Wednesday, December 29, 2004

Geek Cruises


Are you looking for an education vacation? Check out Geek Cruises. They have digital photography, Mac Mania, iPods, Linux, Perl, Web and Windows Cruises. The next up cruise is on The Queen Mary 2. The largest cruise ship that is three times the size of the Titanic.

Geek Cruises--computer education for geeks & consumers

Spies Among Us


1. Identifying the problem.

This past weekend while troubleshooting several customer computers a horrible discovery was made that has dealt a sever blow to the war on spyware. Utilizing the three alternatives together from our paper it has been determined that it is still not enough to combat spyware, due to recent deployments and changing landscapes of anti-spyware software. The latest versions of anti-spyware software will no longer detect and remove certain well known and notorious spyware applications. In fact not only do they no longer detect key spyware, all references on the anti-spyware vendor’s websites have been removed about the known spyware. Commercial and Freeware anti-spyware has become completely useless in the war on spyware, and there is tremendous loss in trustworthiness in these products. We now have to seek new ways to combat against the epidemic menace that is plaguing everyone’s computers.

Spyware is technical slang for Adware. Adware is software the phones home and reports the actions of the user where the software is installed. Adware attempts to deliver targeted advertising based upon what the user is currently doing. Adware is called spyware because of its monitoring type of behavior and it methods of collecting data. Spyware is typically software that is free and is supported by advertising. However a number of companies have taken this concept beyond simple ad placement. Some spyware software tracks the user, what applications they use, documents they write, web sites they visit, products they buy, credit card numbers, user names and passwords, parses the users address book and monitors over all computer usage. The spyware companies claim that this is done in order to deliver targeted advertising to the user.


2. Defining the criteria, goals, and objectives.

A computer user should be able to surf the internet and do personal computing without the hassle of ads constantly popping up trying to get you to buy Viagra. Today’s computer operating systems are really stable as compared to years past with the constant normal crashing of Windows 98. With operating systems such as Windows XP being more stable that ever, it has allows the rapid propagation of malicious software. This software is often poorly written, unstable, degrades systems performance and causes systems to crash or reboot.

The objective and goals are to allow the user to enjoy the stability of their operating systems and be more productive in there work. The criteria is to completely prevent malicious software from gaining access to the computer and denied it the opportunity to conduct its evil business.

Since desktop based anti-spyware has become less affective in the war against spyware, alternative means must be identified, tested and deployed along with the other methods of spyware prevention as a total combined solution.


3. Evaluating the effects of the problem.

Spyware is not only an unwanted invasion of your personal privacy, but can damage and destroy personal data. For example during the routine maintenance of a computer, one of my techs was asked to uninstall some old junk software. The tech did as she was asked to do and rebooted the computer. The computer attempted to reboot, but was hung in a continuous reboot cycle and failed to start in any mode, normal mode, safe mode or advanced recovery mode. As a result the tech was left with no choice but to reload the computer from scratch as that was the fastest and most economical way to recover from the problem. It was later determined that the computer was infected with spyware called “Blazefind” as it known to cause this very problem as it was not written with the fore thought that a user might uninstall certain software. As a result the spyware cause the continuous reboot, because it could not find the dependent program that it has become a parasite to use.

Spyware also degrade system performance to a point in which the user is waiting for programs to load and process on an otherwise lighten fast computer with the latest and greatest hardware.

The direct results are a loss in user productivity and system stability. This increases labor cost, support costs and an immeasurable amount of loss in intellectual property and trade secrets.


4. Identifying causes of the problem.

The current issue of trusted anti-spyware software not detecting known spyware is being caused by the anti-spyware vendors themselves. Through much testing I have determined that the anti-spyware companies have silently removed from their applications the abilities to detect and remove known spyware from a user’s computer. Also all references to the spyware have been removed from their web sites and can only be found by searching the archives of Google.com’s cached websites. Desktop anti-spyware applications such as Ad-Aware, Spybot, Webroot, and Pest Patrol no longer detect the following list of top 5 spyware applications that we tested in our labs:

· GAIN also known as Gator and Claria http://www.gator.com/
· Hotbar http://www.hotbar.com/
· New.Net http://www.new.net/
· MySearch http://www.mysearch.com/
· SaveNow http://www.whenu.com/


In some cases such as SaveNow this spyware promotes itself to be spyware free and champions the cause to fight spyware. When indeed it is the very evil it declares that it is not. Ad-aware has a web page that defines what it declares to be spyware at their Threat Assessment Center (TAC) http://www.lavasoftnews.com/ms/tac_main.shtml.


Out of curiosity in our labs we decided to test to see if the notoriously well known spyware listed above actually met the TAC criteria, and that maybe the new versions of the software listed above might have stopped their old spyware ways.

We used third party network packet monitoring tools and SPY++ a Microsoft utility to monitor inter program communications and a process monitoring utilities to monitor hidden processes. This process monitoring tool was developed by one of the anti-spyware companies for this type of use on the local desktop to monitor for spyware like activities and communications. The results were no change in spyware behavior for all the listed applications according to the guidelines set by Ad-aware’s TAC.

Having spoken with my attorney about the matter, he concluded that it could be that the anti-spyware companies which are for profit were legally pressured by the spyware companies to have their products removed from the anti-spyware blacklists. This is a big blow to the war on spyware.


5. Framing alternatives.

Since we are losing the battle on combating spyware, desktop anti-spyware software is no longer detecting and removing known spyware, it is imperative that we find other means to combat against the problem.

To recap the three solutions from my learning team paper were stronger server based security policies deployed to the user’s desktop, desktop based anti-spyware, and end user education on spyware awareness. These three methods were recommended to be used as single solution. However one of the alternatives has been dramatically weakens and has become less affective. Other alternatives need to be implemented to strengthen the barriers of entry to spyware infection.

Alternative A: We can do nothing and keep doing things the same old way and continue to trust the anti-spyware companies as they should know what is and is not spyware. However we proved in our lab that the spyware not being detected is still behaving like spyware.

Alternative B: We could develop our own anti-spyware software to detect software that we do not want our users to download and install. The estimated budget to do a project like that would be somewhere between $100,000 to $500,000 in development costs with no guaranty that it will work, or be stable. Venture capital would be required in order to begin development and the development cycle maybe years away before it is ready for use.

Alternative C: We could seek other methods to stop spyware such as using a gateway server that can filter web content. A content web filtering server has a database that can be manually updated as well as subscribe to a service bureau for auto updating. Most content web filters server applications are used to prevent users from going to adult website such as porn sites. They could easily be adapted and updated to block known spyware websites such as http://www.hotbar.com/. Thus the user never makes it to the spyware application’s website. No desktop changes have to be made and most companies only have one entry onto the internet.


6. Evaluating the impacts of the alternatives.

Alternative A: Doing nothing is not a good solution. The spyware problem is getting worse and not having the proper tools to fight against its propagation will greatly impact a company’s bottom-line.

Alternative B: The expense is too great and would take to long to develop and deploy a customer software solution. There is no guarantee that it will work and no guarantee of a return on investment. In the meantime the overall companies will continue to lose productivity and labor cost and support cost could double the price of the self development of the anti-spyware applications.

Alternative C: Using existing security software applications and adapt them to fight a new problem will be a more cost affective solution and the return on investment is an immediate reduction on the loss of productivity, a reduction in labor and support costs. This solution is easy to deploy and will pay for itself in a short period of time. The only negative impact would be the in adverting blocking of legitimate web sites. This is easily overcome by approving the needed web site in the security database.


7. Making the decision.

Alternative C to utilize and adapt existing security software is the most cost effective and complete manageable and trustworthy technical solution to the replacement of the failing desktop anti-spyware software solution. The effort to find, test and deploy this new security software should begin immediately.


8. Implementing the decision.

Once a software package has been decided upon, all customers will be notified of the new option to fight the war on spyware. Once approved by the customer, it will be scheduled, installed, tested and maintained by our techs.


9. Measuring the impacts.

The measurement of success is easy as there will be immediate reduction of the loss of productivity, a reduction in labor and support costs. Additional success will be less user frustration, a peace of mind, secure and protected environments and a better bottom line. This success will ensure that there are no spies among us.

Wednesday, December 22, 2004

What is a Blog?

The term Blogs (not my favorite word) is slang for web log. It allows rapid content publishing. They are only a couple of years in the making in its current form, but have been with us since the beginning of the web with Tim Burners Lee. They became popular during the last gulf war and were catapulted to legit journalism status during the recent elections.

A blog gives the writer the ability to say exactly what they want to say the way they want to say it without an editor censoring their thoughts. The political blogs during the elections exceeded traditional news sources in readership. The traditional news sources were caught off guard by the popularity of the blogs. It puts a whole new meaning on the meaning freedom of speech. Now there are millions of blogs on just about everything that you can imagine and some that you don’t want to know about.

The current blogs are very easy to start by anyone and do not require any technology knowledge. Content is king that is why Google bought Blogger.com and set it up for free.

Administering a site like http://security.efsnm.com is a blog site and a lot of work. It runs on a Linux server and uses the server config’s to maintain the mySQL server that is the database engine for the site. That site took minutes to setup and start using. However, you can spent days learning their syntax and modifying the site design. So you may spent more time on site design and navigation than on composing the content.

At blogger.com http://technutz.blogspot.com/ setup up this blog took minutes. I used one of their templates and tweak the site settings. I already had the content from class that everyone has read. Form the time I setup the site, edited and posted the content that it currently there only took me about 3 hours. I am sure others would take longer, but I was really please with the blogger.com blog site.

The blogger.com site has everything I was looking for as it is easy to use, very nice templates (that are able to be changed) and it is FREE.

As a business one would think how could Google offer all that for free? Easy, they would like you to use their Adsence product. It is not required, but I already had the account and post it as a way to get a pay back for the content. Content is king, otherwise why would someone come to your site…

ODBC vs. ADO.NET

I dislike ODBC and its many versions, incompatibles, its poor performance, its unpredictable results, its inconsistent drivers from the various vendors, its lack of syntax consistent standards and it overall difficulty to use and to deploy in a client server environment.

I only speak from first hand experience with working with ODBC. There is nothing wrong with using ODBC. It may be your only option at the moment. ADO.NET is the latest evolution in database access, but has it roots in the evolution in ODBC. ADO.NET is a rewrite in which Microsoft learned form the sins of the past. Back in the day a few years ago ODBC was the only method of data access on a Windows system that worked and saved developer a lot of time in development for database communication. At the time it was much welcomed, but today it is demise is much welcomed.

I was just unfortunate to be a part of the evolution of the ODBC madness, having to re-write my code every time they published a new release or service pack is a major pain. I have bloody scares on my forehead from backing my head on the keyboard in dealing with the ODBC insanity. When you have 1,000’s of lines of code and a lot of database access code, it gets old pretty quick rewriting it to accommodate a syntax change, a retired command, change in the default behavior of an object or setting, new methods, new functions or stupid parameters that are now required, but not documented.

Tuesday, December 21, 2004

Parent Awareness of PC Usage

Having reloaded many home computers for my business customers, most of the parents that I have work with on their computer have no idea what there kids are up too, where they have been or how to tell what has been done on the computer.

My worst case was a parent brought us there computer to be reloaded as it was full of spyware. We had just reloaded that same PC a month pervious. This go around, we found a ton of adults images. Normally we simply dismiss it as we always find adult stuff, not because the user was downloading it, but because of adult spam, spyware, adult joke apps, adult malicious ware, and viruses, etc. So it is not uncommon to find that stuff peppered all over the computer.

However this time it was a lot of clear web surfing to the common name adult sites. It was in their boy’s XP profile that we found the stuff in the internet cache while doing a search for family pictures that the parent wanted to save. Any rate the parents being good religious people were dumb founded and very embarrassed. It is typically the case, shock, bewildered, upset, angry, and embarrassed in that order.

Do you know how much adult material is on your PC? You might be unpleasantly surprised, especially if you have kids and they use your computer.

Monday, December 20, 2004

This Blog Site

The TechNutz blog was a great exercise. The blog site serves many purposes. It is an open source of information that uses hardware, software and the internet to relay information. It is requires an input device to create the data and a monitor as output to review the data.

The data is contained in a very large relational database with many fields, records and data types oh my! It uses SQL as its queries language and uses HTML, Java Script, JAVA, DHMTL, CSS, XML, RSS, email, e-Commerce with the Google Ads and an Oracle backend database. The blog is a collaborative virtual site in which the users can participate from most anywhere on most any device that has a web browser, even my PDA phone. It uses a user name and password security to limit access to certain sections of the application.

Sunday, December 19, 2004

The Cycle of PC Upgrades

My experience both with big and small companies that it is cheaper to buy new than to upgrade. Labor costs kill the ability to benefit for network, server and desktops upgrades.

As for resale there is generally no resale value left in a computer. The life cycle of a desktop PC is 3 to 5 years. Most PCs are processed and disposed by a company that is hired to get rid of the hardware that meets EPA requirements. I am paid to pickup, wipe the hard drive with a DoD utility and I donate them to a local organization that recycles PC's for the disadvantage people.

I agree with your assessment about size. This does however come into play with notebooks, cell phones and PDAs. With desktops there is no benefit. However the funny thing is the smaller is more expensive.

Saturday, December 18, 2004

Productivity and Ethics of the Internet

Q: What are the productivity issues of the Internet? Are there ethical issues of the Internet? What does a consumer need to be leery of purchasing goods or services online? What are the greatest risks?


What are the productivity issues of the Internet?

The internet by its very nature is both productive and counter productive. There is a wealth of information hidden in a sea of obscure information and at times disinformation. I find myself a child and veteran of the internet evolution chasing related rabbits down tangent paths. It is very easy to jump from one topic to the next as they are related, linked or of interest. As a result a great amount of time can be spent on reviewing information that is really not relevant to the task at hand.

In the work place web surfing is abused by everyone to a certain degree. Most of the customers I support in Medical, Commercial Real Estate, and Law Firms have very little time to play as small business professionals tent to be extremely busy.

In these small businesses the most abuse is by the low paid workers, who is not as in tuned to the immediate needs of the business and are left unsupervised. As a result the most common abuses are instant messaging, shopping surfing, and online games as a result the PC’s become infected with spyware and other malware software.

Since most entry level computer users do not know how to clean their trail it is easy to tell where and what they have been doing and looking at. To manage these workers we have deployed stealth employee monitoring software that records everything that the user is doing, along with screen shots, keystroke logging, application usage times, email, web surfing, etc. It flags the user when they are doing something they should not and notifies the supervisor or manager. This has dramatically dampened the abuse of the Internet for personal usage and set productivity back on track.


Are there ethical issues of the Internet?

The ethical issues of the internet are more numerous that I can list here. The internet is still a baby as compared to other technologies like the phone and light bulb. I would have to say that there are more ethical violations on the Internet than there are not.

The 50,000 foot view of the ethical issues are a broad range of Legal, Online Activism, Government, Censorship, Free Speech, Intellectual Property, Fair Use, Privacy, Security, Infrastructure, Culture and Legislation. The ethical issues are still in their initial states of definitions, some very clear, most very unclear.

In the news the most recent popular battles on ethical issues is P2P (Peer to Peer) file sharing. With the RIAA filing numerous law suits to stop music swapping it is still a highly debated subject. Identity theft is on the rise, but mostly via spyware and other malicious software. Static’s still show that identify theft is still done the old way of dumpster diving and mailbox raiding. Online identity theft is on the rise with techniques called PHISHING. The ethics of the internet are abused all the time both on purpose and by a lack of understanding what the user is doing.


What does a consumer need to be leery of purchasing goods or services online?

Never purchase anything without an encryption connection to the commerce site that you are connected to.

Never buy anything from a site that is not well known such as Billy-Joes’s House of Pain 666 Book Store. Buy instead from Amazon, Borders, Barnes & Noble, etc.

Always read the return policy, restocking policy, privacy policy, site usage policy, warranty policy, shipping policy, insurance & pricing policy, the user reviews and industry publications reviews of the site that you are purchasing from before you complete your purchase. Compulsive shopping can get you into a lot of unwanted charges and stuck with a product that you can not return.

Never give more information that you have to in order to make the purchase.

Never sign-up for vendor product referrals or allow the site to provide your information to a third party sources. Product newsletters and new release updates are usually ok to check and receive.


What are the greatest risks?

The greatest risks are your account information being compromised, your bank account being emptied, and you being stuck with an ineradicable amount of debt where you did not make the purchases.

Kerberos Security

Kerberos is a hidden feature in Windows 2000, 2003 and XP. It is used for authentication in a Microsoft Network Environment from the client to Server and most people do not know that they are using it. The question was about the Internet. To what extent Kerberos is used ACROSS the internet is not published information from Microsoft or I am unaware of it usage.

Kerberos is one of many important security protocols used behind the scenes.

Here are links for those that wish a quick study of Kerberos.

MS Kerberos Summary

Kerberos FAQ
http://support.microsoft.com/kb/q266080/

Friday, December 17, 2004

Security challenges of the Internet

Q. What are the security challenges of the Internet? What are the regulatory challenges of the Internet? Explain several types of crimes committed on the internet with respect to online businesses.

Wow this is a really tuff question to answer in just 300 words. I could write a book just on the first question alone, but for the sake of everyone’s sanity I will keep it short.


What are the security challenges of the Internet?

This question should read:
What are the security challenges of protecting your business and home computer systems from evil doers abroad?

You can not secure the internet. It is an uncontrolled environment. You can only security the gateways into and out of your home or business and your internal systems.

A hardware firewall or a NAT router is a good start. Followed by software firewall on your PC with Anti-virus software that is updated daily. Also anti-spyware, web filtering or parental control software should be used, for your self if nothing else. Anti-Spam software or service for email and a good healthy dose of security education on what evil doers are trying to do to your computer and to you.

The biggest challenge is getting people to understand what they are about to be hit with. Once they have been burned, then my life gets easier, because for some reason once they have lost something important on their computer their hearing and understanding all of a sudden becomes very clear and they get it.

A couple of other things on security and the Internet as any business related data or commerce data needs to be encrypted when going ACROSS the Internet.

The common protocol to do this is HTTPS. We talked about that last week. Another method is VPN which can use PPTP or L2TP with IPSEC to encrypt the data in 3DES. These protocols can be Microsoft’s, (which I usually use) or they can be propriety like CISCO or NORTEL’s VPN applications.

One other secure method is Terminal Services which is done by use Remote Desktop application to connect to a Terminal Server. This communication also uses 3DES encryption.

All three Microsoft versions are built into the Windows XP Desktops systems. HTTPS and VPN are in all versions of Windows from Win98 to XP. Remote Desktops is a free download from Microsoft and runs on most all support Microsoft OS to include a pocket PC phone.


What are the regulatory challenges of the Internet?

Keeping the internet unregulated is the biggest challenge. I hope the government doesn’t tax the crap out of the internet. There are so many issues about regulatory stuff being proposed it makes my head spin and eyes pop out! Some of the bills going before congress are just plain stupid nonsense crap. While other bills are much welcomed like the Spyware act, but the government has no way to enforce it, especially when the evil is coming from off shore.

Here is a link for a site about the latest Bills being passed in congress.
http://security.efsnm.com/index.php/weblog/C15/

For links that will make you head spin and eyes pop out there are great reads at the EFF (Electronic Frontier Foundation). They fight for sane tech rights against insane Bills in congress.
http://www.eff.org/


Explain several types of crimes committed on the internet with respect to online businesses.

Information and System Rape is the by far the most common and epidemic. This occurs when spyware gets onto your system and uses it for evil deeds. It is no different than someone going into your house, using it to plot, plan and execute their evilness and they move your cheese. With spying on your PC the evil doer can take your banking information, credit card, personal identify theft, while leaving you holding the bag to pay the bills.

One more common ways is PHISHING via email or web site to trick the user into giving freely their account information. For more on PHISHING you can check out this web site.
http://security.efsnm.com/index.php/weblog/C14/

US-CERT Security Information

To learn about security issues you can subscribe to the US-CERT site from the Department of Homeland Cyber Security group. This group is augmented by the security folks from Carnegie Mellon University.

Security Bulletin
http://www.us-cert.gov/cas/bulletins/SB04-350.html

CERT
http://www.cert.org/

Thursday, December 16, 2004

Worm W32.Erkez.D@mm

Here is a link from security.efsnm.com site about the latest evil virus Worm W32.Erkez.D@mm. It is a Threat Level 3.



December Windows Patches

Microsoft Monthly Patch Summary:

Microsoft does such a cryptic job of informing the public about security issues. This web site security.efsnm.com has paraphrased the updates for just the most important information. You can click the link on this site to the cryptic MS security info for a funny read.


Wednesday, December 15, 2004

Memories of past Languages

I am interested in others feedback as to what they are doing and using. I am interested in your experiences, good, bad, ugly and indifferent. Knowing the results of an experience is very valuable.

Thomas Edition was once asked by a reporter how it felt to be such a failure. He replied I beg your pardon? The reporter stated, Mr. Edition you have tested a 1,000 things and none have worked, so how does it feel to be a failure? Mr. Edition responded, Sir, that was a 1,000 things that we did not know that would not work. My good man he said, that is not failure; that is success. Mr. Edition tested 3,000 things before he finally discovered the right elements to use to create a light bulb.

My first programming language was basic on the Apple IIE networked with a micro mainframe. We it took 15 minutes to logon. We booted, used the rest room, got coffee and stacks and prepared for long nights in the computer lab. My second language was COBOL. I got an A+ in the class, but I hated that language more that anything. Pulling out your fingernails was better than coding in that language. Next was Fortan, PASCAL, and C that was the end of my formula training. I had enough understanding that most all computers languages are the same just different syntax. I went on to self teach myself C++, Assembler, Visual Basic, SQL, Access, VBA, VScript, Jscript, HTML, ADO, ASP, ODBC, PERL, AWAK, WSCRIPT, XML, DHTML, and a bunch of other obscure languages. I was on the beta test teams for ASP.NET long before it was called DOT NET. I was working on DOT in 1999 and 2000 when it was called NEXTGEN. All these languages had their own headache and issues. A lot of languages were not forward nor backward compatible.

Microsoft would have you to believe that you need Visual Studio to be a productive rapid application developer. Well having been on campus in Redmond working with the people who invented the dang stuff, they do most of their work at the command line console or in notepad. Notepad is the universal editor.

Now I mostly write in Access and WScript for desktop and server automation. I have rewritten the same utilities in the same language and others some many times I am just burned out on writing code for a living. Since the dot com bomb days, the big projects are much harder to come by. I enjoy writing utilities and scripts that get used over and over. I enjoy the tech support as the life of a coder is never ending as there is always one more line of code that needs to be written or rewritten.

Tuesday, December 14, 2004

Fighting Spyware

Ad-aware is good, recently Sypbot has become the preferred anti-spyware software as Ad-aware no longer will detect certain versions of known spyware like Gator and Hotbar to name a few. These spyware companies put legal pressure on Ad-aware and other anti-spyware software to have their software removed form their detection lists.

Also before you download anti-spyware check it on Spyware Wwarrior’s web site to ensure that the anti-spyware that you are downloading is not Rouge anti-spyware. There are several hundred rogue anti-spyware programs being free/sold that even show up in Google Ads that are actual the very thing that they claim to get rid of “SPYWARE”

Jen you should be fine with Ad-aware, but I recommend that you add Spybot too.

Links an Article on Rouge Anti-Spyware

Spybot

Spyware Warrior Newsgroup:
http://www.Spywarewarrior.com

Inside Microsoft's IT

Here is an interesting look at Microsoft’s IT department with Ron Markezich, the software maker's chief information officer.


Monday, December 13, 2004

Office Automation and Group Collaboration

Group Collaboration
A collection of software applications and devices used in a computer networked environment are called groupware. The is no specific set of application that make up this groupware, it is software that allows a large group of people to collaborate locally over a LAN and over vast distances over some type of WAN.

The most common type of collaboration is done via electronic messages called email. This email can be either standard SMTP and POP3 email or Newsgroup email like at the University of Phoenix.

The Newsgroups are used to collaborate ideas. The collaboration occurs when a newsreader client connects to a newsreader server and than exchange messages. The people post their messages and download the messages posts of others. The newsreader application that most people are using is Outlook Express. Outlook Express can use both newsgroups and regular email.

Most businesses today use email as a form of collaboration between vendors and customers as well as other employees. A commonly user email collaboration server software is called Microsoft Exchange. Exchange allows users to collaborate email, calendars, contacts, tasks and basic project information via a dashboard. The Exchange server can also be used as newsgroup servers. Newsgroup servers have an advantage over regular email as everyone that is subscribed to a newsgroup gets to read all the messages posted in that group. It aids in keeping everyone in sync with electronic communications. Standard email is one to many or one to one, and sometimes people can be left out of the loop when information is requested or disseminated.
There are other forms of groupware applications such as Microsoft Share Point Service. It allows the posting, collections and better organizing information and documents than what a newsgroup can do. Share Point is getting better, but it is very hard to setup and maintain. It is not backwards compatible and the environment is easily corrupted.

My favorite groupware collaboration software is a web-based groupware application called Intranets.com. Intranets.com allows anyone with little to no experience to built web based relational databases in real-time on the fly, ready to use after building. It is by far the most impressive company I have ever worked with. It allows rapid prototyping, rapid application development and production usage in minute’s verses days, weeks and months. We have converted all our traditional client server based databases all to web-based database group collaboration software at Intranets.com.

There are many other software applications that are effective tools for groupware collaborations such as WebEx for web based meetings, information and desktop sharing like doing product demos.

Simple instant messaging can be used for example MSN Instance Messenger. Our team uses instant messenger to hold meetings for team assignments. It provides a written record of who said what. It is like a permanent meeting minute’s tracker.

The reading text talks about workflow management groupware applications. I have work with several large companies that have attempted to use these applications and they have not worked out for many reasons. They have been very difficult to use, time consuming to use and very expensive to purchase, deploy and maintain.

The advantage of using groupware applications are the rapid, accurate, in-sync reception and dissemination of information.

The disadvantage is the lack of personal interaction with others in a face to face environment. While video conferencing allows for face to face collaboration, it is not the same as in person interaction and communication of information. Other disadvantages are the additional costs and customization that might be required for a particular business group.

Office Automation
Groupware software applications are often augmented with documents, publications, presentations, spreadsheets, CAD drawings, voice mail, faxes, scanned images, art work, video and other forms of audio within the groupware application. These files are created with other applications such as a word processor, spreadsheet program, power point applications, image editor, video editor, scanning software, etc. The use of this software is referred to as office automation as the software is used replaces the manual method previously used.

Office Automation is the integration of several applications to produce a single output. An example would be a program called HotDocs. It also the fast creations of large documents like legal and commercial real estate contracts. It allows someone with little to no experience to answer a few questions and it will generate all the necessary clauses, language, personal pronouns, sentence structure and pull existing database to populate word documents.

The advantages of Office Automation are an increase in work production, work flow and more accurate information. It is often miss-referred to as a reduction in labor costs. The actual fact is one is still working the same amount of time, but now you are doing more work. The production of work increases, but the labor costs for 8 hours is still 8 hours.

The disadvantage of office automation is the complexity in which office automation can become over a short period of time. It takes more user knowledge to deploy, use and maintain the integration of the various applications and additional user training maybe required. Lastly about every four years all software and hardware used in the office automation efforts will need to be replaced.

Relational Databases

Q. What is a relational database? How is it structured? Indicate commercial database that are sold to the public that are relational in nature. What are the advantages and disadvantages?

What is a relational database?

The concept of a relation database can be thought of as a collection of tables that are connected together by Primary and Foreign keys. A table is like an Excel spreadsheet that is a file based system with cells as fields and rows as records. A table is contained in a DBMS. The purpose of related tables are to reduce the amount of redundant information. One table could contain contact information, another table could contain product information, and another table could contain inventory information and so on.

How is it structured?

The data is contained within table and the tables are connected together with primary and foreign keys.

Indicate commercial database that are sold to the public that are relational in nature.
There are two kinds of database products. One is the product that a database application is developed in such as Microsoft SQL http://www.microsoft.com/sql and another is an actually application that uses a database that is pre-structured such as MOLDTRAX at http://www.moldtrax.com . This commercial relational database uses an Access database. It has seventeen tables with seventeen primary and foreign key relationships. It has sixty custom queries that use one to many relationships to define a view for a form or report.


What are the advantages and disadvantages?

Advantage:

The biggest advantage is the over reduction in redundant information. Another advantage is the ability to relate information and produce queries results that would not otherwise be possible in a single table.

Disadvantage:

The biggest disadvantage is the complexity in knowledge required for an administrator or developer to build, deploy and maintain such a system. Therefore is can be more expensive to use.

In most companies there are measure in place to deal with data contained in a single location such as:
  • Data replication to another server
  • RAID 5 hard drives in which the data is contained on several hard drives at the same time live
  • Cluster Servers in which the same data runs on several servers at the same time in a RAID 5 environment
  • There are two kinds of Backup Agents on real time data backup and the other is night agent backups.
  • The database systems also contain the ability for them to be backed up or dump their data to a text file manually or on a schedule.

Sunday, December 12, 2004

Phishing, Spoofing and Evil oh My

If you manually enter the website address in your browser it will ensure that you are going to the desired website. Otherwise according to recent security issues that were discovered you will have no idea.

It is recommended that the site that you are intending to perform commerce with that you start your connection with a newly opened browser and manually enter the website address.

Never click on links inside an email or suspicious web site that leads to a commerce site. Never fill out a web form inside and email, and never fill out a web form that you did not request.

Saturday, December 11, 2004

Which Computer Vendor?

The reality is most computer companies are bad, mostly in the support in the support and warranty area. When it comes to home user support I give all the computers companies a failing grade. They have shipped all the support centers overseas where you get Fred the tech guy who can not speak English very well and is reading from a script, placing you on hold, having to try things that are completely unrelated to the issue. It is very frustrating to everyone.

On the business side with server support, those jobs are still in the US and I receive excellent support from most all the major vendors.

Here is my Picks on Vendors Home and Desktop support ratings.
  • Dell (but they have been on the decline for that last 6 months and their support is getting worse)
  • HP/Compaq (good support, can be difficult to get to, hold times are long) I am not a big fan of their priority none up gradable hardware, but it is quality.
  • Gateway (Support can be very frustrating and an unwilling to replace failed hardware without speaking to a supervisor)
  • Off brand or other vendors: I don’t not have any customers that have other one off brand systems. Dell has been the defacto standard and their warranty program and onsite support is better than the rest. If others wish to comment about their vendor I would love to hear about your experiences.
  • SONY: I have a Sony Viao. I love my Viao, but Sony is by far the worst company I have every dealt with on tech support. Not only would I give them a failing grade on support, but I would expel them from the tech support industry. They have the crappest warranty program which basically covers nothing. Their repair turn around time is about 6 weeks on the minimum 3 months has been the worst case. They over charge for part to the turn of about 50%. You never get to speak to the hard support people, only a customer rep who knows nothing, and they will not let you speak to a supervisor of any sort. Their customer support is in FL and the hardware repair center is in CA. I will never buy another Sony computer product ever, not will I ever recommend them to anyone for anything. If you have or buy a Sony computer product, expect to go to tech support Hell. It angers me as we are a Sony house with Video, camera, Tivo and other gadgets. Not any more as my Sony Video camera just died and it too has a support Hell of its own, so we are looking at a Canon Video camera. Ok I am done with my RANT. I feel better now!
  • Built it yourself: I only recommend building it yourself if you want the best of the best. My desktop is a custom built PC, but my wife’s PC, my primary Server, and my office PC’s are Dell builds. I bought 3 Dell Desktop 2.8 gig 256 meg for $350 ea w/o monitors. I could not build them for that price. You really can not save money building it yourself when you include your own labor.