Archive for August, 2007

Are You Cut From “The Cloth”?

Thursday, August 23rd, 2007

284847407_2cb59f13ca_m.jpg 

I once heard a story about a speaker who walked up to the microphone and said,”I wan’t everyone to feel comfortable and relaxed today. So, I’m going to talk to you about, Jesus Christ, your immortal soul and the very real likelihood that you are facing eternal damnation.”

Okay, settle down. Clean the coffee you just spray out your nose onto the computer screen and let’s get on with this.

To me, the interesting thing about this is the reality that faith anchors millions of lives, and their faith is personified in a leader. Often that leader is a member of the clergy. But, sometimes that leader could be in another roll entirely, a blog author perhaps.

The impact of these individuals can be seen by exploring who people turn to in their times of greatest need: birth, coming of age, marriage, a business venture, crisis, and death. True spiritual leaders spend vastly more time working with people than pontificating from a lectern or a keyboard. And not all of these leaders have a formal following. You will often find them drawn to provide their services at hospitals, prisons, schools or other sources of personal and professional development. You see for these people, serving isn’t job it is more of a calling. Often they spend their evenings speaking to focus groups or networking with others of the same mindset.

Without doubt, the most successful are inspiring speakers. But, their are also those who inspire from their keyboard. In effect they are inspiring persons who have the ability to motivate others to seek out the best in themselves, especially in times of crisis.

What may surprise is that many of these have been able to reach the heights of serving others only by having reached great depths themselves. They themselves may suffer the occasional crisis of faith. But, they are able to rebuild themselves by helping others.

As a conclusion, if you feel drawn or called but turn away because your dread of a live of poverty you may wish to reconsider. According to Salary.com the average clerical annual income is $78,690 annually.

There He “Godins” Again: Why Follow Through

Thursday, August 23rd, 2007

589555127_6cf4131a9b_m.jpg 

I’m having a flashback to 1989 when the Pete Rose dust started to rise. Pete had always been a hero of mine. A “regular guy” who proved working hard could get you just as far as being blessed with great innate talent.

Except, Seth Godin’s hair doesn’t get caught in the wind and he runs around the bases.

The Seth’s Blog topic for today is “follow through.” Or more specifically, why follow through is important. He maintains that follow through on individual tasks is important because failing to follow through in effect teach a self debilitating practice of shortening your service at every successive event.

THAT’S NOT WHY!

The reason follow through is so important is it is at that apex of follow through where we actually are in a position to chart the next leg of our journey.

  • Consider the runner at the end of the race, suffering near exhaustion. Only then can the runner just how much was left in reserve.
  • Consider the weight lifter at the end of a grueling workout. Only then can the judgement be made how much more could be lifted next time.
  • Consider entrepreneur at the end of a business exchange. Only at closure can it be decided how much more could have been provided the client to bring return business and entrench the position in the market place.

It’s not about ”I hope I don’t strike out” . It’s about “I hope I get a home-run.”

But, I’m loyal. I still believe Pete Rose deserves a spot in the hall of fame and I still think Seth Godin has some great things to say.

Ticking Security Bombs: Office Espionage Part 6

Thursday, August 23rd, 2007

404976721_b2af22f819_m.jpg

If you work with confidential data, and you use any of the following pieces of technology, it is just a matter of time until your confidentiality is compromised. One of the biggest flaws to most of these machines is the lack of an audit trail. Anyone with access can transmit information just about anywhere with now way of determining who sent it (or at least no implemented way).

This post is part of a 10 piece segment of a series which polishes and updates some of the more popular security posts I’ve written.

  1. Disposable roll fax machines.
    Used rolls contain copies of every items the machine has received. You can add a security upgrade such as “FaxFinder” that adds an electronic trail but it costs about $3000.00.
  2. Unattended fax machines.
    Fax machines left on are an excellent sources for stealing confidential data. When I expect a fax coming in I alert the office staff to put it in a folder in my in-box. Never send a fax out unless you have verified someone is ready to receive the information.
  3. Dictation machines.
    If you use dictation machines and leave tapes on the secretaries desk to be transcribed don’t be shocked when a tape goes missing (Tell the truth, this has already happened hasn’t it?). The tapes are tiny and weigh less than an ounce. Any minor office distraction can lead to misplacing these items.
  4. Answering machines.
    Most are accessible with a 3 or 4 digit code. Most people don’t change the factory set “3,4,5.” Easy to hack. If you think about it a 3 digit code only has 16 combinations (2*2*4) or 371, 372, 375, 376, 381, 382, 385, 386, 471, 472, 475, 476, 481, 482, 485, 486. Unbelievable but true.
  5. Cordless microphones.
    Crystal clear signals for about 1,300 feet or a quarter mile.

There are certainly more easily exploitable breaches out there but these are those that come easily to mind.

Describing A Spy

http://elementaltruths.com/?p=415

Office Traitors

http://elementaltruths.com/?p=414

Business Brain Cramps

http://elementaltruths.com/?p=413

Starbucks Espionage

http://elementaltruths.com/?p=412

Recording Devices

http://elementaltruths.com/?p=411

Cell and Cordless Phones

http://elementaltruths.com/?p=410

Hacking Passwords

http://elementaltruths.com/?p=409

Pop-In Spooking

http://elementaltruths.com/?p=407

Office Espionage

http://elementaltruths.com/?p=408

Waste Archeology

http://elementaltruths.com/?p=406

Security Overview

http://elementaltruths.com/?p=404

Computer Shortcuts & Special Characters

Wednesday, August 22nd, 2007

The folks at QuickStudy, Bar Charts, Inc. produce some of the best quick reference guides on the market. You just can’t beat them for putting your finger of facts in a hurry.

They even give some of their fine tools away at no charge. Here is their guide entitled, “Computer Shortcuts & Special Characters.” I use it a lot. Down load it and let me know what you think.

It is a pdf so it should open for you easily.

Computer Shortcuts & Special Characters

In fact they have about 19 free guides. Here are the rest.

  1. Medical Facts
  2. What You Won’t Learn In College
  3. Keys to High School Success
  4. Weather Disasters and Epidemics
  5. Keys to College Success
  6. Totally Useless Trivia
  7. IM Acronyms and Emoticons
  8. Surviving the College Ride
  9. Email Etiquette
  10. Stupid Jokes
  11. Dorm Room Recipes
  12. Referee & Umpire Signals
  13. Ramen Noodle Recipes: Chicken
  14. Cinco de Mayo
  15. Ramen Noodle Recipes: Beef
  16. Catch Phrases
  17. Pick-Up Lines
  18. Business Facts

Enjoy.

Managing Excess Paper

Wednesday, August 22nd, 2007

727836283_35ea4c7e0c_m.jpg 

Does you home computer station get buried under avalanches of paper?

Mine occasionally does. Here is a strategy that I find useful and you may as well.

In a previous life I worked with a behavior specialist who had a minimalist approach for eliminating routine paper. He used an empty laundry detergent box as a 3 month filter filing system. Inside the box he rotated 3 accordion type file folders, one for each of three months.

At the end of 90 days, if he hadn’t retrieved a document from the oldest folder and used it, he emptied that folder into the recycle bin.

If he had used the document, it earned a place in his conventional filing cabinet, which itself had to face an eighteen month usage test.

I know how we bloggers love lists so,

  1. claim an empty detergant box (one of the big ones)
  2. insert three accordian style file folders
  3. put all your questionable value documents for the month in the folder
  4. at the end of the month rotate an empty folder to the front
  5. at the end of three months shred the documents you haven’t used
  6. place the documents you decide are of value in your conventional filing cabinet
  7. apply the 18 month rule to your conventional filing cabinet as well
  8. enjoy your newly tamed workstation

Cordless and Cellular Phone Security: Office Espionage Part 5

Wednesday, August 22nd, 2007

images2.jpg

This post on cordless and cellular phones is the 5th of 10 piece segment of a “greatest hits” series I’m doing which polishes and updates some of the more security popular posts I’ve written.

Never use a cordless phone for anything other than the initial convenience of answering a call. Switch to a corded line for any client specific communications.

Monitoring cordless and cellular phone calls has become a million dollar hobby in America. Some individuals even sell their own monitored conversations on line. Think ex-girlfriend sites.

Mobile phones are an even greater liability. Not only are means available to monitor the conversations, but it is not particularly difficult to track the location of the parties based on their signal. Now, that is scary.

This tracking has become even easier now that newer 3G phones have come online because their base stations are even closer together. 3G cellular technology basically brings wireless broadband data service to your mobile phone. Just now the major suppliers are Verizon Wireless, AT&T and T-Mobile.

What can you do?

  1. Use a regular line for increased security.
  2. Dedicate a secure line in your office for sensitive communication. They are not cheap. Or-Com offers one that has fair reviews for about $300.00. View it here.
  3. Use first names on non-secure lines.
  4. Speak in general terms on non-secure lines.

If you think these precautions a completely paranoid, you may be right. On the other hand, browse Spy Emporium for an overview of just a few of the surveillance devices available.

Describing A Spy

http://elementaltruths.com/?p=415

Office Traitors

http://elementaltruths.com/?p=414

Business Brain Cramps

http://elementaltruths.com/?p=413

Starbucks Espionage

http://elementaltruths.com/?p=412

Recording Devices

http://elementaltruths.com/?p=411

Cell and Cordless Phones

http://elementaltruths.com/?p=410

Hacking Passwords

http://elementaltruths.com/?p=409

Pop-In Spooking

http://elementaltruths.com/?p=407

Office Espionage

http://elementaltruths.com/?p=408

Waste Archeology

http://elementaltruths.com/?p=406

Security Overview

http://elementaltruths.com/?p=404

Seth Godin Down the Wrong Path

Tuesday, August 21st, 2007

513131041_8306eb3057_m.jpg 

If you read on-line material you have probably read Seth Godin. I have been fan for quite some time. If anyone knows how to generate traffic producing income and keep folks coming back for more it’s Seth Godin.

But, (you knew there had to be one, right?) lately either his take on things has changed or mine has.

As a case in point he wrote a post today about the ideal length of PowerPoint presentations. He incorporates the ideas of some other authors and comes up with a guideline of 20 slides for 20 seconds each. His justification being, any problem can’t be outlined in 6 minutes anyway.

You know I had to read that thing 5 times to make sure I wasn’t hallucinating.

Real problems can’t be solved in a 30 minute sitcom episode.

This is the kind of short term, Dr. Phil, fast food, micro-wavable thinking that forever gets American business leaders in hot water.

When I come on board as a consultant and spend two weeks gathering and analyzing data, just to IDENTIFY THE PROBLEM! It is unrealistic to expect that 20 slides of 20 seconds each can effectively communicate the key issues.

Now for the really ugly part. When someone like Seth Godin writes a piece like that many people take it at face value.

I know Godin is one of those unassailable, success gurus that is beyond reproach. But, this time he missed the boat.

Hacking In: Pilfering Passwords: Office Espionage Part 4

Tuesday, August 21st, 2007

226873460_c8eabd2911_m.jpg

If you work in an office and you often have need to access secure data, you probably use some type of username, password challenge system. In most cases that is a “good enough” method. However, you should know that one of the most common methods of hacking in to secure systems is simply by entering the username and password of an authorized user.

This edition is part of a “greatest hits” series I’m doing which polishes and updates some of the more popular posts I’ve written.

If you would like to test the strength of this security in your work place try the following 3 minute data harvest.

  1. Take a walk through each office and look at the post-its around the computers.
  2. Flip through the rol-o-dex on you coworkers desk and stop under “P” for passwords.
  3. Ask the office support staff for the password to access some data you have no reason to access.

If you have some time to devote to gathering some data, try the following password harvests.

  1. Find out mother’s maiden names.
  2. Find out children’s’ names.
  3. Find out the name of favorite pets.

Here are the no brainer password hacks that you don’t even need to leave your seat to find.

  1. According to Netscape about 1 1/2 of all people use “123″ or “password” for their password.
  2. The next most common is the name of the city in which you are located.
  3. The next most common (brace yourself) is “Let Me In.”

The holy grail of password stealing is finding the last four digits of the individuals social security number.

There are steps you can take to make sure your passwords stay relatively secure.

  1. Choose a password that is not in the dictionary (vorpalsword, caloocalay,snickersnack…).
  2. Include some numbers in your password (Herd1, t8tertots,4bid…).
  3. Change your password regularly.

Here is an interesting tid bit from Micro-Soft on password strength. The “blank password.” They maintain that having no password at all is a stronger defense than the 1234 or ABCD password approach.

Describing A Spy

http://elementaltruths.com/?p=415

Office Traitors

http://elementaltruths.com/?p=414

Business Brain Cramps

http://elementaltruths.com/?p=413

Starbucks Espionage

http://elementaltruths.com/?p=412

Recording Devices

http://elementaltruths.com/?p=411

Cell and Cordless Phones

http://elementaltruths.com/?p=410

Hacking Passwords

http://elementaltruths.com/?p=409

Pop-In Spooking

http://elementaltruths.com/?p=407

Office Espionage

http://elementaltruths.com/?p=408

Waste Archeology

http://elementaltruths.com/?p=406

Security Overview

http://elementaltruths.com/?p=404

Pop-In “Spooking”: Office Espionage Part 3

Tuesday, August 21st, 2007

images1.jpg

Be extremely wary of maintenance crews and repair staff you personally haven’t called in. Check ID’s. Also, be aware of someone who comes in asking a lot of questions. You may be surprised what the reception staff will tell someone who smiles and asks nicely.

Individuals who utelize this technique are known as industrial “spooks”.

You see, “Spooking” is a hide in plain site method of gaining access to confidential information

It seems carrying a clipboard will gain a spook access to most places, even those with confidential data to protect.

But, there are other common tools the spook may carry to increase their appearance of authenticity: 2-way Radio, Maglight, Construction worker hard hat, and my personal favorite the attention tone cell phone. Now, this particular ruse means the spook has a partner but is anything more impressive than that tone from the “base office” checking the technicians’ status?

However, the most powerful, by far, access granting technique (I mean this will get you in anywhere) is a set of neatly pressed Dickies. Yes, Dickies. The same things you wore for summer jobs in high school and college. They are a virtual cloak of invisibility in our culture.

Most common guises:

1. Telephone/communications technicians - (typically wearing blue/grey Dickies)

2. Computer service technicians - (polo shirt and tan Dickies pants)

3. Copy machine technicians - (polo shirt and blue Dickies pants)

4. Custodians - (typically anyone with a set of blue/grey Dickies is granted cart blanche access)

5. Messenger services - (typically wearing brown Dickies)

6. A/C heating technicians - (typically wearing blue-green Dickies)

The beauty of this type of “spooking” is nobody ever challenges these folks. And if some particularly diligent person does question them, the spook goes into his, “fine with me, but it will be at least four weeks until I can get back here. We’re really backed up.” That is usually enough to intimidate even the most on top of things staff member.

I don’t usually recommend testing out these surveillance techniques, but the power of the Tricky Dickie is not to be believed unless you actually see it in action. So, get your lazy brother-in-law a set of Dickies and send him through your office. You won’t believe the results. Afterwards, get the lazy bum to do your yard work so you get your moneys worth from the Dickie investment.

Describing A Spy

http://elementaltruths.com/?p=415

Office Traitors

http://elementaltruths.com/?p=414

Business Brain Cramps

http://elementaltruths.com/?p=413

Starbucks Espionage

http://elementaltruths.com/?p=412

Recording Devices

http://elementaltruths.com/?p=411

Cell and Cordless Phones

http://elementaltruths.com/?p=410

Hacking Passwords

http://elementaltruths.com/?p=409

Pop-In Spooking

http://elementaltruths.com/?p=407

Office Espionage

http://elementaltruths.com/?p=408

Waste Archeology

http://elementaltruths.com/?p=406

Security Overview

http://elementaltruths.com/?p=404

Taps: Office Espionage Part 2

Monday, August 20th, 2007

355059135_d50334e863_m.jpg

James Bond is not interested in your office secrets.

That being said, competitors, disgruntled employees, ex-spouses and others who seek to wreak havoc are interested in your secrets.

There are many methods of “bugging” out there.

The five main categories are, in alphabetical order: Acoustic, Optical, RF, Tie-In, Ultrasonic.

1. Acoustic - low tech glass to the wall, ventilation, electrical out-let, out side the window, stand by the door, close proximity listening.

2. Optical - high end and expensive.

3. RF - radio frequency and receiver devices.

4. Tie-in - hooking directly in to a phone line. The box is usually easily accessible on an exterior wall.

5. Ultrasonic - think transmitter, receiver but with audio pressure rather than radio waves.

The most prevalent and dangerous of this is alphabetically and most destructively listed first. Always be aware of your immediate surrounding when discussing confidential information.

The second system for protecting information usually involves the use of a cryptographic protocol where sensitive information is encrypted into a form that would be unreadable by anyone without a “key.”

The third tapping system actually drains away part of the communication signal. So, by monitoring for such drain, the frequency can then be adjusted to thwart the tap.

The fourth technique is a physical connection. The best method for defeating this problem is to have your phone junctions in a secure area.

The fifth technique relies on the pressure of ultrasonic sound waves. The best defense is acoustical suppression (ie quiet rooms).

Describing A Spy

http://elementaltruths.com/?p=415

Office Traitors

http://elementaltruths.com/?p=414

Business Brain Cramps

http://elementaltruths.com/?p=413

Starbucks Espionage

http://elementaltruths.com/?p=412

Recording Devices

http://elementaltruths.com/?p=411

Cell and Cordless Phones

http://elementaltruths.com/?p=410

Hacking Passwords

http://elementaltruths.com/?p=409

Pop-In Spooking

http://elementaltruths.com/?p=407

Office Espionage

http://elementaltruths.com/?p=408

Waste Archeology

http://elementaltruths.com/?p=406

Security Overview

http://elementaltruths.com/?p=404