Search

Dan's Blog

Don't Be a Money Mule!

WARNING: International scammers that operate beyond the reach of U.S. Law are using ordinary citizens to help them funnel illegal money to their accounts. You can easily be duped into taking part in this scheme if you are not careful.

So how does it work?

Here’s how, in story format:

Mr. Scammer, currently residing in the Czech Republic, wants to be rich, so he decides to rob a bank located in the United States. He chooses a bank, which we’ll call “U.S. Bank,” because it has some very wealthy customers and its security for online transactions doesn’t seem too strict. Starting with a list of bank customers, Mr. Scammer tries different nefarious means of guessing usernames and passwords. Because he’s casting such a wide net over a lot of customers, he increases the odds that he’ll get lucky. And indeed, after several weeks, he is finally rewarded with a welcome screen to a corporate bank account. Searching through the account, he finds that there is over a million dollars sitting there, just waiting to be taken. Mr. Scammer gets very excited. He sees himself sitting on the beach in Cabo San Lucas, mai tai in hand, pretty girls all around, and plenty of warm sunshine.

Read more...

 

Going Incognito: Browsing Without Leaving a Trail

If you want to browse to websites without leaving a trail, there is a special mode called “Incognito” when using the Google Chrome browser. Any website you visit while in the incognito mode will not be recorded as part of your browsing history. The incognito mode also prevents your browser from storing any cookies or recording the fact that you downloaded a file. Essentially, the incognito mode leaves no trace whatsoever of any website you’ve visited while browsing.

To enable this mode while in Chrome, you can hit the Ctrl+Shift+N (Windows) or ⌘-Shift-N (Mac). Or, you can simply search for the wrench icon in the upper right side of an already open browser window, pull down the menu and select the “New incognito window” item.

Read more...

 

IPv6 Switchover – Sooner, Not Later

This evening I’m trying out eyeglasses for the first time. I’ve never had to wear glasses before, but then, I’ve never turned 50 before either. I suppose everything wears out with age, and my eyes are no exception. The glasses are the “progressive lens” type, which means that the focal length changes gradually as I look through different parts of the lens. Basically, the lower the angle I cast my eyes, the shorter the focal length. Thus, the lower part of my vision looks distorted, and since I’ve developed astigmatism in my eyes over the years, the glasses, which now correct for it, gives me the illusion that the earth is on a slant.

Anyway, what does this have to do with my blog? Well, I’m going to stretch a bit and say that as things get older, they change, and so it is with IPv4. IPv4, the currently deployed protocol that carries Internet traffic, has just about hit its limit. Its replacement, IPv6, is on its way in, and it seems to be accelerating in popularity. For example, Google just enabled YouTube for IPv6, and instantly, they were flooded with IPv6 traffic. Apparently there are a lot of early IPv6 adopters out there just waiting for the popular sites to implement the new Internet standard so they can be among the first to use it.

Read more...

 

Online Credit Card Transaction Security

I’ve written many times in the past about personal security when online, and I’ve assumed all along that banks are operating in your best interest. Now, from left field, comes a recent study from the Computer Laboratory at the University of Cambridge (UK) that is highly critical of recent online security developments in the banking industry. At the heart of the matter is something called “3-D Secure” or “3DS” You may see the brand names “Verified by Visa” or “MasterCard SecureCode” being used to reference the 3DS technology.

The 3DS technology was developed for the purpose of minimizing online fraudulent credit card transactions. As such, much of its implementation consists of a new set of agreements that allows merchants to take on less liability for fraudulent transactions. (Good for merchant.) However, it also allows banks to pass more of the liability for fraudulent transactions on to the customer. (Good for bank. Bad for customer.)

Read more...

 

Counting Calories

My weight-control method involves watching the calories I take in every day and counting them against the calories that I burn. The question is, how many calories does my body burn in an average day? You can find a good answer to that question at the calorie calculator on the Calories-Per-Hour website.

So given my age, height, gender and activity level, the calorie calculator says that I burn about 2,700 calories a day. To not gain weight, I need only make sure I don’t exceed that number in calories that I eat.

Read more...

 

Resurrecting an Old Gateway PC

Gateway PC
A few years back, I decided to mothball an old Gateway PC that I’d purchased back in 2002. I hadn’t scavenged it for parts, so it remained intact at the back of the coat closet under the stairs. Quite frankly, I forgot I had it until I went digging through the coat closet about two weeks ago. “Oh yeah,” I said when I stumbled across it. “I remember this thing. I wonder if it still works.” I thought it might be worth spending some time to see if it worked, and if so, it would make a nice desktop for my wife, who’s been using an old beat-up laptop for the past year or so.

So I plugged in the little beast, turned it on, and it came to life. It ran, albeit very slowly. My senile 50-year-old brain suddenly remembered that before I mothballed the PC, it was under heavy use for a year or two, and registry-induced constipation had slowed it to a crawl. I decided to reinstall XP on it and see if I could get it running at a decent clip again.

Read more...

 

Website Getting Redirected to Blogger: What's Up With That?

A friend of mine contacted me via email this morning and had an interesting problem to solve. Until about a year ago, he had a personal blog at Blogspot (now Blogger), where he posted a lot of content.  For the sake of argument, the blog’s URL address was www.xyz.blogger.com. At the time, he had the basic URL www.xyz.com reserved through another server, but he decided to use the blogger URL instead because of its ability to get him blogging without the hassle.

About a year ago, he took a hiatus and did not post any content. In fact, he pulled down all the content on his Blogger site, and the whole blogging experience was put on hold.

Now he wants to begin blogging again, but he prefers to NOT use the Blogger site, but would rather use the www.xyz.com site instead. The problem was, however, that every time he put the www.xyz.com address into his browser, he somehow ended up back at the old Blogger site, which by this time, had nothing but a blank page.

Read more...

 

The Best Security Policy: Logic

Though I don’t consider myself an expert on network security, I have learned a lot over the years, and I have come to appreciate the essential role that simple logic plays in security. For example, you wouldn’t lock a door and then hang the key on a string tied to the doorknob, would you? It doesn’t make sense; therefore, it is bad security policy.

I found a good example of how a failure in basic logic resulted in an online theft of nearly a million dollars. For more details, you can see the blog on Krebs Security. Basically, it all boiled down to a bank customer who had a password that was broken. Breaking passwords is a full-time occupation for lots of criminals, because it pays so well. In this particular case, a password to an online bank account was broken, and the cyber thief proceeded to get money from the account.

Read more...

 

Scexting: Part 2

This is a follow-up blog to an earlier post where I coined the word “scexting” to describe being scammed by a mobile phone texting operation. In the article, I described how both my wife and I fell victim to separate online scams that asked for our cell phone numbers. Well I’m happy to say that even though I called the scamming company twice and asked them to CANCEL the charge, this month’s phone bill showed the charge nevertheless.

Luckily, the folks at T-Mobile were once again willing to remove the amount from my phone bill. During my conversation with the T-Mobile agent, I learned that you can ask them to disqualify any extra charges on your cell phone account. Unfortunately, this will result in disabling the downloading of ringtones. In my case, that makes no difference. I have no need to listen to a Britney Spears song when someone calls me on my mobile phone.

Read more...

 

Security on a Difficult Day

I’ve had a very difficult day today. The cat is very sick and very old, and frankly, I thought this was going to be her last day. So I spent most of my free time with her, and I suspect it’ll be that way until she passes. Thus today’s blog is a really short.
Cat in office chair

I’ve been on a “security kick” lately and came across some good websites that explain the topic very clearly. In particular, I’ve been spending a lot of time on Brian Krebs’s site. Brian has been writing for the Washington Post for a number of years, and he’s collected a lot of good information on security.

Read more...

 

Is There Money in Social Media?

About a year ago, a vice president at the company I work for decided that we needed to add a social media (SM) site to our company’s web presence. At the time, the company already had a significant website with many branches – one for each product market. But the stigma of SM was beginning to pique our interest, and the vice president thought that adding a SM presence would create more “Groundswell” and, ultimately, bring in more customers.

It was all an experiment at the time, and we knew little about what we were doing, so we consulted with some “experts” on the topic. In retrospect, this was probably a mistake, as many of the experts turned out to want to sell us their solution. We came up with a plan and moved forward with it. The plan involved the creation of a Social Media website, and we would help it grow by seeding it with interesting content. Against my personal advice, we contracted a vendor to provide a social media website, which included a server and a battery of training videos. The cost? About $45,000 for the first year.

Read more...

 

Websites that Smell

A few months ago, I visited Universal Studios and watched a show that featured, among other things, a sense of smell to go with the movie. It was an interesting idea, and it added to my sense of immersion into the movie.A skunk on a website?
But like all great ideas, one must be careful not to run too far with it.

The website at noseknowsconsulting is promoting the idea of hosting online webinars that … well … smell. When you register for a webinar, you provide your snail mail address so that the host can send you a smell-kit that you hook up to a USB port. The idea is that at certain key points during the webinar, the host can activate certain aromas for the viewing audience.

Read more...

 
More Articles...
Advertisements

Artisteer - CMS Template Generator