Archive for June, 2017

Guest Post: NordVPN Discusses The Latest Ransomware Attack & Steps to Protect Your System

Posted in Commentary with tags on June 28, 2017 by itnerd

Another round of ransomware assault has just hit over 2,000 global targets, including Danish shipping company Maersk, US pharmaceutical company Merck, and many private and public institutions in Ukraine.

Unlike WannaCry attack that hit seven weeks ago, the latest attack seems to be more solid, without the previous design flaws. Security companies are confident the Petya ransomware uses the same software exploit in Microsoft products that WannaCry was able to exploit. Symantec says it has confirmed the ransomware is using the EternalBlue vulnerability that is believed to have been developed by the NSA.

Originally called Petya, the current ransomware emerged in 2016, and no re-appeared with upgrades, such as better encryption. Some call the new iteration “NotPetya” or “GoldenEye.”

“The latest ransomware assault seems to be particularly dangerous,” said Marty P. Kamden, CMO of NordVPN, “One of the best protection mechanisms are patches, but they might not always work with this new version of Petya. Another way to protect yourself is to disrupt a system before it boots, as the ransomware runs on boot. After the device gets infected with a ransomware, it will wait for about an hour until reboot. Reboot is required for a malware to encrypt the system, so in certain cases, if the device gets terminated in the encryption process, it gets disrupted and information can be saved.”

“Generally, system administrators are still not well-prepared to protect their networks, and these attacks will only keep getting worse,” he added.

Here is NordVPN’s advice about protecting a network from latest ransomware attack:

  1. Power down when unusual messages pop out. If you encounter a “Check Disk” message, quickly power down to avoid having the files encrypted by the ransomware.
  2. Know which file to block. Stop the spread within a network from the Windows Management Instrumentation by blocking the file C:\Windows\perfc.dat from running. If such a file doesn’t exist yet, create it yourself and make it read-only.
  3. Protect local credentials. Use Microsoft’s Local Administrator Password Solution to protect credentials that grant network privileges.
  4. Always install latest security updates. Security updates often contain patches for latest vulnerabilities, which hackers are looking to exploit.
  5. Don’t open anything suspicious you get through email. Delete dubious emails from your bank, ISP, credit card company, etc. Never click on any links or attachments in emails you’re not expecting. Never give your personal details if asked via email.
  6. Backup all data. Backup your data in an alternate device and keep it unplugged and stored away. Backing up data regularly is the best way to protect yourself from ransomware because only unique information is valuable.
  7. Use a VPN for additional safety. Using a VPN when browsing can protect you against malware that targets online access points. That’s especially relevant when using a public hotspot. However, keep in mind that while a VPN can protect malware from spreading while it’s connected, it cannot protect you from downloading the malware. While a VPN encrypts your activity online, you should be careful when downloading and opening certain files or links.
  8. Close pop-up windows safely. Ransomware developers often use pop-up windows that warn you of some kind of malware. Don’t click on the window – instead, close it with a keyboard command or by clicking on your taskbar.
  9. Use anti-virus programs. Make sure you have installed one of the latest reputable anti-virus programs to make sure you are fully protected.

 

Guest Post: Printer’s Remorse: Five signs your company isn’t doing enough to join the digital age

Posted in Commentary with tags on June 28, 2017 by itnerd

By: Mohan Mailvaganam – Director of Digital Process Automation at Xerox Canada

As the work world around us speeds into the digital age, more of us are beginning to feel printer’s remorse.

We get the email with a document attached from a colleague or a client. We open it and read it on our computer screen. And then — for a variety of reasons that usually can’t be justified — we hit print.

As the printer hums to life and spits out pages, the feelings of regret and doubt begin to sink in. Did I really need to make a hard copy of this? Did I just waste my time and my company’s resources? Chances are the answer is staring you right in the face from the recycling bin filled with pages that other colleagues have already read and discarded.

Even without seeing the hard numbers that prove how digitizing work processes and reducing our reliance on paper can save significant time and money, we get an inkling in our guts — all that paper shuffling from hand to hand must be lethal to efficiency and productivity.

But still, companies of all sizes — from small- and medium-sized businesses to large corporations — forge ahead and hit the print button far more than they should.

The recent findings from Xerox’s Digitization at Work report reveal that less than 50 percent of IT decision-makers currently use processes that are mostly or fully digitized.

With that in mind, here are five signs you aren’t doing enough to realize the benefits of going digital:

1) You have no idea how much paper you use on a daily basis, let alone why.

Without the right data in hand on print habits, it’s difficult to uncover the hidden opportunities for digitization. You’re stuck guessing on what might work, which is never as reliable as well-analyzed data. Armed with solid print analytics, company executives can then make informed decisions about optimizing or automating key processes.

2) You don’t understand the difference between bad and good paper.

“Good” paper refers to documents that have a valid reason to be in hard-copy form, such as documents that originate on paper, like customers’ handwritten letters or documents that require a “wet ink” signature.

“Bad” paper refers to documents that are in paper format, but without any compelling reason to be so. These could include documents that were printed from digital originals or documents that get shared, stored or transported using physical systems.

Understanding the distinction between them helps identify where you really need to use paper, and where you can get rid of it.

3) Your leadership and your workforce aren’t on the same page.

Going digital involves changing the way people work and how they think. People fear the unknown so communicating the reasons and benefits of change is crucial. By far, the greatest barrier to change is institutional culture. There has to be company-wide buy-in to effect real change.

4) You’re storing reams of documents because you ‘have to’.

Many organizations are required to retain a variety of documents for regulatory reasons. In the past, that used to mean banker’s boxes and multiple copies of the same paperwork. In many cases, government agencies and regulatory bodies now accept digital versions and electronic signatures.

5) Your company isn’t as competitive as you think it should be.

The weight of paper-based processes is holding many Canadian firms back from keeping up with competitors who have already made the digital transformation. Unnecessary paper use wastes resources, undermines productivity, bogs down workflow and prevents them from realizing advantages derived from becoming digital enterprises.

Keep an eye out for these tell-tale signs your ties to paper are too strong. Just recognizing you may have a problem is a good start that you need to get your digital house in order. And it’ll help you avoid those bad feelings you get waiting by the machine for those papers you never needed to print.

Waze Serves Up Some Canada Day Driving Data

Posted in Commentary with tags on June 28, 2017 by itnerd

Waze has some interesting driver data for Canada Day. Now Canada Day will be celebrated on Saturday, July 1st this year but was celebrated on Friday in 2016 which creates the baseline average. For this reason, Thursday – Monday was selected to be studied as the holiday weekend. Whether or not the national holiday is observed on an additional week-day this year (Friday June 30th or Monday July 3rd) is unclear and therefore it might be hard to scope out traffic surges for these days.

TRAFFIC ALERT CHANGES BY METRO

Ottawa
ACCIDENT

  • increased by 150 % on Thu
  • decreased by -48.3 % on Fri

JAM

  • increased by 71.4 % on Thu
  • decreased by -78.4 % on Fri

ROAD CLOSED

  • decreased by -81.8 % on Thu
  • decreased by -54.5 % on Fri
  • decreased by -71.4 % on Sat

POLICEMAN

  • increased by 56.7 % on Sat
  • increased by 61.7 % on Sun

HAZARD

  • increased by 28.2 % on Thu
  • increased by 27.5 % on Sun

Montreal

ACCIDENT

  • increased by 62.3 % on Thu
  • decreased by -38.9 % on Fri
  • increased by 47.4 % on Mon

JAM

  • increased by 53.5 % on Thu
  • decreased by -67.1 % on Fri
  • increased by 78.7 % on Sun
  • increased by 36.9 % on Mon

POLICEMAN

  • increased by 15.4 % on Thu
  • increased by 32.6 % on Sun

HAZARD

  • increased by 17.4 % on Thu
  • decreased by -33.6 % on Fri
  • increased by 24.3 % on Sun

Vancouver

ACCIDENT

  • decreased by -55.6 % on Sat
  • decreased by -43.8 % on Sun

JAM

  • increased by 57.8 % on Thu
  • decreased by -45.7 % on Fri
  • decreased by -55.4 % on Sat

ROAD CLOSED

  • decreased by -47.1 % on Thu
  • increased by 66.7 % on Sat

POLICEMAN

  • increased by 33.3 % on Sat

HAZARD

  • increased by 54.7 % on Thu

Toronto

ACCIDENT

  • increased by 34.1 % on Thu
  • decreased by -30.6 % on Fri

JAM

  • increased by 26.3 % on Thu
  • decreased by -61.1 % on Fri
  • decreased by -37 % on Sat

ROAD CLOSED

  • decreased by -42.3 % on Fri
  • decreased by -41.9 % on Sat

POLICEMAN

  • increased by 32.2 % on Sat
  • increased by 13.7 % on Mon

HAZARD

  • decreased by -45.1 % on Fri

WORST TIMES TO DRIVE BY METRO (compared to baseline average for each day)

Ottawa

  • On Thu the worst time to drive is between 8pm and 10pm
  • On Fri the worst time to drive is between 9pm and 11pm
  • On Sat the worst time to drive is between 10am and 12pm
  • On Sun the worst time to drive is between 2pm and 4pm
  • On Mon the worst time to drive is between 1pm and 3pm

Montreal

  • On Thu the worst time to drive is between 6pm and 8pm
  • On Sun the worst time to drive is between 4pm and 6pm
  • On Mon the worst time to drive is between 3pm and 5pm

Vancouver

  • On Thu the worst time to drive is between 1pm and 3pm

Toronto

  • On Thu the worst time to drive is between 1pm and 3pm

 

WORST TIMES TO DRIVE BY METRO (amount of drivers on the road)

“Largest number” = worst time to drive

Ottawa

  • On Thu the largest number drivers are on the road between 3pm and 5pm
  • On Fri the largest number drivers are on the road between 12pm and 2pm
  • On Sat the largest number drivers are on the road between 10am and 12pm
  • On Sun the largest number drivers are on the road between 1pm and 3pm
  • On Mon the largest number drivers are on the road between 3pm and 5pm

Montreal

  • On Thu the largest number drivers are on the road between 3pm and 5pm
  • On Fri the largest number drivers are on the road between 11am and 1pm
  • On Sat the largest number drivers are on the road between 1pm and 3pm
  • On Sun the largest number drivers are on the road between 2pm and 4pm
  • On Mon the largest number drivers are on the road between 3pm and 5pm

Vancouver

  • On Thu the largest number drivers are on the road between 3pm and 5pm
  • On Fri the largest number drivers are on the road between 3pm and 5pm
  • On Sat the largest number drivers are on the road between 11am and 1pm
  • On Sun the largest number drivers are on the road between 2pm and 4pm
  • On Mon the largest number drivers are on the road between 3pm and 5pm

Toronto

  • On Thu the largest number drivers are on the road between 3pm and 5pm
  • On Fri the largest number drivers are on the road between 12pm and 2pm
  • On Sat the largest number drivers are on the road between 12pm and 2pm
  • On Sun the largest number drivers are on the road between 2pm and 4pm
  • On Mon the largest number drivers are on the road between 4pm and 6pm

 

New Book on C# Shows How to Build and Automate Security Tools

Posted in Commentary with tags on June 28, 2017 by itnerd

The latest addition to No Starch Press’s robust lineup of security books, Gray Hat C# ($39.95, 304 pp., June 2017) aims to help computer security professionals streamline their workday and bulk up their security toolkit. This practical guide to C#’s powerful set of core libraries shows readers how to build tools to automate security tasks, like writing offensive exploits, automating scans for infrastructure vulnerabilities, reading offline registry hives, and creating custom cross-platform payloads.

cat.gif

Many computer security professionals rely on automation to get the job done but can feel limited by the tools available on any given system. With some help from Gray Hat C# and Mono, an open source project that allows for cross-platform development, infosec professionals will have the power to write their own tools to run on Windows, OS X, and Linux.

Following a crash course in C# and some of its advanced features, readers learn to:

  • Write fuzzers that use the HTTP and XML libraries to scan for vulnerabilities like SQL and XSS injection
  • Generate shellcode in Metasploit to create cross-platform payloads
  • Automate commonly used pentesting tools like Nessus, Cuckoo Sandbox, and sqlmap to scan for vulnerabilities and exploit SQL injections
  • Parse and read offline registry hives to dump system information
  • Write a .NET decompiler for OS X and Linux

Gray Hat C# arrives in bookstores everywhere this month.

StaffConnect Announces Strong Customer Momentum

Posted in Commentary with tags on June 27, 2017 by itnerd
StaffConnect Group has announced record results with continued exponential customer adoption across Europe, North America, APAC and the Middle East, adding global brands in virtually every industry vertical – including manufacturing, healthcare, travel and telco.  The StaffConnect Platform together with its management console and unique AppSuccess program continued to be met with overwhelming market acclaim, leading to a 55% customer acquisition growth over the same period last year.
Research has proven time-and-again that employee satisfaction is critical for businesses to reach their full potential, with employee engagement serving as a critical component in overall satisfaction levels. Yet, according to Gallup, only 13 percent of employees worldwide are actually feeling engaged at work. The situation is only slightly better in the U.S. – with about one-third (32 percent) of American workers reporting feeling involved and enthusiastic about their job.  And, research by Temkin Group shows that as company size increases, engagement decreases.  With these statistics in mind, it makes sense that C-level executives in forward looking companies are recognizing the strategic importance of building a business case for employee engagement, realizing how the employee experience of company culture links to end customer satisfaction, and bottom-line corporate profits.
 
The StaffConnect Platform transforms how employers reach, communicate and engage with employees, and how employees engage with each other – regardless of what they do, or where they are located.  The StaffConnect platform features an interactive app, an intuitive console and an inspiring success program:
  • StaffConnect App – unites the entire workforce from the field to the boardroom – enabling all employees to engage with company communications and connect with and be inspired by corporate goals. Employees are empowered to express views and share knowledge across business-lines, titles and geographies; thereby increasing employee job satisfaction, loyalty and retention. The StaffConnect app is designed specifically to deliver a better employee experience, which ultimately leads to better served customers, greater customer loyalty and increased revenues. Discover the app: http://www.staffconnectapp.com/staffconnect-app/
  • Management Console – provides authorized administrators a powerful yet simple tool to manage all aspects of the StaffConnect Platform. Reports and dashboards offer invaluable insight into employee engagement levels, in order to analyze and understand each individual, as well as the overall organizational, employee experience.  See the Management Console: http://www.staffconnectapp.com/staffconnect-admin-console/
  • AppSuccess Program – consists of customized consultations with a domain expert(s) to define a winning internal communications strategy, ensure a successful program and app launch, accelerate user adoption, and provide a pathway for feedback in order to continuously maximize app and program performance.  Learn about AppSuccess: http://www.staffconnectapp.com/appsuccess/

For further information, please visit: www.StaffConnectApp.com.

Asus And ROG Introduces The World`s Thinnest Gaming Laptop

Posted in Commentary with tags on June 27, 2017 by itnerd

The Republic of Gamers (ROG) Zephyrus is the world’s thinnest gaming laptop (17.9mm) offering an unparalleled PC gaming experience for today’s highly mobile gamers, and is now available in Canada.

image005.jpg

The ROG Zephyrus is the result of persistent dedication to gaming innovation from ASUS. It’s cooled by the exclusive Active Aerodynamic System (AAS) that runs cooler and quieter without sacrificing performance and is designed to increase air flow volume by 20 per cent. It is powered by 7th Gen Intel Core i7 and NVIDIA GeForce GTX 1080, with 120Hz Full HD G-SYNC display.

Additional features include:

  • Greater Efficiency with NVIDIA GeForce GTX 1080 and Max-Q Design
  • ROG Exclusive Design and Cooling System
  • Perfected Gaming Keyboard with Aura Lighting Effects and Innovated Touch Pad with Ten Key Function
  • Ultra-Smooth Gaming Visuals and Versatile Connectivity

The laptop is also set up with Windows 10 Pro Creators Updates, which improves PC games performance via the all-new Windows Game Mode and easily performs on native game-streaming with Mixer, Microsoft’s streaming service.

The ASUS ROG Zephyrus GX501VI-XS74 is priced at MSRP $3499 and is available immediately from BestBuy.Ca, Canada Computers, Memory Express, NCIX, and Newegg.ca.

To learn more, including updated where to buy information, visit: https://www.asus.com/ca-en/ROG-Republic-Of-Gamers/ROG-ZEPHYRUS-GX501VI/.

BREAKING: Massive Ransomware Attack Spreading Across The Globe

Posted in Commentary with tags on June 27, 2017 by itnerd

Many news sites including Motherboard are reporting that a massive ransomware attack is underway. Computers in Spain, France, Ukraine, Russia, and other countries have apparently been hit by this:

The attacks bear some resemblance to the recent WannaCry outbreak, in which thousands of computer systems were locked down with ransomware around the world.

Motherboard has seen several reports of infections shared by victims on Twitter. We were not able to immediately confirm the veracity of the reports, but several security researchers and firms also reported the attacks.

“We are seeing several thousands of infection attempts at the moment, comparable in size to Wannacry’s first hours,” Costin Raiu, a security researcher at Kaspersky Lab, told Motherboard in an online chat.

Judging by photos posted to Twitter and images provided by sources, many of the alleged attacks involved a piece of ransomware that displays red text on a black background, and demands $300 worth of bitcoin.

“If you see this text, then your files are no longer accessible, because they are encrypted,” the text reads, according to one of the photos. “Perhaps you are busy looking for a way to recover your files, but don’t waste your time. Nobody can recover your files without our decryption service.”

I suspect that this will be a very long day for IT admins in various places around the world. And we shouldn’t be shocked that this is happening as it was only a matter of time before something like this happened. The question is, how bad can this get?

Watch this space for updates as they come.

UPDATE: The ransomware in question is called Petya. Many security experts are theorizing that it is spreading so fast because it is leveraging the same NSA supplied attack vector that the last epic cyberattack used. Thus a fully patched Windows system should be able to be resistant to this ransomware.

UPDATE #2: McAfee’s Gary Davis has written a blog with three tips for consumers to keep their systems secure from ransomware attacks such as Petya.

Cloud Storage Boss Discusses 11 Things You Need to Know About Cloud Security

Posted in Commentary with tags on June 27, 2017 by itnerd

lionel-abrial-17205.jpg

When it comes to storing data, cloud storage is pretty much the best option out there – no matter who or what you are. The reasons why that statement is true, are numerous and include:

  • Ease-of-use.
  • Flexibility.
  • Value for money.
  • You can quickly scale your storage needs up or down

Sure, not all cloud storage firms are created and run equally. But, the best ones have some great innovations that will keep your data safe, easy to access from anywhere and only by those people who should be able to access it.

An Industry in its Infancy

As a collective, the cloud storage industry is still young, but it’s developing rapidly. Just as other digital industries are evolving, so too is the cloud storage industry.

There’s a lot more to cloud storage than the highlights that we’ve outlined here. Check out this guide to learn more essential details about cloud storage.

 

Ohio Government Websites Pwned…. Pro IS Messages Displayed

Posted in Commentary with tags on June 26, 2017 by itnerd

I’m going to go out on a limb and say that heads are about to roll over this…. If they already haven’t. I say that because according to many outlets including Bloomberg, numerous Ohio Government website have been pwned by hackers who defaced the websites with messages purported to be from the terrorist group known as the Islamic State or IS:

Ten state websites and two servers were affected, and they’ve been taken off line for an investigation with law enforcement into how the hackers were able to deface them, said Tom Hoyt, a spokesman for the Ohio Department of Administrative Services.

The Ohio governor’s website wasn’t loading on Sunday afternoon, and a cached version showed the message “hacked by Team System Dz.’’ It said, “You will be held accountable Trump, you and all your people for every drop of blood flowing in Muslim countries’’ and added, “I love the Islamic state.”

Lovely. But I’m really not focused on whomever did this. The real question is why in 2017 was anyone actually able to do this? Website defacement isn’t new. Neither is how to defend against this sort of thing. Take these suggestions, or these suggestions for example. I’m sure as I am typing this there is a root cause analysis going on to figure out how these hackers got in, and who they are. The public will likely never see it, but it’s a safe bet that if someone in the IT department in Ohio screwed something up or missed something, they may be mass e-mailing their CV to find a new job in short order.

Google Home Lands In Canada…. And It Speaks Canadian French

Posted in Commentary with tags on June 26, 2017 by itnerd

Google Home is available from Canadian retailers as of today. The key thing to note is that Google Home now speaks Canadian French. But other than that, it’s the same Google Home device that Canadians have been wanting for some time as it includes the following key features:

  • Google Assistant – Get real-time answers including the latest on weather, traffic, finance, sports, and local businesses. With your permission, Google Home will learn about you and retrieve your calendar information, set alarms and timers, and even tell you about the traffic on your way to work.
  • Music – A simple voice request triggers Google Home to play music, podcasts or radio from services like Google Play Music, Spotify and more.
  • Smart Home Control – Connecting seamlessly with smart devices like Nest and Philips Hue, you can use your voice to set the perfect temperature or turn down the lights.

Telus reached out to me to say that they will have Google Home available for $179.99 at Telus stores or online at telus.com. But you can also pick it up at the Google Store, Bell, Best Buy, Fido, Indigo, London Drugs, Rogers, Staples, The Source, and Walmart among other retailers.