Don't take offense but the biggest risk to security - It's Likely To Be You!

Everyone asks me what the greatest theat to security is.  They are visibly disappointed when I give them my answer.  I think most of them expect me to say, "China!  They are out to get us!" or, "The Russian Business Network - they are wicked smart!"or, "Cybercriminals, they are always after your money."  These are real threats and you need to protect yourself from them.

I believe there is a bigger threat, and dear reader, I believe it is you or maybe your co-worker.

Are you Mr. Incredible?  You do it all - juggle kids, work, family obligations.  This requires you to take work with you everywhere you go.

Imagine this...
You have work to do but your kid's soccer game is coming up.  Well, just download 3.3 Million borrower records to your thumb drive and you are in business.  Can work anywhere.  You might be able to work in the car while your kid's team warms up.

Well, Mr. Incredible, if you worked at ECMC, you just created the largest most incredible breach ever.

We don't know why an employee downloaded to a thumb drive, 3.3 million people's student loan records, but we will soon.  3.3MM people equates to as many as 5% of all federal student-loan borrowers.  Their data is on a thumb drive that is now missing.

Not to worry, students, I think it only had on it your Names, addresses, Social Security numbers and other personal data.

This particular Mr. Incredible works in St. Paul, Minn., at the headquarters of Educational Credit Management Corp., a nonprofit guarantor of federal student loans.

You will be glad to read this quote from the ECMC spokesperson, Paul Kelash:  "It was simple, old-fashioned theft.  It was not a hacker incident."  Wow, that is comforting!

This is right on the heals of another data theft earlier in March 2010, a former employee of HSBC Holdings PLC allegedly stole data on about 24,000 Swiss private-bank accounts.


The conversation about the insider threat, is the non-sexy side of security but it can cause some of the greatest chinks in the armor.  The “insider threat”, is often like carbon monoxide poisoning, silent and hard to detect.  I break the threat down into three character profiles:
1.  Robert Hanssen
2.  Eve from Wall-E
3.  Mr. Incredible

Robert Hanssen – Intentional:
Robert Hanssen was a former U.S. FBI agent who turned over information to Russian intelligence services for cash and diamonds.  It is also suspected he did it because he wanted to prove something to himself and others.  This employee-type knowingly wants to cause harm either because they want to make a buck or because they feel it is their version of payback time.

Eve from Wall-E – Unintentional Public Disclosure (Think Millenials):
Eve is on a mission and she wears that mission on her chest.  She’s after plantlife and she does not care who she broadcasts that mission to.  She cannot keep a secret and she is overjoyed and beams when she finds plant life.  The generation joining the workforce now and for the next 10-15 years is a lot like Eve.  When they experience emotions, they will wear them openly via cyber space.  That openness may also include blogging, tweeting, and Facebooking posts about the latest project they are working on.

Recently, an over exuberant Microsoftie was caught talking about the virtues of Windows 8.    His posts have been removed.  Before they were, we did manage to learn that the next version will be “unlike anything users expect of the operating system”. And that they are moving to 128-bit.  A tough blow for their competitors and for bad guys that want to be ready to hack the new version the moment it arrives.

Mr. Incredible – Accidentally Breaks Your Defenses:
Your model employee, the hidden threat until it’s too late:
I love Mr. Incredible.  He has great strength and a heart of gold.  He wants to take on the world and use his talents but was forced to hide his talents within the system.  In one scene, in striving to do what is right and just, he accidentally injures his own boss.

I tell organizations that their biggest threat may actually be their Mr. Incredible employees.  These are the people that will do whatever it takes to work for you days, nights, weekends, and holidays.  They are the fearless defenders of creating the latest report or implementing the last technology for your company.  If that means downloading tons of information to a portable device so they can work on their vacation, they will.  If it means throwing the laptop in the car on the way to pick up their kids with a stop at the grocery store and the laptop is left unattended…whoops!  They do not mean to put the company at risk but their drive to get it done exposes your data.

The missing data costs your reputation, puts your intellectual property at risk, may expose innocent people to identity theft, and can create lengthy, costly lawsuits.  Just ask the VA.  A model employee was working on VA business at home and their home was burglarized.  A VA laptop was among the stolen goods and had the Social Security numbers of 26.5MM active duty military and veterans on it.  The VA has agreed to pay $20MM to settle a class action lawsuit.  In a true miracle mix of skills and luck, the FBI managed to recover the stolen laptop and it is believed the data was not used by the criminals.

Until we deal with the insider threat, I will not run out of blog posts!

As always, would love your comments and feedback.

Holiday Shopping: How to Get the Best Bargains Without the Boobytraps

You want to fill everyone’s Christmas stocking with good cheer but be careful of cybercriminals.  We can help you find the best bargains without the boobytraps!

Some of the best deals of the season are online this year.  

47% of merchants said they will use social media such as Twitter and Facebook to advertise the best deals.  

This year offers some fantastic ways to find where the best bargains are and you can shop at home in your pajamas, while stuck at the airport, or even on your lunch break all with the touch of your finger!
Some companies are creating online exclusive offers.  One example is Sears.  Sears gave out fan only deals and a drawing for a gift card exclusively to their Facebook fans this year.

Here are 4 tips to find the best deals without the boobytraps!

1.  One card:  Use a specific credit card for your online purchases.  Set up alerts to be sent to your phone and email so you know every time your card is used.

2. Keep a record:  Save a screen shot or print out all receipts and hold for at least 90 days, longer if there is a warranty.

3. Be A Secure Shopper with CIS:  Computer, Internet, Secure

Computer:  Know the computer – do not use a communal computer or one that is not up to date on antivirus protection

Internet:  Check your internet access – know how you access the internet – only make a purchase if you know your connection is safe

Secure:  Secure Sites only - Check the Webname – it should include HTTPS: the S stands for secure.  The website should include an icon of a padlock

4.  Instant Access to Deals:  Sign up for email alerts from your favorite stores.  If you use social media sites such as, Twitter or Facebook, there are a lot of great deals posted on those sites.

Finding the Best Bargains:
There are several wonderful sites that you can use to help you find the best online bargains without tripping on the cybercriminal booby traps.

We have highlighted several sites that you may want to check out this year:
Etsy.com
RetailMeNot.com
Dealio.com
Offers.com
Cheaptweet.com
Savings.com
Extrabux.com
PriceGrabber.com
Shop.org
Dealnews.com
Fatwallet.com
SlickDeals.net
Amazon.com
Walmart.com
Target.com

Social Media:
Facebook:
On Facebook, you will find many vendors with pages you can become a fan of.  Some are offering EXCLUSIVE deals for their Facebook fans.
Some highlights include:
ToysRUs
Best Buy
Sears
Macy’s
JCPenney

Twitter offers some great tips about upcoming sales and special offers.
Some Twitter accounts you may want to follow include:
@ToysRUs
-
@SearsDeals
-
@AmazonDeals

@WalmartSpecials

@NeweggHotDeals

@DellOutlet

Holiday Shopping: Buying Tech Gadgets that are Fun & Educational for your kids

Still shopping for your kids and grandkids?  Do you want to buy them a new tech gadget that is both fun and might help them with school or afterschool activities?  You are not alone!

A recent survey said that the average shopper plans to spend around $200 on tech gadgets during the holidays.  Tech gadgets are at the top of holiday wish lists for most kids.  How do you sort through the ads and the gimmicks to find tech gadgets that are both fun and help with your kids’ education?  

Kids want to have the latest gadgets that they see on TV commercials, in the movies, the ones that their friends are using, and most of all, they want to copy and be like you which means they want what you use.

There are some great gadgets this year on both the low end and high end of the budget that support both fun and education.

I have grouped a selection of fun and educational tech gadgets into four categories:  Practical, Cool, Hands On and Games.

Practical:  Computers, Electronic Readers, Computer Accessories


Cool:  Smartphones, Gaming Systems,  Power Mats, Virtual Keyboards, Smart Pens, Portable Secure Wireless


Hands On:  Cameras that have Still & Video, Robots


Games:  Fun and educational such as problem and puzzle solving

As with all purchases, make sure you have the following with you before you purchase:
1. Budget – how much you are willing to spend
2. Price – do your homework so you know if you are getting a good deal
3. Service – how will the child receiving the gift be able to get it serviced if there is a problem
4. Warranty – if you know the child will be hard on the gadget, including an extended warranty may
                           be a good option

Practical:  Computers, Electronic Readers, Computer Accessories
Computers – Desktop or Laptop but Laptops are usually asked for more frequently by kids.  

Electronic Readers – Your kids can download newspapers and books and tag key research items that they might need for homework such as quotes and statistics.

Computer
Most kids are asking for laptops so they have the ultimate in flexibility and portability.

Windows 7 on a Desktop under $1200:  HP TouchSmart 600 has touch applications where your kid can use a touch of the screen instead of a mouse.  Sleek all-in-one design packs a nice PC into a 23.5 inch monitor.

Mac on a Desktop:   the iMac starts at under $1200 and offers a wireless keyboard and their newly designed Magic Mouse.  Screens start at 21.5 inches and go up to 27 inches.  Great all-in-one design fits on desks short for space.

Windows 7 Laptops under $600:  Dell Studio 15, HP Pavilion dm3,  Lenovo G550 2958

Mac Laptops under $1200: Apple MacBook Pro has a longer batter life with a sleep aluminum unibody design.

Electronic reader
The top 3 choices this year are:  Amazon Kindle, Sony Reader, and Barnes & Noble Nook

Accessories 
Accessories to consider are:  extra batteries, carrying cases, adapters for car use, printers, copier/fax, scanners, mouse, headsets.

Cool – Smartphones, Gaming Systems,  Power Mats, Virtual Keyboards, Smart Pens, Portable Secure Wireless

Smartphones can provide your kids with easy access to educational information and use it as a device where they can call or text you to let you know they are safe.  Some of the top choices are iPhone, BlackBerry Storm, Motorola Droid.   Your purchase will also include a monthly service charge so make you understand contract options before buying the device.

Gaming Systems can provide your kids with a platform to surf the net, communicate with friends, store pictures, and play educational games.  Some of the top choices are PlayStation, Wii Nintendo, and Xbox.

Power Mats are designed to recharge many devices such as phones, computers, music players on one mat saving space and eliminating cords.

Virtual Keyboards project an image of a keyboard onto a desktop so you can do away with a separate keyboard.  Using Bluetooth technology, you can project a virtual keyboard to use with your computer or smartphome.  If your kids watch CSI, they will have seen this cool capability on that show.  You can find more information at ThinkGeek.com

Smart Pens offer different features and functions.  Some can record what you say and translate it to text.  Others can take short videos.  Some can copy printed words that you can upload to your computer.  For younger users, Poingo and the LeapFrog tag reading system use smart pens to help your budding reader.  For older kids, look at SpyNanny, LiveScribe and Oregon Scientific,
Portable Secure Wireless:  You can use a broadband access card as a cheaper option.  If more than one device needs to connect, consider the Sprint or Verizon MiFi option.  With the purchase of a small device and a monthly fee, you can connect up to 5 devices at a time on a secure wireless network.

Hands On:  Cameras that have Still & Video, Robots
Unique:  Pets-Eye View Camera from National Geographic allows you to see what your dog or cat sees.
Cameras for Younger Kids:  Lego and Vtech Kidizoom Plus
Cameras for Older Kids:  Nikon D300, Panasonic Lumix, Sony CyberShot, Canon PowerShot
Robot for Younger Kids:   Matchbox has a Rocky the Robot Truck that is an interactive robot and dump truck or you can program a soft and furry friend such as the My Pal Scout by LeapFrog.
Robot for Older Kids:  Tin Can Robot kit from Green Science.  The Lego and Roborover allow your kids to build robots that can also be programmed to do different tasks and functions.

Games:  Fun and educational such as problem and puzzle solving.  

This season you have many choices.   We have highlighted a few for you.  A tip to make sure your game is Family Friendly is to check the rating.  When shopping for a game, look for “E” somewhere on the box or the website.  The “E” means the Entertainment Software Rating Board has reviewed it and it is suitable for “Everyone”.  If it says "E10+", this means that the game is meant for Everyone 10 and older.
Family Friendly & Educational Games:

ItzaZoo:  Teaches children how to read or improves their reading skills.  Your kid goes on adventures with zoo animals.

Dora Saves the Crystal Kingdom:  Learn problem solving and Spanish.  Kids join Dora for adventures.

LittleBigPlanet :  Great for teaching problem solving.  You help a little boy named Sack Boy navigate by solving puzzles.  

Scribblenauts:  Puzzle solving and spelling.  You study a puzzle and spell an object that you need to have to resolve the puzzle.  

Mattel’s Mind Flex:  Using mind and body, this game uses NeuroSky technology to measure your theta-wave brain activity.  As you concentrate, you can power a fan with your mind that pushes a ball.

KidZui.com:   This is a web browser designed to keep kids safe online.  It also provides access to kid friendly games, social networking, and filters youtube videos for age appropriateness.

Video:


http://www.wbtv.com/Global/story.asp?S=11666296