April 2011 Archives

Image0260.jpg

Every day, productivity in the IT in Context office is threatened by a monster who wants to invade the premises and eat every piece of paper she can get her teeth on.

We call this monster Molly. (see left)

But Molly isn't the most dangerous paper munching document destroyer a work.

Believe it or not, there are machines with much more powerful jaws that do far worse damage. They may look small and cute, but they'll chew your life's work the second you turn your back.

Find out who these electronic monsters are, when we publish our first printer reviews in May.

Here's just two of the models being studied.

Samsung ML3310ND

Brother DCP-7060D Compact Mono Multi Function Printer, with Duplex printing

Which one is the puppy? You'll have to wait to find out.

Dead Men Don't Read Mailshots - Capscan's new service will save you from investigating phoney leads

| No Comments
| More

dead-men-don-t-wear-plaid-original.jpg
Scenes from the Steve Martin film Dead Men Don't Wear Plaid, a spoof on the genre of tough guy private detectives, usually played by Humphrey Bogart. Do Dead Men Read Junk Mail? 

If not, Capscan can save you from investigating dead leads.




Did you know that dead people receive 59 million pieces of junk mail every year? Are zombies a key demographic that marketing managers have identified? It would surprise nobody, given what we know about marketing managers.

In fact, the truth is even more unedifying than that. The reason for all this ghost mail is that Britain's databases are woefully inaccurate. It's wasting companies 30 per cent of their marketing budget.

Now Capscan has a 12 point programme to combat this. As part of this scheme, it has launched a new version of Capscan Integrity, its online data cleansing, suppression and enhancement tool. 

For more information, contact Capscan

In the meantime, here are our favourite quotes from the film Dead Men Don't Wear Plaid

Don't get stung by mobile roaming charges - get stung by something else

| No Comments
| More
tru photography-09.jpg

Tru formerly known as Truphone, is a mobile network operator that promises you the option of making mobile calls and internet searches while you're abroad, without getting trollied by the mobile roaming charge racket. 


I bought one of these from EasyJet, just before we landed in Barcelona for Mobile World COngress. I hardly used the SIM card, but when I went back to Barca for next year's conference, all my credit had been wiped. So I had to spend another twenty quid. And guess what, that doesn't seem to be on the card either.


At least with the mobile roaming charge racket you actually get to make phone calls!

 

Anyway, Tru has promised to look into this. 


Still, for what its worth, Tru has a new offer.


If you are planning on travelling to either the US or Australia Tru can offer you mobile calls local rates. 


Even if you are not travelling to the US or Australia, Tru claims it will save you between 30-60% in Europe - and offers competitive rates all over the world too. According to them.


Hmmmm. 

 

Tru has offered to give us a trial Blackberry and SIM card. Which I'm sure would save money. 


As a customer though, the experience was questionable. 

Buying protection for your iPad and iPhone on Speck

| No Comments
| More
iPad 2 Pixel Skin HD Cobalt Photo5.jpg
Speck is the worldwide leader (isn't everyone?) in iPad, iPhone, MacBook cases and covers. It also sells a massive range of other electronic device accessories. 

I quite like this Cobalt Blue skin for the iPad.

(Ahem. Cough. Are you listening PR people?)

Hang on, what am I talking about? I don't take bribes from PR people. 

Besides, I haven't even got an iPad.

Although I do have one of those new tablets from Motorola. Expect a review soon.

Clockwork_Orange - Out of Print.jpg  


This Clockwork Orange skin for the iPhone is truly horrorshow.

As the PR man says, these covers are not your knock-off Nigel, market stall 'diamond' clad Gucci covers, but premium protectors of all things tech related.







TimeToRock lifestyle 1.jpg



This is the Time to Rock, which is some sort of protection for your phone while you're dancing.

It's a look that says "I've got a lot of disposable income to spend on accessories."

Withings launches blood pressure monitor for Smart phones

| 1 Comment
| More
blood pressure.jpg
Here's the new Blood Pressure Monitor from Withings. You use the computing power of your Smart phone to manage the blood pressure measuring equipment and the system can automatically phone your doctor if anything odd happens. A brilliant gift for the hypochondriac on the go.

About fifteen years ago, Professor Robert Istepanian invented the first prototype of a mobile health product that used your phone as a medical peripheral. It could measure anything. Pressure. Heart rhythms. Even blood sugar levels. 

If you were a diabetic, recovering heart attack sufferer or at risk of a coronary, the mobile could constantly monitor you and even inform your doctor if you took a turn for the worse.

Needless to say, Istepanian found it hard to get funding in the UK for his invention and the project was canned.  

Fast forward to today and here we are marvelling at the new invention from French company Withings, which does exactly what Istepanian proposed over a decade ago. Istepanian is now lecturing at Kingston University.

When you're staggering home, bent over double in agony.. BOA has an app for that

| No Comments
| More
Man with pain in back.JPG
Sometimes, late at night, I find myself weaving along the street, bent over double as I stare at the pavement, wishing I hadn't indulged myself and desperate for the agony to end.

Now  the British Osteopathic Association (BOA) has launched an app for that. Its new find-an-osteopath mobile application should help you locate the nearest saintly back specialist.
                
The BOA says you can find your nearest osteopath in minutes on your smart phones. 

(Hmmm, we'll have to take your word on that)

It also provides useful top tips on how to relieve joint aches and pains.
 
The app for both the iPhone and Android phones is called "Osteopathy, relief from back, neck and joint problems" 

Also offers guidance on what women can do help relieve pain while pregnant.  

Baffling headline: StorageCraft Releases ShadowProtect Granular Recovery for Exchange v6.1

| 2 Comments
| More
What can it mean?

Can anyone explain?

Post your answers in the comments box below.

Is Blinkbox about to move to a tax haven?

| No Comments
| More
Tesco has announced the acquisition of a majority stake in video-on-demand pioneer blinkbox

We wonder how that will affect Blinkbox's tax position. Will the new owners set up some sort of offshore holding company?



Security and Cloud Computing are strange bedfellows. Cloud security is too immature

| No Comments
| More
marteen_greenway.jpg
Her'e's Mateen (or Marteen - they've spelt it both ways) Greenway, HP Fellow, on the immaturity of the cloud computing model.

As sightings of the Face of Jesus in the Cloud become more frequent, we thought it was time someone carried out a maturity audit on Cloud Computing. 

Is this model insecure? Mateen Greenway seems to think so. He should know, he's a Fellow of HP Enterprise Services, specialising in defence, security, government and healthcare.

"This is a complex question," says Greenway. "The whole cloud security area is very immature today."

He intends to simplify matters for us. "One simple model to use is that cloud uses lots of small IT components from a large shared pool to deliver a total service to a customer. If a few, or even a lot, of the components fail then in the Cloud more components will be pulled from the pool to keep the service at its agreed level."

"So there should be no interruption in the service. In the traditional IT model you own the right amount of hardware to deliver your needs, so if something fails your service degrades or fails completely. To solve this you need a DR site with extra capacity," he says.

Er, yes, that's all very well, but we asked you about security!

"The security issue gets you into the discussion of the difference between private and public cloud. If data is not stored on local devices, losing a laptop does not lose the data, they say. While this is true this is more related to centralised data storage than cloud computing.

"We need a new security model to deal with data seperated from applications as this is potentially a new model," he warns. 

So we need a new model for security before making a blind leap of faith into the cloud. That's worrying.
This is just in from Velti, which says it's supplying one of the UK's largest newspaper publishers with mobile marketing services and campaigns. 

It will do this by integrating its mobile CRM platform across Johnston's 18 daily newspapers, 253 weekly newspapers and 297 local websites.

The plan is to reach 10 million weekly readers with mobile marketing messages.
 

How? If you read, say, The Scotsman or The Yorkshire Post, your paper will be full of invitations to get involved in SMS related competitions, paid promotions and opt-in information alerts such as local information bulletins.
 
"Velti's mobile CRM platform will enable Johnston Press plc. to fully monetise these mobile interactions," says the release.

Is it me, or does your heart sink when you see SMS related competitions in a newspaper?

It's the modern equivalent on the 0898 premium rate number. There's something terribly spivvish about an SMS campaign.

Sorry, that's just the association I make with it.





Email marketing doesn't have to be cheesey, but it does have to work, says Message Horizon

| 3 Comments
| More
Jonathan_Rodger_02_1mb.jpg
We asked: Is Email marketing too cheesey? We got a massive response.

Here's Jonathan Rodger, CEO of Message Horizon, on the pros and cons of this type of approach to cheese burger marketing.

There were some good points about the Byron Hamburgers campaign, he says. 

"The content is brief and to the point and the title is catchy," he says.  

"The idea of associating the royal  wedding with a well-known film scene is fun and a subtle way of announcing a new restaurant opening."

On a technical level, the FROM domain has an SPF record and Domain Keys enabled.
 
But any resellers using email marketing in this way won't be getting the full benefits. For themselves or their clients.

"The email is a promotion but there's no call to action," says Rodger.

Worse, the links are not explained and the landing page is essentially a web page with the same copy as the email. There is no personalisation in the email.

There is no mention of special price offer, prize draw, free gift or any incentive for visiting the restaurant. It's like working the ball through the channels, getting into the penalty area, then diving when you should be having a shot.

In many aspects, email marketeers are missing an open goal. One of the sins of email marketing campaigns is that they dehumanise the business they are promoting. 

"A photo of the new restaurant would make it seem more real. The reply address is 'noreply@' which cuts out the possibility of receiving direct feedback from recipients or entering into any  dialogue," Rodger says. 
  
The company has a Facebook and Twitter presence but these are not shown or linked to in the email. 

Design is important too. There is a large header image (logo) that takes up an unnecessary  amount of vertical space. 

Web technicalities need attention to detail too and the Byron Hamburgers advert is a case in point. "The image has no ALT description so if images are not downloaded the recipient will just see an empty space in their viewing pane with a broken image and no text."

[Aha! I always wondered what the point of an ALT description was! - Ed] 
  
The HTML contains style attributes within the <HEAD> tag, these should be contained within the <BODY> to ensure  best rendering in web based email clients, argues Rodger.

He's not finished either. "There is no forward-to-a-friend option. Most worryingly, the IP address of the sending mail  server has a very bad reputation score and the email would be considered at high risk of being rejected as spam," says the email marketing guru and CEO of Message Horizon.

Having said all that, however, this column walked past Byron Hamburgers on Sunday afternoon and it was heaving. So perhaps email marketing works. Imagine how effective it could be though.







How to hack into a corporate computer - these days it's best to get someone from PwC to do it for you

| No Comments
| More
[PR company didn't provide a picture. Tut!]

PwC (AKA PriceWaterHousCooper, AKA Monday) is teaching its staff computer hacking.

Brilliant idea!

Hacking is a fascinating, sexy subject. Most of us are sensible enough not to do it, but you have to admit the idea is exciting. Hollywood has made films about computer hacking. There was even an episode of The Sweeney which featured a young John Hurt as a computer nerd who gets bullied by a criminal gang.

No-one's ever made a thriller about a compliance officer or a security consultant. 

So hats off to whoever it was at PwC who thought up this awareness raising scheme.

More details below.

While other accountants, management consultants and tax advisers around the City might be having just another breakfast meeting this morning, PwC's staff are taking part in live hacking demonstrations.

Usually accustomed to advising clients on cyber security and helping to protect from hackers, PwC's OneSecurity experts are bringing best practice guidance in-house by teaching colleagues all about the serious impact of data loss. 

The live demonstrations named Don't be tomorrow's headline, are being led by Jay Abbott, director of PwC's threat and vulnerability management team, at the firm's Embankment Place office. 

"We all have a personal responsibility to protect our own work and that of the wider firm and our clients," said Abbott."Something as simple as completely shutting down your PC each night, rather than just closing the lid if it's a laptop or putting it on sleep mode, negates the threat of hackers being able to hack into your system and steal your data."

Is email marketing too cheesey these days? Or does it work?

| 1 Comment
| More
Below is a typical example of modern email marketing. This column asks: is email marketing outdated?

Does email marketing actually work these days? Isn't it too intrusive? Does it work?

Could email marketing help you sell your cloud computing service to a sceptical CIO? 

How? We imagine you'd have to be fairly subtle about it?

What are the seven deadly sins of email marketing?

Can you improve on this one below? Coming soon. An email marketing guru will outline how email marketing could work for you.

 

Byron

   
 

Royale with Cheese April 15th - May 2nd

Byron is proud to celebrate the forthcoming wedding of Wills and Kate by running a Royale with Cheese special from April 15th to May 2nd inclusive. The Royale with Cheese will be a double cheeseburger made with Montgomery Cheddar, the highly regarded traditional cheese produced by the Montgomery family in Somerset since 1911.

We believe the Royale with Cheese to be a hamburger of impeccable class and distinction - fit for Royalty, no less. It also pays homage to John Travolta's famous conversation with Samuel L. Jackson in Quentin Tarantino's cult classic "Pulp Fiction", one of our favourite movies.

The Royale with Cheese will be available at all our restaurants, including our new site at 11 Haymarket SW1, which opens on April 15th.

byronhamburgers.com
 

Cloud Computing is at a crucial stage in its journey says Trend Micro channel boss Hodson

| No Comments
| More
Caroline Hodson.jpeg
Here's Caroline Hodson, head of UK channel sales and marketing at security giant Trend Micro. She's mad for Infosec. That's the kind of enthusiasm we like to see!


Is this your first time at Infosec?

No. I can't stay away! It is one of those weeks that you see in your diary and look forward to. Think about it: on your feet all day, no natural daylight dawn till dusk, dodging the freebie grabbers - who wouldn't be there year on year?

As compensation, have you got anything exciting to lure punters to your stand?
No.

No gimmicks. No sales stunts. No aggressive marketing. No naked girls (sorry folks).

We are there to have valuable conversations and discussions. To give visitors an opportunity to discuss their needs and their businesses. We've created an open space with whiteboards and sofas where they can meet with experts like Rik Ferguson and Andy Dancer who'll listen, discuss and provide advice on their journey to their cloud and what this means to them and their businesses. 

We won't even have any collateral. All our show materials will be delivered via personal SafeSync  accounts - allowing visitors to remotely access files, videos, pictures and documents, safe in the knowledge they are protected and in-sync across multiple devices. 

We've stripped it back to what's important. How we can help and guide customers to more effectively virtualise their environments and move to the cloud. How can we support and enable our partners to maximise the sales and service opportunity around virtualisation - whether they are an existing security specialist or current focusing on virtualisation and infrastructure. .
 
There's a lot of clones at Infosec. So what makes Trend Micro different from all the other solutions out there? 

You have to start by considering the pain points that customer are talking about in relation to virtualisation projects or the mysterious cloud. 

a) Security concerns 

b) The ability to demonstrate an almost immediate return on investment 

These are probably the two biggest factors that are slowing down companies' virtualisation strategy.

What makes Trend Micro different is our ability to remove both the security barrier and enable customers to realise the benefits of virtualisation. This together with an ability to demonstrate a greater ROI with security solutions that actually improve performance means we can support them to create their own business case as well as ensure they deploy the right solution!

How do we do that? It's through our partnership with VMware - teaming up to deliver revolutionary virtualised security. These solutions leverage the VMware platform to deliver better-than-physical security, meaning higher consolidation rates <Tolly Report> and cost savings, as well as faster performance and better manageability. 

 These are tried and tested solutions that have been in live environments since 2009 and have been deployed across more than 150 customers. Where many vendors are discussing roadmaps and future developments, Trend Micro are at least 18 months ahead.

 We are reaching a critical stage in the cloud journey. Server virtualisation is becoming mainstream and customers are now looking at ways to sweat their assets, and desktop virtualisation has taken off big time. Our partners are going to sell hardware and software for virtualisation projects, so sell Trend Micro with it and help get over the security barrier many companies are putting up and more effectively virtualise their environments

Jesus used to exemplify important moral messages with simple tales.
Can you exemplify your IT service/product with a simple parable?

My son is an avid sports fan. He loves playing football and rugby and would do so morning till night if allowed. However he also likes to play barefoot - it takes too long to stop and put trainers on when you could be scoring goals much quicker. However, by buying him his first pair of proper football boots, we have demonstrated how much faster he can run, how much harder he can kick the ball. Ultimately how much better he performs. This is the same with virtualisation; you can implement a virtualisation environment and it will work. But if you really want to maximise performance then you need to plan in advance, understand how different elements work together to improve overall performance and enable you to achieve the ROI you are looking for. 

IT Security by numbers - figures for Patch Tuesday tell their own story about Internet Explorer

| No Comments
| More
Here's a story for number crunchers to digest. We present these figures from Microsoft's latest Patch Tuesday and invite you to draw your own conclusions.
 
Numbers
64   number of patches needed in various version of Microsoft Internet Explorer
9     the number that were critical)
17   the number of bulletins)
15   the number of the above that addressed..
3     The number of versions of Internet Explorer that need patching
 
240 Estimated number of man hours needed to fix all these patches
12   Number of hours you have left before some botnet finds your vulnerability and exploits control of your IT systems

Alan Bentley, SVP International at Lumension seemed surprised by the scale of the exposure Microsoft has subjected its customers to:

"Following a relatively light Patch Tuesday in March, this month's bulletins will have IT managers back on their feet scrambling to implement the 64 patches, nine of them rated critical. 15 of the 17 bulletins address remote code execution vulnerabilities," said Bentley.
 
"Most noteworthy of the patches is MS11-018, a critical patch for IE6, IE7 and IE8 on Windows clients.  Without the patch, browsers are instantly compromised from the moment a user visits a malicious site. 
 
"The two SMB-related bulletins, MS11-020 and MS11-019 are both geared towards fixing vulnerabilities in SMB Server and SMB Client, both of which could leave servers available for hackers to take control of them. 
 
"While some IT managers may have had their feet up in March, this month's Patch Tuesday is further evidence that our systems still aren't up to par. Most of these patches will require a full restart meaning organisations will need to schedule time for the updates."

2FA means sweet FA says inventor of Gridsure's simple to use authentication system

| No Comments
| More
SHowes_with_Trans_Reverse grid_low res.jpgHere's Stephen Howes, founder and CTO of Gridsure. He's actually taken the trouble to create an interesting portrait picture, which puts him way way way out ahead of the rest of the frankly unimaginative crowd who populate Infosec. 

He's won this column over already! Let's see what he's got to say for himself.

Is this your first time at Infosec?
This is our fourth year
 
Where are you? Prominently displayed? Or stuck in the exhibition wilderness at the back of the hall?
Stand G94, next  to the Technology show centre
 
Have you got anything to lure punters to your stand?
"Challenge The GrID"
We are so confident of the strength of our authentication product, that if you can guess our Personal Identification Pattern (PIP), you can win an Aston Martin.
Plus a daily draw for a remote control Aston as well.

Have you got a good story to tell resellers?
Easy to use, easy to remember, nothing to lose

What problem are you solving for the end user? What was the cause of this problem? How are you tackling it?
Forgotten, lost, stolen passwords
 
How did you develop this invention?
The GS solution was invented at the end of 2005 and the company formed in 2006.
Company took on private funding in 2007.... Now 20 people based in office in Huntingdon near Cambridge
Patents filed in a number of countries, several already granted
I was an IT professional with nearly 30 years experience developing IT solutions in a variety of industry vertical. The invention stemmed from the question "How can you create a one-time code without the need to carry a device"

Why are you different from all the other solutions out there? 
Different because you don't need to carry technology in your pocket.
Too many others are using technology to deal with the problem because humans are often the weakest link in any authentication scenario. However GS are using the natural technique of shape and pattern recognition (something that people are naturally attuned to) to help them generate a one-time code

What's the most over used term in IT security?
Security Token.
Many people think that the only strong and effective security is a token. This is not true. Token devices are costly and inconvenient  and security is compromised as soon as the user keeps his token in his laptop bag. Recent RSA hack has also highlighted a huge set of vulnerabilities.

What's the most mis-used term in IT security?
 2-Factor Authentication = Strong Authentication
People are often taught to think that 2FA = Secure authentication. This is not necessarily true.
People should be thinking about 'Strong Authentication' which may or may not necessarily be two-factor. GrIDsure offers both options but it should remembered that some strong single factor solutions may well be stronger than poorly delivered two-factor solutions.
At the end of the day the first step is to choose a solution that is secure and effective for the risk that you are trying to cover and the profile of your end-user. This may or may not need to be 2FA

What's the most under valued term in IT security?
Usability - Many security solutions forget the needs and the ability of the end user....... If a solution is overly complex or difficult to use then people will naturally find short cuts which often result in severely compromised security 

What's the biggest lesson you have learned in IT?
KISS - Keep It Simple Stupid
As Einstein once said "Everything should be made as simple as possible, but not simpler"

Why does EVERYBODY in IT talk about 'thinking outside the box'? Isn't it time a maverick started thinking inside the box?
 
There is nothing wrong with thinking outside the box.... The mistake however is to think that a solution has to be complex to be any good.....Again as Einstein said "Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius -- and a lot of courage -- to move in the opposite direction.""

DeviceLock could have prevented Wikileaks

| No Comments
| More
Police investigating the recent Wikileaks scandal phenomenon will NOT be calling on Stand D42 at Infosec. Because the exhibitor occupying this space, DeviceLock, is generally well respected in the community, for its work on preventing crime and data loss.

DeviceLock7.0 Endpoint DLP Suite is designed to prevent data leaks through corporate endpoint devices, such as USB ports, printers, laptops and smartphones.  
 
Locals say that software is necessary for businesses that want to have a level of control over how data leaves the corporate infrastructure. Some companies might want to set controls so that only more senior members of staff are allowed to download data off the corporate network, or control endpoints so that data can't be downloaded to USB sticks, without shutting the USB ports off entirely.   
 
DeviceLock could have prevented the Wikileaks phenomenon, claims a spokesman. The US embassy cables were downloaded onto a CD by someone who had access to the restricted files. If DeviceLock's software had been in place, then the data would have been accessible, but controls could have been set up blocking users from downloading that data.   
 
How are they going to make life easier for channel partners?

DeviceLock claims it is making life easier for channel partners through a series of discounts and offers for end users. The company has launched a promotional scheme alongside the new product, for new and existing customers. The "DeviceLock 7 DLP Starter" offer gives significant license discounts for new and existing DeviceLock customers that buy or upgrade to the new product version before August 31st, 2011.   

One question: DeviceLock 7.0 Endpoint DLP Suite. Not exactly a snappy name, is it?

Check Point software blades give you a security wall you can build on

| No Comments
| More
Thumbnail image for Terry Greer-King, Check Point.jpg
Here's Terry Greer-King, Check Point supremo, who promises to help the channel.

One of the problems with the security industry is that they're not noted for their sense of humour. All they want is your money. Which is why the vendors seem such cold, unhelpful types.

Check Point is a rare exception. Pop along to stand F40 and have a look at their new Software Blades. These are modules you can build your security on, incrementally.

The idea is you add new application control (Web 2.0 security) bit by bit. They cover everything rom identity awareness, data loss prevention and mobile access control functions to network gateways.  
 
The software blade approach lets IT managers start with a basic, low-cost gateway (i.e., a firewall) and add the modules (software blades) when they need to give the protection they want. 

They can add more modules and protection whenever necessary - rather like adding apps to an iPhone or Android smartphone. This gives you VARs an excuse to revisit and 'upsell' (ugh - I hate that word) to existing customers.  

The new Blade modules add new features, especially Web 2.0 control, DLP and identity awareness.
 
Who needs it? 

Anyone that wants network and gateway security.  Software Blades are scalable from SMEs (15 - 20 users) up to organisations of tens of thousands of users.
 
The good thing is Check Point is 100 per cent channel only. Well, it claims to be. Does anyone know different?
 
Still, at least Check Point has one of the largest ranges of security solutions, from smartphone security through to enterprise gateways. So it gives partners more opportunities to approach new customers, and to revisit existing customers and upsell. 
 

Who's that in The Cloud? Is it a board? Is it a blade? No, it's Lieberman!!

| No Comments
| More
Phil-Lieberman-280x210.jpg
Lieberman Software CEO Phil Lieberman is sick of having to rescue companies before they become clients. 

We help keep our customers' names out of the newspapers by closing security holes that could otherwise make headlines, writes Liberman. 

We also help IT staff avoid time-consuming, error-prone work that is better automated. Our software does that by helping customers take control of privileged identities - the powerful, anonymous credentials that IT staff or malicious outsiders could otherwise use to access information and change configuration settings at will. 

The software has evolved over more than 10 years - and now encompasses automatic discovery and remediation on global networks, covering all major hardware platforms and network appliances as well as virtually all packaged and custom applications where privileged accounts reside.

"Lieberman Software products deploy quickly," he says. "Without the need for custom scripting and endless service engagements. We're proud to have the smallest service revenue of any vendor in our market - by design - because our software works as advertised."

What's the most over used term in IT security then Mr Lieberman?

 Cloud - but we'll be using it extensively at Infosecurity 2011 anyway!

What's the most mis-used term in IT security? 

Organisation. It's supposed to be spelled with a zed. [Ohhh, you've touched a nerve there mate - Ed]

What's the most under valued term in IT security?

In-house.

What's the biggest lesson you have learned in IT? 

Stay focused.

Jesus used to exemplify important moral messages with simple tales. Can you exemplify your IT service/product with a simple parable? (If not, am I wrong to assume you don't really understand it?!!)

Give me another man's credit card and I will eat for a day. Give me his privileged login and I will eat for a lifetime.

Pick an item from today's news. How would you relate your product/service to this event?

In recent weeks compromised databases at little-known email marketing companies have exposed the personal information of customers of Marks & Spencer, JPMorgan Chase, Ritz-Carlton, Disney, McDonalds and many other large firms. Lieberman Software helps organisations of all sizes continuously discover and randomize their privileged logins to databases and business applications - making their networks more far more resistant to attack.

Why does EVERYBODY in IT talk about 'thinking outside the box'? Isn't it time a maverick started thinking inside the box?

Yes. This is known as 'inboxing.' Several of our customers have already adopted it to gain advantage over competitors that outbox.

Cloud based email security will be the Proofpoint says Vadition

| 1 Comment
| More
Andres-Kohn.JPG
Andres Kohn, the head honcho at Proofpoint is bringing cloud based email security to the market with Vadition 

Proofpoint is demonstrating its cloud-based email security, archiving and data loss prevention solutions at InfoSecurity 2011. Executives and product experts will be on hand to discuss the issues topping CSO's agendas including mobile, consumerisation of IT and security in the cloud.
 
Why do people need this product/service?
 
The security landscape is evolving and organisations are faced with the challenge of ensuring data is safe.  Increasingly sophisticated attacks and the increase in mobile working, add to this challenge as employees access data via laptops, tablets and mobile phones.  Regulatory compliance is increasing and there have been several high profile cases of companies suffering a data breach, most recently Epsilon in the US. Therefore enterprises more than ever need to put in measures to keep its data safe, otherwise heavy fines, and more importantly, a damaged reputation could follow. 
 
Who in particular needs it?
 
Proofpoint is aimed at mid to large enterprises.
 
How is Proofpoint going to make life easier for channel partners?
 
Working closely with its partners such as VADition [uh-oh! You mean Neil Ledger and his rum crowd? - Ed] means that Proofpoint are constantly informing customers of the latest risks in the industry. Proofpoint also maintains contact with its partners regularly so it can pass on best practice tips. 

Kaspersky Lab to talk about cloud computing safety issues at Infosec

| No Comments
| More
Eugene Kaspersky low res.jpgKaspersky Lab hasn't had a great year. Its UK MD, sales director and marcoms manager have all jumped ship fairly recently. 

But the company is bravely soldiering on.

Nikolay Grebbenikov (CTO) and Costin Raiu (director of the global analysis and research team) will be on stand C41 explaining how Kaspersky will secure virtualised environments, into cloud-based delivery platforms, and supporting and protecting mobile employees,

Co-founder and CEO Eugene Kaspersky (see pic) will be there too, explaining strategies like:

Cloud Safe
As companies start using the cloud for certain services, they will need to be convinced that safety issues are resolved.

Businesses must know the risks involved and ensure the end-point isn't the weakest link. By getting the right balance, businesses can reap all the benefits of cloud without any of the compromise. Kaspersky will be outlining its strategy to make the cloud safe.
 
Mobile Protection
When staff need to work anytime and anywhere, a business can easily become exposed. Businesses and personal users need an easy way to protect themselves, whatever their device or platform. Businesses must protect workforces that carry the company's datacentre on their smartphones and applications, demonstrating that HQ walls are no longer the walls of an information security architecture. Although the number one threat for mobile devices is losing them or having them stolen, malware is an ever evolving problem too. It's key that mobile end-points are treated like any other to safeguard businesses (says Kaspersky. I hope they make their presentations a bit snappier. This is exactly what everyone else is saying!)
 

IT Consumerisation
As more consumer technology is used for business, Kaspersky will be offering tips on how you can secure your clients. 

See Kaspersky on stand C41. Take a copy of Microscope to the stand, and they will give you a free boiled sweet and possibly even a stress ball.

Revealed: the shameful secrets of the Social Media Guru

| No Comments
| More
Social Media Gurus are ripping off gullible clients, says a new study about to be published on Newsbiscuit

Is the IT industry clouding over? Two big Cloud Computing bodies merge

| No Comments
| More

The Cloud Industry Forum says it is to partner with the Cloud Security Alliance. Is that the same as merging?

The two bodies say they are to align activity in order to drive best practice in cloud service provision. How effective will this be?

Are these mickey mouse forums or are they serious industry big hitters?

Read these cloud computing white papers and make your own minds up.

Post your answers in the appropriate box below.

Here, in the meantime, is the top line of the official version.

The Cloud Industry Forum and the Cloud Security Alliance, both not-for-profit organisations committed to championing the use of cloud services, have signed a Memorandum of Understanding to partner on activities that will promote best practices and industry standards surrounding the commercial adoption of cloud computing in a manner that advocates security, transparency and trust between supplier and consumer.

Telecoms: you can't live without them, but you can cut your bills quite easily.

Or maybe you can't, if you're a dim-bulb IT manager.

Seven out of ten IT and Telecoms managers think their telecoms cost are out of control says a new report by MDS. Four out of ten want to save money. Six and a half in ten of every ITC managers says they're under pressure to save money.

Well, why don't they do something then? 

Here's an interesting statistic. Four out of ten are spending money on lines, phone and internet access they don't need. 

Can you see the answer, boys and girls?

For more context, here (below) is the original full fat piece with all the sclerotic attention blocking cliches about "the lifeblood of the organisation"

Recently conducted independent national research of 200 IT and telecoms managers by customer experience management experts, MDS, found that  gaining control of telecoms costs was the biggest priority (69%) for most telecoms and IT managers, followed by reducing overall spend (43%). Worryingly, in the last 12 months, 43% have paid for lines, telephones or internet access they no longer need, while 24% have been locked into contracts they don't want or need. But one of the main issues facing these managers is that they simply do not have the time to analyse their telecoms usage, and monitor where savings could be made. With telecoms managers dealing with an average of three Communications Service Providers (CSPs), and only 66% regularly checking their bills, there is a lot of progress to be made in simplifying billing outreach.

In addition, with 65% of telecoms managers saying they're under increasing pressure to cut costs, it's become more important than ever before for businesses to be able to effectively monitor employee communication usage. One of the key issues is that businesses are putting themselves at risk of breaking the law, as over a quarter (28%) of all UK businesses are struggling to separate employee's work and personal calls for VAT purposes, resulting in unnecessary time and expense expenditure for companies.

Employees are also happy to let their employers pay for calls wherever possible - 59% of telecoms managers believe that employees will do this, creating a huge impact on businesses at a time when many are tightening their belts. If employees are seemingly 'out to get' whatever they can from their employers in 'undisclosed perks', how can companies fight back? Not through rules governing telecoms usage - as surprisingly there is a detailed usage policy in place in less than half of companies (47%). With over three-quarters of telecoms and IT managers (79%) believing that employees are failing to disclose personal calls on mobile bills, this represents a huge potential revenue loss for businesses.

 

How can businesses regain control and ensure that they are back on the right track?

 

It all boils down to the same solution - being able to get a clearer, real-time overview of what's happening in your IT and communications estate. Businesses are keen to understand how their company operates, with a particular focus on business analytics and customised online dashboards. As many businesses are looking to consolidate their communications, a single consolidated dashboard offering an online overview of employee usage will be a key service differentiator - something that many communications service providers are now starting to offer.

 

Online dashboards enable employers to have a complete view of telecoms usage across the business, regardless of size or number of employees. Employers will then be able to flexibly manipulate the data for analysis in almost limitless ways, for example breaking down calls to specific regions, or to flag users who have charged an excessive amount in a given month. Employees themselves can update the system to exclude personal numbers they have called, thus rendering the previous problem of call separation null and void.

 

In addition, businesses should make it overtly clear to employees what acceptable behaviour is, regarding their telecoms usage - distribute clear guidelines to ensure that there are no grey areas and confusion about what is acceptable.

 

With the right steps taken, telecoms and IT managers will be able to regain control and put the power back in their own hands through powerful on-line analytics.

 

Half the organisations in the UK have already used a cloud service says study

| 1 Comment
| More
Almost half (48 per cent) of all organisations in the UK are already using some form of cloud service, says a survey by the Cloud Industry Forum

Er, yes, that would be Hotmail or Google or Amazon wouldn't it?

Larger companies are more likely to use them, continues the study by the Cloud Industry Forum. 

Hang on, only half of the survey has used Hotmail or Google apps? Surely not!

The research, conducted in the first two months of 2011, polled 450 senior IT and business decision-makers in enterprises, small-to-medium businesses (SMBs) and public sector organisations in the UK. As well as 200 respondents from the channel.

For this survey to have any meaning, surely, they need to define what they mean by cloud computing. Are Google apps and Hotmail and Yahoo included? It doesn't say.

Weaponised Malware - is a lot worse than it sounds, says Venafi

| No Comments
| More
jeff hudson  headshot.jpg

We've had our fair share of IT security disasters this year from Wiki Leaks to the Comodo digital certificates hack which hit Marks & Spencer

Venafi's CEO Jeff Hudson intends to bring more than a whiff of cordite and a new scale of threat to the proceedings of Infosecurity 2011 with his views on Weaponised Malware.

Remember the Stuxnet virus was designed to locate and operate a valve or control module that was a critical part of a nuclear facility's infrastructure? In other words: to act as a weapon. This is a significant step forward in the development of malware.

There's malware out in the wild which could blow us all to kingdom come at any time with numerous undetected instances still active. Venafi will demonstrate version 6 of its Encryption Director software. The company claims that this is the only software which can deal with all encryption certificates no matter what type.

Venafi is the inventor of the Enterprise Key and Certificate Management (EKCM) system. It's a response to all the high profile disasters caused by lost or missing encryption keys 

Venafi's stand is worth visiting, if only for the weapons of mass destruction they're promising to showcase. Talking of danger...

Look out for Calum MacLeod, Venafi's maverick EMEA director, who blew a hole in airport security by entering the country three times by waving a laminated card at immigration officers. 

Communications breakdowns could nix Cloud Computing if DHL's service is anything to go by

| No Comments
| More
There's a weird looking man at our door.

My wife answers it. Then man mumbles something through his motorcycle visor

What?

"Free Monkeys!" he shouts. "Free monkeys!"

There's a man at the door shouting Free Monkeys at me, she reports. By this stage our mystery caller has gone.

It turns out he's the courier, sent by the PR agency (3 Monkeys) for Samsung, to pick up their Omnia 7 Windows phone, which will be reviewed here shortly.

The point is, for all the good technology does, most of the time the systems fail because people are so useless at communicating. 

Take DHL. They've got an online system that lets you track your packaging as it travels from Kingston to Thailand. At least it would, if they's explained how it works properly. On the web, there's a field to type in your number, so you can Track Your Shipment.

What (of the many sets of numbers on your documents) number should you enter? They don't say, so you naturally assume it's going to be the account number. You type that number in, the system pauses for a bit and then says 'There is no record of your package'.

It turns out the number you should have entered was the Waybill Number.

Of course, Waybill! That's the first time that comes to mind when you're searching for your personal ID.

What prat created this system and assumed everyone would guess that Waybill, in DHL language, means personal ID number?

Assumption is the mother of all cock ups. Assumption like this, made by nerds with no communications skills, were the root cause of so many outsourcing disasters. 

We'll see them all over again when Cloud Computing takes place. 

I'd put £100 on it at William Hill. But Graham Sharp, or whoever it is who calculates all the weird bets for the bookmaker, probably wouldn't have a clue what I was talking about.















SecurEnvoy uses Infosec to tell its story of token security

| No Comments
| More
akemshall[3].jpg

SecureEnvoy could never be accused of tokenism.

As a result of the RSA hack some of the channel's finest have been making hay prior to their debut at Infosecurity 2011. One, SecurEnvoy, says it has had dozens of enquiries from potential customers (or should that be ex-RSA customers?) finally convinced that a small piece of plastic that looks like an Infosecurity stand gift circa 1975 has finally had its day.

A tokenless 2012 would be a nightmare for EMC, but how likely is it? Securenvoy started in 2003, the year that the Blu-Ray was invented. They say not using their tokenless authentication would be akin to still watching your favourite episodes of Midsomer Murders  on VHS cassettes instead of Blu-Ray or at least DVD.

SecurEnvoy will be launching its software-based tokens at Infosecurity. These can be used on all devices, allowing end-users the choice to switch between SMS or software based tokens at anytime, anywhere onto their iPhone, Android, Blackberry or their laptop.

This end user orientated approach gives added choice for users that want to run soft tokens on smart phones while keeping deployment and administration simple. It's a product that will certainly see RSA sitting up and taking note and one that resellers should at least take a look at. Securenvoy has had 100% growth every year for the last four years. This is made up equally of new adopters of authentication and ex-users of two-factor authentication who found they couldn't carry on affording the costs of replacing thousands of tokens regularly. And that's just replacements - that  doesn't include the ones that get lost which is at least 20% of them.

Now thanks to RSA there is a new reason to go for Securenvoy - unlike RSA and other 2FA vendors, they do not store any token records or customer encryption keys. Their approach randomly generates any required keys within the customer's environment. This approach means there is nothing relating to our customers security stored at SecurEnvoy and therefore customer details could never become compromised.

They say that SecurEnvoy is easy to install (so they say) and can replace 18,000 tokens in under one hour, any RSA SecurID customers that want a fast, secure and cost effective resolution can install and replace tokens within less than a day.

This is Securenvoy's seventh time at Infosecurity and yet they are still looking forward to it, apparently.

(Poor buggers. They'll learn one day - ed) 

They have a simple statement that encompasses what they do: "Lead where others follow. Set the standard of tokenless authentication and maintain our position as global authentication leaders. Innovate with solutions that re-use existing infrastructure therefore reducing costs and making them easy to use." 

What's the most over-used term in IT security? "Tokens are the future," says Andrew Kemshall, of Securenvoy. Maybe it's a cliche because it's true. 

 

 



Top ten rainmakers in Cloud Computing

| No Comments
| More
The sun's been out for two consecutive days now. So it can't be long before there's a hosepipe ban. In recognition of this coming water crisis, here's a list of the top ten rainmakers in cloud computing.

Benguela - Which is entering The Cloud in stealth mode, a startup company founded by Amazon EC2 veterans
Cloudant - MapReduce based data management with analytics and search
Cloudswitch - Makes enterprise cloud adoption easy by solving key problems
Datameer - The Big Data power of Hadoop made accessible through a spreadsheet interface
Greenqloud - Provider of completely carbon neutral cloud provider
GridCentric - Turns your compute farm into a high-performance, private cloud in seconds
nephosity - Allows non programmers to allocate tasks and workflows on the cloud
Northscale - Provide a simple, fast, schema-free mechanism for storing data objects
Riptano - Apache Cassandra (Facebook's data layer) management software and services
SolidFire - Next-generation block-based storage platform for cloud computing providers and big enterprises
Zettar Inc - Create secure private storage cloud using commodity storage assets

Resellers should operate as cloud computing aggregators, advises Quocirca analyst Clive Longbottom

| No Comments
| More
clive large.jpg
As a reseller you need to hold stock, you're hostage to the whims of a vendor and constantly getting credit crunched or screwed over on pricing. It'll be a lot less risky being a cloud computing service aggregator, says Quocirca analyst Clive Longbottom. 

You may move to selling cloud services, but you will have to know the business processes of your chosen market like the back of your hand.

The channel has to see cloud as an opportunity, writes Longbottom, otherwise it will be the biggest threat to their business. 

Cloud gives the channel the means to act as the ultimate aggregator with the lowest risk - someone else is running everything. As a definition of "money for old rope", cloud could be the making of the canny channel company.
 
On the other hand, the Cloud will usher in a whole new generation of cowboy operators looking for the quick buck, rather than the long term relationship with the customer. 

Buyers must bear in mind that going for lowest cost is like drinking in the last chance saloon. Going for best possible fit and functionality could be more of the California gold rush - lots of money to be made if slightly hectic.
 

About this page

This page is an archive of entries from April 2011 listed from newest to oldest.

March 2011 is the previous archive.

May 2011 is the next archive.

Find recent content on the main index or look in the archives to find all content.

-- Advertisement --