Two security leaders - two quotes - two positions?
1. “There is no cyberwar,” Quote from Howard Schmidt, White House Cybersecurity Director for President Obama.
Or,
2. "The United States is fighting a cyberwar today, and we are losing," Quote from Michael McConnell, the former Director of the National Security Agency, written in a Washington Post article.
You will read a post by Fortalice intern, Steven Elliott, about Cyberwarfare shortly.
It has been an interesting debate out there about the term, "Cyberwarfare".
Ask anyone in law enforcement or even a small business who has been hacked and they may tell you that they feel they are at war with cybercriminals.
The term cyberwarfare has been used and critiqued by leaders in the security community.
Critics: "Warfare" in the traditional sense implies a level of involvement from Department of Defense. You cannot label trojans, viruses, and other malware that steals identities or helps criminals commit fraud as "warfare".
Supporters of Warfare: Typically use the term "Warfare" in a broader sense. A focus on the larger picture sees fraud as a potential source to fund criminal activities that fund terrorists. An assault on our critical infrastructure that creates a lack of confidence in the infrastructure is also seen as "warfare".
Whatever your position on the debate, I hope you will enjoy Steven's posts.
As always, we are open to ideas, suggestions, and feedback.
Online safety. Online security. Protecting Yourself Online. Protecting Kids Online. Keeping the U.S. Safe from Cybercreeps. Cybercrime. Protecting Against Fraud.
Showing posts with label Educational. Show all posts
Showing posts with label Educational. Show all posts
Monday, August 16, 2010
Tuesday, May 25, 2010
Guest Post - Ricky Peterson - Antivirus
Ricky Peterson was a Spring Research Analyst at Fortalice® LLC and is a student at Immaculata University.
TEASER/TITLE: Viruses, the unseen foe
SUMMARY PARAGRAPH: The development of antivirus software has increased dramatically in the past few years. It is however, not a sure bet. Statistics show that antivirus only catches half of Malware threats and misses 15 percent altogether. There are also many misconceptions about how to protect yourself better. New technologies are being created that will decrease the threat of Malware significantly. While this technology is only in its infancy, there are several things one can do to protect against this relentless foe.
KEY FINDINGS
The economic damage caused by malware is substantial, estimated in the billions, and is growing by 30 to 40 percent a year.
Multiple antivirus programs may cause more harm than good.
They compete with eachother.
The number of malicious programs are increasing every year.
The rate at which malicious programs multiply and infect systems is astounding.
Antivirus companies cannot create solutions fast enough to keep up.
Resource management is a big problem with antivirus programs.
Quickly scanning programs more often than not miss the infection
The more meticulous the scanning, the more the program hogs resources.
BACKGROUND
Antivirus software is a multi billion dollar industry. There are big name companies such as Symantec and McAfee, and there are smaller ones like GriSoft, the makers of AVG. This industry is big, and rightfully so. The people and groups of coders who use their skills for malicious intent number in the thousands. The intent behind malware is thought to be mainly monetary. While some do it for the thrill or make a name for themselves, the number is relatively small. Most malware is created for the soul purpose of making money illegally. This is done by stealing account logins and passwords, pin numbers, credit card information, or to create zombie computers and cause a denial of service attack, then demand money to restore service. Antivirus software is not foolproof. Most companies cannot guarantee a successful detection rate of more than 90 percent. This should not however, discourage people from investing in a good antivirus program. Some protection is better than none. While there is new technologies being researched to stop malware, they are still a few years off.
STRATEGIC PLANNING ASSUMPTIONS:
Security by Virtualization
Let the viruses in, then contain them.
ANALYSIS:
Malware is a constant threat to companies and home users alike. While no antivirus, as of now, is perfect, it is wise to invest in one. Most antivirus software stops at least 54 percent outright, and finds an additional 23 percent in subsequent scans. Multiple antivirus applications running on the same system is not generally a good idea. The software tends to compete with each other and this causes both to operate inefficiently. The better choice is to choose one software package. When choosing one, make sure that it does everything, not just viruses. Malware comes in all shapes and forms, and some programs are not built to look for them. A good choice would be a total protection suit, such as Symantec’s Norton 360. Other tools that clean the registry and look for spyware are also good investments. An example of each would be Acelogix’s Ace Utilities and Lavasoft’s Ad-Aware respectively. Programs such as these usually do not interfere with the antivirus software, and offer additional protection. Companies or institutions may also consider a dedicated firewall server that has no other function than to stop intrusions and viruses. Some technology that may be viable in the near future is “Security by Virtualization.” This new system is special in that not only does it protect from viruses but it is also one of the first to protect users from intellectual property theft, cyber crime, and cyber terrorism. The system works by creating a virtual computer for every program and all associated files that runs on the system. When a malicious piece of software comes in, a virtual computer is created for it as well. The virus is then allowed to run its course and think it’s causing harm, when in reality, it’s isolated from all other functions on the system. It is therefore rendered harmless as it cannot gain access to any other files or programs.
IMPLICATIONS:
Antivirus software is shaky at best, but is much better than nothing.
Cyber criminals are getting smarter and faster
Antivirus is struggling to keep up.
Antivirus software is only as good as its support crew
Virtualization seems to be the direction virus protection is going in
Everyone is susceptible to viruses.
Home users to the government
RECOMMENDATIONS:
When purchasing virus protection, make sure to get a program suite(Norton 360) so that you cover all your bases.
Supplement your virus protection with additional cleaners and spyware software
Ace Utilities
Ad-Aware
When purchasing antivirus software, more is not always better
More than one virus program running tends to compete with each other.
Remember software is not a cure-all
Take steps to ensure employees are not visiting sites or doing things that invite malicious software.
Look for low profile antivirus
This type of software does not hog computing resources while still keeping viruses out
Consider investing in a firewall server that stands between your network and potential threats
SOURCES:
Viruslist.com, The contemporary antivirus industry and its problems-Eugene Kaspersky-Nov 2005
Darkreading.com, Study: Antivirus Software Catches About Half Of Malware, Misses 15 Percent Altogether-Kelly Jackson Higgins May 2009
Israel21c.org, A new Israeli approach to computer viruses - let the worms in!- Nicky Blackburn September 2004
Symantec, General information
The 2004 article technology is still being researched today
The problems posed in the 2005 article are still relevant.
TEASER/TITLE: Viruses, the unseen foe
SUMMARY PARAGRAPH: The development of antivirus software has increased dramatically in the past few years. It is however, not a sure bet. Statistics show that antivirus only catches half of Malware threats and misses 15 percent altogether. There are also many misconceptions about how to protect yourself better. New technologies are being created that will decrease the threat of Malware significantly. While this technology is only in its infancy, there are several things one can do to protect against this relentless foe.
KEY FINDINGS
The economic damage caused by malware is substantial, estimated in the billions, and is growing by 30 to 40 percent a year.
Multiple antivirus programs may cause more harm than good.
They compete with eachother.
The number of malicious programs are increasing every year.
The rate at which malicious programs multiply and infect systems is astounding.
Antivirus companies cannot create solutions fast enough to keep up.
Resource management is a big problem with antivirus programs.
Quickly scanning programs more often than not miss the infection
The more meticulous the scanning, the more the program hogs resources.
BACKGROUND
Antivirus software is a multi billion dollar industry. There are big name companies such as Symantec and McAfee, and there are smaller ones like GriSoft, the makers of AVG. This industry is big, and rightfully so. The people and groups of coders who use their skills for malicious intent number in the thousands. The intent behind malware is thought to be mainly monetary. While some do it for the thrill or make a name for themselves, the number is relatively small. Most malware is created for the soul purpose of making money illegally. This is done by stealing account logins and passwords, pin numbers, credit card information, or to create zombie computers and cause a denial of service attack, then demand money to restore service. Antivirus software is not foolproof. Most companies cannot guarantee a successful detection rate of more than 90 percent. This should not however, discourage people from investing in a good antivirus program. Some protection is better than none. While there is new technologies being researched to stop malware, they are still a few years off.
STRATEGIC PLANNING ASSUMPTIONS:
Security by Virtualization
Let the viruses in, then contain them.
ANALYSIS:
Malware is a constant threat to companies and home users alike. While no antivirus, as of now, is perfect, it is wise to invest in one. Most antivirus software stops at least 54 percent outright, and finds an additional 23 percent in subsequent scans. Multiple antivirus applications running on the same system is not generally a good idea. The software tends to compete with each other and this causes both to operate inefficiently. The better choice is to choose one software package. When choosing one, make sure that it does everything, not just viruses. Malware comes in all shapes and forms, and some programs are not built to look for them. A good choice would be a total protection suit, such as Symantec’s Norton 360. Other tools that clean the registry and look for spyware are also good investments. An example of each would be Acelogix’s Ace Utilities and Lavasoft’s Ad-Aware respectively. Programs such as these usually do not interfere with the antivirus software, and offer additional protection. Companies or institutions may also consider a dedicated firewall server that has no other function than to stop intrusions and viruses. Some technology that may be viable in the near future is “Security by Virtualization.” This new system is special in that not only does it protect from viruses but it is also one of the first to protect users from intellectual property theft, cyber crime, and cyber terrorism. The system works by creating a virtual computer for every program and all associated files that runs on the system. When a malicious piece of software comes in, a virtual computer is created for it as well. The virus is then allowed to run its course and think it’s causing harm, when in reality, it’s isolated from all other functions on the system. It is therefore rendered harmless as it cannot gain access to any other files or programs.
IMPLICATIONS:
Antivirus software is shaky at best, but is much better than nothing.
Cyber criminals are getting smarter and faster
Antivirus is struggling to keep up.
Antivirus software is only as good as its support crew
Virtualization seems to be the direction virus protection is going in
Everyone is susceptible to viruses.
Home users to the government
RECOMMENDATIONS:
When purchasing virus protection, make sure to get a program suite(Norton 360) so that you cover all your bases.
Supplement your virus protection with additional cleaners and spyware software
Ace Utilities
Ad-Aware
When purchasing antivirus software, more is not always better
More than one virus program running tends to compete with each other.
Remember software is not a cure-all
Take steps to ensure employees are not visiting sites or doing things that invite malicious software.
Look for low profile antivirus
This type of software does not hog computing resources while still keeping viruses out
Consider investing in a firewall server that stands between your network and potential threats
SOURCES:
Viruslist.com, The contemporary antivirus industry and its problems-Eugene Kaspersky-Nov 2005
Darkreading.com, Study: Antivirus Software Catches About Half Of Malware, Misses 15 Percent Altogether-Kelly Jackson Higgins May 2009
Israel21c.org, A new Israeli approach to computer viruses - let the worms in!- Nicky Blackburn September 2004
Symantec, General information
The 2004 article technology is still being researched today
The problems posed in the 2005 article are still relevant.
Tuesday, May 4, 2010
Guest Post - Nick Volpe - Skimming, we're not talking about milk, we're talking about ATM $$ theft
Nick Volpe is at student at Immaculata University. He is also a cybersecurity research analyst intern for Fortalice®, LLC.
Here is his guest post regarding ATM Skimming
Topic: ATM Skimming
Date: 2/23/10
TEASER/TITLE: ATM Skimming is among the top forms of fraud
SUMMARY PARAGRAPH: There are more than 360,000 ATMs in America. Some belong to banks and others belong to malls, stores, hotels, and airports. Despite the fact that most ATM skimming crimes happen at an ATM machine, the crime can also be committed at restaurants and retail establishments where ATM/debit or credit cards can be used. There are skimming devices that can read cards in retail points-of-sale or with a manual swipe by any person that comes in contact with your card.
KEY FINDINGS
BACKGROUND
Crimes at ATMs started around 20 years ago when a person would be injured and their money stolen after using the ATM. As the crime got more sophisticated, it would be a person looking over another person’s shoulder to get their ATM card number and PIN. ATM Skimming has been a problem since the 90s. It has recently became a much more massive problem because of smaller and more mobile computing devices that allow the criminals to store lots of data they need to steal and sell many ATM cards and PINs.
There are 2 common types of ATM skimming. The first type interferes with the operation of the ATM machine and the other type does not interfere with it. The second type is simply a device that records the card and PIN information from the magnetic strip of the card without being suspicious. The first type, however, interferes with the ATM by replacing it’s built in card reader thus not allowing the ATM user to get their money which is much more suspicious.
STRATEGIC PLANNING ASSUMPTIONS:
ANALYSIS:
Recent cases of ATM skimming include an Australian fast-food chain’s point of sale system which compromised about AU$2.5 million in October 2009. In November 2009, some new high-tech skimmers were discovered with Bluetooth transmitters to steal the stolen information. A terminal in a
New Zealand car park was compromised and potentially exposed about 100,000 people in a short time period. Some co-operation has existed between USA and Europe to prosecute suspects in an earlier compromise of major US processor, RBS WorldPay.
Although much of the crime of ATM skimming started and is occurring in the UK and parts of Europe and Asia, much of the crime is happening right here in the US where stand-alone ATM machines are very common in many venues around the country. There are many tactics that criminals use to skim necessary information to perform the crime including cameras, wireless pin pads, Bluetooth transmitters, laptops, mobile devices, external card readers, skimmers, etc. At the same time ATM manufacturers, banks, and authorities are using their own tactics to combat the criminal activity including swipe card readers versus manual card readers, surveillance cameras, PIN encryption, etc.
IMPLICATIONS:
RECOMMENDATIONS:
SOURCES:
Timeline of 2009’s biggest data breaches at major financial institutions (including major skimming crimes): http://www.bankinfosecurity.
Here is his guest post regarding ATM Skimming
Research Outline
Topic: ATM Skimming
Date: 2/23/10
TEASER/TITLE: ATM Skimming is among the top forms of fraud
SUMMARY PARAGRAPH: There are more than 360,000 ATMs in America. Some belong to banks and others belong to malls, stores, hotels, and airports. Despite the fact that most ATM skimming crimes happen at an ATM machine, the crime can also be committed at restaurants and retail establishments where ATM/debit or credit cards can be used. There are skimming devices that can read cards in retail points-of-sale or with a manual swipe by any person that comes in contact with your card.
KEY FINDINGS
- 2 types of ATM skimming
- Devices that interact with ATM machine
- Causes ATM to malfunction and not dispense cash
- Devices that do not interact with ATM machine
- Allows ATM to function normally
- Using skimmed ATM card information, scammers can create fake duplicates and use them in ATM machines to withdraw money very quickly and easily
- Many times ATM skimming scammers will using a card-skimming device in conjunction with a hidden camera to record the users PIN number when it is typed on the ATM keypad
BACKGROUND
Crimes at ATMs started around 20 years ago when a person would be injured and their money stolen after using the ATM. As the crime got more sophisticated, it would be a person looking over another person’s shoulder to get their ATM card number and PIN. ATM Skimming has been a problem since the 90s. It has recently became a much more massive problem because of smaller and more mobile computing devices that allow the criminals to store lots of data they need to steal and sell many ATM cards and PINs.
There are 2 common types of ATM skimming. The first type interferes with the operation of the ATM machine and the other type does not interfere with it. The second type is simply a device that records the card and PIN information from the magnetic strip of the card without being suspicious. The first type, however, interferes with the ATM by replacing it’s built in card reader thus not allowing the ATM user to get their money which is much more suspicious.
STRATEGIC PLANNING ASSUMPTIONS:
- Jitter is a new technology being utilized in brand new motorized card readers in ATMs. The technology ultimately randomizes the speed and direction of the card insertion/ejection which confuses or nullifies skimming devices that may be in use.
- Criminals will bypass card readers to collect ATM card and bank account information by hacking into payment processing databases or other databases that store the same information
ANALYSIS:
Recent cases of ATM skimming include an Australian fast-food chain’s point of sale system which compromised about AU$2.5 million in October 2009. In November 2009, some new high-tech skimmers were discovered with Bluetooth transmitters to steal the stolen information. A terminal in a
New Zealand car park was compromised and potentially exposed about 100,000 people in a short time period. Some co-operation has existed between USA and Europe to prosecute suspects in an earlier compromise of major US processor, RBS WorldPay.
Although much of the crime of ATM skimming started and is occurring in the UK and parts of Europe and Asia, much of the crime is happening right here in the US where stand-alone ATM machines are very common in many venues around the country. There are many tactics that criminals use to skim necessary information to perform the crime including cameras, wireless pin pads, Bluetooth transmitters, laptops, mobile devices, external card readers, skimmers, etc. At the same time ATM manufacturers, banks, and authorities are using their own tactics to combat the criminal activity including swipe card readers versus manual card readers, surveillance cameras, PIN encryption, etc.
IMPLICATIONS:
- Avoid ATMs in public locations such as malls, hotels, and airports. Stick with ATMs in bank lobbies and ATMs monitor with security surveillance.
- ATM skimming will continue to be on the rise as the crime becomes more and more lucrative with bigger and bigger amounts of money being scammed.
- ATM card readers will get more and more advanced with emerging technologies but criminals will use other methods to steal ATM card information such as hacking into databases of payment processors that contain that necessary information.
RECOMMENDATIONS:
- Safeguard your ATM pin at all times
- Never let a stranger give you assistance at an ATM
- Always check statements to beware of fraudulent activity on the account
- Inspect the machine before use and if the machine has any visual defects or something seems odd, don’t use it
- Beware of people around you that may be able to see your information
- If your ATM card is not returned after your transaction, contact your financial institution immediately
- Never use an ATM that exhibits a sticky substance such as glue which is sometimes used to trap cards
SOURCES:
- "ATM Camera." Snopes.com. 01 Feb 2010. Web. <http://www.snopes.com/fraud/
atm/atmcamera.asp>. - Bruce, Laura. "Skimming the cash out of your account." Bankrate.com. Bankrate, Web. <http://www.bankrate.com/
finance/checking/skimming-the- cash-out-of-your-account-1. aspx>. - "ATM Skimming is on the Rise." Complaints Board. Consumer Complaints Board, Web. <http://www.complaintsboard.
com/news-stories/atm-skimming- is-on-the-rise.html>. - Russell, Douglas. "2009 - Skimming Review." ATMSecurity.com. 19 Jan 2010. DFR Risk Management, Web. <http://www.atmsecurity.com/
monthly-digest/atm-security- monthly-digest/2009-skimming- review.html>. - "How to Protect Against ATM Skimming." eHow. Demand Media, Web. <http://www.ehow.com/how_
5025049_protect-against-atm- skimming.html>.
Timeline of 2009’s biggest data breaches at major financial institutions (including major skimming crimes): http://www.bankinfosecurity.
Friday, April 23, 2010
What You Can Do to E.N.D. Cyberbullying
1 in 5 kids ages 12-18 has admitted doing something wrong online.
Is your kid one of them?
Are you wondering what they did?
20% of kids 12-18 told a recent survey they had cyberbullied someone.
Phoebe Prince and Alexis Pilkington are the most recent victims of cyberbullying. If you have a kid in high school or college, they have probably been bullied and have not told you about it.
In one survey conducted by PEW Internet and Life Studies, 72% of teens reported being bullied and 90% of them said they did not tell an adult .
North Carolina recently joined other states in anti cyberbullying efforts. NC House passed a law last year, House Bill 1261, which makes Cyberbullying a criminal offense punishable as a misdemeanor.
Cyberbullying is real and has consequences. Just as you teach your kids self defense against teasing or fighting, you can adopt 3 steps to END bullying.
How to E.N.D. Bullying
1. E: Educate & encourage your kids to come to you if they are being bullied online
2. N: Network with other parents and discuss cyberbullying and alerting each other if you see it occurring
3. D: Do block the cyberbully online and on your kids’ phone and report them
1. If my kid is a bully, cyber or physical, it is not an indicator that he or she will have problems later in life.
Answer: False. According to research cited by ILookBothWays.com, nearly 60% of boys who researchers classified as bullies, in middle school and their early high school years, were convicted of at least one crime by the age of 24.
2. Most victims of cyberbullying tell an adult (parent or teacher) about their experience.
Answer: False. In a recent study by PEW, high schoolers and college kids did not tell an adult. Several said it was because they did not want to lose online privileges!
3. Cyberbullying is mostly happening by boys to other boys.
Answer: False. Both boys and girls are being bullied online.
4. Which of the following can be considered "cyberbullying"?
A. Harassing text messages
B. Posting mean web messages
C. Sending or posting embarrassing pictures of someone else without their permission
D. Threatening someone on MySpace, Facebook, or another site
E. All of the above
Answer: E. All of the above
5. You should not call Law Enforcement if someone threatens your kid’s safety online.
Answer: False. You should call the police if someone threatens your kid’s safety, asks for a face to face meeting, or asks your kid to do something that breaks the law
“No Bully Zone”
Ask your kids to refrain from bullying others and ask them to tell you if someone bullies them.
Have a family discussion asking your child to alert you if someone is mean to them online. Promise them you will not overreact and that you will decide together how to handle it.
HOW TO BLOCK THE BULLIES:
Social Sites:
If the bullying is occurring on MySpace or Facebook, contact those service providers. They have handled complaints of bullying before and may be able to remove the offensive remarks.
MySpace: http://faq.myspace.com/app/answers/detail/a_id/42
Facebook: http://www.facebook.com/help/?topic=reportabuse
Cell Phone:
If the bullying is occurring via text messages, talk to your cell phone provider about blocking the bully’s address.
Email:
If the bullying happens via email, most email services will allow you to block a specific email address.
Signs that Your Child May Be a Victim of Bullying:
· Your child becomes withdrawn.
· Obsession with being online or offline that does not match usual patterns.
· Compulsive secrecy about their phone and email messages.
Suggestions for Your Kids’ School:
· Inquire at your kids’ high school and college if they have a zero tolerance bullying policy; ask them to include cyberbullying.
· Ask & Encourage the schools to teach the concept in the classroom about how to spot and report cyberbullying.
Other Resources:
1. Say No to Bullying:
2. Stop Bullying Now: http://www.stopbullyingnow.hrsa.gov/kids/
3. Online Safety Tips: http://ilookbothways.com/
4. Cybersafe Family: http://cybersafefamily.com
5. The Online Mom: http://www.theonlinemom.com/secondary.asp?id=76
6. Yoursphere: http://internet-safety.yoursphere.com/
7. A Way Through: http://awaythrough.com/
8. Sue Scheff: http://suescheff.com
10. Statistics on Cyberbullying: http://www.cyberbullying.us/research.php
11. Information about what to do if your kid is a victim:
Monday, March 29, 2010
Don't take offense but the biggest risk to security - It's Likely To Be You!
Everyone asks me what the greatest theat to security is. They are visibly disappointed when I give them my answer. I think most of them expect me to say, "China! They are out to get us!" or, "The Russian Business Network - they are wicked smart!"or, "Cybercriminals, they are always after your money." These are real threats and you need to protect yourself from them.
I believe there is a bigger threat, and dear reader, I believe it is you or maybe your co-worker.
Are you Mr. Incredible? You do it all - juggle kids, work, family obligations. This requires you to take work with you everywhere you go.
Imagine this...
You have work to do but your kid's soccer game is coming up. Well, just download 3.3 Million borrower records to your thumb drive and you are in business. Can work anywhere. You might be able to work in the car while your kid's team warms up.
Well, Mr. Incredible, if you worked at ECMC, you just created the largest most incredible breach ever.
We don't know why an employee downloaded to a thumb drive, 3.3 million people's student loan records, but we will soon. 3.3MM people equates to as many as 5% of all federal student-loan borrowers. Their data is on a thumb drive that is now missing.
Not to worry, students, I think it only had on it your Names, addresses, Social Security numbers and other personal data.
This particular Mr. Incredible works in St. Paul, Minn., at the headquarters of Educational Credit Management Corp., a nonprofit guarantor of federal student loans.
You will be glad to read this quote from the ECMC spokesperson, Paul Kelash: "It was simple, old-fashioned theft. It was not a hacker incident." Wow, that is comforting!
This is right on the heals of another data theft earlier in March 2010, a former employee of HSBC Holdings PLC allegedly stole data on about 24,000 Swiss private-bank accounts.
The conversation about the insider threat, is the non-sexy side of security but it can cause some of the greatest chinks in the armor. The “insider threat”, is often like carbon monoxide poisoning, silent and hard to detect. I break the threat down into three character profiles:
1. Robert Hanssen
2. Eve from Wall-E
3. Mr. Incredible
Robert Hanssen – Intentional:
Robert Hanssen was a former U.S. FBI agent who turned over information to Russian intelligence services for cash and diamonds. It is also suspected he did it because he wanted to prove something to himself and others. This employee-type knowingly wants to cause harm either because they want to make a buck or because they feel it is their version of payback time.
Eve from Wall-E – Unintentional Public Disclosure (Think Millenials):
Eve is on a mission and she wears that mission on her chest. She’s after plantlife and she does not care who she broadcasts that mission to. She cannot keep a secret and she is overjoyed and beams when she finds plant life. The generation joining the workforce now and for the next 10-15 years is a lot like Eve. When they experience emotions, they will wear them openly via cyber space. That openness may also include blogging, tweeting, and Facebooking posts about the latest project they are working on.
Recently, an over exuberant Microsoftie was caught talking about the virtues of Windows 8. His posts have been removed. Before they were, we did manage to learn that the next version will be “unlike anything users expect of the operating system”. And that they are moving to 128-bit. A tough blow for their competitors and for bad guys that want to be ready to hack the new version the moment it arrives.
Mr. Incredible – Accidentally Breaks Your Defenses:
Your model employee, the hidden threat until it’s too late:
I love Mr. Incredible. He has great strength and a heart of gold. He wants to take on the world and use his talents but was forced to hide his talents within the system. In one scene, in striving to do what is right and just, he accidentally injures his own boss.
I tell organizations that their biggest threat may actually be their Mr. Incredible employees. These are the people that will do whatever it takes to work for you days, nights, weekends, and holidays. They are the fearless defenders of creating the latest report or implementing the last technology for your company. If that means downloading tons of information to a portable device so they can work on their vacation, they will. If it means throwing the laptop in the car on the way to pick up their kids with a stop at the grocery store and the laptop is left unattended…whoops! They do not mean to put the company at risk but their drive to get it done exposes your data.
The missing data costs your reputation, puts your intellectual property at risk, may expose innocent people to identity theft, and can create lengthy, costly lawsuits. Just ask the VA. A model employee was working on VA business at home and their home was burglarized. A VA laptop was among the stolen goods and had the Social Security numbers of 26.5MM active duty military and veterans on it. The VA has agreed to pay $20MM to settle a class action lawsuit. In a true miracle mix of skills and luck, the FBI managed to recover the stolen laptop and it is believed the data was not used by the criminals.
Until we deal with the insider threat, I will not run out of blog posts!
As always, would love your comments and feedback.
I believe there is a bigger threat, and dear reader, I believe it is you or maybe your co-worker.
Are you Mr. Incredible? You do it all - juggle kids, work, family obligations. This requires you to take work with you everywhere you go.
Imagine this...
You have work to do but your kid's soccer game is coming up. Well, just download 3.3 Million borrower records to your thumb drive and you are in business. Can work anywhere. You might be able to work in the car while your kid's team warms up.
Well, Mr. Incredible, if you worked at ECMC, you just created the largest most incredible breach ever.
We don't know why an employee downloaded to a thumb drive, 3.3 million people's student loan records, but we will soon. 3.3MM people equates to as many as 5% of all federal student-loan borrowers. Their data is on a thumb drive that is now missing.
Not to worry, students, I think it only had on it your Names, addresses, Social Security numbers and other personal data.
This particular Mr. Incredible works in St. Paul, Minn., at the headquarters of Educational Credit Management Corp., a nonprofit guarantor of federal student loans.
You will be glad to read this quote from the ECMC spokesperson, Paul Kelash: "It was simple, old-fashioned theft. It was not a hacker incident." Wow, that is comforting!
This is right on the heals of another data theft earlier in March 2010, a former employee of HSBC Holdings PLC allegedly stole data on about 24,000 Swiss private-bank accounts.
The conversation about the insider threat, is the non-sexy side of security but it can cause some of the greatest chinks in the armor. The “insider threat”, is often like carbon monoxide poisoning, silent and hard to detect. I break the threat down into three character profiles:
1. Robert Hanssen
2. Eve from Wall-E
3. Mr. Incredible
Robert Hanssen – Intentional:
Robert Hanssen was a former U.S. FBI agent who turned over information to Russian intelligence services for cash and diamonds. It is also suspected he did it because he wanted to prove something to himself and others. This employee-type knowingly wants to cause harm either because they want to make a buck or because they feel it is their version of payback time.
Eve from Wall-E – Unintentional Public Disclosure (Think Millenials):
Eve is on a mission and she wears that mission on her chest. She’s after plantlife and she does not care who she broadcasts that mission to. She cannot keep a secret and she is overjoyed and beams when she finds plant life. The generation joining the workforce now and for the next 10-15 years is a lot like Eve. When they experience emotions, they will wear them openly via cyber space. That openness may also include blogging, tweeting, and Facebooking posts about the latest project they are working on.
Recently, an over exuberant Microsoftie was caught talking about the virtues of Windows 8. His posts have been removed. Before they were, we did manage to learn that the next version will be “unlike anything users expect of the operating system”. And that they are moving to 128-bit. A tough blow for their competitors and for bad guys that want to be ready to hack the new version the moment it arrives.
Mr. Incredible – Accidentally Breaks Your Defenses:
Your model employee, the hidden threat until it’s too late:
I love Mr. Incredible. He has great strength and a heart of gold. He wants to take on the world and use his talents but was forced to hide his talents within the system. In one scene, in striving to do what is right and just, he accidentally injures his own boss.
I tell organizations that their biggest threat may actually be their Mr. Incredible employees. These are the people that will do whatever it takes to work for you days, nights, weekends, and holidays. They are the fearless defenders of creating the latest report or implementing the last technology for your company. If that means downloading tons of information to a portable device so they can work on their vacation, they will. If it means throwing the laptop in the car on the way to pick up their kids with a stop at the grocery store and the laptop is left unattended…whoops! They do not mean to put the company at risk but their drive to get it done exposes your data.
The missing data costs your reputation, puts your intellectual property at risk, may expose innocent people to identity theft, and can create lengthy, costly lawsuits. Just ask the VA. A model employee was working on VA business at home and their home was burglarized. A VA laptop was among the stolen goods and had the Social Security numbers of 26.5MM active duty military and veterans on it. The VA has agreed to pay $20MM to settle a class action lawsuit. In a true miracle mix of skills and luck, the FBI managed to recover the stolen laptop and it is believed the data was not used by the criminals.
Until we deal with the insider threat, I will not run out of blog posts!
As always, would love your comments and feedback.
Thursday, March 4, 2010
Avoid the nightmare of losing your address book. Helpful tips.
Link the WBTV Video
n the US, over 12 million cell phones are lost each year and 700,000 are stolen.
This is a nightmare scenario. You need to make a phone call and find out that your address book is suddenly empty or your cell phone is missing. If your job counts on you having a large rolodex this situation can be overwhelming.
What would happen to you if your contacts were lost?
Former White House Cyber Security Expert, Theresa Payton has some options for saving your contacts to a safe place and recovery options in the event something happens to your cell phone.
How to avoid a BAD situation:
B - Back up files. Most smart phones and cell phones come with software that you can use on your computer so you can create a back up file.
A - Access to your contacts may be available another way. You may have files on your computer or Mac that you could use. For example:
."ipd" at the end, that file has BlackBerry contacts.
."csv" at the end, that file can be imported into most address book and email programs and then synchronized to your phone.
vCard files can be imported into most contact programs.
D - Don't rely on just having your contacts on your phone or computer. Keep a copy in multiple places. Have a hard copy of the 5 most important contacts in the event of an emergency.
The following are resources that can help you build or re-build your list of contacts on your phone and computer.
See this link for helpful resources on how to back up your contacts: Website Tips & Resources
As always. please make comments and suggestions on what you want to hear about!
Thank you!
n the US, over 12 million cell phones are lost each year and 700,000 are stolen.
This is a nightmare scenario. You need to make a phone call and find out that your address book is suddenly empty or your cell phone is missing. If your job counts on you having a large rolodex this situation can be overwhelming.
What would happen to you if your contacts were lost?
Former White House Cyber Security Expert, Theresa Payton has some options for saving your contacts to a safe place and recovery options in the event something happens to your cell phone.
How to avoid a BAD situation:
B - Back up files. Most smart phones and cell phones come with software that you can use on your computer so you can create a back up file.
A - Access to your contacts may be available another way. You may have files on your computer or Mac that you could use. For example:
."ipd" at the end, that file has BlackBerry contacts.
."csv" at the end, that file can be imported into most address book and email programs and then synchronized to your phone.
vCard files can be imported into most contact programs.
D - Don't rely on just having your contacts on your phone or computer. Keep a copy in multiple places. Have a hard copy of the 5 most important contacts in the event of an emergency.
The following are resources that can help you build or re-build your list of contacts on your phone and computer.
See this link for helpful resources on how to back up your contacts: Website Tips & Resources
As always. please make comments and suggestions on what you want to hear about!
Thank you!
Friday, February 19, 2010
Gangs Are Targeting Your Kids Via the Internet - Quick Quiz to test your Cyber Banging Saavy
Word for the Week: Cyber Banging
Also called Net Banging - This refers to the internet recruiting process that gangs use to target kids. Gangs typically target high school and middle school kids but there are cases where kids as young as 8 have been recruited.
1.6 Million, that’s the number of employees, across the globe that support Walmart.
1 Million and growing, that’s the number of gang members in the United States.
Are your kids looking at gang propaganda online? Chances are you would not know, a recent study says that 62% of kids lie to their parents about what they do online.
As a parent, you protect your kids by teaching them safety rules, checking on their friends, and keeping tabs on their activities. Gangs know this to so they have a new recruiting tool to get around you and directly to your kids – the internet.
Link to WBTV segment: Gangs Targeting Your Kids Via The Internet
One example of how glorified gang life is can be seen on YouTube.com. Lil Slim’s “Getting $” music video, which glorifies gang activities, has over 30,000 views.
Think you know how Gangs target their new recruits?
Test your knowledge with this quick quiz:
1) Q: What are the colors worn by the MS-13 gang?
A: Blue and White
2) Q: Gang Identifiers Include which of the following:
a) Wearing a specific color or colors regularly
b) 5-Pointed Star
c) Star of David
d) Playboy bunny
e) None of the Above
f) All of the above
A: All of the above
3) True or False: If you see someone wearing Charlotte Hornets gear they might be a member of a gang.
True. Don’t jump to conclusions that everyone that wears Charlotte Hornets gear is a gang member but this logo is popular with the Spanish Cobras and the 4 Corner Hustlers.
4) True or False: If you see a cap that looks like a NY Yankee’s cap but the tail of the Y is off so it looks like VN instead of NY, that’s just a kid having fun.
Most likely False. This is what the LA gang called Van Nuys is doing to mark their members. You can see this NY Yankee-like symbol touted on Facebook and YouTube. You may seen this worn by a gang member or a wannabe.
5) True or False: Your kid would not go to gang music sites to download songs.
Could be True or False. You should check. Kids are downloading gang songs from places such as 818 Gangland Musik Page for free.
GANGS HAVE NEW RECRUITING TOOLS:
The Bait: Social networking via the internet is the new recruiting tool for MS-13 and other gangs and they ARE targeting your kids.
The Hook: Young people that are surfing online may come across pictures, music, or videos about gangs. Of course kids are curious so they click and see something that glorifies gang life…That’s when a gang member may strike up a chat with them online and try to lure them into their club.
GANG STATISTICS:
Think this is an overplayed issue? Here are some startling statistics from a recent survey:
70% of gang members say it is easier to make friends online
89% of kids say they are the major user of technology at their house
41% of kids say they do not share with their parents what they are doing on the internet
HOW TO PROTECT YOUR CHILD:
TALK: Talk with your child about the places they visit while online. Look at some of the gang propaganda together and talk about why it is false or glorified.
TEACH: Keep your home PC in a central location so you can keep an eye on what they search. Teach your kids that where they go online is just as important as the rules you have for them offline.
TELL: Be familiar with what your local gangs wear, such as certain colors, jewelry, or logos, to show they are a member. Tell your kids not to dress like gang wannabes so they will not be targeted while at school or play.
WARNING SIGNS:
APPEARANCE: Your kid’s clothing preferences change dramatically. Your kid suddenly insists on wearing a specific color or a logo. A new tattoo, permanent or henna. Unexplained injuries. Begins using gang slang.
SOCIAL: Starts withdrawing from school, family, and possibly even their friends. Talks about gang life in an idolized way.
INTERESTS: Gang music or gang insignias on their phones and music lists. Likes to watch gang related movies.
RESOURCES:
FBI Gang Threat Site: http://www.fbi.gov/page2/feb09/ngta_020609.html
Department of Justice – Community Services: www.cops.usdoj.gov
Violence Prevention Institute: http://www.violencepreventioninstitute.org/youngpeople.html
National Youth Gang Prevention Center: http://ojjdp.ncjrs.gov/pubs/gun_violence/sect08-f.html
NC Gang Awareness:
http://www.ncgangcops.org/NCGangAwareness.pdf
Parents Universal Resource Experts (PURE™):
http://www.helpyourteens.com/index.php
Parent Advocate Sue Scheff on Avoiding the Gangs:
http://www.suescheff.info/
Organization focused on consumer safety, security, and privacy:
http://ilookbothways.com/
Dr. Michele Borba, Child Expert Talks About Kids and Conflict:
http://www.micheleborba.com/blog/
Mary Kay Hoal, Internet Safety Expert, Offers Advice About Social Networks and Gang Exposure:
http://internet-safety.yoursphere.com/tips/can-social-networking-expose-your-children-to-gangs
Social Networks and Your Kids – The Risks from SchooGo:
http://www.schoogo.com/blog/it-safe-9-10-11-year-olds-be-social-networking-websites
Also called Net Banging - This refers to the internet recruiting process that gangs use to target kids. Gangs typically target high school and middle school kids but there are cases where kids as young as 8 have been recruited.
1.6 Million, that’s the number of employees, across the globe that support Walmart.
1 Million and growing, that’s the number of gang members in the United States.
Are your kids looking at gang propaganda online? Chances are you would not know, a recent study says that 62% of kids lie to their parents about what they do online.
As a parent, you protect your kids by teaching them safety rules, checking on their friends, and keeping tabs on their activities. Gangs know this to so they have a new recruiting tool to get around you and directly to your kids – the internet.
Link to WBTV segment: Gangs Targeting Your Kids Via The Internet
One example of how glorified gang life is can be seen on YouTube.com. Lil Slim’s “Getting $” music video, which glorifies gang activities, has over 30,000 views.
Think you know how Gangs target their new recruits?
Test your knowledge with this quick quiz:
1) Q: What are the colors worn by the MS-13 gang?
A: Blue and White
2) Q: Gang Identifiers Include which of the following:
a) Wearing a specific color or colors regularly
b) 5-Pointed Star
c) Star of David
d) Playboy bunny
e) None of the Above
f) All of the above
A: All of the above
3) True or False: If you see someone wearing Charlotte Hornets gear they might be a member of a gang.
True. Don’t jump to conclusions that everyone that wears Charlotte Hornets gear is a gang member but this logo is popular with the Spanish Cobras and the 4 Corner Hustlers.
4) True or False: If you see a cap that looks like a NY Yankee’s cap but the tail of the Y is off so it looks like VN instead of NY, that’s just a kid having fun.
Most likely False. This is what the LA gang called Van Nuys is doing to mark their members. You can see this NY Yankee-like symbol touted on Facebook and YouTube. You may seen this worn by a gang member or a wannabe.
5) True or False: Your kid would not go to gang music sites to download songs.
Could be True or False. You should check. Kids are downloading gang songs from places such as 818 Gangland Musik Page for free.
GANGS HAVE NEW RECRUITING TOOLS:
The Bait: Social networking via the internet is the new recruiting tool for MS-13 and other gangs and they ARE targeting your kids.
The Hook: Young people that are surfing online may come across pictures, music, or videos about gangs. Of course kids are curious so they click and see something that glorifies gang life…That’s when a gang member may strike up a chat with them online and try to lure them into their club.
GANG STATISTICS:
Think this is an overplayed issue? Here are some startling statistics from a recent survey:
70% of gang members say it is easier to make friends online
89% of kids say they are the major user of technology at their house
41% of kids say they do not share with their parents what they are doing on the internet
HOW TO PROTECT YOUR CHILD:
TALK: Talk with your child about the places they visit while online. Look at some of the gang propaganda together and talk about why it is false or glorified.
TEACH: Keep your home PC in a central location so you can keep an eye on what they search. Teach your kids that where they go online is just as important as the rules you have for them offline.
TELL: Be familiar with what your local gangs wear, such as certain colors, jewelry, or logos, to show they are a member. Tell your kids not to dress like gang wannabes so they will not be targeted while at school or play.
WARNING SIGNS:
APPEARANCE: Your kid’s clothing preferences change dramatically. Your kid suddenly insists on wearing a specific color or a logo. A new tattoo, permanent or henna. Unexplained injuries. Begins using gang slang.
SOCIAL: Starts withdrawing from school, family, and possibly even their friends. Talks about gang life in an idolized way.
INTERESTS: Gang music or gang insignias on their phones and music lists. Likes to watch gang related movies.
RESOURCES:
FBI Gang Threat Site: http://www.fbi.gov/page2/feb09/ngta_020609.html
Department of Justice – Community Services: www.cops.usdoj.gov
Violence Prevention Institute: http://www.violencepreventioninstitute.org/youngpeople.html
National Youth Gang Prevention Center: http://ojjdp.ncjrs.gov/pubs/gun_violence/sect08-f.html
NC Gang Awareness:
http://www.ncgangcops.org/NCGangAwareness.pdf
Parents Universal Resource Experts (PURE™):
http://www.helpyourteens.com/index.php
Parent Advocate Sue Scheff on Avoiding the Gangs:
http://www.suescheff.info/
Organization focused on consumer safety, security, and privacy:
http://ilookbothways.com/
Dr. Michele Borba, Child Expert Talks About Kids and Conflict:
http://www.micheleborba.com/blog/
Mary Kay Hoal, Internet Safety Expert, Offers Advice About Social Networks and Gang Exposure:
http://internet-safety.yoursphere.com/tips/can-social-networking-expose-your-children-to-gangs
Social Networks and Your Kids – The Risks from SchooGo:
http://www.schoogo.com/blog/it-safe-9-10-11-year-olds-be-social-networking-websites
Thursday, January 14, 2010
President Barack Obama has declared January - National Slavery and Human Trafficking Prevention Month
How CyberTraffickers Target Their Victims:
It is hard to believe that, in America, we have people trapped and forced to work as laborers or prostitutes as slaves of human traffickers. North Carolina has been ranked in the top 8 most common sites for human trafficking. One of the reasons we are so popular is I85 and I95.
The problem in the U.S. is so serious, that President Barack Obama has declared January - National
Slavery and Human Trafficking Prevention Month
Human trafficking is the modern day version of slavery. These criminals force their victims into labor and it can be in any industry. The most common forms of enslavement include labor, such as farming or working in a sweatshop, and sex trade.
Human traffickers love the I85 and I95 highways in North Carolina and they also use another highspeed highway to recruit, enslave, and find new customers-the internet.
Human traffickers target those who are society’s most vulnerable, have the quietest voices and find it hard to fight back. Often, victims include immigrants and children. Children who are loners or runaways are also a popular target of cybertraffickers.
North Carolina passed a bill in 2007 which makes human trafficking a felony and offers state assistance to victims.
In the last several months there were several cases in human trafficking uncovered in North Carolina.
One recent case was a spa in Union County who was using Craiglist to advertise services and the clients had no idea the staff there had been coerced into a human trafficking scheme.
We also had the tragic case of Shaniya Davis who was allegedly sold into sex trafficking via the internet by her mother.
Human trafficking via the internet to enable their crime rings has long been on the radar of the law enforcement community.
Statistics:
2,300 Arrests: The FBI has been diligently fighting this evil crime resulting in 2,300 arrests. They have also recovered 170 kids during sting operations.
15,000-18,000: The number of people drafted into slavery each year in the U.S. (Source: U.S. Department of Health and Human Services)
2 Million: Estimated number of people worldwide drafted into slavery via Human Trafficking
A Few Recent NC Cases:
Sex Ring:
April 2009, a man was sentenced to 24 years in prison for operating a human trafficking sex trade between Charlotte and Washington. Girls were as young as 16 and smuggled in from Mexico.
Child Sex Case – Internet Sting:
June 2009, a Duke University official, was arrested after an Internet sting. He was charged with trafficking a 5 year old boy for sex. His name was provided by a defendant in a different trafficking case.
Spa case in Monroe – Ads on Craigslist:
In 2008, a spa in Union County was using Craiglist to advertise services that were offered by people who had been coerced into a human trafficking scheme.
Shaniya Davis – Mother allegedly sold her into sex trade via internet:
In NC we have the pending case and trial regarding the alleged human trafficking of Shaniya Davis. Her own mother alledgedly sold her daughter into the sex trade using the internet to find a buyer and to send messages. This case should be a wake up call to parents, teachers, and all caregivers.
THE DIRTY TOOLKIT THAT CYBERTRAFFICKERS USE:
Online Ads: Ads offering great jobs at high pay in big cities. Often they hide behind ads for modeling, singing, or acting. Sometimes they will offer to fly the person to the other city for the “interview”.
Online Auctions: Craigslist is considered a magnet for international sex trade of children via the adult services section.
Photo Sharing Sites: Bypasses printing photos and allows operations to disseminate photos online for viewing by prospective buyers.
Social Media: Cybercreeps will use Chatrooms, social sites such as Facebook and MySpace, to recruit or trick kids into joining their trafficking scheme. They use these sites and blogs to connect to other cybercreeps to barter, trade, and sell their victims.
HOW TO SPOT THE WARNING SIGNS:
Many of the warning signs that a child is a victim of trafficking, or is being recruited, are similar to signs that the child is being cyberbullied or being groomed by a pedophile. They may include one or more of the following:
Unexplained absences
Runs away or discusses running away from home
Exhibits bruises, suddenly withdraws from social gatherings, displays depression
Demonstrates a sudden change in attire
Behavior becomes erratic, severe mood swings
Suddenly has material possessions given to them by a “friend”
Hides emails, text messages, or other online posts
Extreme change in online behavior – suddenly online all the time or suddenly not interested in
being online
PUT AN END TO TRAFFICKING:
E: Engage your kids in a conversation about trafficking. Targets start as young at 12 years old.
N: Notify and advocate for change. Notify your elected officials and ask what they are doing to improve awareness, catching cybertraffickers, and convicting them.
D: Don’t fuel the criminal economy. Where possible, research and choose free trade or slave-free certified products.
HOW TO REPORT SUSPECTED TRAFFICKING:
1. Contact local law enforcement
2. If you are unsure and want to talk through the situation first, you can start with the National 24/7 Human Trafficking Resource Center at 1-888-373-7888.
3. If you want to report an incident, you can do so at the National Center’s CyberTipline at 1-800-the-lost or online at www.CyberTipLine.org
4. The FBI Human Trafficking Hotline is open 24 hours: 866.252.6850.
OTHER RESOURCES:
There are several websites that provide helpful information about Human trafficking. We have highlighted a few of them below:
Organizations:
Global Awareness, Outreach, and Victim Services: Polaris Project at www.PolarisProject.org
Check Your Chain Store’s Policies and write them letters about Human Trafficking at www.ChainStoreReaction.com
Sites that include tips plus blogs that cover human trafficking:
http://www.veritate-et-virtute.com/
http://ilookbothways.com
Information on Global and U.S. Issues: FightSlaveryNow.org
North Carolina Focus:
NC Stop Human Trafficking: http://ncstophumantrafficking.wordpress.com/
Triad Ladder of Hope: http://www.triadladderofhope.org/
Government Sites:
U.S. Department of Justice Web site: http://www.usdoj.gov/whatwedo/whatwedo_ctip.html.
U.S. Department of State, Office to Monitor and Combat Trafficking in Persons http://www.state.gov/g/tip
U.S. Department of Health and Human Services, Campaign to Rescue and Restore Victims of Human Trafficking http://www.acf.hhs.gov/trafficking/index.html
National Center for Missing and Exploited Children http://www.ncmec.org
United Nations Office on Drugs and Crime http://www.unodc.org/unodc/en/human-trafficking/what-is-human-trafficking.html
Presidential Proclamation:
The White House
Office of the Press Secretary
For Immediate Release
January 04, 2010
Presidential Proclamation - National Slavery and Human Trafficking Prevention Month
A PROCLAMATION
The United States was founded on the principle that all people are born with an unalienable right to freedom -- an ideal that has driven the engine of American progress throughout our history. As a Nation, we have known moments of great darkness and greater light; and dim years of chattel slavery illuminated and brought to an end by President Lincoln's actions and a painful Civil War. Yet even today, the darkness and inhumanity of enslavement exists. Millions of people worldwide are held in compelled service, as well as thousands within the United States. During National Slavery and Human Trafficking Prevention Month, we acknowledge that forms of slavery still exist in the modern era, and we recommit ourselves to stopping the human traffickers who ply this horrific trade.
As we continue our fight to deliver on the promise of freedom, we commemorate the Emancipation Proclamation, which became effective on January 1, 1863, and the 13th Amendment, which was sent to the States for ratification on February 1, 1865. Throughout the month of January, we highlight the many fronts in the ongoing battle for civil rights -- including the efforts of our Federal agencies; State, local, and tribal law enforcement partners; international partners; nonprofit social service providers; private industry and nongovernmental organizations around the world who are working to end human trafficking.
The victims of modern slavery have many faces. They are men and women, adults and children. Yet, all are denied basic human dignity and freedom. Victims can be abused in their own countries, or find themselves far from home and vulnerable. Whether they are trapped in forced sexual or labor exploitation, human trafficking victims cannot walk away, but are held in service through force, threats, and fear. All too often suffering from horrible physical and sexual abuse, it is hard for them to imagine that there might be a place of refuge.
We must join together as a Nation and global community to provide that safe haven by protecting victims and prosecuting traffickers. With improved victim identification, medical and social services, training for first responders, and increased public awareness, the men, women, and children who have suffered this scourge can overcome the bonds of modern slavery, receive protection and justice, and successfully reclaim their rightful independence.
Fighting modern slavery and human trafficking is a shared responsibility. This month, I urge all Americans to educate themselves about all forms of modern slavery and the signs and consequences of human trafficking. Together, we can and must end this most serious, ongoing criminal civil rights violation.
NOW, THEREFORE, I, BARACK OBAMA, President of the United States of America, by virtue of the authority vested in me by the Constitution and the laws of the United States, do hereby proclaim January 2010 as National Slavery and Human Trafficking Prevention Month, culminating in the annual celebration of National Freedom Day on February 1. I call upon the people of the United States to recognize the vital role we can play in ending modern slavery, and to observe this month with appropriate programs and activities.
IN WITNESS WHEREOF, I have hereunto set my hand this fourth day of January, in the year of our Lord two thousand ten, and of the Independence of the United States of America the two hundred and thirty-fourth.
BARACK OBAMA
It is hard to believe that, in America, we have people trapped and forced to work as laborers or prostitutes as slaves of human traffickers. North Carolina has been ranked in the top 8 most common sites for human trafficking. One of the reasons we are so popular is I85 and I95.
The problem in the U.S. is so serious, that President Barack Obama has declared January - National
Slavery and Human Trafficking Prevention Month
Human trafficking is the modern day version of slavery. These criminals force their victims into labor and it can be in any industry. The most common forms of enslavement include labor, such as farming or working in a sweatshop, and sex trade.
Human traffickers love the I85 and I95 highways in North Carolina and they also use another highspeed highway to recruit, enslave, and find new customers-the internet.
Human traffickers target those who are society’s most vulnerable, have the quietest voices and find it hard to fight back. Often, victims include immigrants and children. Children who are loners or runaways are also a popular target of cybertraffickers.
North Carolina passed a bill in 2007 which makes human trafficking a felony and offers state assistance to victims.
In the last several months there were several cases in human trafficking uncovered in North Carolina.
One recent case was a spa in Union County who was using Craiglist to advertise services and the clients had no idea the staff there had been coerced into a human trafficking scheme.
We also had the tragic case of Shaniya Davis who was allegedly sold into sex trafficking via the internet by her mother.
Human trafficking via the internet to enable their crime rings has long been on the radar of the law enforcement community.
Statistics:
2,300 Arrests: The FBI has been diligently fighting this evil crime resulting in 2,300 arrests. They have also recovered 170 kids during sting operations.
15,000-18,000: The number of people drafted into slavery each year in the U.S. (Source: U.S. Department of Health and Human Services)
2 Million: Estimated number of people worldwide drafted into slavery via Human Trafficking
A Few Recent NC Cases:
Sex Ring:
April 2009, a man was sentenced to 24 years in prison for operating a human trafficking sex trade between Charlotte and Washington. Girls were as young as 16 and smuggled in from Mexico.
Child Sex Case – Internet Sting:
June 2009, a Duke University official, was arrested after an Internet sting. He was charged with trafficking a 5 year old boy for sex. His name was provided by a defendant in a different trafficking case.
Spa case in Monroe – Ads on Craigslist:
In 2008, a spa in Union County was using Craiglist to advertise services that were offered by people who had been coerced into a human trafficking scheme.
Shaniya Davis – Mother allegedly sold her into sex trade via internet:
In NC we have the pending case and trial regarding the alleged human trafficking of Shaniya Davis. Her own mother alledgedly sold her daughter into the sex trade using the internet to find a buyer and to send messages. This case should be a wake up call to parents, teachers, and all caregivers.
THE DIRTY TOOLKIT THAT CYBERTRAFFICKERS USE:
Online Ads: Ads offering great jobs at high pay in big cities. Often they hide behind ads for modeling, singing, or acting. Sometimes they will offer to fly the person to the other city for the “interview”.
Online Auctions: Craigslist is considered a magnet for international sex trade of children via the adult services section.
Photo Sharing Sites: Bypasses printing photos and allows operations to disseminate photos online for viewing by prospective buyers.
Social Media: Cybercreeps will use Chatrooms, social sites such as Facebook and MySpace, to recruit or trick kids into joining their trafficking scheme. They use these sites and blogs to connect to other cybercreeps to barter, trade, and sell their victims.
HOW TO SPOT THE WARNING SIGNS:
Many of the warning signs that a child is a victim of trafficking, or is being recruited, are similar to signs that the child is being cyberbullied or being groomed by a pedophile. They may include one or more of the following:
Unexplained absences
Runs away or discusses running away from home
Exhibits bruises, suddenly withdraws from social gatherings, displays depression
Demonstrates a sudden change in attire
Behavior becomes erratic, severe mood swings
Suddenly has material possessions given to them by a “friend”
Hides emails, text messages, or other online posts
Extreme change in online behavior – suddenly online all the time or suddenly not interested in
being online
PUT AN END TO TRAFFICKING:
E: Engage your kids in a conversation about trafficking. Targets start as young at 12 years old.
N: Notify and advocate for change. Notify your elected officials and ask what they are doing to improve awareness, catching cybertraffickers, and convicting them.
D: Don’t fuel the criminal economy. Where possible, research and choose free trade or slave-free certified products.
HOW TO REPORT SUSPECTED TRAFFICKING:
1. Contact local law enforcement
2. If you are unsure and want to talk through the situation first, you can start with the National 24/7 Human Trafficking Resource Center at 1-888-373-7888.
3. If you want to report an incident, you can do so at the National Center’s CyberTipline at 1-800-the-lost or online at www.CyberTipLine.org
4. The FBI Human Trafficking Hotline is open 24 hours: 866.252.6850.
OTHER RESOURCES:
There are several websites that provide helpful information about Human trafficking. We have highlighted a few of them below:
Organizations:
Global Awareness, Outreach, and Victim Services: Polaris Project at www.PolarisProject.org
Check Your Chain Store’s Policies and write them letters about Human Trafficking at www.ChainStoreReaction.com
Sites that include tips plus blogs that cover human trafficking:
http://www.veritate-et-virtute.com/
http://ilookbothways.com
Information on Global and U.S. Issues: FightSlaveryNow.org
North Carolina Focus:
NC Stop Human Trafficking: http://ncstophumantrafficking.wordpress.com/
Triad Ladder of Hope: http://www.triadladderofhope.org/
Government Sites:
U.S. Department of Justice Web site: http://www.usdoj.gov/whatwedo/whatwedo_ctip.html.
U.S. Department of State, Office to Monitor and Combat Trafficking in Persons http://www.state.gov/g/tip
U.S. Department of Health and Human Services, Campaign to Rescue and Restore Victims of Human Trafficking http://www.acf.hhs.gov/trafficking/index.html
National Center for Missing and Exploited Children http://www.ncmec.org
United Nations Office on Drugs and Crime http://www.unodc.org/unodc/en/human-trafficking/what-is-human-trafficking.html
Presidential Proclamation:
The White House
Office of the Press Secretary
For Immediate Release
January 04, 2010
Presidential Proclamation - National Slavery and Human Trafficking Prevention Month
A PROCLAMATION
The United States was founded on the principle that all people are born with an unalienable right to freedom -- an ideal that has driven the engine of American progress throughout our history. As a Nation, we have known moments of great darkness and greater light; and dim years of chattel slavery illuminated and brought to an end by President Lincoln's actions and a painful Civil War. Yet even today, the darkness and inhumanity of enslavement exists. Millions of people worldwide are held in compelled service, as well as thousands within the United States. During National Slavery and Human Trafficking Prevention Month, we acknowledge that forms of slavery still exist in the modern era, and we recommit ourselves to stopping the human traffickers who ply this horrific trade.
As we continue our fight to deliver on the promise of freedom, we commemorate the Emancipation Proclamation, which became effective on January 1, 1863, and the 13th Amendment, which was sent to the States for ratification on February 1, 1865. Throughout the month of January, we highlight the many fronts in the ongoing battle for civil rights -- including the efforts of our Federal agencies; State, local, and tribal law enforcement partners; international partners; nonprofit social service providers; private industry and nongovernmental organizations around the world who are working to end human trafficking.
The victims of modern slavery have many faces. They are men and women, adults and children. Yet, all are denied basic human dignity and freedom. Victims can be abused in their own countries, or find themselves far from home and vulnerable. Whether they are trapped in forced sexual or labor exploitation, human trafficking victims cannot walk away, but are held in service through force, threats, and fear. All too often suffering from horrible physical and sexual abuse, it is hard for them to imagine that there might be a place of refuge.
We must join together as a Nation and global community to provide that safe haven by protecting victims and prosecuting traffickers. With improved victim identification, medical and social services, training for first responders, and increased public awareness, the men, women, and children who have suffered this scourge can overcome the bonds of modern slavery, receive protection and justice, and successfully reclaim their rightful independence.
Fighting modern slavery and human trafficking is a shared responsibility. This month, I urge all Americans to educate themselves about all forms of modern slavery and the signs and consequences of human trafficking. Together, we can and must end this most serious, ongoing criminal civil rights violation.
NOW, THEREFORE, I, BARACK OBAMA, President of the United States of America, by virtue of the authority vested in me by the Constitution and the laws of the United States, do hereby proclaim January 2010 as National Slavery and Human Trafficking Prevention Month, culminating in the annual celebration of National Freedom Day on February 1. I call upon the people of the United States to recognize the vital role we can play in ending modern slavery, and to observe this month with appropriate programs and activities.
IN WITNESS WHEREOF, I have hereunto set my hand this fourth day of January, in the year of our Lord two thousand ten, and of the Independence of the United States of America the two hundred and thirty-fourth.
BARACK OBAMA
Tuesday, December 15, 2009
Holiday Shopping: Buying Tech Gadgets that are Fun & Educational for your kids
Still shopping for your kids and grandkids? Do you want to buy them a new tech gadget that is both fun and might help them with school or afterschool activities? You are not alone!
A recent survey said that the average shopper plans to spend around $200 on tech gadgets during the holidays. Tech gadgets are at the top of holiday wish lists for most kids. How do you sort through the ads and the gimmicks to find tech gadgets that are both fun and help with your kids’ education?
Kids want to have the latest gadgets that they see on TV commercials, in the movies, the ones that their friends are using, and most of all, they want to copy and be like you which means they want what you use.
There are some great gadgets this year on both the low end and high end of the budget that support both fun and education.
I have grouped a selection of fun and educational tech gadgets into four categories: Practical, Cool, Hands On and Games.
Practical: Computers, Electronic Readers, Computer Accessories
Cool: Smartphones, Gaming Systems, Power Mats, Virtual Keyboards, Smart Pens, Portable Secure Wireless
Hands On: Cameras that have Still & Video, Robots
Games: Fun and educational such as problem and puzzle solving
As with all purchases, make sure you have the following with you before you purchase:
1. Budget – how much you are willing to spend
2. Price – do your homework so you know if you are getting a good deal
3. Service – how will the child receiving the gift be able to get it serviced if there is a problem
4. Warranty – if you know the child will be hard on the gadget, including an extended warranty may
be a good option
Practical: Computers, Electronic Readers, Computer Accessories
Computers – Desktop or Laptop but Laptops are usually asked for more frequently by kids.
Electronic Readers – Your kids can download newspapers and books and tag key research items that they might need for homework such as quotes and statistics.
Computer
Most kids are asking for laptops so they have the ultimate in flexibility and portability.
Windows 7 on a Desktop under $1200: HP TouchSmart 600 has touch applications where your kid can use a touch of the screen instead of a mouse. Sleek all-in-one design packs a nice PC into a 23.5 inch monitor.
Mac on a Desktop: the iMac starts at under $1200 and offers a wireless keyboard and their newly designed Magic Mouse. Screens start at 21.5 inches and go up to 27 inches. Great all-in-one design fits on desks short for space.
Windows 7 Laptops under $600: Dell Studio 15, HP Pavilion dm3, Lenovo G550 2958
Mac Laptops under $1200: Apple MacBook Pro has a longer batter life with a sleep aluminum unibody design.
Electronic reader
The top 3 choices this year are: Amazon Kindle, Sony Reader, and Barnes & Noble Nook
Accessories
Accessories to consider are: extra batteries, carrying cases, adapters for car use, printers, copier/fax, scanners, mouse, headsets.
Cool – Smartphones, Gaming Systems, Power Mats, Virtual Keyboards, Smart Pens, Portable Secure Wireless
Smartphones can provide your kids with easy access to educational information and use it as a device where they can call or text you to let you know they are safe. Some of the top choices are iPhone, BlackBerry Storm, Motorola Droid. Your purchase will also include a monthly service charge so make you understand contract options before buying the device.
Gaming Systems can provide your kids with a platform to surf the net, communicate with friends, store pictures, and play educational games. Some of the top choices are PlayStation, Wii Nintendo, and Xbox.
Power Mats are designed to recharge many devices such as phones, computers, music players on one mat saving space and eliminating cords.
Virtual Keyboards project an image of a keyboard onto a desktop so you can do away with a separate keyboard. Using Bluetooth technology, you can project a virtual keyboard to use with your computer or smartphome. If your kids watch CSI, they will have seen this cool capability on that show. You can find more information at ThinkGeek.com
Smart Pens offer different features and functions. Some can record what you say and translate it to text. Others can take short videos. Some can copy printed words that you can upload to your computer. For younger users, Poingo and the LeapFrog tag reading system use smart pens to help your budding reader. For older kids, look at SpyNanny, LiveScribe and Oregon Scientific,
Portable Secure Wireless: You can use a broadband access card as a cheaper option. If more than one device needs to connect, consider the Sprint or Verizon MiFi option. With the purchase of a small device and a monthly fee, you can connect up to 5 devices at a time on a secure wireless network.
Hands On: Cameras that have Still & Video, Robots
Unique: Pets-Eye View Camera from National Geographic allows you to see what your dog or cat sees.
Cameras for Younger Kids: Lego and Vtech Kidizoom Plus
Cameras for Older Kids: Nikon D300, Panasonic Lumix, Sony CyberShot, Canon PowerShot
Robot for Younger Kids: Matchbox has a Rocky the Robot Truck that is an interactive robot and dump truck or you can program a soft and furry friend such as the My Pal Scout by LeapFrog.
Robot for Older Kids: Tin Can Robot kit from Green Science. The Lego and Roborover allow your kids to build robots that can also be programmed to do different tasks and functions.
Games: Fun and educational such as problem and puzzle solving.
This season you have many choices. We have highlighted a few for you. A tip to make sure your game is Family Friendly is to check the rating. When shopping for a game, look for “E” somewhere on the box or the website. The “E” means the Entertainment Software Rating Board has reviewed it and it is suitable for “Everyone”. If it says "E10+", this means that the game is meant for Everyone 10 and older.
Family Friendly & Educational Games:
ItzaZoo: Teaches children how to read or improves their reading skills. Your kid goes on adventures with zoo animals.
Dora Saves the Crystal Kingdom: Learn problem solving and Spanish. Kids join Dora for adventures.
LittleBigPlanet : Great for teaching problem solving. You help a little boy named Sack Boy navigate by solving puzzles.
Scribblenauts: Puzzle solving and spelling. You study a puzzle and spell an object that you need to have to resolve the puzzle.
Mattel’s Mind Flex: Using mind and body, this game uses NeuroSky technology to measure your theta-wave brain activity. As you concentrate, you can power a fan with your mind that pushes a ball.
KidZui.com: This is a web browser designed to keep kids safe online. It also provides access to kid friendly games, social networking, and filters youtube videos for age appropriateness.
Video:
http://www.wbtv.com/Global/story.asp?S=11666296
A recent survey said that the average shopper plans to spend around $200 on tech gadgets during the holidays. Tech gadgets are at the top of holiday wish lists for most kids. How do you sort through the ads and the gimmicks to find tech gadgets that are both fun and help with your kids’ education?
Kids want to have the latest gadgets that they see on TV commercials, in the movies, the ones that their friends are using, and most of all, they want to copy and be like you which means they want what you use.
There are some great gadgets this year on both the low end and high end of the budget that support both fun and education.
I have grouped a selection of fun and educational tech gadgets into four categories: Practical, Cool, Hands On and Games.
Practical: Computers, Electronic Readers, Computer Accessories
Cool: Smartphones, Gaming Systems, Power Mats, Virtual Keyboards, Smart Pens, Portable Secure Wireless
Hands On: Cameras that have Still & Video, Robots
Games: Fun and educational such as problem and puzzle solving
As with all purchases, make sure you have the following with you before you purchase:
1. Budget – how much you are willing to spend
2. Price – do your homework so you know if you are getting a good deal
3. Service – how will the child receiving the gift be able to get it serviced if there is a problem
4. Warranty – if you know the child will be hard on the gadget, including an extended warranty may
be a good option
Practical: Computers, Electronic Readers, Computer Accessories
Computers – Desktop or Laptop but Laptops are usually asked for more frequently by kids.
Electronic Readers – Your kids can download newspapers and books and tag key research items that they might need for homework such as quotes and statistics.
Computer
Most kids are asking for laptops so they have the ultimate in flexibility and portability.
Windows 7 on a Desktop under $1200: HP TouchSmart 600 has touch applications where your kid can use a touch of the screen instead of a mouse. Sleek all-in-one design packs a nice PC into a 23.5 inch monitor.
Mac on a Desktop: the iMac starts at under $1200 and offers a wireless keyboard and their newly designed Magic Mouse. Screens start at 21.5 inches and go up to 27 inches. Great all-in-one design fits on desks short for space.
Windows 7 Laptops under $600: Dell Studio 15, HP Pavilion dm3, Lenovo G550 2958
Mac Laptops under $1200: Apple MacBook Pro has a longer batter life with a sleep aluminum unibody design.
Electronic reader
The top 3 choices this year are: Amazon Kindle, Sony Reader, and Barnes & Noble Nook
Accessories
Accessories to consider are: extra batteries, carrying cases, adapters for car use, printers, copier/fax, scanners, mouse, headsets.
Cool – Smartphones, Gaming Systems, Power Mats, Virtual Keyboards, Smart Pens, Portable Secure Wireless
Smartphones can provide your kids with easy access to educational information and use it as a device where they can call or text you to let you know they are safe. Some of the top choices are iPhone, BlackBerry Storm, Motorola Droid. Your purchase will also include a monthly service charge so make you understand contract options before buying the device.
Gaming Systems can provide your kids with a platform to surf the net, communicate with friends, store pictures, and play educational games. Some of the top choices are PlayStation, Wii Nintendo, and Xbox.
Power Mats are designed to recharge many devices such as phones, computers, music players on one mat saving space and eliminating cords.
Virtual Keyboards project an image of a keyboard onto a desktop so you can do away with a separate keyboard. Using Bluetooth technology, you can project a virtual keyboard to use with your computer or smartphome. If your kids watch CSI, they will have seen this cool capability on that show. You can find more information at ThinkGeek.com
Smart Pens offer different features and functions. Some can record what you say and translate it to text. Others can take short videos. Some can copy printed words that you can upload to your computer. For younger users, Poingo and the LeapFrog tag reading system use smart pens to help your budding reader. For older kids, look at SpyNanny, LiveScribe and Oregon Scientific,
Portable Secure Wireless: You can use a broadband access card as a cheaper option. If more than one device needs to connect, consider the Sprint or Verizon MiFi option. With the purchase of a small device and a monthly fee, you can connect up to 5 devices at a time on a secure wireless network.
Hands On: Cameras that have Still & Video, Robots
Unique: Pets-Eye View Camera from National Geographic allows you to see what your dog or cat sees.
Cameras for Younger Kids: Lego and Vtech Kidizoom Plus
Cameras for Older Kids: Nikon D300, Panasonic Lumix, Sony CyberShot, Canon PowerShot
Robot for Younger Kids: Matchbox has a Rocky the Robot Truck that is an interactive robot and dump truck or you can program a soft and furry friend such as the My Pal Scout by LeapFrog.
Robot for Older Kids: Tin Can Robot kit from Green Science. The Lego and Roborover allow your kids to build robots that can also be programmed to do different tasks and functions.
Games: Fun and educational such as problem and puzzle solving.
This season you have many choices. We have highlighted a few for you. A tip to make sure your game is Family Friendly is to check the rating. When shopping for a game, look for “E” somewhere on the box or the website. The “E” means the Entertainment Software Rating Board has reviewed it and it is suitable for “Everyone”. If it says "E10+", this means that the game is meant for Everyone 10 and older.
Family Friendly & Educational Games:
ItzaZoo: Teaches children how to read or improves their reading skills. Your kid goes on adventures with zoo animals.
Dora Saves the Crystal Kingdom: Learn problem solving and Spanish. Kids join Dora for adventures.
LittleBigPlanet : Great for teaching problem solving. You help a little boy named Sack Boy navigate by solving puzzles.
Scribblenauts: Puzzle solving and spelling. You study a puzzle and spell an object that you need to have to resolve the puzzle.
Mattel’s Mind Flex: Using mind and body, this game uses NeuroSky technology to measure your theta-wave brain activity. As you concentrate, you can power a fan with your mind that pushes a ball.
KidZui.com: This is a web browser designed to keep kids safe online. It also provides access to kid friendly games, social networking, and filters youtube videos for age appropriateness.
Video:
http://www.wbtv.com/Global/story.asp?S=11666296
Subscribe to:
Posts (Atom)