It used to be a skill of Social Climbers a key skill was that of name dropping.
Now it is a question of core phrase dropping during difficult technical discussion.
When at loggerheads it is always wise to know such phrases as
1) that is why it is time to upgrade to the new Microsoft Vista
2) Do you realize that they went to the moon on 8 k. of memory?
3) That idea has merit
4) They were discussing that very issue and exploit on that most popular podcast or blog, Time magazine, People magazine, New York or LA Times or the Economist.
The Economist magazine is always best. It is widely held in stead by left wing types.
It comes out weekly and covers the full waterfront. Best the stories seem to hold hidden jewels on rereads and it is impossible for anyone to have fully read any issue.
5) Dvorak’s Law in 1987 was “That no matter what they say your new computer is going to cost you $ 3,000”.
6) We should have never upgraded to ….
7) In the end functionality is everything
8) They should conduct a thorough study on that very relevant topic
9) HUD came to a similar conclusion after Katrina
10) Will this work cross platform
11) Do you realize that there is more English speaking in China than in all of North America?
12) I could not understand the accent of the tech support person on the toll free tech support line
13) It is available online at the FAQ at jerkbossesihaveknown
14) Yes that is the tact initiated by Windows NT
15) I remember this very topic in a discussion the Staples or Best Buy in store tech
16) Mr. Henry Ford on the tech support line from Banglore India answered that well very well and succintly
17) Do you realize that all software conflicts arise from the poor typewriting skills of software engineers who as well talk fast and drink too much coffee?
18) Is this driver available for this device for the Windows Vista operating system?
19) Biodiesel is the way to go. Biodiesel is the wave of the future.
20) Has this issue been followed up? A ticket written ?
21) We cannot have that here.
22) Bloated code
23) In the end economics simply comes down to supply and demand
24) There is identical to a Dilbert cartoon.
25) Those who cannot do manage. Let them down and spend some time in the front lines.
26) It never hurts to be conservative in these matters/
27) Experience is the key teacher in life
28) Are we properly currently licensed for this product?
29) Its simply a computer virus, spyware or malware
30) This will all end with crying.
Showing posts with label tech. Show all posts
Showing posts with label tech. Show all posts
Tuesday, December 30, 2008
Sunday, December 28, 2008
Network Security – The Real Vulnerabilities
Scenario: You work in a corporate environment in which you are, at least partially, responsible for network security. You have implemented a firewall, virus and spyware protection, and your computers are all up to date with patches and security fixes. You sit there and think about the lovely job you have done to make sure that you will not be hacked.
You have done, what most people think, are the major steps towards a secure network. This is partially correct. What about the other factors?
Have you thought about a social engineering attack? What about the users who use your network on a daily basis? Are you prepared in dealing with attacks by these people?
Believe it or not, the weakest link in your security plan is the people who use your network. For the most part, users are uneducated on the procedures to identify and neutralize a social engineering attack. What’s going to stop a user from finding a CD or DVD in the lunch room and taking it to their workstation and opening the files? This disk could contain a spreadsheet or word processor document that has a malicious macro embedded in it. The next thing you know, your network is compromised.
This problem exists particularly in an environment where a help desk staff reset passwords over the phone. There is nothing to stop a person intent on breaking into your network from calling the help desk, pretending to be an employee, and asking to have a password reset. Most organizations use a system to generate usernames, so it is not very difficult to figure them out.
Your organization should have strict policies in place to verify the identity of a user before a password reset can be done. One simple thing to do is to have the user go to the help desk in person. The other method, which works well if your offices are geographically far away, is to designate one contact in the office who can phone for a password reset. This way everyone who works on the help desk can recognize the voice of this person and know that he or she is who they say they are.
Why would an attacker go to your office or make a phone call to the help desk? Simple, it is usually the path of least resistance. There is no need to spend hours trying to break into an electronic system when the physical system is easier to exploit. The next time you see someone walk through the door behind you, and do not recognize them, stop and ask who they are and what they are there for. If you do this, and it happens to be someone who is not supposed to be there, most of the time he will get out as fast as possible. If the person is supposed to be there then he will most likely be able to produce the name of the person he is there to see.
I know you are saying that I am crazy, right? Well think of Kevin Mitnick. He is one of the most decorated hackers of all time. The US government thought he could whistle tones into a telephone and launch a nuclear attack. Most of his hacking was done through social engineering. Whether he did it through physical visits to offices or by making a phone call, he accomplished some of the greatest hacks to date. If you want to know more about him Google his name or read the two books he has written.
It’s beyond me why people try and dismiss these types of attacks. I guess some network engineers are just too proud of their network to admit that they could be breached so easily. Or is it the fact that people don’t feel they should be responsible for educating their employees? Most organizations don’t give their IT departments the jurisdiction to promote physical security. This is usually a problem for the building manager or facilities management. None the less, if you can educate your employees the slightest bit; you may be able to prevent a network breach from a physical or social engineering attack.
You have done, what most people think, are the major steps towards a secure network. This is partially correct. What about the other factors?
Have you thought about a social engineering attack? What about the users who use your network on a daily basis? Are you prepared in dealing with attacks by these people?
Believe it or not, the weakest link in your security plan is the people who use your network. For the most part, users are uneducated on the procedures to identify and neutralize a social engineering attack. What’s going to stop a user from finding a CD or DVD in the lunch room and taking it to their workstation and opening the files? This disk could contain a spreadsheet or word processor document that has a malicious macro embedded in it. The next thing you know, your network is compromised.
This problem exists particularly in an environment where a help desk staff reset passwords over the phone. There is nothing to stop a person intent on breaking into your network from calling the help desk, pretending to be an employee, and asking to have a password reset. Most organizations use a system to generate usernames, so it is not very difficult to figure them out.
Your organization should have strict policies in place to verify the identity of a user before a password reset can be done. One simple thing to do is to have the user go to the help desk in person. The other method, which works well if your offices are geographically far away, is to designate one contact in the office who can phone for a password reset. This way everyone who works on the help desk can recognize the voice of this person and know that he or she is who they say they are.
Why would an attacker go to your office or make a phone call to the help desk? Simple, it is usually the path of least resistance. There is no need to spend hours trying to break into an electronic system when the physical system is easier to exploit. The next time you see someone walk through the door behind you, and do not recognize them, stop and ask who they are and what they are there for. If you do this, and it happens to be someone who is not supposed to be there, most of the time he will get out as fast as possible. If the person is supposed to be there then he will most likely be able to produce the name of the person he is there to see.
I know you are saying that I am crazy, right? Well think of Kevin Mitnick. He is one of the most decorated hackers of all time. The US government thought he could whistle tones into a telephone and launch a nuclear attack. Most of his hacking was done through social engineering. Whether he did it through physical visits to offices or by making a phone call, he accomplished some of the greatest hacks to date. If you want to know more about him Google his name or read the two books he has written.
It’s beyond me why people try and dismiss these types of attacks. I guess some network engineers are just too proud of their network to admit that they could be breached so easily. Or is it the fact that people don’t feel they should be responsible for educating their employees? Most organizations don’t give their IT departments the jurisdiction to promote physical security. This is usually a problem for the building manager or facilities management. None the less, if you can educate your employees the slightest bit; you may be able to prevent a network breach from a physical or social engineering attack.
Friday, December 26, 2008
More Questions To Ask A Computer Training School Before Paying
The decision to attend a computer training school is one of the most important you'll ever make, and even more important is which one to attend. Asking the right questions can give you an idea of whether a given IT school is a good investment. An earlier article I wrote on this subject was so popular that I thought I'd offer some more advice on the questions to ask before you write that check or take out that loan.
If the school offers a placement service, ask to talk to the people working in that department and ask them how they go about placing graduates. Most schools offer a list of companies that they've placed students with. Get this list and start calling some of these companies. Ask to speak to their HR department, and ask them for their opinion of the school. Even if they don't say a lot, their tone of voice can speak volumes.
Ask to meet some of their teachers, and don't be afraid to ask them how long they've taught at that particular school. If the average teacher has been there a while, that's a good sign. If there seems to be quite a bit of turnover at the school, that's not as good a sign.
Another key area is the availability of the computer labs during class and after the class is over. Speaking from experience, I can tell you that getting hands-on experience with the various software and hardware you'll be working with in the field is the #1 way to get ahead - just reading books won't do it. If you're taking a router class, does the school have real routers for you to work on? If you're taking a PC repair class, are there plenty of PCs for everyone in your class to work on, or do you have to share?
You want classes that offer hands-on experience during class, and you should be able to get into the computer labs after class. You may not be able to use the labs at night if the school offers night classes, but again I speak from experience - the time you spend in the computer labs after class is just as valuable as the time you spend in class. Make sure the labs will be available after class - and then get in there and work!
If the school offers a placement service, ask to talk to the people working in that department and ask them how they go about placing graduates. Most schools offer a list of companies that they've placed students with. Get this list and start calling some of these companies. Ask to speak to their HR department, and ask them for their opinion of the school. Even if they don't say a lot, their tone of voice can speak volumes.
Ask to meet some of their teachers, and don't be afraid to ask them how long they've taught at that particular school. If the average teacher has been there a while, that's a good sign. If there seems to be quite a bit of turnover at the school, that's not as good a sign.
Another key area is the availability of the computer labs during class and after the class is over. Speaking from experience, I can tell you that getting hands-on experience with the various software and hardware you'll be working with in the field is the #1 way to get ahead - just reading books won't do it. If you're taking a router class, does the school have real routers for you to work on? If you're taking a PC repair class, are there plenty of PCs for everyone in your class to work on, or do you have to share?
You want classes that offer hands-on experience during class, and you should be able to get into the computer labs after class. You may not be able to use the labs at night if the school offers night classes, but again I speak from experience - the time you spend in the computer labs after class is just as valuable as the time you spend in class. Make sure the labs will be available after class - and then get in there and work!
How To Succeed At A Computer Training School
One of the best decisions you can ever make is to attend a computer training school. As I've written in several other articles, you have to ask the right questions before writing a check or taking out a student loan, but when you find the right school you are indeed on your way to a successful career.
There's a big difference between attending a tech school and excelling at the classes, though. Whether you just "float through" the school or really work hard is totally up to you. From my personal experience at such a school, I'd like to offer you one simple tip that will quadruple your chances of success at the school and in the job market.
Get there early and stay late.
When I attended a tech school years ago, I admit I was surprised that most of my classmates had what I call the "junior high school" mentality - they would get there late and leave as soon as class is over. Guess what? You're no longer in junior high. You're attending this school to create a career for yourself. Get to class early, get some extra study and work in while you're waiting for class to start, and then stay after class!
The most important part of your computer school studies is getting hands-on experience with the technologies that you're learning. If you're taking a Cisco class, you need to work with a router or switch as often as you can. If you're learning a software program, you need to work with that program in the school's labs as much as possible. Reading books alone will not teach you everything you need to know. The best time to get extra work in is after class. You may not be able to work in the computer labs at night if the school offers night classes, but odds are there are very few people in there during the afternoon. You need to be one of those people.
Doing only what is required of you is not the path to excellence. You need to go beyond the requirements of the school and invest the extra time and effort into your career. I speak from experience - there is no field in the world that rewards individual effort more than the IT field. Develop the habit of going "above and beyond" today, and this will pay huge dividends for you in the future.
There's a big difference between attending a tech school and excelling at the classes, though. Whether you just "float through" the school or really work hard is totally up to you. From my personal experience at such a school, I'd like to offer you one simple tip that will quadruple your chances of success at the school and in the job market.
Get there early and stay late.
When I attended a tech school years ago, I admit I was surprised that most of my classmates had what I call the "junior high school" mentality - they would get there late and leave as soon as class is over. Guess what? You're no longer in junior high. You're attending this school to create a career for yourself. Get to class early, get some extra study and work in while you're waiting for class to start, and then stay after class!
The most important part of your computer school studies is getting hands-on experience with the technologies that you're learning. If you're taking a Cisco class, you need to work with a router or switch as often as you can. If you're learning a software program, you need to work with that program in the school's labs as much as possible. Reading books alone will not teach you everything you need to know. The best time to get extra work in is after class. You may not be able to work in the computer labs at night if the school offers night classes, but odds are there are very few people in there during the afternoon. You need to be one of those people.
Doing only what is required of you is not the path to excellence. You need to go beyond the requirements of the school and invest the extra time and effort into your career. I speak from experience - there is no field in the world that rewards individual effort more than the IT field. Develop the habit of going "above and beyond" today, and this will pay huge dividends for you in the future.
Computer Training School Tutorial: Know Your Instructor
Making the decision to attend a computer tech school can be one of the best decisions of your life. Another great decision is to tap a hidden wealth of knowledge that is right before every student at schools such as ECPI and ITT, but very few students take advantage of it.
When you're attending a computer training school, you must avoid the mentality that some other students will have - "I gotta go to school, I gotta be here, I can't wait to leave and go home". When you're preparing for a career working with computers, you've got to take advantage of every learning experience you can get, and that includes getting to know the most valuable resource at your school - your teachers!
Your teachers have busy schedules, but it was my experience that every single time I asked for help or had questions outside of class, my teachers went the extra mile to help me. I’m sure yours will do the same for you, but you have to let them know you want that help!
At your tech school, you must develop the skills and work ethic that you will use to succeed in the IT field. By staying after class, working overtime in the computer labs, and getting to know your instructors, you'll be astonished at the additional knowledge you can pick up. Almost any good teacher is going to have real-world experience, and you need to draw on that knowledge. Having lunch with an instructor is another great idea, as it allows you to get to know them away from the classroom.
Part of success in any field is making contacts for the future. You may not be in the IT field yet, but you should already be getting to know people with IT experience - and who better than your teachers? Besides, they hear about job openings all the time from friends, and the more you stand out from the crowd, the more likely you are to be remembered for such opportunities!
When you're attending a computer training school, you must avoid the mentality that some other students will have - "I gotta go to school, I gotta be here, I can't wait to leave and go home". When you're preparing for a career working with computers, you've got to take advantage of every learning experience you can get, and that includes getting to know the most valuable resource at your school - your teachers!
Your teachers have busy schedules, but it was my experience that every single time I asked for help or had questions outside of class, my teachers went the extra mile to help me. I’m sure yours will do the same for you, but you have to let them know you want that help!
At your tech school, you must develop the skills and work ethic that you will use to succeed in the IT field. By staying after class, working overtime in the computer labs, and getting to know your instructors, you'll be astonished at the additional knowledge you can pick up. Almost any good teacher is going to have real-world experience, and you need to draw on that knowledge. Having lunch with an instructor is another great idea, as it allows you to get to know them away from the classroom.
Part of success in any field is making contacts for the future. You may not be in the IT field yet, but you should already be getting to know people with IT experience - and who better than your teachers? Besides, they hear about job openings all the time from friends, and the more you stand out from the crowd, the more likely you are to be remembered for such opportunities!
Subscribe to:
Posts (Atom)
