The Security of Macs and Tips from Computer Security Expert, Bruce Schneier – InfoSecurity Europe 2012

May 1st, 2012

Just back from Infosecurity Europe held in London, the largest computer security event in Europe. The usual suspects were there, including Symantec, Sonicwall, Sophos, TrendMicro, Fortinet and McAfee.  But, the real highlight was the workshops, product demonstrations, speakers and of course meeting I.T. peers from across the world gleaning tips and best-practice ideas. Here are some of the highlights.

Eugene Kaspersky Speech

I have always been a great fan of Kaspersky security products. They tick all the boxes when it comes to well-written and effective software.  Their threat detection rates are some of the best in the market. Compared to competing products, their CPU footprint is pint-sized and their products are user-friendly. More importantly, Kaspersky security products are robust. I have yet to see Kaspersky products get damaged by viral or malware processes in the same Symantec or McAfee products do. It was great to hear the co-founder Eugene Kaspersky talk in person about the current threat landscape and his vision of the future of computer security.

Mac Users – welcome to Bill Gate’s World!

He started his talk about the over how computer threats are now omnipresent. Just because you own a Mac, it does not mean to say you are protected, he reminded every Mac user in the room. “Finally, you are in the same world as Windows users” he said in a tone of voice spookily reminiscent of a Russian baddie in a James Bond movie. “It is possible to infect Mac in the same way as Windows” he continued with a hint of glee in his voice. (Kaspersky launched their Anti-Virus for Mac two years ago)

He continued to talk about the ever increasing role of cyber-warfare and the Stuxnet virus (discussed in this blog, November 2010) “I don’t have to explain what Stuxnet is” he said. (Stuxnet was a virus, most probably created by an Israeli-American designed to hinder production at Iranian nuclear plants)   “Cyber weapons are much cheaper to design than traditional weapons” he said, reminding us that it took a paltry €10 million to design the Stuxnet virus. Relatively cheap, I suppose compared to what it would cost to send in an army to destroy Iranian nuclear capability.

International Bodies being setup to Prevent Cyber Crime

How do you prevent cyber-crime? he mused. “We have to set up international bodies in the same way the UN setup the International Atomic Energy Agency” to mitigate against nuclear misuse. Thankfully, he informed the audience what international steps are already being taken. Interpol are set to open up their Global Cybercrime Centre in Singapore in 2014. The UN already have setup their ITU-Impact group to bring members countries and expertise together to  detect, analyse and respond to cyber threats. As for prosecuting cyber criminals, if they are found, he said “I am not sure we would have enough space in our prisons” he said ruefully.

Meeting Bruce Schneier

Talking also at Infosecurity Europe was computer security expert Bruce Schneier. He is famous for writing the seminal book on cryptography Applied Cryptography (1995). It is still considered by many I.T. security experts as the book on cryptography.

Having read his Secrets and Lies book a couple of years ago. Bruce can teach businesses many things about implementing robust computer security policies. Some of the key tenets of his I.T. security philosophy is that security is a process not a product. Proper security for your computer cannot be bought in box. Every year, I hear users ask the question “how did I get infected, I got anti-virus on my computer?” This is really like saying “I bought a Volvo that was Euro NCAP 5 star-rated but it still crashed”. Just as road safety is not just determined by the type of car you have, computer security is not just determined by the type of anti-virus protection or firewall that you have. Sure, some security vendors might sell their products under the pretence they will protect you from everything, but these claims have to taken with a pinch of salt. It is the security policies that you have in place in your business that ultimately determine the level of security. Do you have a policy for secure passwords for your staff? Do you have a policy what websites your staff can visit? Do you have a policy about mobile device encryption? The list goes beyond the scope of this short blog post…

Another thought that businesses can learn from Schneier is that security is made of three key components – prevention, detection and response. Firewalls, anti-spam, anti-malware, anti-phishing and anti-virus products are all just one denominator of the security equation.  If your business does get attacked by a DDOS attack or phishing attack. It is the swift detection of that attack that will be nearly just as important as prevention. (This is a thought to keep in mind considering that five the of best-selling end-user computer security suites only have an average detection rate of 76 per cent). It is the user’s fast response or lack thereof that will ultimately determine the damage incurred. How quick are your employees to respond when it comes to detecting strange or possible malicious behaviour on your computer systems?

Complexity as the enemy of security is another idea espoused by Schneier. Humans are complex animals. But, when you make security policies too complex for them, instead of working with them, they will begin to circumvent them. To take a simple example, if a business has a door entry/exit policy that is too complicated and too time consuming, you risk that your staff will start using backdoors or fire exits in lieu.

(This concept of self-defeating security policies was perfectly illustrated during the conference by another speaker, Pravin Bhagwat, CTO of Airtight Networks. He told the delegates of how, when you disallow users from using the company wireless network for connecting their own devices like smartphones and laptops, users will just start bringing in their own wireless access points and start connecting devices this way. When users start to bring in their own AP’s to work with them, this is where the real security problems begin.) The lesson here is, if you are going to implement computer security policies for your business, they must compliment the existing work practices of your employees not work against them.

After a quick chat with Bruce Schneier, he kindly gave me a free signed copy of his new book Liars and Outliars which I look forward to reading. Bruce does have a rather cryptic signature, doesn’t he? (see photo)

The Importance of Tablet / Laptop Encryption

We always remind our customers, that if you have important information on a mobile device such as a laptop or tablet PC, a login password is not sufficient. You should have the device encrypted. Pen Test Partners from Buckingham, UK gave an excellent presentation on the security of the iPad. A lot of ordinary users of these devices think that if they have their device password protected, they are safe. Think again. Pen Test Partners did what David Blaine or Uri Geller can only dream about. While Blaine levitates and Uri bends spoons – Pen Test Partners crack iPad passwords with amazing speed. During their live demonstration and with a little bit of help from Elcomsoft’s iOS Forensic toolkit, they were able to crack the password of an iPad 2 in under 4 minutes. I am sure there is more to their portfolio of skills than this but the lesson here is – if you have sensitive data on a laptop, tablet or smartphone – make sure it is encrypted.

The Essential Bluescreen Troubleshooting Checklist

March 2nd, 2012

Blue Screen of Death issues (or BSOD) can be time-consuming and tedious to troubleshoot. Here is a basic checklist with a couple of quick tricks.

1)     Before you begin the troubleshooting process for Bluescreen issues or random crashes make sure you have disconnected all USB devices (like printers, external hard drives etc) and memory cards from your PC.

2)     Think what software or hardware was added or removed from your system recently. Recent changes to the system can often be the root cause of Bluescreens.

3)     Go to the Control Panel and look at the Event Viewer log and look for any errors which have coincided with the issue.

4)     Turn off your PC and pop open the casing and physically check for signs of overheating by touching the system heat-sink.  If you are using a laptop check for signs of overheating on the base. Is the base of your laptop hotter than normal?

5)     While your PC case is open, check for signs of leaking or bulging capacitors. (Capacitors look like small cans of fizzy drink on your systems motherboard)

6)     Open the Task Manager for any processes that are using abnormally high CPU usage. The task manager can be started by pressing Clt+alt+del keys simultaneously.

7)     Run Hard Drive Diagnostics to check the condition of your hard drive. Failing hard drives are a common cause of BSOD’s.

8)     Run RAM diagnostics tools like MemTest86 to test the condition of your RAM.

9)     Use a utility like Speedfan (downloadable from the internet) to check your system’s voltages. Some PC’s with defective power supplies will cause blue screens when voltages levels become too erratic.

10) Go to My Computer, then click on Properties. Click the Advanced Tab. Under Startup and Recovery, click “Settings” and open the Startup and Recovery dialog box. Uncheck the box beside “Automatically Restart”

11)  Whilst, the main RAM onboard your computer might have passed the memory test. Many users forget to test the VRAM (this is the RAM installed on your graphics card). Avoid this troubleshooting blindspot and test your VRAM with a utility called Video Memory Stress Test.

12)  Each time your computer bluescreens, a minidump file is created. You can analyse minidump files using Windows Debugging Tools.

13) Uninstall Windows updates via add/remove programs list in the Control Panel that were downloaded after the Bluescreens first starting appearing.

14) Disable DEP. A feature in Windows XP called Data Execution Prevention is a known culprit for bluescreen issues. Go to Control Panel, System, Advanced, Performance, Settings and then Data Execution Prevention. Select “Turn on DEP except for those programs that I select” option.

15)  Run a live Linux bootable CD on your system like Ubuntu Live. If it fails to run successfully, it is usually a good sign that the issue is hardware related.

A Basic 10 Point Backup Checklist

February 28th, 2012

Everybody hates backing up. It can be boring and time consuming. You can automate it to make it quicker but you still need a basic checklist should the worst happen. Here is a basic non-exhaustive checklist to get you started.

1)     Have you your Accounts, Payroll and CRM package backed up?

2)     Have you your Outlook Contacts backed up?

3)     Have you your Word, Excel and Powerpoint files backed up?

4)     Have you your website login details backed up?

5)     Have you email and broadband settings / account information
backed up?

6)     Do you have your software license information backed up?

7)     Do you have your Internet favourites backed up?

8)     Do you have the settings and logins for your network backed up?

9)     Have you recently checked the completeness of your backups?

10) Have you recently checked that your backups are up-to-date?

Add your own items to this checklist and print it out. Next time you have some spare time – run through it. It might be the most valuable 30 minutes that will spend this month.

Cloud Expo Europe 2012 – How the Cloud is Revolutionising Business

January 31st, 2012

I have just returned from the Cloud Expo Europe conference and exhibition last week held in London. And as you have probably guessed from the title the subject was all about the cloud computing. Some excellent presentations and cases studies about how the cloud is transforming the I.T. function of businesses. The Cloud is no longer a woolly I.T. abstraction for most businesses. The Cloud is becoming a reality. Businesses are finally feeling confident enough that cloud computing can be successfully implemented to help run their operations.

The worldwide recession seems to have been a major catalyst in the changing of attitudes. Why incur the expense of file servers, Exchange servers, email servers, switches, hubs and gateways when they can all be relegated to the Cloud? For example, one speaker gave the example how a certain UK healthcare company was spending over £30,000 a year for the running and maintenance of a file server. They are now using Dropbox and have not looked back. The recession is a catalyst for cloud computing in the same way oil prices are driving up the interest and uptake of more sustainable energy models.

One of Spain’s Largest Banks moving over to Google Docs

One recent example of this change in attitudes touted a lot during the conference was the historic decision of BBVA, one of Spain’s largest banks, to desert Microsoft Office and Exchange and move over nearly 110,000 of their employees to Google Docs and Gmail for Business. Who would have thought, even five years ago, a business in a staid and conservative (traditionally at least) sector such as banking would be using Google for the drawing up of load agreements?

Marks and Spencer UK is another company leveraging the cloud. Simon Ellis of Box-It, explained how previously M&S human resources staff would have had rows and rows of filing cabinets in each branch for filing staff records. Now, using a solution from Box-It document management they just scan the forms to a centralised private cloud and where HR records can be quickly and easily retrieved.

The Cloud and Small and Medium Sized Business

It was not just the benefits of the Cloud for large enterprise which was discussed at this year’s Cloud Expo Europe but also the advantages for small business. Small business and consumer-level I.T. have always been the trailblazers for the Cloud computing revolution. (Before I.T. innovations used to trickle down from corporate level to consumer level)

Geoff Newman, CEO of Recruitment Genius gave specific examples how cloud computing helps him run his multi-million pound turnover recruitment business.
From selecting freelancers to collaboration, Newman described how the cloud has helped him grow his business. Using sites like Elance for hiring, Basecamp for collaboration, Gmail for Email and Vimeo for Video. Newman has built a truly scalable and flexible business thanks to the Cloud. This has not been without its hiccups though. Newman advised the delegates on the importance of having a secure cloud infrastructure. For example, he mentioned an incident where he started noticing his hosting bills getting bigger and bigger each month. Then it was discovered a couple of gamers where cyber-squatting on some of their virtual servers. His I.T. team evicted the squatters and secured the servers using the PFSense firewall on Apache.

Ray Baxter, an Antrim based accountant shared his experiences on how a small to medium sized business can benefit from the Cloud. Baxter stressed the flexibility which the Cloud gives to owners and employees. Using applications like Xero, Liquid Books or Quickbooks Online an employee armed with only an iPad or laptop can create and send invoices on-the-go. “Two years ago, I would’nt of recommended to any of my clients to use cloud based accounting systems, that has changed now” he said.

Bin-men with Smartphones

Kamel Uddin from Lewisham Council in London told attendees in his presentation how they are leveraging the cloud to have cleaner streets in their borough. They are asking residents in the area who spot litter or graffiti to use the Council’s downloadable app to upload a geo-tagged picture from their smartphones to their website. Their bin-men or cleaning operatives can then use their smartphones to retrieve the information and hone in on the area in need of cleaning, saving the council time and money.

Case Study -From old-style I.T. infrastructure to the Cloud – The Experience of Honda UK

“You can either say we are going to embrace cloud computing in our infrastructure and use it to move the company forward or you can simply choose to ignore it and you will find it will probably sneak into your company anyway. But that’s out of control and in a fairly random fashion” was the opinion of Mervyn Eyles, Customer Support Manager at Honda UK, warning delegates of the perils of ignoring cloud computing or adopting it in an ad-hoc fashion.

Honda UK really woke up to importance of Cloud Computing after the launch of their new Accord model in 2009. Their advertising campaign (The Cog – an entertaining commercial still viewable on YouTube) was more successful than anticipated. This resulted in an unprecedented number of people visiting their website. “Our website got more than 1 months traffic in the first 24 hours” said Eyles. “Our existing architecture could not cope” he continued. “We sort of got away with it because everyone was so flushed with the success of the advert. We still thought we should actually do better.” Their initial response was perhaps the normal I.T. response, with plans to increase bandwidth, upgrade the servers and add more memory. But the I.T. team at Honda started to think that having the infrastructure in-house was probably not the right model to follow. Yes, they could a certain amount of it in-house provisioning but it was going to be very expensive. So instead of acquiring more I.T. hardware and more bandwidth for their broadband, Honda UK decided to look upwards to the Cloud.

As a company they had a number of boxes to tick for their I.T. system. Firstly, they wanted scalable bandwidth. With their existing broadband supplier they had to define the bandwidth each time. With a hosted provider this could be variable. They wanted a business continuity facility. Honda being a Japanese company that is used to the risks of tsunamis and earthquakes were very keen to have an infrastructure to keep going no-matter what. And ultimately, they wanted a lower cost than internal provisioning.

Honda finally went to tender and opted for a private cloud infrastructure. This gave them an active and standby configuration. An active configuration in Slough and a standby site in London. The result – “It very much worked for us” said Eyles.

This Honda case study really shows us the beauty of the Cloud. The flexibility of being able scale up or scale down your I.T. infrastructure at short notice. Moreover, it demonstrates the cost-savings and the peace of mind of having a backup of your data and I.T. system configuration stored securely in another location.

Accessing the Power of a Super Computer with your Credit Card

A number of speakers brought up the topic of Amazon’s EC2 cloud. While Amazon is still known to a lot of people as the site you go to for the latest Harry Potter books. Amazon Web Services is becoming a global heavyweight of the cloud computing world. Their EC2 Cloud has still not pervaded the pages of mainstream media in the same way Facebook or YouTube has. Yet, the EC2 cloud is like something that you might have only read about in science fiction novels twenty years ago. To explain the EC2 cloud in detail goes beyond the scope of a blog post. But imagine having access to one of the most powerful computers in the world from the comfort of your office? Imagine having the compute power which was previously only used by NASA or multinational oil companies for geological modelling scenarios. With the EC2 cloud, this computing power is available to small or large business with just a credit card. One speaker gave the example how an American newspaper company was able to convert years of content into PDF format in just 24 hours with the help of EC2. Previously, this project would have taken weeks if not months to complete. Going to the Amazon EC2 Case Study page on their website and reading some of the case studies of how small and large businesses have leveraged EC2 makes for some interesting reading. It shows how a revolutionary I.T. concept of having a “supercomputer” in the Cloud is no longer the stuff of science fiction or no longer a pipe dream of computer scientists cloistered away in the basement of a university. With so many successful small and large businesses built around EC2 infrastructure it just shows us how inextricably linked information technology has become to modern business.

Cloudbusting

November 30th, 2011

Businesspeople have good reason to be sceptical of the promises of the I.T. industry. In the 1960’s computer salespeople told them that the mainframe computer would boost productivity by helping them centralise decision making. It did’nt.

In the 1970’s and early 1980’s computer salespeople said that mini and microcomputers would boost productivity by helping them decentralise decision making. They did’nt. By the mid-1980’s, the marketing departments of large I.T. companies claimed that computers would boost productivity by eliminating human decision-making altogether. And pigs will fly.

Now, in the dawn of the cloud computing era, businesspeople are being told that the cloud will change everything. The promise that “the Cloud” will be a computing utopia where all the I.T. woes that can afflict an average business can be relegated to the “the cloud” seems too good to be true. Even the term “cloud computing” sounds ethereal and utopian.

Savvy and experienced businesspeople have heard these similar claims before and are rightly sceptical. Promises that the Cloud will totally remove the need for the management and support of the I.T. function are not only misleading but false. Sure, the adoption of the cloud will lead to the demise of the server room with racks of dusty switches and routers. Having a server room for a small to medium sized business in twenty years time will seem as archaic as a factory having a water wheel attached to its side in order to generate its own power.  The cloud will create an explosion of cloud-based apps in the marketplace over the next few years, these apps will not be self-configuring or self-fixing. These cloud-based applications will still have to be synced and configured to talk to their virtualisation platform or simply to talk to other apps. The platforms from where all of these apps will be managed will need to be managed themselves. This still requires the human element.  Just like today, even with avalanches of information available, business people still have to make decisions themselves and still need the help of professionals.  Plus ça change, plus c’est la meme chose, as they say in France.

IP Expo London Oct 2011 Part 1 – Steve Wozniak Quotes on Innovation and other things…

October 21st, 2011

Just back from an interesting and informative trip to the IP Expo Conference in London. Keynote speaker was Steve Wozniak, co-founder of Apple.

He built at the age of twenty-five, the first personal computer for the use of people without engineering or programming skills. To appreciate the importance of Wozniak’s accomplishment, we must remember that the computers preceding it were machines the size of refrigerators and had to be kept in special air-conditioned rooms.

His “desktop” sized computer was a revelation.

Here are a couple of selected quotes from his speech;

“Oh, it’s a toy, it can’t do the big jobs because it has pictures”

Commenting on the initial response of business users to the Apple I. At the time, most computer users would have only been used to command line interfaces. The concept of clickable icons was virtually unheard by most programmers and engineers.

“What is innovation? Is it doing something different? Well artists can come out and do something different but if it doesn’t come down to earth, have feet on the ground, have some practical reality, it never really gets recognised for it’s creativity or innovation”

Wozniak commenting on the need for innovation that is useful and not just innovative for the sake of being innovative.

“How should innovation be done? Don’t look at the way something has always been done before. How is the best way to do it for the final users? It takes a lot of guts to do stand by that and usually it does’nt work well if you’ve got a committee deciding things.”

Wozniak was quite vehement in the need for a single-minded vision for successful innovation without the intervention of a committee.

“You are’nt reading someone else’s book telling you how to do things. You are writing the book yourself.”

Innovation is a unique process and cannot be easily emulated.

“Science fiction writers probably saw it [the rise of the smartphone] because they were not bound by what we think we can do with chips….Did we think we would have these mobile devices? The most incredible computer that could have ever existed in the world when I was in school in such a tiny size? And have all the senses of a human being? Its got sight, it’s got hearing, its got movement detection and even knows where it is in the world…where we’ve gotten to even astounds us”

Wozniak commenting on the power and intelligence of the smartphone.

“I wanted them to build this computer [the first Mac] but HP turned me down five times”.

Hewlett-Packard’s refusal to build the first incarnation of the Apple Mac.

“They will pay thousands and thousands of dollars for you to go to Stanford or Berkeley and various other universities but this is much better education, let someone build something of their own design, they are going to work so hard and develop their mental approaches to design in other products, it will be of benefit to the company much more than education in a university”

Wozniak commenting on approaches to innovation via formal education versus practice based innovation in large companies.

“Please don’t ask about Steve Jobs and his death, I’m getting enough of that and the world is getting enough of that”

Pre-empting any questions about the recent demise of Steve Jobs.

The Curse of Feature Creep

August 27th, 2011

I was with a client during the week who was struggling to get to grips with Sage Line 50’s interface. “When Sage first came out, it was brilliant” she lamented. “It was quick and easy to use”, she continued.

Now Sage, like so many other “once great” software packages out there is bloated with extra features and has developed a ravenous appetite for RAM. It has been a victim of the dreaded “feature creep”. Feature creep occurs in the software world when a piece of software becomes imbued with so many features it becomes  over-complicated or slower to use than previous versions of the same package.

Feature creep is caused by a number of factors, namely users who are not sure of what they want from a software package, lazy programmers and over-zealous marketing departments.

Let’s start with users who don’t know what they want. When a software company (or any company for that matter) takes its existing or potential customers into a room and asks what they want in a product, invariably the subjects will tell the researchers they want every useful feature available. It is only when they get back to their office or home and start using the software this multitude of features becomes an annoyance to them. This does not get recorded by the researchers though.

The researchers then write up a report for the marketing department of the software company stating that users want all the bells and whistles. The marketing department reads this report and then issues a diktat to the geeks in the programming section of the company that all extra features are to be included. The programmers get busy to work adding in all the features their marketing department “think” the users want. If the programmers are lazy and assume everybody uses powerful hyper-threading i7 machines, they will code the program in such a way whereby it devours RAM and CPU cycles. Once the programmers have finished their work, the usability testers get called in to give the new version a road test. Another report is produced recommending changes. But, at this stage of the software development process, it is usually too late and only small incremental changes can be made.

When the final product is released, the software company’s management “thinks” it has a great new version. The people in the marketing department think its great and the geeks in the programming department, most of whom have never even met an end-user of their products in their lives share similar feelings. The only people that don’t think its great are the poor users who have to wait for the program to start-up and then wade though a multitude of options, advanced options and preferences in the program that make it look like a tax return form. Not what users want on a Monday morning.

How should software companies prevent feature creep happening in the first place?

First of all, a program can’t be everything to everybody. If a software company is trying to cater for a couple of different segments of the market with just one product, more often than not, their end product is going to be bloated.  Secondly, software companies should not overly rely on what consumers say they want. Users will sometimes purport to want features that, in practice they don’t really want especially if it starts to over-complicate the use of the software. Software companies should be savvy to this.

Programmers should not labour under the misconception that their users are like them. Programmers make too main mistakes when they design their programs. They value control from than ease of use, concentrating on making complex things possible instead of making things simple. And they expect users to learn and understand the internal workings of their programs, instead of the other way around. Programmers should write code that is suitable for the specification of an average PC. Not every user is using Windows 7 powered by an i7 quad-core processor accompanied by 4GB of RAM. Truly great software companies such as Intuit and Apple employ programmers who write code that maximises usability but minimizes superfluous memory and CPU usage.

Lastly, the usability testers should be brought in at the start of a software design project, not the end when it is usually too late.

A Simple and Inexpensive Way to Increase your Productivity

July 28th, 2011

No, I’m not talking about some new app for the iPhone or the some new and “fantastic Cloud solution” that is being sold by men in shiny suits. I’m not talking about some ghee-whiz-bang gizmo that was released last month at some obscure I.T. trade show in the American Mid-West and claims to increase personal productivity by 80 per cent.

I am talking about the humble screen. The problem with the current personal computer, whether Windows or Mac is that, even with resizable windows, shuffling between open windows for most users is time consuming and quite frankly is a pain. The “one operating system and one monitor” setup was fine back in the days of Windows 3.1 and Windows 95. But now with most users having a multitude of programs open simultaneously, with everything from the usual suspects such as Word, Excel, Sage to custom software, media players, instant messaging apps and Farmville, one monitor is still sufficient but for optimal productivity two monitors is becoming a must. Using just one monitor it is like trying to do a tax return on an airline fold-down table in economy class. There is just not enough “real estate” to easily work off more than one file at once. Thankfully, there is a nice simple cure to this problem – use a second monitor. Yes, the humble LCD monitor when twinned with another monitor can genuinely increase your productivity.

So what to look for? Any standard monitor 21” monitor that is not “widescreen” should fit the bill. (Widescreen monitors are great for movies but not optimal for office applications) From our experience, monitors from Samsung and NEC give the sharpest picture and best longevity. If you want an extra-high resolution monitor as used by air-traffic controllers, molecular scientists and meteorologists you could get the Rolls-Royce of monitors – one from the Eizo Flexscan range.

So what about setup with a PC? All you need is a video card with a VGA and DVI port. If you are using a docking station, most docking stations, such as the Dell E-Dock have both VGA and DVI ports as standard.

With two displays, you can comfortably work off two files at the same time. No more switching, no more minimizing – just a smoother and quicker way of working. Try it for yourself – you will be pleasantly surprised.

An Ode to the Blackberry

May 31st, 2011

The first time I ever saw a Blackberry was back in 1999. The strange looking device resembled a hybrid of a mobile phone and a PDA fused together. The device would make little ping noises every so often as a new message would arrive. Back then, it was the epitome of on-the-go productivity.

To my surprise, ten years on in 2009 it was still a mainstay of the business world. I was surprised because its unusual for a company in the highly competitive mobile devices market to be a market leader for so long.

Enter the iPhone

Something had to come along to knock the Blackberry off it’s pedestal.

When the iPhone came on the scene in 2007 it became the personal mobile communication device of a few early adopters and within the space of 3 years everyone wanted one. Its adoption rates were nothing short of breathtaking.

There are still loads of die-hard Blackberry fans out there who swear it’s the best email device ever. But these are in the minority now. Last week, I was speaking to a former Blackberry fan, he was always one to sing the praises of the Blackberry.  But then he realised he was missing out on the Apple and Android party. There were great apps being released all the time all of which he could not use on his Blackberry. He changed to an iPhone and informed me he has not looked back.

“It’s the Platform Stupid”

Blackberry can never be accused of complacency. Their R&D budget being 6.78% of total revenue compared to Apple’s 2.73 %. But the trend Research in Motion (owners of the Blackberry) really missed, like so many other hardware producers, it that it not about the hardware. It is about the platform or more importantly it’s about the apps. James Carville, a former advisor to Bill Clinton during the 1992 electoral campaign always used to remind the American electorate “it’s the economy stupid”. I wish somebody in the world of I.T. hardware would remind manufacturers, “It’s the Platform, stupid”. RIM focused all their time and effort adding bells and whistles, making touch screen versions and enhancing their devices. But no matter how many enhancements you make to a horse and carriage, its still not a car.  RIM failed to enthuse and nurture a whole army of app in the same way Apple does.

Okay, so Research in Motion have consumerised the Blackberry now, they have brought it to the masses. It is no longer in the glass case of your main street mobile phone shop. They even have Blackberry on pay-as-you go price plans now.

Could Blackberry buck the current trends and bounce back? That is not outside the realm of possibility.  It only takes one high profile security breach of iPhones or Android phones to cause CTOs and CEOs to rethink what devices they equip their increasingly mobile workforce with.

If Blackberry is not to suffer the same fate as Palm (another producer of mobile productivity hardware) it has to devise a leapfrog strategy. It has to stay relevant. Incremental changes won’t suffice anymore. Otherwise, in another 10 years time the device will only be seen in a glass case in the The Tech Museum in Silicon Valley.

5 Simple Tips to Secure your Windows 7 Networked PC

March 31st, 2011


Customers are asking us lately what tweaks can be made to Windows 7 to make it more secure. Here are a couple of simple ones you can apply quickly and easily.

1)     Disable UPnP. In theory, UPnP makes it easier for network devices to announce their presence on your network. In reality, it’s a backdoor for malware. To disable UPnP, open Services, (services.msc) and then find the SSDP Discovery Service and click on “stop”.

2)     Turn off Remote Desktop. Again, remote desktop sounds great in theory. It means you can remotely login to your computer when you’re not physically in front of it. But, Remote Desktop left switched on all the time is a threat. Go to Control Panel > System> Remote Settings > In Remote Tab > turn off Allow Remote Assistance connections to this computer.

3)     Ensure you have the latest versions of Adobe Flash Player and your Adobe Reader – these are becoming notorious loopholes for malware and hackers.

4)     Use a browser other than Internet Explorer. Internet Explorer can be a backdoor for viruses, malware, rootkits and other threats. Consider moving to Firefox or Chrome. If you are really fond of Internet Explorer. Use the latest version with is compatible with your operating system. For XP, that is IE 8 and for Vista and 7 users that is IE 9.

5)     Use SiteAdvisor, a nice (free) computer security browser plugin from McAfee which warns you of potentially dangerous sites before you even open them. A good compliment to any anti-virus application.