Our Blog

February 22nd, 2013

Security_Feb20_BImagine you are in the airport waiting for a flight when you look down only to discover that your laptop is missing. This isn't a great thought, especially since many of us have important files and programs that we can't afford to lose. The problem is, if your device has gone missing, the chances of you recovering it are slim. The good news is that there is a possible solution that lets you track your device.

Prey is an Open Source - free - program that you can install on your computer or mobile device and track it when it's missing, or been stolen.

How it works First you have to download the software - from here - onto your computer (Windows, Mac or Linux are supported), and sign up for an account. You have a couple of options here: You can either sign up for an account with Prey and access a control panel through the website, or install it as a standalone which is recommended for advanced users as it requires some server configuration.

If you chose to go with the Web option you sign up for an account and install the software then register your main device along with extra ones like an Android, or your iOS device. Once you have downloaded Prey and linked them together, you are ready.

For mobiles, you can send these a text (from the Web Control Panel) which will initiate the established options you have pre-set for when your phone goes missing.

How Prey finds your device's location depends on the device. For laptops, it can turn-on your Wi-Fi connection and try to connect to the nearest access points. It can take the IP address of each Wi-Fi access point and from there get an approximate location - in some areas as close as 200 feet. On your phone, it turns on the GPS (if available) and tries to connect to Wi-Fi networks in range. These two combined can generate a fairly accurate location.

All this tracking information is sent to your inbox in the form of a report, which can be tailored to meet your needs.

What makes this program different from other similar ones is that it can be installed across multiple platforms and managed from one account. It's also free, which makes it even more attractive. There is also a Pro version which allows you to track more devices, for a monthly fee (USD$5 for 3 devices up to USD$399 a month for 500 devices).

Prey is just one of the many device tracking programs, and installing one may be a good idea, to give you a greater chance of retrieval if your phone or computer is lost or stolen. Do you use one already? If so, which one? If you would like to learn more about Prey and the other device tracking programs please let us know, we may have a great solution for you.

Published with permission from TechAdvisory.org. Source.

February 21st, 2013

BCP_Feb20_BWhen it comes to your business there are many dangers that could negatively impact your bottom line, or even force you out of business. As such, it's a good idea to have a plan in place to help keep your business operational during any disaster. This strategy is commonly referred to as a Business Continuity Plan, and is something that companies will benefit from looking into.

While a Business Continuity Plan (BCP) can be complicated, and comprised of many different objectives, the main reason companies include this in their business strategy is to build up resilience. Disasters of many kinds can result in either lost data, sales or even business. While a BCP won't prevent large-scale disasters, it will help your business recover quicker.

When looking at how resilient your business is, there are three main aspects to consider.

RTO RTO stands for Recovery Time Objective and is the time period from the beginning of the disaster to recovery of operations. This number, or time period, will be different for every company. For example, companies that operate online stores will likely have a short RTO, as they rely on 24/7 uptime to conduct business and sales.

In general the RTO is an objective, one that employees and stakeholders should strive for. Having one can help planners identify potential problem areas along with critical functions that must be recovered and any preparations that will be necessary. If a business does not address, or identify a set time to recovery they could see an unnecessary increase in recovery times, or worse lost profits.

RPO RPO stands for Recovery Point Objective and represents the amount of data a business is willing, or can afford, to lose. The easiest way to figure this out is to look at your systems and think about how much data or information you personally can lose before being unable to do your job. From there, you can work out the frequency with which you should back up your systems.

For example: If you figure that you can lose a day's worth of data, then your backup should be done on a daily basis. If you currently back up your data or systems once a week, and figure you can only miss a day, then RPO helps you realize this is not enough and that you need a system or plan that better meets your needs.

The difference between RTO and RPO is that RTO is a broad process that covers the whole Business Continuity timeline, while RPO is focused on data and backup.

ROI When looking at different Business Continuity systems, it is always a good idea to calculate the ROI, or Return on Investment. You can calculate the cost of the integrating any plan, time to implement and recovery, expected value it can bring your business and avoided losses. This will give you a pretty good picture on whether current systems are strong enough, and if new alternatives are better.

By figuring out the time you expect to recover, how often you should back up and the total ROI of proposed, or existing, systems you can gain a clearer picture of how resilient your company is.

If you're looking to make your company a little more resilient, why not get in touch with us? We are happy to sit down and discuss your options with you.

Published with permission from TechAdvisory.org. Source.

February 15th, 2013

Security_Feb13_BFor many, social media is a deeply ingrained part of daily life. For companies it's become an integral part of their marketing and communications strategy. Because of this, the security of these services is something users expect. 99% of the time. However, there are breaches that can cause trouble for users.

It only took one month for the first major security breach of a social network, and this time it happened to Twitter. On the first of February, Twitter announced on their blog that slightly over 250,000 accounts had been compromised.

At this time, Twitter doesn't know who is responsible for the attack but according to the blog post they know that, "The attackers may have had access to limited user information – usernames, email addresses, session tokens and encrypted/salted versions of passwords."

Yes, the hackers did get access to passwords, although the company noted that they got the 'encrypted/salted' versions, this means they didn't actually get the passwords themselves. To get the account passwords they would have to decrypt the information first, something many hacker's don't bother with.

What does this mean for my company? If you or your company has a Twitter account, you would have already have received an email if your account was breached. While 250,000 sounds like a high number, keep in mind that there are over 72 million active accounts (users who post more than once a week).

While this is a drop in the proverbial bucket, it's still a security threat that you should act upon. At the very least you should take steps to change your password. You can do this by logging into Twitter and pressing the cog in the top right of the tool bar. Select Settings followed by Password. Enter your current password, followed by a new password and verify it. Press Save changes and you are done.

It is a good idea to pick a completely new password, one with numbers, letters and if possible special characters like !, $ or ^. At the very least, it should be different from any other passwords you use.

Looking to learn more about the security breach or if Twitter is right for your business? Give us a shout, we'd be happy to talk social media with you.

Published with permission from TechAdvisory.org. Source.

February 7th, 2013

As technology continues its creep into every aspect of our life, the number of Internet connected devices we use is also growing. This has led to an increase in the number and severity of security threats facing networks. It seems that almost every week a new security threat is uncovered. One of the latest can potentially affect nearly every device that connects to the Internet.

At the end of January, numerous news and tech media services issued warnings about UPnP (Universal Plug and Play) enabled devices. This was taken to be a big issue because of the widespread adoption of these devices and the fact that many of them have little to no security measures, which could open whole systems to attacks. Many business owners and managers are wondering what exactly is UPnP and how it can open systems to attack.

UPnP defined UPnP is a protocol or code that allows networked devices like laptops, computers, Wi-Fi routers, and many modern mobile devices, to search for and discover other devices connected to, or wanting to connect to, the same network. This protocol also allows these devices to connect to one-another and share information, Internet connection and media.

A good example of UPnP in use is your laptop. When you first connect your laptop to your router, you likely have to enter a password and maybe even the router's network name. Without UPnP you would have to find the network and enter the password each time you want to connect to the Internet. With UPnP, your laptop can automatically connect whenever it's in range.

Why is UPnP a security threat? UPnP has been in use for the better part of seven years and has since come to be found in nearly every device that connects to the Internet - pretty much everything. While it was written for devices in the home e.g., Wi-Fi routers, many businesses also use these devices because they are often easier to set up and cost less than their enterprise counterparts.

Because of the sheer number of devices that use this protocol, and the fact that it's engineered to respond to any request to connect to the device, it makes sense that this could be a security issue. A recent study tested the security of UPnP and revealed some interesting results.

Rapid7, the company that conducted the study, sent UPnP discovery requests to every routable IPv4 address. - IPv4 (Internet Protocol version 4) is a set of protocols for sending information from one computer to another on the Internet. A routable IPv4 address is one that can be contacted by anyone on the Internet. They found that over 80 million addresses used UPnP, and 17 million of these exposed the protocol that enables easy connection to the system or device. This can be easily exploited by hackers.

In other words, 17 million systems, many of which could be businesses, are open to attack through the UPnP device. This security threat opens networks to denial-of-service attacks which make resources, including the Internet, unavailable to the user. One example of a popular denial-of-service attack is a hacker making your website unavailable to others.

Can we do anything? Most experts are recommending that you disable UPnP on your networked devices. The first thing you should do however is to conduct a scan for vulnerable UPnP devices on your network. Tools like ScanNow (for Windows) can help you search. For many, this is a daunting prospect, as the chance of creating more issues is just too great.

We recommend contacting an expert like ourselves, who can conduct a security analysis and advise you on steps you can take to ensure you are secure. So, if you are worried about the security of your systems, give us a call today. We may have a solution for you.

Published with permission from TechAdvisory.org. Source.

February 7th, 2013

Productivity_May02_BThe Internet has forever changed our lives, and now we expect things to be instant, including our communication. Email has played a large part in developing these expectations, and has for the most part proven to be an immensely useful tool. Sometimes, a little too useful. It's not uncommon to hear business owners gripe about email overload. If this sounds like you, don't worry as there are things you can do.

Here are five tips on how you can better manage your inbox.

1. Address last Most people start an email by typing in the address of the recipient(s). While there is nothing wrong with this practice, it can lead to emails being sent before they are finished, which could mean more emails in your inbox asking for clarifications or you having to send a correction email.

To stop this, try writing the body of the email first and when you have finished, put the addresses of the recipients.

2. Merge social with email Sometimes it can be hard to know who you are writing or replying to in your email. Using an app like Rapportive, which brings social information into Gmail can help. This app puts a bar to the right-side of an email with information about the sender, including their social profiles, recent tweets and even links to their LinkedIn profile. You can look up your recipients and connect with them directly from the email.

3. Use links, not attachments With the increasing number of cloud storage and productivity apps like Microsoft SkyDrive and Google Drive which allow you to share files by sending people links, there's no need to attach files to an email. This is incredibly useful if you find yourself sending document versions back and forth on a regular basis and struggle to keep everything up to date.

These services use one version of the document that users you share it with have access to. Everyone sees the same document, which will cut down on the number of emails and confusion when it comes to version control of important documents.

4. Don't use email for everything Email is so quick and easy that we tend to rely on it for everything. However, there are certain situations when email is not the best form of communication. For example, if you have a tough problem, need to reprimand an employee, etc. it would not be a good idea to do so in email, it's just too impersonal.

As a rule of thumb: If there's any chance of human emotions entering into a response or being affected by an email, it may be a better idea to communicate face-to-face.

5. Cook all your bacn at once Bacn (pronounced Bacon) is solicited email; email you want, just not right now. Social media updates, newsletters, website update notifications, etc. are all forms of bacn. Checking these takes time and can be a distraction if you have work to get done. It would be a good idea to schedule a set amount of time where you focus on reading, deleting or archiving these emails.

Alternatively, you can unsubscribe from these alerts or set up a new email account that is just for this type of emails.

There are thousands of things you can do to make your email easier to manage. What do you do? Let us know. If you are looking for even more ways to manage your inbox, contact us today.

Published with permission from TechAdvisory.org. Source.

February 1st, 2013

Data is commonly defined as a collection of numbers, words, charts, etc. Every technological gadget produces data these days, and the processing of this turns it into information. It's this information that we use to make decisions, which generate more data. There is so much data available that it can be challenging to keep track of it all and turn it into valuable information for decision making. Because of this, the idea of big data has arisen. Media outlets have highlighted big data, causing many businesses to become curious about it. Are you one of them?

A study published in mid 2012 by Harris Interactive looked at what exactly big data is. The research polled 154 companies, more than half of which were small businesses, on what they think the definition of big data is. The results? No one really agrees on a definition of big data.

The survey found that 24% of respondents believed it's the technology that allows the management of massive amounts of data, while 28% believed it's the idea of massive growth of transactional data. The survey concluded that nearly 80% of businesses identify big data as some form of opportunity in the near future.

Beware of big data hype This goes to show that businesses are aware of the trend, and may feel that they have to be a part of it to gain any sort of competitive advantage in the near future. However, this is the wrong way to look at big data. The fact of the matter is, while big data is here to stay, many small business simply don't have the resources - monetary, staffing, knowledge, or otherwise - to launch big data initiatives.

Don't not focus on data The amount of data available and being generated is growing at an exponential rate, and even small businesses are overwhelmed with often unintelligible data. The danger is that if you turn your back on data you might soon find yourself lagging well behind your competitors.

If big data and ignoring data are out, what's left? The middle road, or in this case, small data. Take a look at your business and identify and prioritize the most important data for your business. For example, a dentist is probably going to want to know how many patients are walk-ins or appointments. From here, you can analyze the data and begin to pick out trends, anomalies and weaknesses, etc. Taking the dentist example above, if data identifies that walk-ins are 10 times heavier on a Monday morning, it may be better business practice to have more staff on Monday mornings to better deal with customer flow.

Baby steps leads to big data The key is to start in a small and manageable way. Focus on understanding critical data by getting to know how to collect and analyze it. This will provide a platform from which you can launch bigger data initiatives in the future. Once you are comfortable, you can introduce more advanced dashboards to better utilize your data. If you do methodically, you should be aligned perfectly to take advantage of big data when it becomes viable for all businesses.

Interested in learning more about data in your organization? Contact us today to see how we can help you.

Published with permission from TechAdvisory.org. Source.

January 25th, 2013

For as long as computers have been able to connect to the Internet, there have been security flaws and the two go hand-in-hand. Companies do their best to shore up security problems, and some do better than others. There's one popular Internet based program that has had a slew of security issues in the past year, prompting many experts to suggest you should disable it.

That program is Java - a programming language and application that allows developers to create web applications, and users to view much of the visual content and animations on the Internet. The problem isn't with the programming language per se, but with the application developed by Oracle Systems.

Oracle released an update to Java - Java 7, Update 10 - in December, but it was found to have some serious security flaws. These issues were quickly spotted by hacker groups who released exploit kits - software making it easy to exploit Java 7's security weaknesses - giving them full security privileges. This exposed any computer running Java 7 to potential malware and attack. Because Java runs at the browser level, every OS could be targeted. To make matters worse, 30 security flaws were patched back in September, after nearly 1 billion computers were found to be at risk.

It's this string of security red flags that had the US Department of Homeland Security issue a warning that users should disable Java on their browsers. In response to this, Oracle updated Java again,  to Java 7, Update 11 on January 12, and noted that the security flaw had been fixed. Many experts, including those at the Department of Homeland Security, aren't convinced though, and are still suggesting that users disable Java because new vulnerabilities will likely be discovered.

How do I disable Java? Chrome users

  1. Open Chrome and enter Chrome://plugins/ in a blank tab's URL bar.
  2. Find Java (TM).
  3. Click Disable.
  4. Restart Chrome.
Firefox users
  1. Open Firefox and click Tools from the menu bar at the top of the screen.
  2. Select Add-ons followed by Plugins.
  3. Find the Java plug-in, it's usually called Java Applet Plug-in (Mac) or Java(TM) (Windows) and click Disable.
  4. Close and restart Firefox.
Safari users
  1. Open Safari and click File followed by Preferences.
  2. Click the Security tab.
  3. Uncheck the box that says Enable Java.
  4. Close and restart Safari.
Internet Explorer users There is no way for you to disable Java in the browser, you will instead have to completely disable Java from your computer. This can be done by following the steps on the Java website.

If you do disable Java, some websites will no longer work. This can be a bit of an annoyance, but in all honesty, security of your systems is more important, not to mention the potential costs of dealing with a massive malware infection. Besides that, many websites no longer use Java, so you can probably get by without it. At the very least, we recommend you go download the latest update from the Java website and apply it to all computers.

One issue that we need to be clear on is that these security flaws are part of the Java plug-in. You may see something called JavaScript. While the name sounds similar, they are different. JavaScript is largely used in HTML documents, and allows them to function, and is secure. If you do run across it, it's best to leave the script alone.

If you would like to learn more about this update, you can visit an excellent FAQ here. Before you do update, or disable Java, we recommend you contact us. We can help advise you on what steps to take next if you use Java.

Published with permission from TechAdvisory.org. Source.

January 24th, 2013

The Boy Scouts are famous for their motto, 'Be Prepared'. And many live up to it. In an interview, Robert Baden-Powell, Founder of the Boy Scouts was once asked what they should be prepared for. His answer, "Anything". Companies should take this to heart, and always be prepared for every eventuality. One way this can be done is through Business Continuity - a plan or system that helps businesses get through disasters relatively unscathed. If you're looking to adopt a continuity plan, there's a few things you should prepare beforehand.

Here's four questions you should answer when looking into adopting a Business Continuity plan.

1. What systems need to be recovered first? A good idea is to request each department/role list their essential systems and rank them in the order they need them back online in order to do their jobs. From here, you can compare answers and rank them in priority. For example, If all roles say they need Internet connection back online first, you know that the Internet is the first system that needs to be recovered.

2. What do we need to assure customers of stability? For the majority of businesses, the customer is the lifeblood. However, most customers will only stick around for a limited amount of time before going to a competitor if your business can't meet their needs. To keep customers loyal during a time of disaster, you need to prove you are either stable, or working to get there. Some examples of this could be a backup site with basic functionality that can take the place of your main website if it goes down.

3. What do business partners require? Your business partners are just as important as your customers and are often the link between the two. With partners, you often have set requirements that you need to meet in order to continue order fulfillment and shipment. You need to be aware of what these are and the related systems. After all, how are you going to get your product to your customers?

4. Are there any contractual requirements with vendors? Businesses that work with suppliers or vendors often have contractual obligations such as payment due on a certain date, or a set product order volume to fulfill the contract. As with business partners, you need to be clear on what these obligations are, and how you meet them. For example, if you pay a supplier on the 10th of every month, most will expect payment on the 10th, regardless of if you are operational or not.

Once you have the answers you needed you can take a step back and try to come up with a timeline of how long continuity actions should take and what your priorities are. From here, you can draft an actual plan, or look for vendors that can work with your systems and provide a continuity plan or service that meets your needs.

If you are looking for a business continuity system for your business please give us a call, we may have a solution that fits with your business.

Published with permission from TechAdvisory.org. Source.

January 10th, 2013

For users of Windows systems the threat of a security breach is an ever-present one that has many security experts constantly worrying. The thing is, many systems are secure enough from outside attacks, and many scammers know this. As a result, scammers have switched tactics and have taken to masquerading as Windows technicians, hoping to get users to give up their credit cards.

These scams have long been a part of the Windows environment. Despite users being fully aware of these attacks, some people still falling into the trap.

These deceptions generally follow the same formula: A person calls you pretending to be from the Windows technical team at Microsoft. The scammer usually tells you that they need to renew their software protection licenses to keep their computer running.

Most of the time, these scammers spread the conversation out over a number of phone calls and emails, the goal being to gain the trust of the user. Once trust is established, or the user seems interested enough, the scammer will offer a seeming sweet deal: They will offer a service that will make your computer run like new, usually for a seemingly reasonable price.

The scammer will then use remote PC support software to show you 'problems' your computer is having. They will usually show you the Windows Event Viewer - a part of the OS that shows errors, usually harmless, that your computer has generated. The scammer will then convince the user that these errors are harmful, and if you have paid, they will make it look like they are cleaning your computer.

If you give them your credit card number, you will likely see ridiculous charges, or even have people trying to access your accounts.

What's being done? Governments are aware of this increasingly common trend, and some organizations, like the FTC, have taken measures to shut down scammers. This article from ars technica gives a good overview of what exactly the FTC is doing, while another article provides a first-hand account of how the scammers operate.

What can we do? While action is being taken, these scams are still continuing. From what we can tell, they likely won't stop in the near future. To ensure you don't fall prey to this trickery, these five tips should help you identify when an attempted scam is at play:

  1. Microsoft doesn't call people.
  2. Windows Event Manager is a log of errors for ALL programs.
  3. Microsoft employees will never ask for your passwords.
  4. Most of these scammers operate out of call centers in India, but bill from the US.
  5. Microsoft employees won't usually ask you to install software that's not made by Microsoft.
As a rule of thumb: If you get an unsolicited call about your computers and IT security, it's likely not genuine. If these criminals provide you with a website, do a quick Google search to see if there have been any scam reports. You can also join the No-Call Registry if you are in the United States. To learn more about these scams, please contact us.
Published with permission from TechAdvisory.org. Source.

January 9th, 2013

To many, the entrepreneur is viewed with admiration and jealousy. How come you have to work long hours for a company that doesn't really care about you while the entrepreneur gets to run their own life and have a seemingly perfect work-life? This view, as many business owners know, is often a laughable one as work-life balance can be non-existent. It doesn't have to be this way however and with a little work on your productivity you can actually get something akin to a good balance.

Here are three tips to help small business owners or managers be more productive and from that achieve a more desirable work-life balance.

Learn how you spend your time To be productive, you need to know how you spend your time. The easiest way to do this is to keep a log, or journal, of what you do each day. You should include everything you do in relation to work, including: travel time, Facebook breaks, time spent checking emails, meetings, etc.

The goal here is twofold. Firstly, you get a solid glimpse of how you spend each day; secondly, you can see if there is anything you do that takes up way too much time. Some experts suggest you do this for a week at least. To get the best results though, it would be better to do this for at least two weeks to a month.

There are a number of different ways you can go about journaling your activities. For the old-fashioned among us, go buy a day-timer that has at least one page per each day. For the more technical, your email programs like Outlook or Gmail have powerful calendars that you can record activities on. For the mobile crowd, mobile versions of Outlook, Google Calendar or even your phone's native calendar app will work great.

When you have your day timer/calendar app, it's time to start recording your activities. Record when you start one, and when you finish. From there, clearly label the activity. Over a few weeks, or even days, you will begin to see a clear picture of how you spend your time.

Plan to be more productive After you have figured out where you spend your time, you can begin to schedule around your strengths and weaknesses. The key here is to schedule time that is uninterrupted so you can focus on one task. If you find that you are checking your email every five minutes, it may be a good idea to schedule time in the morning and just after lunch for checking and replying to emails. When you aren't in that time period, you can work in a focused way on something else.

By sticking to a more rigid schedule you will find your productivity starts to rise. If you are having a tough time keeping to a set schedule, try using the pomodoro technique. This is where you set a certain amount of time for one task, and gradually increase the amount of time you focus on that task.

Play off your strengths If you are a small business owner, chances are you wear lots of hats. One minute you're wearing a spiffy salesperson hat while the next you're wearing an HR hat. This constant switching of roles, or doing everything yourself, is not good business practice.

If you are aware that you are constantly spending time on bookkeeping and yet hardly get anything done because you lack the necessary accounting skills, it may be a good idea to look into hiring a part-time accountant.

Many business owners struggle with delegation, as they feel the need to control everything. One way to challenge this idea is by looking at your hourly rate. If you charge $100 an hour and an accountant is $50 an hour, it makes sense to hire the accountant instead.

By outsourcing, you will find that you have more time to focus on what you're good at. As a result your productivity will rise and a better work-life balance will soon follow. If you'd like to learn more about how our IT systems can help make you even more productive, please contact us.

Published with permission from TechAdvisory.org. Source.