Terrorists’ Cyber Weapon

November 21, 2011

There’s no doubt that cyberattacks will be a major weapon for terrorists in the years to come. From the terrorists’ perspective, it has a lot of advantages over their traditional tactics.

The news wires are buzzing with reports of the attack on an Illinois water utility earlier this month. It illustrates perfectly how a cyberattack is the way to go for terrorists in the future—and a complete nightmare for us.

The Illinois Statewide Terrorism and Intelligence Center released a one-page report on the attack, which federal investigators are now looking into.

According to Reuters, the attackers “obtained access to the network of a water utility in a rural community west of the state capital Springfield with credentials stolen from a company that makes software used to control industrial systems.”

Supposedly, the hackers attacked the utility’s Supervisory Control and Data Acquisition (SCADA) system—the systems used worldwide to control critical infrastructure facilities such as water treatment plants, chemical plants, dams, railroad switches, even nuclear reactors.

It’s no joke. We already know what’s possible after someone (most people think it was the U.S. and Israel) released a virus into one of Iran’s uranium enrichment facilities that disabled the facility last year.

According to Reuters, the U.S. Department of Homeland Security and the F.B.I. are investigating. Which is great, but it still means someone got to part of our infrastructure, and from very far away.

Which is my point. Supposedly the attack came from somewhere in Russia. It’s why I think cyberattacks will be the weapon of choice for terrorists from here on out.

They did it from Russia. Nobody had to get close. Nobody had to die like the suicide bombers in Gaza. They did it from halfway around the world in the comfort of their own home or business (or Starbucks, for that matter). And it worked.

That alone makes cyberattacks the most potent weapon in the terrorists’ arsenal. And it’s a scary one.

-

4

-

Faster Than the Speed of Lig...

November 21, 2011

A report was released in September by scientists working on the OPERA experiment that detected neutrinos (an electrically neutral subatomic particle) moving faster than the speed of light.  Based on Einstein’s theory of relativity, this was previously assumed to be impossible.

Scientists discovered that neutrinos in the experiment travelled from CERN in Switzerland to OPERA in Gran Sasso, Italy faster than light, taking only about 60 nanoseconds to arrive.  If this was indeed the case, this would undermine Einstein’s theories of relativity and result in a rethinking and overhaul of modern physics.

The cosmic speed limit, which postulates that nothing can travel faster than the speed of light, has been thrown into question over the past couple of months due to these results.  According the Guardian, if the results of these studies are indeed accurate, it would be considered an enormous breakthrough and would most likely result in a complete overhaul of the theories and assumptions governing the study of physics.

If this data is in fact correct, it means that a whole new and different set of theories would have to be offered in order to explain what was previously thought to be impossible.

The scientific community was awash with skepticism upon receiving this news, arguing that there must have been some sort of error within the experiment’s set up or execution.  In the two months following the experiment, the teams at OPERA and CERN have attempted to duplicate these results in the hopes of figuring out whether this was experimental error or if they have indeed made a momentous scientific discovery.

CERN has systematically repeated these findings and, as of November 18, confirmed the same result.  The CERN team conducted an improved version of the experiment executed by the researchers at OPERA and have “reinforced the previous finding and ruled out some possible systematic errors.”

However, a study released just today by ICARUS at Gran Sasso have said that OPERA’s findings have to be wrong because the energy levels of the arriving neutrinos were too high.  If the neutrinos were actually travelling faster than light, they would have lost most of their energy upon arrival.

It is too hard to say at this juncture who is correct.  As with any scientific or technological breakthrough, there will need to be multiple tests and experiments performed by independent teams of scientists to either refute or confirm these findings.  At publication time, the U.S., Italy and Japan are all in the process of developing their own experiments in an attempt to duplicate OPERA’s findings.

While this is a huge, sweeping example of scientific evolution and revolution, these types of discoveries and modifications are occurring on a daily basis, even in the IVR field.  The past ten years have seen revolutionary improvements in IVR technology, with tools available that were not even conceivable a decade ago.

A lot of the time, the process of discovery and invention is very slow and incremental, but patience and methodical research eventually lead to discoveries that reinvent the wheel, or redefine the laws of gravity and physics, as the case may be.

-

6

-

The Magic (Pass) Word

November 18, 2011

What was the name of your first dog?  How about your current pet?  Maybe your lucky number, birthday or favorite song lyric?  When is your kid’s birthday?  Favorite color?  Maybe just a funny, catchy or particularly memorable word that sticks in your mind?  A favorite location, place or travel destination?  The names of people who have particular significance?  Favorite kitchen utensil?  Model of your car?

Some of the above questions have probably at some point figured in to your thought process for selecting a password.  The point of a password is to guarantee user security, while at the same time being reasonably easy for the user to remember so that they may conveniently access their account without hassle.

It seems like everything nowadays requires a password (as it should).  Online banking, shopping, online deal sites, pin numbers, bank security phrases.  Here at Plum Voice our clients often times use multiple passwords to access survey and hosting IVR accounts, account data and reporting functionalities.  The password is an everyday reality and often times users have to enter multiple, different passwords to access necessary information for both personal and professional reasons.

Just today SplashData released a list of the top 25 most popular passwords, based millions of stolen passwords that have been posted online by hackers. So what are the top five?  Password, 123456, 12345678, qwerty, abc123.  Some other gems from the list? Letmein, trustno1, 111111, dragon, passw0rd, 123123, shadow and football.

Hackers can very easily break into many if not most accounts by repeatedly trying common passwords over and over.  Many systems have security measures in place that lock an account after multiple incorrect login attempts.  However, if you have one of these top 25 passwords in place, every time a hacker attempts to access your account they have a decent chance of actually getting in.

Are you slightly freaked out?  I was a bit too (although my passwords were much, much more technical than any of the ones listed above).  SplashData has specified some additional tips for choosing the most secure passwords possible.  Per SplashData, passwords should include a variety of characters including numbers, letters and even special characters.  Passwords should be at least eight characters with short words separated. Additionally, it is recommended that the same password is not used for multiple accounts.

If it seems like a lot of work to remember several distinct, many-character passwords to your accounts, fear not.  Apparently there are online password managers (that I am sure have some crazy password rules) where you can store and easily access this information.  This way password data will be secure and easily accessible, all in one place!

-

6

-

Dangers of Interconnectivity

November 18, 2011

This is not at all meant to be a doom and gloom, prophetic post about the end of the world or anything like that. But I think given the situation in Europe at the moment, and given the last few years of economic crisis, it’s maybe time to take a look.

There’s a danger in a global community and global economy. In many ways, it’s a wonderful thing—we’re all connected like we never were before. But it has its drawbacks.

In prehistoric times, the world was populated by an infinite number of small groups. Most populations were villages with no more than 150 people or so—that’s the number sociologists have put forth as a kind of Goldilocks number (not too few, not too many).

Neighboring societies interacted socially and maintained relationships for mutual benefit. With such small populations, interbreeding would have naturally caused problems.

It was customary for young men and women to go off to another village when they got married. In times of war, villages would band together against outside threats.

Other than that, there wasn’t a whole lot of interaction. And there wasn’t any interaction between cultures on different continents. It wasn’t until large-scale shipping developed that cultures from thousands of miles away interacted and learned about each other.

This is entirely different from our global society today. Literally thousands upon thousands of people travel from one continent to another every day now. Societies influence each other culturally, economically and physically across continents.

Bottom line, the problem with a global society (especially a global economy) is that one small part can take the whole thing down. Whether it’s financial failure, as in the case of Greece and Europe at the moment, or some kind of virus like avian flu crossing oceans.

I really don’t mean to be fatalistic or anything, but it’s a reality. When the Chinese Ming Dynasty finally overthrew the Yuan Dynasty of the Mongols in 1368, it had absolutely zero effect on the Incas in South America. See what I mean?

If Greece falls, it will have a major effect on the rest of Europe and a big effect on the world’s markets. Which is why some in Europe are talking about cutting Greece loose or dissolving the Eurozone altogether.

Anyway, it’s something to think about.

-

4

-

Facebook is Bush League

November 17, 2011

I’m not at all surprised that someone hacked Facebook. I don’t think Facebook is a well done website at all. I’m actually surprised something like this hasn’t happened before now.

It’s like they were brilliant about the concept (the way the British use the word), but they never fine-tuned the execution. Even after all these years, it’s still one of the weakest websites around from a user’s perspective.

I’m sure there are technical reasons Facebook is the way it is. But it seems with all the money the company has, the website should be the slickest, best-executed website on the planet.

Maybe not. Maybe it has something to do with the sheer numbers on the site, I don’t know. But here are some examples why I think Facebook is a crappy website. And these are all personal experience, not second-hand stories from teenagers.

To begin with, it’s not intuitive enough. When I first joined, I was really surprised it wasn’t easier to use. One of my friends was like: “Yeah, the website is kind of crappy, but it’s still cool overall.”

There’s your news feed, your wall, messages, et cetera. New users never know where to write stuff to their friends, so you end up with personal messages from them on your wall.

I once got a message on my wall from a friend asking about a breakup. My friend wrote that he “wasn’t surprised,” which of course my ex immediately saw on my wall and was hurt by.

I always tell people to use the messages page for that. Actually, that’s not true. I tell new users not to write anything personal on Facebook at all. Which brings me to security…

Every so often Facebook has updated itself and you’ve have to go back in and redo all your security settings. If you weren’t paying attention, people you didn’t want to see your stuff could see your stuff.

Most people think that’s so Facebook can passive-aggressively share your info with market research firms. I don’t know if that’s true or not.

But if you look at security advice about Facebook, it always says the same thing: don’t put any sensitive information on there, don’t let other apps access your account (“Would you like ______ to link to your Facebook account?”), don’t click on any links, don’t use Internet Explorer.

Can you imagine if your bank’s online site had all those ridiculous caveats or if it reset your security settings every few months or whatever?

I’ve already had my Facebook account hacked. Facebook sent me a message saying that an IP address somewhere in Utah accessed my account. It was nice they sent the message, but it was only because I set that as a security notification.

And then there are all the little annoying, glitchy things. I swear I can’t ever sign on without an issue. Half the time I put in my email address and password and it bumps me right back to the sign-in page.

And it doesn’t matter how many times I save my work computer as one of my authorized devices, Facebook asks me to identify it again. (Also a security setting I chose.) I mean, when is the site gonna remember that friggin’ IP address already?

There are other things, but honestly isn’t that enough? In a nutshell, Facebook isn’t easy to use, it doesn’t work well and you can’t trust it. Bush league.

So no, I’m not at all surprised the site got hacked. It’s kind of a hack itself (in the other sense of the word).

-

4

-

Is that what I think it is?

November 17, 2011

If you’ve logged on to Facebook in the last couple of days you might have noticed some wildly offensive images on your news feed.  Unfortunately you are not alone, as Facebook has received over 6 million complaints from users regarding both questionable content.

Typically the image or content is presented as a post to a friend’s account, and will be visible to everyone but the account holders themselves.  Reports began flooding in on Monday and have only ramped up since.  What is noteworthy about this is that the hacker(s) actually defeated Facebook’s tight security, and up until earlier today, the site had no idea how the spam was being transmitted and by whom.

Just a week ago, infamous hacking collective Anonymous threatened to hack Facebook in response to what they felt were egregious privacy violations on behalf of the company.  The threatened attack was planned for November 5th but didn’t occur on that date.  Many thought that this spamming was indeed the belated work of Anonymous.

This type of large-scale attack has served to expose Facebook’s vulnerabilities, especially because the problem is so widespread and has gone on for a lengthy amount of time.

Just today Facebook released a statement that “the root of the problem is malicious JavaScript that some users were tricked into pasting to their browser URL bar.” Interestingly enough, this attack was both started and perpetuated by users through the misrepresentation of code that they were tricked into disseminating.

Users actually copied and pasted this malicious JavaScript into their browsers, which caused them to unknowingly share the offensive content.  Users who are unwittingly doing it have been alerted and informed through educational checkpoints, and Facebook’s team has figured out how to swiftly pull and shut down these malicious pages.

This incident showcases two things.  The first is that huge websites with hundreds of millions of users often times have the highest levels of security but due to their massive consumer base are also extremely vulnerable to both external and internal threats.  Any of their hundreds of millions of users could have been responsible for this, and other users only exacerbated the problem by additionally sharing the JavaScript.

The second aspect of this incident showcases something much more positive about the company.  This was a malicious attack of epic proportions.  Just yesterday Facebook had no idea how this attack occurred, who was responsible for it or how to stop it.  Today they have identified the source of the spamming, are narrowing in on the culprit and have put in massive safeguards worldwide to immediately kill any malicious pages.  For a site as big as Facebook, this is extremely impressive.

Technology companies of any kind, whether they are a social network or an interactive voice response retailer are constantly faced with new and challenging security threats.  With technology evolving and changing as rapidly as it does, there are hazards that companies aren’t even aware of.  In order to guarantee the safety and security of their product, tech teams need to be as prepared as possible for attacking threats, and in the event that something does happen to get through, they need to address it extremely quickly before their customer’s information and security is compromised.

I am not a fan of Facebook (I am not even on the site anymore), but for what may be the first time ever, it appears that congratulations are in order because the company didn’t panic and addressed the issue in the swiftest manner possible.  

-

6

-

NBA Cares? Really?—Part 2

November 16, 2011

If you watch the NBA you always see the players volunteering at hospitals and orphanages. How much of that is genuine and how much just NBA marketing, I don’t know.

But there are definitely players who give back to the poor communities or countries where they grew up. Dikembe Mutombo, perhaps the most well known benefactor from the NBA, is a hero in his home country, the Democratic Republic of Congo.

The Dikembe Mutombo Foundation works to improve the “health, education and quality of life” for the impoverished Congolese.

The foundation has delivered medicines (3,000 children die every day from malaria alone in the Congo), organized health awareness campaigns, donated computers to schools and even begun building a new hospital in Mutombo’s birth town of Kinshasa. Mutombo himself has donated $15 million to the $29-million project.

Everyone involved with the NBA knows about Mutombo and the efforts a lot of the other players make to give back. As fans, we know because of all the promos during the games.

According to NBA.com, the global NBA Cares program has raised “more than $160 million for charity, provided more than 1.7 million hours of hands-on service, and built more than 610 places where kids and families can live, learn or play in communities around the world.”

But the NBA (both sides) doesn’t seem concerned about its ecosystem at all. Despite CNN reporting that NBA stadium employees (at least at the Staples Center in L.A. where the Lakers play) are worried they might not get the 1,100 annual hours they need for health insurance.

Or that they’ll lose their jobs altogether. And that’s not even considering the employees in bars, restaurants and shops around the arenas who will lose hours or jobs altogether.

I remember when the MCI Center (now Verizon Center) went up in Washington, where I was living at the time. It brought a lot of businesses and people to an area that was for a long time kind of a wasteland. There’s an impact, for sure, if the NBA season doesn’t come off.

So, no, I don’t get it. Does the NBA really care?

-

4

-

NBA Cares? Really?—Part 1

November 16, 2011

There’s another aspect to the NBA players and owners sabotaging the season that they don’t seem to be talking about. So far it’s all about their own entitlement. No mention of all the people who rely on the NBA for their livelihoods—the NBA ecosystem.

Right now the NBA players union is dissolving and forming an association so it can take the league and team owners to court. They feel they should rightly continue to receive the lion’s share of the league’s earnings.

But, at least to me, there are a few (thousands, actually) factors they haven’t taken into account, namely all the people who work at the arenas, the businesses around the arenas, even the ticket scalpers.

Those people will have less work or be out of work altogether. Not have a $3 million salary versus a $1.5 million salary. They’ll struggle just to make rent. To buy food. To live.

The U.S. unemployment rate is still at 9%. In my opinion, now is most definitely not the time for wealthy players and owners to squabble over their millions, swelling the numbers of unemployed even more.

Honestly, to me it’s selfish and shows just how removed from the fans these guys really are. While none of the players’ or owners’ immediate kin have to worry about money, both the players and the owners should be well aware of they have.

Everyone knows someone who’s been laid off during the recession and found it difficult to find a job. You’d think the owners and players would too—they weren’t all born rich.

Hardly. A lot of players came from poor upbringings and still know people back in their old neighborhoods. It’s a sport that doesn’t require money to be play. Soccer is the same. In inner city Chicago, the kids are playing basketball; in the favelas (slums) of São Paulo, Brazil, the kids are playing soccer.

But regardless of upbringing, you can bet the owners at least know exactly how many people they employ at their venues.

Stay tuned for Part 2…

-

4

-

How do they do it?

November 15, 2011

Announced to widespread anticipation, the Kindle Fire was released a day early yesterday and is currently reaching consumers the world over.

The Kindle Fire was designed to be a tablet computer that could compete with devices like the iPad and has a color 7-inch touch display.  The Fire is designed to run on the Android operating system and includes access to a variety of features including the Amazon appstore, e-books, and Internet streaming.

Amazon is selling the newly released Kindle for $199, a full $300 less than the iPad, its most direct competitor.  The device is designed to have multiple functionalities, acting as both an ebook reader and a tablet where users can access the Internet and purchase and download hundreds of applications.

In a testament to its popularity, 250,000 Kindle Fires were pre-ordered in the first 5 days after its announcement.  At the time of its release yesterday it had over a million pre-orders.

At $199, the Fire is far and away the most affordable tablet on the market.  So why is the Fire so much cheaper than any other device currently available?  According to NPR “Amazon can sell for such a low price partly because it’s willing to sell each Kindle Fire for less than it costs to produce.”

And how much is that estimated production cost?  While Amazon won’t officially release that information, estimates are putting the actual price of parts and labor at $210, a $10 deficit on EACH tablet sold.  That figure doesn’t even take into account what was inevitably an enormous marketing budget and all the licensing for the preloaded programming.  Since tablet sales are probably now in the millions, that is a significant profit loss, right?  Why is Amazon willing to sell these devices for much less than they are worth?

The answer to this question relates back to a cross-technology piece I posted a while ago.  Amazon is not hoping to make money on the Kindle device itself, but rather on the applications and services it sells.  Amazon will be offering a bookstore, a movie theatre, a record shop, and hundreds of other applications that require purchase for use.  Everything on the Kindle is powered by Amazon (the music store, the book store, the application interface) so the company sees 100% of the profits.

Users are not able to download applications from competing companies (like Apple iTunes or the Barnes & Noble ebook store) so they are reaping all of the monetary benefits of every purchase.

It’s an ingenious tactic.  Selling the device at an extremely reasonable price point (one that actually constitutes a loss for the company) and then swiftly make money back through application and item purchases.

It additionally helps Amazon to establish brand loyalty.  Because the device is so reasonably priced, someone might pick one up out of curiosity.  After using it, they will become familiar with the device which Amazon hopes will forge brand loyalty.

It’s an ingenious plan, and it will be very interesting to see what sort of profit Amazon ultimately makes on the device.

-

6

-

Regular Guy Misses Out (Pt. ...

November 14, 2011

In the simplest terms, the NBA owners aren’t turning a profit, but the players want a raise, to maintain a bigger slice of the pie than the owners and also retirement benefits.

That’s right. Retirement benefits. (I’m sorry, but if those guys don’t have enough money to get by after making millions, it’s not retirement benefits they need, it’s financial planning help—which the players union provides for them, by the way).

Even the small-time players still make far, far more than the regular guy off the street, even if it’s just for a year or two. Money after retirement shouldn’t be an issue. But of course it’s not really about ‘getting by,’ it’s about splitting up booty. But that’s all I’ll say about the actual argument.

Now, I’ve been an NBA fan most of my life. I love it. I’m one of those guys who prefers the NBA to college (although I love college hoops, too). In my opinion, it’s the highest level of the game on the planet (along with the professional European leagues).

I believe the worst players on the worst teams in the NBA will smoke the NCAA national champions every single time. The game is far more skilled, far more complex, bigger, faster, rougher and played harder.

Okay. I can hear all the guffaws out there, so here’s my pro-NBA argument—

The offensive players are so skilled and the teams so skilled at running their offenses that they make it look easy, like the defenders aren’t trying. But remember—only the most athletic and skilled (or potentially so) make it from college to the pros, and 99% of them get absolutely schooled for a couple years when they get there.

The rookies always talk about how hard it is, not just because it’s a different game but because it’s just plain harder. And these are the exact same guys who played at the highest level in college.

It’s not like they all get lazy when they make it to the NBA. Most have to work very hard on their game for years—the big guys usually need to improve their footwork and develop their shots, the perimeter guys usually need to extend the range on their shots, et cetera.

No. They have to work even harder just to stay in the league. And if they give up at the end of games they can’t possibly come back from sometimes, it’s only because it’s such a long season—three times as long as the college season—and it takes a toll. Watch during the playoffs and you’ll see ultimate effort.

And that’s the thing I’ll miss out on this year if there’s no season. Me and millions of fans all over the world. Regular guys (and girls).

-

4

-