KNOW that it never works that way. As soon as it arrives, the recipient will read the message and become distraught based upon your content. How can you cover your butt? If you had this service, you only need to revoke the message. After you revoke it, the client will not be able to access the content BECAUSE the message is never sent, only VIEWED. The service allows you to break the LINK to the message content, so it is severed the moment you give the command. Pretty cool, eh? (No, I am not a Canadian.)

The other valuable aspect of this service is the fact that you cannot delete the messages, only break the links. So, if under FRCP, you were required to disclose under court order the message originally dispatched or a message relayed to a colleague, there is an audit path. Mind you, it is not something to be taken lightly, you have sent personally identifiable information, so you must take appropriate steps to protect the privacy of those concerned. Can you see how a lawyer, doctor, or financial advisor could benefit from such a product? If you do, please feel free to have them contact us for more information. This is a reasonably priced service that can be implemented in 24 to 48 hours from the moment the order is placed. Based upon the penalties and civil damages that could amount from inadvertant disclosure, any price spent on such a service may be reasonable. This one, however, is well within reason for most. If you would like more information on this subject, please contact us at (201) 797-5050 or fred@tech4now.com. It's better to be safe than sorry!

Sunday, May 2, 2010

Concerns Of A Parent With Texting

A recent Pew Survey revealed that many teenagers between the ages of 16 and 17 are texting behind the wheel. As a matter of fact, the indications from an 800 person survey were about one third! For more information on this report by Amanda Lenhart, see the article on MSN.

Some of the concerns expressed in the article relate the fact that a person texting behind the wheel, regardless of age, is comparable to a drunk in terms of response to outside factors such as a car in front applying its brakes. To add worry, about 48% of teens between the ages of 12 to 17 have been in the car with someone texting. Their take on this activity ranges from worrisome to blasé--some are not phased by it and others will grab the phone from the driver and yell at that person until the driver clearly understands that the passenger has the fullest intent of arriving at the destination ALIVE.

I have a son who recently started driving. He also has texting available to him on his phone. When he sits around the house, it is like living the cartoon strip Zits. He is non-communicative while he engages his textees. Fortunately, I am under the impression that he has enough intelligence AND smarts NOT to text while behind the wheel. Needless to say, if I were to catch him in the act, I would ground him from numerous activities which he holds dear.

You Can Stop Them

If your children seem prone to text and unlikely to study, you CAN take control of the situation without having to remove the phone from their hands. It's as simple as a call to your carrier. Did you know that you can have texting BLOCKED on some or all phones within most plans? That's right, you are empowered as the parent to restrict their communications and be the ogre that they say you are (only when they want something that you say they can't have). Consider it an act of kindness and love.

If the concern of your children (or your significant other) texting while driving isn't enough, there is "Sexting." That's right, another portmanteau for the modern world--obviously, the word combines the word SEX with TEXTING and, voila, you have "Sexting." The word was coined by the Sunday Telegraph Magazine back in 2005. Wikipedia describes the word as follows:

Sexting is the act of sending sexually explicit messages or photographs, primarily between mobile phones.

Is Sexting limited to teens? Heck, no! People of all ages participate in it. Why there is another survey from the Pew Research Center’s Internet & American Life Project found that 4% of cell-owning teens ages 12-17 say they have sent sexually suggestive nude or nearly nude images or videos of themselves to someone else via text messaging, a practice also known as “sexting”; 15% say they have received such images of someone they know via text message.
Focus group findings show that sexting occurs most often in one of three scenarios:

  1. Exchanges of images solely between two romantic partners

  2. Exchanges between partners that are then shared outside the relationship

  3. Exchanges between people who are not yet in a relationship, but where often one person hopes to be.

Again, Senior Researcher Specialist and author of the report, Amanda Lenhart points out that “These images are shared as a part of or instead of sexual activity, or as a way of starting or maintaining a relationship with a significant other. And they are also passed along to friends for their entertainment value, as a joke or for fun.”

In many instances, it's the peer pressure and social distortion that has children messaging images and videos of themselves. Some feel they won't be accepted by their friends, some say it's a non-issue. But the fact is that some children after acting impulsively end up regretting it for longer than they could have anticipated. In one case, a girl in catholic school sent a picture to her boyfriend. He, in turn, circulated it throughout his school. It ended up manifesting itself before the school's leadership which then processed her behaviorial problem with extreme response. The girl had to leave the school and has acquired a stigma similar to Hester Prynne (The Scarlet Letter) without having committed such a "heinous crime."

What can you do to prevent this?

I am a parent, but in no way fully accredited to answer this question. My approach would be to discuss the use of texting/sexting with my child. You may not be aware that your child is doing this, so approach gently and be firm when communicating your concern. If you strongly believe that this is happening, you may wish to discuss it with a school counselor to have a general presentation for all in the grade to learn. It's more discreet and less embarassing. It is so important for you to have open lines of communication with your teens (and all your children). You need to inform them and make them aware of the potential risks inherent in use of cell phones (with built-in cameras), issues of privacy, bullying, and personal space. It is also valuable to share with them the concerns of peer pressure and how to contend with it. If you work for a sizable employer, they may have literature available for you through Employee Assistance Programs (EAP) or you may find assistance at your house of worship.

Remember, you want to protect your child(ren) by giving them the assurance that they may come to you to discuss these matters without the worry of reproach or punishment. It is better to embrace your child than to chase your child. If you feel that this was a valuable article, please feel free to provide your feedback to me at fred@tech4now.com. If you wish to see any articles in the future on a particular subject, let us know and we'll do our best to provide content.