Archive for May 22, 2019

All New Box Relay Announced

Posted in Commentary with tags on May 22, 2019 by itnerd

Box today announced the all new Box Relay to simplify and accelerate business processes across any organization’s extended enterprise of employees, partners and customers. The new Box Relay features a powerful new workflow engine, simplified user experience, and a rich menu of triggers, conditions, and outcomes that will make it easier than ever to automate processes around content and improve efficiency without intensive IT support.

The all new Box Relay includes:

  • A powerful workflow engine: Extensive list of ‘if this then that’ (IFTTT) triggers and outputs to support various multi-step processes, including both sequential and parallel workflows. The new Box Relay also supports conditional logic, providing the ability to route content based on metadata attributes, such as date, dropdown, multi-select, or open text fields.
  • A simple no-code workflow builder: Designed for business users, the updated UI empowers process owners to build and edit their own processes without any support required from IT.
  • Seamless external collaboration and intuitive new mobile experience: Customers, vendors or partners can be assigned tasks, so the process does not break down when content flows across or between organizations. Users can also view a list of pending tasks and receive real-time push notifications on task assignments all from their mobile device.
  • Improved visibility and access controls: An updated dashboard with real-time visibility into workflow history to track progress. Process owners can see who created, updated or deleted workflows, with an exportable audit history to streamline reporting requirements. Admins can also elect specific users or all users to create, edit and manage their own workflows.
  • Deep integration with other enterprise workflow platforms: Supports existing Box integrations with business process systems like Salesforce, Pega and Nintex.
  • Tighter integration in Box: Rebuilt from the ground up on Box, Relay now inherits all the benefits of the Box Cloud Content Management platform, including advanced security and compliance, rich Box Platform APIs, prebuilt productivity integrations like Slack, O365 and DocuSign, and user-friendly collaboration features like automatic push notifications across mobile and web.

With Box Relay, businesses are able to accelerate cycle times for business-critical processes that rely on content; cut costs by improving efficiency and productivity; and reduce the cost of both IT investments and the risk of data loss that stems from processes currently running outside a secure content management, workflow, and collaboration platform.

New Tasks Center and Enhanced Notifications

Box Tasks extends our customer’s ability to complete simple business processes, like one-step review and approvals. With the improved Box Tasks, we’re providing three key updates:

  • A new Task Center and updated UI that allows users to see all their tasks from one simple view, while mobile push notifications give users the ability to approve tasks from anywhere
  • The ability to assign tasks to groups and get exportable reports on what’s been rejected vs. approved
  • The ability to trigger Tasks within a Box Relay workflow, furthering the automation of repeatable business processes

File Request Links

File Request Links is a new way to collect content submissions from coworkers, partners, customers or any member of an extended enterprise. With File Request Links, it’s easy to:

  • Simplify content requests by generating a shareable ‘request file’ URL that can be shared with anyone
  • Streamline external collaboration by intuitively dragging and dropping files or collections of files into a folder without requiring a Box account
  • Accelerate processes by enabling uploaded content to automatically trigger a process in the all new Box Relay.

Box Enterprise Suites

Box Enterprise Suites are bundled offerings that bring together Box’s most valued products and services to enable organizations accelerate digital transformation. The new Suites are:

  • Digital Business: Accelerate workflows across the extended enterprise to drive business processes with the all new Box Relay
  • Digital Workplace: Transform your workplace with seamless, secure collaboration, and lifecycle governance
  • Digital Workplace Global: All the benefits of Digital Workplace plus the ability to address data residency concerns globally

All three Box Enterprise Suites include built-in volume-discounted list prices, Box Governance for content lifecycle management, and Box Premier Services for enterprise-grade, 24/7 support, and personalized Box expertise.

Pricing and Availability

  • The all new Box Relay is in private beta and will be generally available in late June 2019. Relay will be available in both a paid and a free Relay ‘Lite” version. To learn more about the All new Box Relay, please sign up for our deep dive virtual event on June 6, 2019.
  •  The new Tasks and Notifications is in public beta and will be generally available to all Box users for free. Request File Link is generally available now and is available to all Box users for free.

For more information on the new Box Enterprise Suites, contact a Box sales representative via email at sales@box.com or via phone at 877-729-4269.

Hitachi Solutions Cited As A Strong Performer In Independent Research Report On Microsoft Dynamics 365 Services

Posted in Commentary with tags on May 22, 2019 by itnerd

 Hitachi Solutions America Ltd., a leading global provider of enterprise technology solutions built on the  Microsoft Cloud, is pleased to announce Hitachi Solutions group has been named a “Strong Performer” in the “The Forrester Wave™: Microsoft Dynamics 365 Services, Q2 2019 report by Forrester Research, Inc. Hitachi Solutions was also among the top ranked in the market approach, innovation road map, and revenue criteria.

The independent research report identified and evaluated 12 of the most significant Microsoft Dynamics 365 service providers based on 23 criteria including current offering,   strategy, and market presence. The report recommends that Microsoft Dynamics 365 services customers look for providers that support clients’ digital business transformation, an accelerated cloud journey, and a deep technical relationship with Microsoft.

In its report profile of Hitachi Solutions, Forrester stated: “Reference customers cite Hitachi Solutions’ ‘no-surprises’ implementation approach. A large part of this delivery predictability stems from the company’s deep technical relationship with Microsoft and its understanding of the Microsoft technology stack. …Customers appreciate the company’s technical depth, localization capabilities, and flexibility as an SI.”

Hitachi Solutions group including Hitachi Solutions America is dedicated to its Microsoft Alliance, expanding capabilities beyond Dynamics 365 including Azure-based cloud native application development, data platform modernization, big data, machine learning, advanced analytics and modern workplace solutions.   Most recently the Hitachi Solutions America was named, for the fifteenth consecutive year, to the elite Microsoft Dynamics Inner Circle. The company was also honored with the 2018 Microsoft US Sub Dynamics Sales Partner of the Year title and selected as a 2018 Global Finalist for Dynamics 365 for Finance and Operations and Dynamics 365 for Field Service.

Findy: The Browser Bold Enough To Take On Google

Posted in Commentary with tags on May 22, 2019 by itnerd

Findy, the first and only smart mobile browser for consumers, has announced plans to take back your rights to democratize and decentralize web search – by taking on a little company called Google.

Findy co-founders Aaron Rosenthal and Jason Phillips saw an opportunity to declutter and un-sponsor the web experience, refining the way users search, explore, and discover.

Powered by community-driven AI, the result is a robust, distraction-free browsing experience that allows users to discover and consume content like never before. “Not sure why someone has not done this before,” reads a user review. Another reads, “How did I ever live without this app?”

With the ability to digest hundreds of web pages at once, Findy simultaneously searches classified sites such as Craigslist, eBay, LetGo, and OfferUp to deliver the most accurate, real-time results in an easy-to-manage, “Pinterest-like” structure. But unlike Craigslist, Google, or Pinterest, you’re not seeing ads, duplicates, scams, or sponsored results. And the real kicker? Findy doesn’t want your data. Like, at all.

Here’s what Findy does:

  • Searches thousands of sites and marketplace listings at once.
  • Eliminates ads, duplicates, and sponsored results.
  • Enables faster content while your data remains private on your device.
  • Community-powered means it gets smarter and faster as more users engage.
  • Deep links allow you to search across your favorite apps.
  • Start, stop, and re-engage your searches at any time.

In an industry controlled 90 percent by Google, Findy is preparing for its first major release and is giving users an unbiased search option.

Findy is the world’s first search engine powered by your phone, bridging websites and apps together to make it easy to find what you want – search results that adapt to your choices, tastes, and interactions. Findy eliminates the extra work of having to hop from site-to-site and provides centralized results free of ads and duplicates. Findy is available on iOS and Android in North America with plans to expand worldwide. For more information, visit: https://app.findy.com.

If You Have A TP-Link Router…. You May Have A Problem…..

Posted in Commentary with tags on May 22, 2019 by itnerd

Owners of TP-Link routers need to read this story from TechCrunch ASAP as there’s a remote access exploit that has been out in the wild for as much as a year:

Thousands of TP-Link routers are vulnerable to a bug that can be used to remotely take control of the device, but it took more than a year for the company to publish the patches on its website.

The vulnerability allows any low-skilled attacker to remotely gain full access to an affected router. The exploit relies on the router’s default password to work, which many don’t change.

In the worst-case scenario, an attacker could target vulnerable devices on a massive scale, using a similar mechanism to how botnets like Mirai worked — by scouring the web and hijacking routers using default passwords like “admin” and “pass.”

Well, that’s not good. However it gets worse:

Andrew Mabbitt, founder of U.K. cybersecurity firm Fidus Information Security, first discovered and disclosed the remote code execution bug to TP-Link in October 2017. TP-Link released a patch a few weeks later for the vulnerable WR940N router, but Mabbitt warned TP-Link again in January 2018 that another router, TP-Link’s WR740N, was also vulnerable to the same bug because the company reused vulnerable code between devices.

TP-Link said the vulnerability was quickly patched in both routers. But when we checked, the firmware for WR740N wasn’t available on the website.

When asked, a TP-Link spokesperson said the update was “currently available when requested from tech support,” but wouldn’t explain why. Only after TechCrunch reached out, TP-Link updated the firmware page to include the latest security update.

That’s pretty bad on the part of TP-Link as the media should have to tell anyone that they have an issue as the optics just suck when that happens and it’s made public. In any case, if you have either router that is mentioned above, it is worth your time to see if you’re running the latest firmware.

ARM Cuts Off Huawei From Its Chip Tech

Posted in Commentary with tags on May 22, 2019 by itnerd

The BBC is reporting that chipmaker ARM has cut off Huawei from access to their tech:

ARM instructed employees to halt “all active contracts, support entitlements, and any pending engagements” with Huawei and its subsidiaries to comply with a recent US trade clampdown.

ARM’s designs form the basis of most mobile device processors worldwide.

In a company memo, it said its designs contained “US origin technology”.

As a consequence, it believes it is affected by the Trump administration’s ban.

This is a huge hit to Huawei because ARM designs form the backbone of most modern smartphone processors. Apple processors for example are based on ARM designs. So I can’t see how Huawei moves forward without ARM being in the mix. Huawei has already said that this is a non-issue for them. But I don’t buy that and neither does anyone else. At some point all these companies who are cutting ties with Huawei will eventually cause the company to tap out and cry uncle. The question is how long will that take?

Should You Update To Windows 10 Version 1903? Not Yet Based On Past Experience

Posted in Commentary with tags on May 22, 2019 by itnerd

Microsoft yesterday officially released Windows Version 1903 to the public. It’s the latest “feature update” to Microsoft’s “operating system as a service” and they claim that it’s all good.

But if I were you, I’d wait for a bit as they said the same thing with Windows 10 version 1803, and the very late Windows 10 version 1809 update. Both of which were total disasters for Microsoft. And both of which made me very busy as I worked hard to fix issues for clients that these updates caused. But if you really want to dive into the deep end with this latest version of Windows, here’s what you will get:

  • From now on the Windows installation will be put in an area of “reserved storage”. It means you now need twice as much space on your drive, but it does mean that there’s no risk of an update causing issues if you don’t have enough disk space.
  • There is a unified search box which has been uncoupled from Cortana which most people never use as far as I know.
  • Windows Sandbox will let you test things that could kill your machine if you get them wrong. That’s handy for people who like to tinker.
  • Much more of the “additional content” that comes with Windows which I would call “bloatware” can be removed if you want to reclaim space. But if you ever want it back, you can always reinstall it from the Microsoft Store.
  • There are tweaks like font management, faster startup and updated Emoji support. There’s also a dark mode because all the cool kids run their computers in dark mode.

But the most important feature that comes with this update is that Microsoft has deemed its users to be worthy enough to decide how and when updates get applied. A blog post from Microsoft has info on that front. And on top of that, Microsoft has made a Windows release health dashboard available, to provide insight into the status of the update rollout and any issues being reported. My advice is to look at that dashboard and make a decision as to when to upgrade to version 1903 based on that. Or just wait for a couple of weeks seeing as any major issues will pop up on the Interwebs very quickly based on what happened with the last two feature updates that Microsoft put out. If you do decide to take a swim in the deep end, Microsoft will try to cover your posterior with a feature that will try to roll back the install, if things don’t work out as they should.

Oh by the way, Microsoft will automatically update devices running the Home and Pro editions of Windows 10 version 1803 to ensure service continues past November 12, 2019. So you may want to factor that into your decision making.

Regardless of whether you update now or later, make a backup of your data before you upgrade. Because you can never be too careful. But if I were you, I’d wait for a bit and see how stable version 1903 of Windows 10 is first.

 

The IT Nerd 2019 Fathers Day Gift Guide

Posted in Commentary on May 22, 2019 by itnerd

Father’s Day is just around the corner and I have a short list of suggestions of a high tech nature that dad would love. If you think that there’s something else that should be on the list, drop me a note and let me know.

Roku Streaming Stick + – $89.99

Powerful and portable, the Roku Streaming Stick gives the gift of entertainment on-the-go all in a powerful stick. With thousands of channels there will be something to watch for any dad whether it’s Sports, Movies & TV shows or News. Choose your favourite program with the included point-anywhere remote, or just use the Roku app on your smartphone to control the action. Check out the review here.

Roku Express – $44.99

The new Roku Express is five times more powerful than its predecessor and offers easy HD streaming at an affordable price. A great Father’s Day gift, the Express comes with a remote control that makes finding something to watch a snap. With over 150,000 movies and TV shows available (including tons of free content), you’ll be sure to find something Dad likes. Check out the review here.

TCL 4K Ultra HD Smart LED Television, 65″ – $900

TCL’s 6-Series combines stunning 4K HDR picture performance and the award-winning Roku TV smart platform in a bold, brushed metal design for a superior TV experience. Dolby Vision delivers greater brightness and contrast, as well as a fuller palette of rich colors. TCL’s Contrast Control Zone technology individually optimizes the image across up to 120 zones to yield striking contrast between light and dark areas. The 6-Series models’ iPQ Engine™ provides precise colour replication while HDR Pro Gamma significantly improves HDR performance in any setting. Check out the review of the 43″ version of this TV here.

Safe by HUB6– $299

Many Dads feel like they have to protect their families but home security systems charge ridiculous monthly fees for services that provide questionable protection. Safe by Hub6 uses the security system hardware you already have and frees you from long-term contracts or monthly fees. It redirects any alerts triggered by your system to your phone, friend, or HUB6’s Professional Monitoring when you need a back-up.

Deco M4 Whole Home Mesh Wi-Fi System-($280-$350)

Eliminate weak Wi-Fi signal areas once and for all! The Deco M4 three-pack delivers Wi-Fi to an area of up to 4,000 square feet by forming a unified network. Devices automatically switch between the Deco pods as you move through your home for the fastest possible speeds. Lag-free connections for up to 100 devices and parental controls all controlled by the easy-to-use Deco app. I reviewed the Deco here.

MSI PS42 Laptop -($1,280-$1,592) Slim. Elegant. Prestige.

For the first time, MSi is offering laptops aimed at non-gamers. The PS42 is light weighing only 1.19 kg and ultra-thin at 15.9 mm. Powered by an 8th Generation Intel® CoreTM i7 processor the PS 42 is fast and competitively priced with many of the performance features you’d expect from MSi. Crafted with hair-brushed aluminum and combined with white keyboard illumination, the PS42 is made portable and durable wherever you go! Here’s the review of the PS42.

Google Left Some G Suite Passwords Unhashed For 15 YEARS…. WTF?

Posted in Commentary with tags on May 22, 2019 by itnerd

Google says a small number of its enterprise customers mistakenly had their passwords stored on its systems in plaintext. The exact number was not disclosed. “We recently notified a subset of our enterprise G Suite customers that some passwords were stored in our encrypted internal systems unhashed,” said Google vice president of engineering Suzanne Frey:

The search giant disclosed the exposure Tuesday but declined to say exactly how many enterprise customers were affected. “We recently notified a subset of our enterprise G Suite customers that some passwords were stored in our encrypted internal systems unhashed,” said Google vice president of engineering Suzanne Frey.

Passwords are typically scrambled using a hashing algorithm to prevent them from being read by humans. G Suite administrators are able to manually upload, set and recover new user passwords for company users, which helps in situations where new employees are on-boarded. But Google said it discovered in April that the way it implemented password setting and recovery for its enterprise offering in 2005 was faulty and improperly stored a copy of the password in plaintext.

Google has since removed the feature.

No consumer Gmail accounts were affected by the security lapse, said Frey.

I’m sorry, but Google didn’t make a mistake. What you see here ladies and gentlemen is incompetence. This is a multi-billion dollar company failing at basic security and not finding their mistake for 15 years. Sorry, Google, you don’t get to claim anything but your own incompetence and stupidity when it comes to this security screw up.

#EpicFail

Guest Post: NordVPN Discusses Why People Are Becoming Indifferent to Data Breaches, Hacks, and Leaks

Posted in Commentary with tags on May 22, 2019 by itnerd

The increasing connectivity and digitalization of our everyday lives and business processes are creating a world of new possibilities. At the same time, that world is also becoming more vulnerable. That’s why cybersecurity nowadays is more important than ever. But Ariel Hochstadt, tech enthusiast and co-founder of VPNmentor.com, thinks that many people are becoming indifferent to data breaches, hacks, and leaks. All of that might lead to even more cybersecurity issues worldwide. Ariel Hochstadt’ interview with another tech enthusiast, NordVPNs digital privacy expert Daniel Markuson.

Daniel Markuson: Lately I’m overwhelmingly surprised by the so-called privacy paradox. Even though people express privacy concerns and fear identity theft, they still reveal their sensitive details online very easily. Why, in your opinion, is it so? Do you think people know enough about digital privacy, cybersecurity, and various online threats? And why is cybersecurity more important than ever?

Ariel Hochstadt: Today cybersecurity is more important than ever because we are more digital than ever. It starts with the essentials, like phones, tablets, computers, and extends all the way to technological milestones designed to improve our lives – smart homes, smart cities, you name it.

But do people know enough about online security and privacy? I’d say no. Honestly, you don’t even need to be an expert in the field to make your own reasonable conclusion – for example, how many friends or relatives do you have that still struggle with their phones or laptops? How many of them have asked you about this annoying pop-up or inappropriate notification that keeps appearing “out of nowhere”? That’s just the tip of the iceberg.

What people need to realize is that their smallest, seemingly benign actions are potentially tracked and analyzed every second – including basic stuff like mouse clicks or touchscreen taps. These days, cybersecurity companies can determine if you’ve been hacked just by detecting the slightest change in your mouse movement. We use this knowledge to help people stay safe, but that’s not the case with hackers, identity thieves, and other groups with bad intentions. In general, I believe people don’t pay enough attention to their digital lives – at least not until it’s too late.

Daniel Markuson: One of the craziest scams I’ve heard about is the so-called sextortion scam. Mainly because it bears a strong resemblance to an episode of the popular sci-fi series Black Mirror. Even though the blackmail threats are completely fake, so far this scam has been remarkably effective. Some sources say that criminals have netted more than $4 million in Bitcoin payments in just three months. This number may be even higher now. Do you remember other impressive or crazy scams, hacks, or other incidents that happened lately?

Ariel Hochstadt: That’s a pretty tough question! There’ve been a lot of them this year in particular, but the craziest one for me has to be the US Geological Survey employee that indirectly put a nasty piece of malware on government networks. They’d watch porn on a work computer – I think the number of adult websites visited was around 9,000. This is crazy enough by itself, but what really boggles my mind is the apparent lack of any filters or effective security measures to prevent this from happening. If crucial government infrastructure can be affected by poor judgment and malware, just imagine what threats average users are exposed to on a daily basis.

Daniel Markuson: We had an impressive first few months of 2019. First, the news about the Collection 1 containing the login information of 770 million people. Then a shady hacker put up for sale nearly 620 million online accounts stolen from 16 popular websites – later adding a second batch of 127 million records. Reports about various data breaches are coming in every day. What, in your opinion, can we expect in the future? Will 2019 get any better and safer?

Ariel Hochstadt: I’m afraid things will get worse in 2019, and in my opinion, there will be three major reasons as to why. One, there will be an increase in the number of devices and amount of sensitive information (passwords, banking credentials, etc.) online, while the common threats will remain the same – something as simple as a phishing email is still considered the most effective start to a ransomware attack, for example. Two, a whole new sector – crypto – is rapidly growing. The types of malware directed at crypto have increased more than twice this year, and unless the whole market suddenly drops dead, more headaches are certain in the near future. Three, there’s a real chance of “hack fatigue,” in other words, many people are likely to become indifferent to data breaches, hacks, and leaks. Both 2017 and 2018 had their share of cybercrime news and serious scandals, and the combination of constant headlines and blatant sensationalism works wonders for people’s tolerance to cyber threats – not in a good way, though.

With that said, the recent surge in debates and discussions is definitely a step in the right direction. I firmly believe that VPN sales will continue to grow – especially in the mobile sphere, where there’s a lot of untapped potential. I can also see other security measures, like anti-virus programs, making a strong comeback. In general, my opinion is that people are looking to improve their privacy and security online, but demand has shifted towards simple, efficient solutions along with the ability to trust a reputable provider.

Daniel Markuson: Every single day you Google things, visit blogs, buy online, pay bills, or browse Facebook. However, browsing the internet is turning into more of a minefield. This means security takes (or at least, should take) a high priority for us all. What are your personal methods to stay safe online every day?

Ariel Hochstadt: It’s pretty common stuff, honestly! *laughs* I always use a VPN, particularly when I’m using public/unsecured networks. I keep my passwords organized and encrypted with the help of a manager app, and I run an anti-malware scan at least once a week. Sometimes, the simple solutions work best, but if there’s one piece of advice I’d like readers to take to heart, it’s this – be consistent and responsible. Don’t click mindlessly on links in suspicious emails, and definitely try to avoid apps and websites that bombard you with annoying ads. I believe that if you don’t have a game plan for staying safe on the internet in 2019, you aren’t doing the global web community any favors. Lastly, it may sound a little rich coming from someone who’s invested in the cybersec field and does this for a living, but I advise reading up on new cyber threats and relevant cybersecurity news – staying up to date with the situation can certainly help to prepare you for new risks online.