NEWS
New Exel 2010 Tip, Conditional Formating Between Spreadsheets
31st August 2010
Excel 2010’s conditional formatting feature lets you reference different sheets—something you couldn’t do before. In earlier versions you had to copy or link data to the same sheet. Now, you just include the reference to another sheet as you would any other reference!
To illustrate this new feature, we’ll use the simple products sheet shown below. (I based this example on a subset of the Products sheet in the Northwind database, but changed it considerably for this example.) There are two regions, Northwest (shown below) and Southwest. Each region has its own sheet for tracking product sales.

Now, let’s suppose you want to see where the Northwest region is outselling the Southwest. Using Excel 2010’s new referencing option, it’s easy to reference another sheet, as you’ll see:
- Select the sales values in Northwest, that’s D2:11.
- Click the Home tab.
- In the Styles group, click Conditional Formatting | Highlight Cells Rules | Greater Than. The resulting dialog box will display a default format.


- Click the RefEdit icon (circled in the above picture).
- Click the Southwest tab.
- Click cell D2 (in Southwest).
- Alter the absolute cell reference $D$2 to $D2—that way the row number can adjust to accommodate the entire column in Northwest. In other words, every product in Northwest will evaluate the same product in Southwest.

- Click the RefEdit icon.
- Choose an appropriate format, such as Green Fill With Dark Green Text.
- Click OK. According to the conditional formatting, the Northwest region is outperforming the Southwest region in four products.

This new referencing option doesn’t work with grouped sheets, which makes sense. If you want to see where the Southwest is outperforming the Northwest, just repeat the same process, but start by selecting the sales values on the Southwest tab. Then, in step 5, click the Northwest tab instead of the Southwest tab.

Both Excel 2003 and 2007 will let you go through the motions of selecting a cell or range on another sheet, but when you try to commit the reference, Excel displays an error.
This new conditional formatting option is easy to implement and one you’ll probably find many uses for. Try it out and let us know how you like it!
Optical Wireless Networks
26th April 2010
Many scientist believe that the physical limits of traditional wi-fi have been reached. In the search for better transmission rates, scientists have been experimenting with optical wireless networks (OW). The full description of the experiment held by The Centre for Information and Communications Technology Research in Pennsylvania can be found here: http://cictr.ee.psu.edu/research/wc/index.html
For those not too interested in wading through the details, here are some of the benefits that can be accrued by using OW - assuming you like the idea of your home being flooded with white LED light...
OW networks overcome the following weaknesses inherent to Radio Frequency (RF) networks as pointed out in an article written by Dr. Mohsen Kavehrad:
Transmission speed
- RF: Power levels that do not hurt indoor occupants (think microwave) limits the maximum data-transfer rate to several hundred megabits per second.
- OW: Data transfer speeds equivalent to wired links. Experiments have shown speeds in excess of one gigabit per second are possible.
Bandwidth Limitations
- RF: Full duplex is not possible; radio signals sent at the same time and frequency will interfere with one another.
- OW: Photons do not interfere with one another. Usable bandwidth is limited only by the efficiency of the receiver’s photodiodes.
Security
- RF: Radio waves pass through walls, opening up chances for eavesdroppers.
- OW: Light waves cannot pass through walls, preventing interception of the signal.
Multipath fading
- RF: Due to the physical environment, variations of the same RF burst may reach the receiver at different times. If sufficiently out of phase, they will cancel each other out.
- OW: Destructive interference is impossible with light waves.
Network Security
15th April 2010
Since its launch last year Windows 7 has been well received with many people lauding its improved security features. However, Jim Waggoner from Symantec questions the reality of this perception. Although it is easy to point the finger of self interest at Symantec, there are lessons to be learnt.
It is funny how history repeats itself over and over again. A new 'secure' operating system comes out and people think they don't need to use an endpoint security solution for protection against malware.
For Mac's we have heard it for years and now with Windows 7, since it looks like it is more secure than earlier versions from Microsoft, the same rumour is spreading. Well, looks can be deceiving, and when it comes to the security of your PC, those deceiving looks can be dangerous.
I saw some not so surprising results from our survey, 'Symantec's 2010 State of Enterprise Security,' which supported the anecdotal information. Just under 75 per cent of the people taking the survey reported that they believe Windows 7 will either significantly improve or somewhat improve endpoint security.
This concerns me because they are the people who are now getting infected by malware since they will probably loosen up the security posture on their systems. Since Windows 7 has been released, Microsoft has released fixes and patches for 25 vulnerabilities and I imagine that you would expect there to be more in the future.
Windows 7 is Microsoft's most secure (and from customer feedback most stable) operating system yet, which is a convincing reason to upgrade. However, no OS can be completely secure against attacks on its own. Today's hackers are more sophisticated and today's businesses are more susceptible to web-based viruses and malicious code that are using social engineering techniques to propagate.
The sheer number of threats appearing each year is absolutely mind boggling. While Symantec predicted the accelerating trend, to see it come to life is a bit frightening. According to the Internet Security Threat Report XIV we released, Symantec detected more than 1.6 million new malicious threats worldwide in 2008 alone.
29/03/2010
The online video advertising market is noticing significant growth, according to new reports.
Web TV Enterprise, a leading online advertising network, said 2010 is proving to be its busiest year yet from 'pre-roll' advertisements.
Jamie Estrin, the company's managing director, said: 'It's a market that at the moment is growing significantly.
'With more and more premium video content going online the audience is growing all the time and with any evolving market place there's lots of new players arriving there which is great.'
Mr Estrin's comments echo the findings of a recent report by smartclip, which revealed that 71 per cent of marketing professionals plan to use video advertising in their campaigns over the next 12 months.
The study, which was published by Utalkmarketing.com, found that almost three-quarters of respondents said the transparency of online video and the simple way of measuring its success was a reason for its popularity.
Smartclip said that interactive video advertising in particular is set to grow over the coming months.
February 2010 - BCS article.
As telepresence, the much refined video conferencing system, enters the travel-reluctant market, this could also open up new careers for network engineers. Gary Flood investigates.
Though it's been around for a while, video conferencing has never really become the big deal that on paper it should be.
After all, it surely makes eminent sense for busy business people to save time and corporate travel budget to interact with each other by screen in the comfort of their own offices instead of dealing with the charms of Heathrow T5 or Virgin Trains.
And as we all know, there's a Green aspect to minimising carbon footprints. But talking to each other by video or webcam remains a minority sport, at least in the world of 9 to 5.
That may be set to change. A much more sophisticated version of all this has been quietly building momentum on the sidelines - and if companies like HP and Cisco have their way, it will soon be galloping to centre stage. Meet the latest and greatest in remote interaction with your colleagues: Telepresence.
To get this clear from the start, this isn't something you're going to be using on your PC and it's not as yet available in Currys, shall we say. Telepresence is on the order of 20 times more expensive than standard video conferencing, with equipment on the order of $80,000 to $500,000 to install.
Despite that astonishing disparity in price, and the fact that it represents less than half of 1 per cent of units shipped, nonetheless telepresence makes up a massive 15 to 20 per cent of the video conferencing market total, according to US market specialists Wainhouse Research.
What's going on here? It turns out corporates are happy to shell out the big bucks for all this as the user experience is so much richer than standard video conferencing, seeming to literally bring the other parties into the same room. It is being seen as the technology that finally delivers what we were promised all along by the video conferencing people.
‘Telepresence systems create an effect [that] provides life-size images of the face and upper body of the remote participants while maintaining a position and proximity perspective that allows the remote participants to appear to be sitting on the other side of a conference-room table,’ says the analyst group.
Such fancy stuff has been around since the early 1990s, but has only really started to happen in the middle of the decade when HP (with its Halo product) and Cisco (with Cisco TelePresence) started to push this into the enterprise space, both as an on-premise buy but also as a hosted service.
WAN Accelerators Next for Small Business?
03 January 2010
One of the many fun things of being involved with Information Technology is guessing what may be the next significant development for IT in the Small to Medium Sized Enterprise (SME). Over recent years we have seen the proliferation of VoIP (Voice over Internet Protocol), mobile email and document management in the SME market. These have gained a foothold, not because they are great gadgets but because they have made a significant contribution to profits and realise a fast Return on Investment. This is the argument on which any future potential technology adoption has to be based. Over the next five years, Network Deployments suspect that SMEs will start turning their attentions to WAN (Wide Area Network) accelerators.
WAN Accelerators
Network traffic can be inefficient. Protocols are often 'chatty' (communicating more than necessary) and occasionally networks are poorly designed. On internal Gigabit networks with fewer than a hundred workstations this inefficiency makes little noticeable difference, but with increasing reliance on the internet for information and services it can slow internet links to an extent where time is wasted. WAN accelerators use a number of techniques to remove or reduce those inefficiencies. These can include the following:
-
De-duplication - eliminates the transfer of redundant data across the WAN by sending references instead of the actual data.
-
Compression - relies on data patterns that can be represented more efficiently.
-
Caching/Proxy - where data was originally retrieved over an internet connection, it is stored on the device locally.
-
Protocol spoofing - bundles multiple requests from chatty applications into one.
-
Traffic shaping and prioritisation - controls data usage based on spotting specific patterns in the data and allowing or disallowing specific traffic in order to achieve the best user experience.
The device sits in-line between your Local Area Network and your router or firewall. It is usually used in conjunction with a another device at a branch office, although software clients put onto laptops are becoming increasingly popular.
Why Might WAN Acceleration be Good for My Business?
Internet access has come a long way from the dial-up modems delivering 56Kbps over a telephone line. The trouble is that despite this relatively fast proliferation of broadband, it has not kept pace with demand for fast and reliable communications via the internet. Many businesses have found they have had to work from second choice locations due to the quality of their internet connection. It is unlikely that BT's Century 21 network will deliver anything close to changing that and many, often rural, businesses will find they are paying a premium for their rent merely because of their internet requirement.
As telephone and data communications continue to merge, and as software and services are increasingly delivered over the internet, both upload and download speeds will come under increasing pressure. Network Deployments are already offering a wide range of strategies to foster expeditious and more robust internet connections, but many of them require increasing the availability and amount of maintenance required, as well as the rental of more lines. WAN Acceleration delivers an easy way to permanently improve internet performance regardless of the actual speed of the line without increasing your monthly outlay.
Cost and Benefits
A single device may cost in the region of £500+ depending on its cache size and speed. Network Deployments Ltd commission Juniper devices that are extremely reliable and perform well on the busiest of networks. They can be quite complex machines, however, and inevitably requires experienced network engineers to get the best for your investment. Clearly a cost would depend on your environment, but you should budget about £400 for this.
Most Application Accelerator manufacturers estimate a 40% increase in performance of file transfer between devices. If your organisation downloads large files between branches, it is easy to see how this may be of benefit, especially if you can extend the decreased waiting time to your remote users on their laptops. It is possible to ask your IT provider what the average download file size is, and make assumptions about how many times each staff member may require it. Armed with this information you can start to put equations together to decide whether or not this technology will repay itself in an acceptable period of time. The expected lifetime for these pieces of kit are more dependent on the growth of your business, but Network Deployments will happily support these items for periods of up to five years.
If your business is in the unfortunate position of having to increase their internet connection speed, then given the price of quality internet providers, WAN Accelerators offer a viable alternative. Over five years, an addition ADSL line will cost about £30 per month. Spread over five years, this reaches £1800. A return of £800 over five years isn't much, but as soon as you put into the equation the need for the installation of another line, its rental, additional routers – especially those that can mix two ADSL lines – and suddenly the WAN accelerators look attractive. The investment of accelerators can also be used with any type of internet connection should your type of internet connection change.
Conclusion
The demand for increased internet speed will grow exponentially as communications and services delivered over these lines increase. Certainly, demand will outstrip BT's 21CN project in rural areas, leaving those countryside-based organisations with a choice to move to the city or to adopt strategies to deliver the connectivity they require. Network Deployments are increasingly advising companies in Essex on these strategies and, WAN Acceleration, following its continued reduction in cost, is a vital part of an overall internet and WAN connectivity plan.
Dennis Litjens BSc MCSE MBCS
Securing the Cloud.
10/12/09
Cloud computing is the next big thing: at least so it is predicted. Following the huge data loss by Microsoft who were hosting data for T-mobile, what are the problems posed to small and medium sized businesses? The following link to the article written by the British Computer Society explains all in the amount of detail you would expect from the BCS
http://www.bcs.org/server.php?show=conWebDoc.33651
As an executive summary, though, this may suffice:
"Of course if you are a small business driven by cost, with little no legal or regulatory drivers, using a cloud might be ideal. If it goes down for a day then why worry? In reality most small firms could manage without IT for a few days, and the answer is to keep a local backup of those important of key files anyway, or make on line backups with a another backup cloud such as Microsoft Mesh. Companies with a need for highly available systems will need to think differently though."
The choices can be tough. Save a few quid but delegate the responsibilty for your vital data, or pay for top network support. If you're an SME based in Essex, Hertfordshire or North London, and would like to know more about cloud computing and how it may effect your network and your business, then just pick up a phone and have a chat.
Counterfeit Anti-Virus Is Big Business
08 December 2009 - Source IT Chuiko, translated.
Gains arising from cybercriminals manufacturing and distribution of fake antivirus reaching almost 950 thousand Euros per year - estimated by experts from Symantec.
According to the data contained in the report, Symantec Rogue Security Software, a fake antivirus was promoted to the rank of one of the most modern forms of malware. Developers of these programs feed on human fear and do not care about the damage done to people's PCs. The surfer believes that their PC is vulnerable to network attacks and becomes an easier target for fraudsters.
The user will see pop-up windows or banners warning against infection but they actually download viruses. The colour scheme is set to resemble common Operating Systems or Anti-Virus programmes and the victim is more likely to fall for the fraud. They are even willing to part with money and buy additional tools to increase the safety of their computer.
What compounds the problems is that the malicious software is given permissions by the user to install but often contain malicious add-ons, such as programs to capture passwords and other tools for data theft. An additional obstacle in the fight against scareware is that fake anti-virus are difficult to identify the real security applications.
So the surfer loses tens of euros, and receives nothing but a virus in return. Symantec Calculates annual revenues could be as much as 950,000 euros. The US, UK and Canada are the most profitable locations for this type of fraud. Symantec has so far identified more than 250 different varieties scareware applications.
The answer is to keep your AV up to date, and think twice before installing innocent looking video or sound codecs, drivers or other downloads.
A Safe Cyber Christmas
07 December 2009
The following content has been provided by colleagues at http://www.e-victims.org/. You can sign up for latest alerts via email or rss feed.
Holiday Phishing
The holiday season is busy for everyone including criminals. Expect to see an increase in phishing attacks. Here some of the holiday attacks we expect to see here at http://www.e-victims.org/
Gadget Gotcha - Are you looking for a great bargain on PS3, MP3 players, latest phones, digital camera or laptop? Criminals always have the best deals! Don't be fooled by a great offer via email, tweet, website or even mobile phone. Use a well known retailer even if you have to pay extra - think of it as insurance.
Movie Mischief - the latest news on the Xmas block busters always attract criminals. They put up fake sites offering movie downloads and hot rumours to get you to click on their links. It is the latest - the latest version of malware.
Dodgy delivery - You get an email saying "We tried to deliver your package, but were unable to reach you. Please click here to rearrange your delivery" The link delivers something - malware.
HO HO HO - Friends love share jokes, pictures and videos. Don't assume because they come from your friends it is safe to click. Scammers may compromise your friends account and send out phishing emails that says "see Rudolph hit Santa with a snowball" or "see Santa's sexy helpers" to everyone in your friend's address book. Look out for messages like this via your social networks as well!
E-cards Eek! You've got a holiday e-card or at least a spam email that invites you to click a link to an e-card. When you go to read your e-card it may ask you to download a reader -don't do it! It will be malware which may send the same message to everyone in your address book. If you really think the e-card is real - just double check with your friend first to make sure they sent you one - before you click the link.
Microsoft’s Danger SideKick Data Loss Casts Dark on Cloud Computing
October 11th, 2009
Daniel Eran Dilger
Microsoft has demonstrated that the dark side of cloud computing has no silver linings. After a major server outage occurred on its watch last weekend, users dependent on the company have just been informed that their personal data and photos “has almost certainly been lost.”
While occasional service outages have hit nearly everyone in the business, knocking Google’s Gmail offline for hours, plunging RIM’s BlackBerrys into the dark, or leaving Apple’s MobileMe web apps unreachable to waves of users, Microsoft’s high profile outage has impacted users in the worst possible way: the company has unrecoverable lost nearly all of its users’ data, and now has no alternative backup plan for recovering any of it a week later.
The outage and data loss affects all SideKick customers of the Danger group Microsoft purchased in early 2008. Danger maintained a significant online services business for T-Mobile’s SideKick users. All of T-Mobile’s SideKick phone users rely on Danger’s online service to supply applications such as contacts, calendars, IM and SMS, media player, and other features of the device, and to store the data associated with those applications.
When Microsoft’s Danger servers began to fall offline last Friday October 2, users across the country couldn’t even use the services; even after functionality was beginning to be brought back on Tuesday October 6, users still didn’t have their data back. This Saturday, after a week of efforts to solve the crisis, T-Mobile finally announced to its SideKick subscribers:
“Regrettably, based on Microsoft/Danger’s latest recovery assessment of their systems, we must now inform you that personal information stored on your device – such as contacts, calendar entries, to-do lists or photos – that is no longer on your Sidekick almost certainly has been lost as a result of a server failure at Microsoft/Danger.”
A new report from Engadget says that T-Mobile has suspended sales of its SideKick models and is warning: “Sidekick customers, during this service disruption, please DO NOT remove your battery, reset your Sidekick, or allow it to lose power.”
As always, if you have any doubt about how data loss could effect your business - or even any other support issue in Essex or North London - then give the Network Deployments IT management team a call.
Network body language - New Security Techniques Available for the SME
IT staff need to be alerted to unauthorised activity when it happens, not after the event has occurred. Monitoring the network behaviour characteristics of users plays a critical role in the battle against data loss and security breaches, writes Stuart Hodkinson.
Security is one of the few areas of IT investment that would appear to be insulated from the woes of the economy. Regardless of how good or bad the economy is doing, investment in security has to continue, as the threats to public and private sector IT systems continue to grow and evolve.
However, the state of the economy can have a direct impact on the threats posed. For example, in the current climate we are seeing many companies forced to make significant headcount reductions, often in one bulk movement.
This can result in numerous potentially disgruntled staff leaving the company in one go and leaving an already stretched IT department with numerous - at times hundreds or thousands of - IT accounts to deactivate.
When handled manually, this sudden jump in workload results in a significant lag between the individuals leaving and their account access being disabled, exposing the company to risk of unauthorised access while those accounts remain active and exploitable.
Of course, the threat of a network breach does not always sit with a disgruntled former employee. It can just as easily sit with a current employee or even someone completely disconnected from the organisation, the so-called opportunistic hacker.
According to the most recent Identity Theft Resource Center (ITRC) data breach report, a shocking 656 data breaches were reported in 2008 in the US alone, a 47 per cent increase from the 2007 figure of 446 data breaches. Financial services companies reported more than 18 million records breached last year. Overall, more than 35 million records were compromised in 2008, according to the ITRC.
For the IT department, it is key to head off any breach or attack as early as possible. Ideally, you would want to be alerted to an issue while it is happening, rather than spotting an anomaly in a log file days later, or when confidential data falls into the hands of a national newspaper.
Taking inspiration from the anti-virus technology community, where the analysis of abnormal system behaviour is key to detecting new viruses, network behaviour analysis (NBA) is an approach to bolster the overall security measures and alerting systems in use within a given organisation. It works by analysing and mapping normal day-to-day activity such as:
- who accesses which servers and when;
- data transfer peaks;
- authorised external access;
- which network services and applications are used and when;
- the use of removable storage devices.
This kind of NBA needs to be performed on an on-going basis in order to build an accurate profile of what is 'normal' for the organisation, as well as to enable IT staff to spot anomalies as they happen.
According to the ITRC, insider theft has more than doubled between 2007 and 2008, accounting for 15.7 per cent of all reported breaches.
The most recent example of this was the attempted data theft from investment bank Goldman Sachs in early July 2009. While working for the company, a computer programmer is alleged to have downloaded copies of the source code from a proprietary trading system and taken them off-site without authorisation. Code was downloaded to his home computer, as well as to removable memory sticks to allow it to be passed on.
This data theft was detected while it was taking place, not after the event, when IT staff at Goldman were alerted to a surge of data leaving Goldman’s servers that did not match the normal network body language profile. From there it was a simple process to determine where that surge was heading.
The result of this detection was that the offending programmer was arrested and charged with stealing top-secret application code relating to Goldman's high-speed financial trading platform, a competitive differentiator that earns the bank millions of dollars each year.
Part of the advantage of NBA is that the measure actively works with other security protocols that are already in place on the network, it is non-invasive and will not create conflicts or false-positive readings. Security measures built into applications and appliances will continue to operate as normal, or any security protocols that are inherent to any servers in use on the network.
Interaction between hosts and clients are scanned and routinely processed as being clear or as having some aspect that is out of the ordinary. Such scanning will also log any unusual changes in the use of bandwidth or any attempts to modify system protocols that appear to be somewhat severe in nature.
The most important element of any NBA project is analysing the normal and abnormal behaviour of access. NBA will help an organisation build up a profile of normal access activities, allowing the IT department, along with line mangers and compliance officers, to see who is accessing what systems and which credentials they are using to achieve that access. With this profile in place and with it continuing to evolve, organisations can then quickly see incidents of unusual and blatant unauthorised access.
Anomalies can include:
- users logging in with credentials of other current or former employees;
- users accessing systems with credentials they should not have been assigned;
- users accessing systems and sensitive data remotely.
The use of NBA, in conjunction with the consistent enforcement of a comprehensive identity and access management (IAM) strategy, can help to limit the amount of time and resources required to maintain a high level of security and access compliance in the operation of a network.
In order for NBA to be truly effective, a baseline of normal network or user behaviour must be established. However, this takes time, so any NBA activity must be undertaken as part of a longer-term project and must take place over a period.
Once the key parameters have been defined, such as normal access, activity peaks and remote access levels, any departure from one or more of them is flagged as anomalous and other security systems can then come into play to take preventative action and shut down access as needed.
Personal Data Guardianship Code launched
2 June 2009
BCS, in partnership with the Information Security Awareness Forum (ISAF) founded by the ISSA-UK, has launched the Personal Data Guardianship Code in an effort to change the culture of organisations towards the handling of personal data.
The code follows on the success of the BCS petition objecting to the changes in the Coroners and Justice Bill which would have seen drastic changes to the way in which government departments could have used personal information.
The code is intended to help organisations and the people in them who handle personal data understand their individual responsibilities. It promotes best practice and provides 'common sense' guidance, and also lays out information for the data subject.
BCS and the ISAF have produced the code in direct response to the number of high profile data breaches in recent years, including several in government offices. It follows sustained activity by BCS on the topic of security and data protection.
Louise Bennett, Chair of the BCS Security Forum explained: 'This is the culmination of two years work which began in 2007. The consultation work we've undertaken in that time exposed the need for practical help in changing culture to embed good data guardianship principles in all organisations.
'This is the equivalent of the Highway Code for motorists - it will help all those involved in the management of personal data understand their role and enable them to carry out their jobs better.'
The code identifies the principles and responsibilities of everyone involved in the collection, management and use of personal data including guidelines outlining:
the roles and responsibilities of the responsible person
the roles and responsibilities of the data handler
an overview of the rights and responsibilities of the data subject
Dr David King, ISAF Chairman, said: 'We should all be able to trust that our personal data is being handled with respect and is being managed securely. Yet, it is evident that this is not always the case.
'The aim of the guide is to encourage a sea-change in the attitude to data and how it is handled. We hope that the guide will encourage people to understand their roles in this chain of activity and empower them to better understand the law and processes.'
More information and the code can be found at: www.bcs.org/datacode
Cloudy Outlook for Computing
Source: Silicon.com, 27 April 2009.
Microsoft has finally launched its latest offering on the cloud computing market with the arrival of its Business Productivity Online Suite (BPOS).
BPOS will see Microsoft's enterprise apps - including Exchange Online email, SharePoint Online collaboration software, presence and IM product Office Live Meetings and, from later this year, Office Communications Online videoconferencing - sold as a single hosted software package.
As well as BPOS, Microsoft has today taken the wraps off a new cloud offering: and an email and calendaring option, Business Productivity Online Deskless Worker Suite, which includes Exchange and SharePoint.
The Deskless Worker Suite is aimed at workers that aren't normally tied to their PC all day but still need to get email and intranet access every now and again, including retail shop workers, factory workers and flight attendants, according to Microsoft.
So far, companies including Coca-Cola and GlaxoSmithKline have signed up to use BPOS, after switching from an in-house Lotus Notes set-up.
In the UK, Scottish charity the Wise Group is one of the earliest adopters of BPOS, with some 20 staff already using the suite and the rest of the organisation's 400 or so workers following suit in the coming few months.
Wise Group CIO Alan Lee-Bourke said the switch from on-premise to hosted software will allow him to move techies from keeping the lights on to more useful projects.
"My staff spend a lot of time looking after our existing infrastructure so now I can forget about all that, and I can get them to become data managers and data custodians. It's not only cost but our data gets better too - I can redeploy the staff to more interesting things. I don't have to worry about wires and boxes," he told silicon.com.
"My organisation's not used to [cloud computing] at all. Ultimately, the argument was we don't care where our data is. As long as we get timely, accurate and relevant data, that's all we care about," Lee-Bourke added.
If you would like to know more about cloud computing in general, or BPOS specifically, then get in contact with Network Deployments network support team - 0845 003 8850.
Poorly Advised Small Businesses Victims of E-Crime
Source Computing Weekly, February 09
Online crime and fraud cost small businesses £800 a year, according to the Federation of Small Businesses (FSB), which is calling for more action to tackle the problem.
A survey by the FSB, which represents more than 215,000 businesses, found more than half (54%) reported being a victim of crime in the last year. Only one-third reported it to the police or their banks because they lacked faith in the system.
This mistrust arose following the absorbtion of the former National High Tech Crime Unit into the Serious Organised Crime Agency in 2006, which left no-one responsible for commercial and technology e-crimes.
The FSB said nearly 40% of respondents had had problems with phishing emails, 15% fell victim to card not present fraud, and another 15% suffered IT problems caused by viruses and hackers. The financial costs of fraud ranged between £500 and £5,000, with an average cost of £768 a year, it said.
More than half (53%) of the small businesses surveyed said they needed clearer information about how and where to report this type of crime. Some 44% wanted a named contact in their local police force specifically focused on fraud and online crime.
Some 85% of English and Scottish businesses said they would report fraud if there was a designated reporting centre to gather data, investigate the crime, and follow through with prosecutions. This echoes steps already taken in Wales, which already has a reporting centre.
The Federation for Small Business has responded to the fear of crime against small businesses in the Essex area by launching a survey with a view to raising the issue in the lobbies of Westminister.
Conficker worm: worst is yet to come
January 23rd 2009 - Source National Business Review
Conficker has wriggled into millions of PCs, leaving them open to receive a nasty parcel of malware from its author. But the worm – shaping up to be the biggest virus attack the world has ever seen - has yet to deliver its payload to a single infected computer.
Peter Sparkes, senior manager for managed security services across Asia Pacific and Japan for Symantec, the largest antivirus player, says his company has yet to spot a single instance of a PC being hit by a Conficker payload (although the Ministry of Health in New Zealand did take its systems during a 15 day battle to root out the worm itself).
The worm works in three stages. In the first, it infects a PC, either online or – in a nice retro touch recalling the days of floppy-borne viruses – a USB thumb drive. Next, it “phones home” to a rogue web server controlled by Conficker’s creator (whom Symantec’s rival F-Secure fingers as a Ukrainian hacker), letting the server know the PC is infected, and now open to receive a payload of malware.
While the malware payload could theoretically be any piece of software, Mr Sparkes notes that unlike the early internet days of show-off hackers and amateur vandals, today’s virus writers are all about making money. He also notes that Conficker is a very slickly-written piece of software, noted for its uniquely insidious ability to randomly generate 250 server domain names every day (most worms are easier to nab because they “phone home” to a single server).
Mr Sparkes says Conficker (also known as Downadup) is continuing to mutate. One new variant attacks Windows Vista (previously, Windows XP and older versions were more vulnerable). Another hijacks the “autoplay” function in Windows 7 (Vista’s successor, still in beta).
It’s unlikely such a sophisticated operation would not be building up to a major attack.
Typically, today’s malware attempts to sniff out personal details that could provide its author with access to the victim’s bank account or online auction account – or simply holds and individual or company’s data to ransom.
So when Conficker’s payload does hit, it’s likely some of the owners of the estimated 3 million (by Symantec’s count) to 9 million (by F-Secure’s) infected PCs are going to see their online accounts looted.
It’s possible Conficker’s author has set a certain date when all infected PCs will be hit in one big-bang attack, which would maximise the rapidly-reconfiguring worm’s chances against being blocked by security software updates. However, it’s equally possible incremental attacks will take place.
Although Conficker is shaping up to possibly be the world’s largest ever virus attack, Mr Sparkes says infections are concentrated in the small business segment, and geographically in China, Russia and South America – countries where there is less security infrastructure, and fewer have applied Microsoft’s relevant Windows patch or auto-update their antivirus software.
Lack of IT skills causes 'grave disadvantage'
09/01/2009
People who are looking for a job will find themselves with a 'grave disadvantage' if they do not have any skill in IT, it has been claimed.
Elspeth Farrar, communications director for the Association of Graduate Careers Advisory Services (AGCAS), explained that almost all jobs now require 'some kind of competency with computers'.
This is true even if it is just about standard programs such as Word or spreadsheets, she said.
'In virtually every kind of working environment computers have an impact,' Ms Farrar added.
'For anybody to enter into the work environment without at least basic [IT skills] would be putting themselves at a very grave disadvantage.'
In May last year, the National Employers Skills Survey from Leading Learning and Skills revealed that there has been an increase in the proportion of skill shortage vacancies which were connected to IT knowledge.
It had risen from ten per cent in 2005 to 13 per cent in 2007.
Caution: dangerous emails ahead!
We've all had them, spam emails that pretend to be something they're not. Lurking in our inbox waiting for us to get careless and mistakenly click on them before we realize it's too late. But what is a fraudulent email?
Spoof or fraudulent email often pretends to be from a well-known company, such as PayPal, eBay or even Sainsbury's, in an attempt to get personal information from you. People who send spoof emails hope to use your information, such as credit and debit card numbers or account passwords, most frequently to commit identity theft.
There are things that can be done to prevent malicious emails effecting your business. Although spoof, or 'phishing,' emails (and the spoof websites often associated with them) are deceptive in appearance it can be all too easy to get sucked in. It is, however, possible to spot the content that reveals they're fake. The most important thing you can do to protect yourself is to identify this misleading content.
So what should you watch out for?
- Generic greetings. Many spoof emails begin with a general greeting, such as: 'Dear – insert company name – member.' Many will simply say 'Hi', 'Hello' or have a shorthand symbol such as :)
- Many convey a false sense of urgency. Most spoof emails try to deceive you with the threat that your account is in jeopardy if you don't update it ASAP.
- Fake links. The text in a link may attempt to look valid, but on clicking it you'll find yourself sent to a spoof address. Always check where a link is going before you click. Move your mouse over it and look at the URL in your browser or email status bar. If the link looks suspicious, don't click on it. And be aware that a fake link may even have a legitimate word in it.
- Use of the @ symbol within URLs. Fraudsters will often hide the true location of a link within the URL, and sometimes there will be an 'at' sign visible, which will help to pinpoint the actual destination of the link.
- Misspellings. Another common technique that has been used is a URL that at first glance is the name of a well-known company but on closer inspection turns out to be slightly altered. For example, www.microsoft.com appears instead as www.micosoft.com
Legitimate companies will not ask certain questions in an email. In fact they should never ask for any of the following personal information in emails:
- Credit and debit card numbers;
- Bank account numbers;
- Driver's licence numbers;
- Email addresses;
- Passwords;
- Your full name.
How to prevent spoof emails from affecting you:
- Keep your security software current. Update your firewalls and security patches frequently. Consider using software from companies like Symantec and McAfee.
- Monitor your account. Check your account periodically to see if there is any suspicious activity. Change your password often and, if you think your security may have been breached, create a new password immediately.
- Use a unique password. Your password should be one of a kind, and not used on any of your other accounts. A good password contains letters and numbers and should be greater than six characters where possible. This makes it more difficult for people to guess it.
- Take action. If your information is compromised, get a fraud alert placed on your credit report.
- Report any fraudulent emails. Forward the entire email, including the header information, or the site's URL, to the company involved immediately. In other words if you received a scam email about eBay, you should forward it to them.
- Finally, scammers will always play on their victim's paranoia or greed so remember, if something appears too good to be true it usually is (too good to be true)!
If you think you've been infected by these emails, then ensure your anti-virus is upto date, and remove the device from the network. Start your anti-virus and give us a ring. We can help identify the malware that you have and start the process of recovery - 0845 003 8850. Even if the worst happens, the chances are we will be able to recover your data and support you in rebuilding the machine. If you're in Essex, North London or the City, we'll even come to collect it.
CLA Criticise Government on Rural Broadband
The Country Land and Business Association (CLA) has criticised the government for not investing enough money in next-generation broadband.
In addition, a report by the Department for Business Enterprise and Regulatory Reform (BERR), recommending no central government investment in the technology, was described as 'seriously blinkered' by the organisation.
The CLA maintains that rural businesses and industry could be seriously harmed in future without adequate broadband access.
'Universal fast broadband is not just for games and videos, it means industry and jobs,' said the director of CLA North, Douglas Chalmers.
'Some rural areas are already disadvantaged by existing broadband provision, which not only affects existing businesses but also stops new enterprises relocating and creating employment.'
Many in the UK are still without broadband, although some appear to be using slower dial-up connections of their own volition.
A recent report from BroadbandChoices.co.uk discovered that over one million UK households are still using the technology.
Security Procedures 'Ignored' by Prison Service
Although concerning, the government has demonstrated a raft of different ways to lose data. They are now apprehensive that, under the Data Protection Act, they could be sued by the individual criminals concerned. The claims could run into million of pounds. David Smith, Deputy Commissioner in the Information Commissioner's Office, said the latest loss showed that personal information could be a "toxic liability" if not handled properly.
For companies that are concerned with their own liability while handling sensitive data should put procedures and policies in place. Many private companies make it impossible to use memory sticks through their computer systems, a technique available to customers of Network Deployments.
Here's a quick run down of other government disasters with sensitive data:
- Nov 2007: 25m people's child benefit details, held on two discs
- Dec 2007: 7,685 Northern Ireland drivers' details
- Dec 2007: 3m learner drivers' details lost in US
- Jan 2008: 600,000 people's details lost on Navy officer's stolen laptop
- June 2008: Six laptops holding 20,000 patients' details stolen from hospital
- July 2008: MoD reveals 658 laptops stolen in four years
Many customers of Network Deployments have asked us about the Data Protection Act, their customer data base, and how it relates to their legislative duty to look after it. Many procedures are simple, effective and cheap to implement. This is especially so when compared to the liability that handling this data confers. Phone 0845 003 8850 to find out how to protect your data and gain your customers' trust.
Slow Broadband Hampers Business Growth
04 Aug 2008
Britain's broadband speeds are threatening business efficiency, warns the Communications Management Association (CMA), part of the BCS Group.
The reason for this, according to the CMA, is because the lack of provision to meet predicted demands will frustrate companies' e-commerce operations.
Over a third of UK businesses predict they will need speeds of 100 Mbps to be able to meet future demand for next generation internet technology, according to the CMA's next generation access report, the first major survey of UK business broadband needs.
Yet around a third questioned by the CMA, the representative body for business users of communication, networks and services, say they currently do not receive satisfactory access to internet technology - such as infrastructure, services and applications.
The CMA, whose members spend £13 billion a year on communications and networks, is renewing its call for the government to create a national broadband strategy that anticipates the massive rise in demand for next generation access (NGA) to the internet over the next 12-24 months.
David Harrington, CMA's director of regulatory affairs, says: 'The gap between government rhetoric and formulation of policy appears to be as wide as ever. Back in April last year, we warned there was a limited window of opportunity over the next 12-24 months to develop and implement a concerted and innovative approach to regulation and policy-making that would lead to a market-led transition to next generation broadband.
'Fourteen months on, there is little sign of either a concerted or innovative approach to regulation and policy-making, which the government acknowledged as recently as last September as being necessary.'
The survey - compiled in association with Ofcom and Openreach, a division of BT which ensures that rival operators have equal access to BT's own network - reveals that at least 57 per cent of businesses questioned desire 10 Mbps or higher for their core business needs.
Fortunately, there are a range of technologies that can be implemented to increase the performance of any internet connection. Working with boutique and specialist ISPs, Network Deployments can install and configure hardware that organises and bands together ADSL lines to deliver ADSL connectivity that businesses need. If you would like to have this technology explained and find out what it can do for your business, phone 0845 003 8850.
Microsoft’s Danger SideKick Data Loss Casts Dark on Cloud Computing
October 11th, 2009
Daniel Eran Dilger
Microsoft has demonstrated that the dark side of cloud computing has no silver linings. After a major server outage occurred on its watch last weekend, users dependent on the company have just been informed that their personal data and photos “has almost certainly been lost.”
While occasional service outages have hit nearly everyone in the business, knocking Google’s Gmail offline for hours, plunging RIM’s BlackBerrys into the dark, or leaving Apple’s MobileMe web apps unreachable to waves of users, Microsoft’s high profile outage has impacted users in the worst possible way: the company has unrecoverable lost nearly all of its users’ data, and now has no alternative backup plan for recovering any of it a week later.
The outage and data loss affects all SideKick customers of the Danger group Microsoft purchased in early 2008. Danger maintained a significant online services business for T-Mobile’s SideKick users. All of T-Mobile’s SideKick phone users rely on Danger’s online service to supply applications such as contacts, calendars, IM and SMS, media player, and other features of the device, and to store the data associated with those applications.
When Microsoft’s Danger servers began to fall offline last Friday October 2, users across the country couldn’t even use the services; even after functionality was beginning to be brought back on Tuesday October 6, users still didn’t have their data back. This Saturday, after a week of efforts to solve the crisis, T-Mobile finally announced to its SideKick subscribers:
“Regrettably, based on Microsoft/Danger’s latest recovery assessment of their systems, we must now inform you that personal information stored on your device – such as contacts, calendar entries, to-do lists or photos – that is no longer on your Sidekick almost certainly has been lost as a result of a server failure at Microsoft/Danger.”
A new report from Engadget says that T-Mobile has suspended sales of its SideKick models and is warning: “Sidekick customers, during this service disruption, please DO NOT remove your battery, reset your Sidekick, or allow it to lose power.”