You are currently browsing the Confessions of a Network Administrator weblog archives for January, 2012.
31. January 2012 by admin.
My company, Networking Delaware, spends much of its time and energy trying, with various degrees of success, to protect our clients from attacks by everyone from established hackers to script kiddies. It is very disheartening to work to harden a network only to have it compromised by an uninformed employee clicking some tempting link in a phishing email.
To this end we were very happy to learn the following:
Google, Yahoo, Microsoft, PayPal, Facebook, LinkedIn, Comcast and AOL along with seven other companies are backing a new initiative intended to dramatically reduce “phishing” emails. This type of email attack is the most prevalent method hackers use today to breach security. It is as much of a Trojan Horse as contemporary Trojan malware is, and just as effective. For the hacker, it is safer and costs them less in time and energy than hacking directly at hardened systems with safeguards in place.
To achieve this protection, the firms have created DMARC.org, a working group of 15 companies that plans to promote a standard set of technologies that they say will lead to more secure email.
PayPal, for instance has been using these authentication technologies with Yahoo’s email service since 2007 and with Google’s gmail since 2008, and is now blocking about 200,000 fake emails per day
It is said it won’t cost a lot for companies to start using the standards, but it will require them to identify every server that sends email and ensure that the technologies are in use. The same holds true for third-party firms such as marketing agencies that send email on behalf of a company
The DMARC working group officially launches Today, January 31st
While I see problems ahead for implementation, this is a good step in the right direction.
Posted in MicroSoft, Phishing, Social Engineering, Windows, email, Acceptable Use, e-mail, Malware | Print | No Comments »
7. January 2012 by admin.
At least that is the goal… Data redundancy. When your data is in one place and one place only, it’s just a matter of time before you have no data at all. If your data is just at one location, regardless of how many copies there may be, you are flirting with disaster in the form of fire, theft, or natural disaster. There is a rule called the 3-2-1 Rule for Backups: Have 3 copies of your data, stored on 2 different media, and keep 1 off-site.
Here is my suggestion:
Have primary data on two mirrored drives. This is to avoid any data loss should a hard drive crash. With mirrored drives (RAID 1), if one drive crashes the other continues as if nothing ever happened.
Have that data backed up to a local backup drive. (Forget Tape… that’s yesterday’s technology. See our article at http://www.networkingdelaware.com/tape.html ). This local backup is for several reasons… hard drive controllers do go bad as do motherboards. If this causes the data on both mirrored drives to become corrupt, you will be ever so happy you had a local backup. Also, a local backup drive is the quickest, easiest and most convenient location from which to restore data… the more data you have to restore , the more important that you have it on a local backup source.
Finally, keep a copy somewhere else. If there is a fire, or flood, or tornado, or burglar, or vandal, or disgruntled employee or any of a hundred other reasons that everything just goes “poof”, your data is still available. You can always buy a new computer but your data is always going to be many, many times more valuable then the equipment that houses it.
For these off-site backups I strongly suggest keeping your data in “The Cloud” using programs such as the very reasonably priced service called Backblaze (http://www.backblaze.com/partner/af2651 ). Several reasons come to mind: In keeping with our redundancy concept, most”Cloud Backup” vendors save your data at geographically separated co-locations… this protects them from data loss and gives you additional protection as well. Data can be restored from almost anywhere an Internet connection is available. Your data is encrypted using military grade encryption; when the backup is created, as the backup is being transmitted and as your data is being stored, your data is always safe from prying eyes. Most will mail you a hard-drive populated with your data in case a bare-metal recovery is required.
So Backup your data… Don’t be a statistic… like the 70% of businesses that go out of business when data loss occurs.
From down in the trenches… I’m Tom
Posted in Backup, Disaster Recovery, The Cloud, Malware, Administration, File Recovery, Computers | Print | No Comments »
4. January 2012 by admin.
The relatively new WLAN spec for 802.11n makes many promises… faster speeds, farther reach, stronger connections, more secure… well, maybe.
The new frequencies lie somewhere within the 5 GHz band. Why do I say “somewhere”? Because this new “standard” uses a technology called DFS which stands for Dynamic Frequency Selection. In essence the channel can be automatically changed to avoid interference. Sounds good huh? … well, maybe.
Does 5 GHz sound familiar to some of you? That may be because it is also where all 12 channels of the three “Unlicensed National Information Infrastructure” (UNII) 5 GHz bands live. That’s also where my cordless phone calls home. The U.S. military sometimes runs in 5 GHz as does weather radar and others. Starting to sound a little crowded?
So it falls to the equipment vendors to develop their offerings in such a way as to avoid these problems… well, maybe.
The vendor must get its products that use DFS, certified by the FCC for use in 5.25 to 5.35 GHz and 5.47 to 5.725 GHz ( painfully close to my 5.8 GHz phone system). If not, they have to block those channels, which means you won’t have access to the whole available block of frequencies.
You probably won’t want to run important applications on the UNII-2 bands because these are the areas where DFS channel changing may be an ongoing problem for your location. This is going to result in a lot of delays and an unreliable wireless network. Some systems actually have to reboot after traffic has been switched to a different location in the electromagnetic spectrum.
So yeah… it’s going to be cool…. maybe. Check things out carefully before you toss a lot of cash into any particular deployment strategy.
Good Luck and Good Networking.
From down in the trenches, I’m Tom
Posted in DFS, 802.11n, FCC, WLAN, Wireless, Networking, Troubleshooting, Computers | Print | No Comments »
4. January 2012 by admin.
I just read that Windows XP lost more than 11 percent of its market share from September to December 2011, dropping to an average of 46.5 percent in December. It is estimated that Windows 7 will surpass XP installations sometime in April of 2012. Is the reason for this because people honestly believe XP is old school? From my experience, I seriously doubt it. Most likely the driving force is Microsoft itself and their announcement that XP support will be ending soon. ( April of 2014 qualifies as soon?) That should be enough to get corporate America looking at the next best OS, which without question is Windows 7, but assuming the Mayans are wrong and we are still here on the planet in 2014, I would wager there will still be a large group of XP users ( more than 10%)who would rather fight than switch.
Other driving forces (again Microsoft) is the dead end for XP users who prefer Internet Explorer. Since IE9 won’t run on XP its users are forced to use an alternate browser or upgrade to Win 7.
I do Like XP and always have, but in my personal opinion, Windows 7 is the best operating system Microsoft has developed to date. From what I hear about Windows 8, it is trying to be all things to all people and that just won’t fly with serious users and corporate I.T. departments. Vista? Bah ! The modern incarnation of Windows ME! A waste of electrons.
Stick with XP for as long as you want. Networking Delaware (http://www.networkingdelaware.com ) will support you for as long as possible. When Microsoft stops releasing security updates it will behoove you and I to retire XP for good, but until that day… stand fast if you like XP… don’t be bullied!
Posted in Windows 7, Windows Vista, Windows ME, Windows XP, OS's, Networking, Patches, Operating Systems, Computers | Print | No Comments »