Tim's IT Consulting blog

Are you ready for emerging threats?

2008-04-22T05:08:00.000-07:00

Are you ready for the next wave of cyber attacks? My guess is probably not. How could you if you don't know what's coming?

You see, I have a really bad feeling about the next couple of years, at least as far as the technology field. We will continue to see cyber threats making huge leaps and bounds as malware writers continue to become well funded, organized operations. In the "old" frontier days of spyware, you pretty much only got the really nasty spyware/malware if you went somewhere on the web that you probably shouldn't have in the first place. That's already changing, as we see malware writers are now beginning to target ANY website that they can crack into and place their malware distribution software on. That means that even the knitting blog that your grandmother visits isn't safe anymore. And your uncle's website where he sells fishing lures is now a target, since his website was built three years ago with an e-commerce package that now resembles swiss cheese to a determined malicious hacker. These newer malware packages are also getting smarter about avoiding detection.

I'm not even to the good part yet. Unfortunately Microsoft Windows Vista has been a big flop and proven that it's not really ready for prime time mass adoption. It's unfortunate because it would be a welcome scenario if a larger installed base of users had a more secure operating system and more secure browser. The new Windows Service pack 3 for XP will do some good as far as security goes, but without User Account Control, it still isn't as secure as Vista.

A recent high profile "pwn to own" contest showed us that operating systems are more hardened and less vulnerable than ever before. None of the base operating systems were hacked on the first day. On the second day, hackers were allowed to go after bundled software on the system, such as web browsers. Apple's Safari web browser on the Mac platform was hacked by going to a prepared website where the hacker had prepared an exploit for an unknown vulnerability. The third day the hackers were allowed to go after third party installed software, and the Vista PC was compromised by an exploit with the Adobe Flash player software, a very ubiquitous add on that anyone needs to view most sites on the internet. This showed us that while browsers are still a target, no matter what operating system you are running, common applications running on computers are going to be the next thing that malware writers attack. I know most of you are well trained by now to perform your operating system updates, and web browsers, but are you prepared to keep track of every application that runs on your computer and keep every one up to date? You need to start getting used to doing that now.

So what can the Small Business owner/IT department/Consultant do to prepare yourself for these threats? Enforcing strict user policies and locking down computers so that end users can do the least damage should be high on your list. I know, user will cry and moan, but it must be done. Make no mistake, USERS SHOULD NOT HAVE ADMINISTRATIVE RIGHTS to their local computers. That point is so important, I feel it should be repeated. I repeat, USERS SHOULD NOT HAVE ADMINISTRATIVE RIGHTS to the local computer. More than ever, KEEPING SECURITY SOFTWARE CURRENT is another top priority. Consider ADDING A UTM (Unified Threat Management) device to protect your network, such as the ones made by Astaro. Such a device will allow you to FILTER INTERNET CONTENT, which is a good idea for many reasons, including security.

No matter what steps you take, you can never be 100% secure. But by taking practical steps you can be prepared to face new cyber threats with the confidence that you computer systems are not easy pickings for malware, malicious hackers, or identity thieves.

HP USB Keys: You want malware with that?

2008-04-08T09:51:00.001-07:00

Apparently some USB keys that are shipping as an optional add-on for HP Proliant server are including some additional "features" that no user will want. This is REALLY bad news, because it is VERY likely that a sys admin would use this key well before he got to the point of installing any security software on the server. Read more here

Vista 64 Bit rant

2007-12-13T12:58:00.000-08:00

Windows Vista: freeware edition?

2007-12-07T11:53:00.001-08:00

Microsoft is dumping WGA (Windows Genuine Advantage), and Vista will no longer totally deactivate itself with the release of Service Pack 1 http://www.informationweek.com/blog/main/archives/2007/12/introducing_win.html;jsessionid=2MS2BZUU2WVHWQSNDLRSKH0CJUNN2JVN

Vista listed in the top ten worst comsumer tech products of all time

2007-11-26T08:45:00.001-08:00

Is Vista really as bad as one of the top ten worst consumer tech products of all time? You decide for yourself, but personal experience and that of my clients that want to do anything more that check email and surf the web would likely agree. Read the story

Marketing Your Blog Is More Effective Than Advertising

2007-11-15T11:09:00.001-08:00

First of all advertising is a component of the marketing process. You can look at advertising as the end result of marketing.

read more | digg story

Cost vs. Value

2007-10-26T20:22:00.001-07:00

Occasionally I'll come across a small business owner that has a hard time understanding the value of a quality Technology Consultant. That's an attitude that normally changes as the business grows and the owner sees that when employees can't get to work that it's worth paying for good quality IT support.

But add to that save money at all costs approach with a cheap consultant you have a recipe for problems.

I've talked with business owners that really think that their last IT support person wasn't that bad. And now they having to pay more for their IT support. They say that hey the other guy didn't charge as much. Perhaps, the other guy was just:

- Unreliable

- Sold pirated software

- Rude

- Incompetent

I know first hand from not only speaking to business owners but also having limited dealings with the former support person and let me tell you, I'm not exaggerating.

So yes, you may pay a little more, but what do you get?

- Reliability

- Integrity

- Courtesy

- Competence

Quality doesn't cost more, it pays in the long run with reduced downtime and more productive personnel. It pays by having robust backup systems in place that protect your business' critical data. Cost in an expense, but Quality is an investment in true value.

Blogging on the go

2007-10-24T06:40:00.001-07:00

You should be hearing from me more often, I just discovered a really great new web 2.0 tool called imified. It allows you to post to your blog, mini-blog, google calendar and more by using your IM client. Check it out at www.imified.com

Where's my RAM? or How I learned to work in 64 Bits Part 3

2007-10-09T19:23:00.000-07:00

After much trial and error, I've finally gotten my x64 Windows XP Pro install completely stable (for Windows that is :)

One casualty in the war for system stability was unfortunately my brand new Nvidia graphics card. Shame on you, Nvidia!!! Why can't you write a stable driver that actually allows 3d to work on my x64? Alas, the onboard ATI fared better. I was able to resolved some BSOD issues on shutdown as well as random lockups by downloading the latest (not even beta!) ATI Cataylst drivers.

Unfortunately this sort of thing isn't limited to Windows XP x64. Join me into my jump into Windows Vista 64 bit.

Where's my RAM? or How I learned to work in 64 Bits Part 2

2007-10-02T06:21:00.000-07:00

I haven't had much working from home time the past few days, and with the fall season of TV shows like Heroes, Chuck, and House 'playing' around time has been greatly reduced. I'm sad to report that I'm having driver stability issues. I was using the latest beta Nvidia drivers for x64 and now I'm having screen blanking and non responsiveness. At least they actually provide 3d graphics! But at the expense of system stability? No thanks.

So, I'm going to give up the option of running games on my x64 machine(for now anyway) and focus on Virtualization software and my productivity apps. So it's Microsoft Virtual PC, VMWare Server and the standard stuff, Office 2007, web and graphics apps.

To Be continued...

The reports of Windows XP's death are greatly exaggerated

2007-09-28T07:08:00.000-07:00

Windows XP has officially received a stay of execution. You will still be able to purchase XP home and professional until June 30, 2008. OEM's and system builders will be able to keep bundling Microsoft's best OS until January 30, 2009.

So does this mean that Vista is a flop? Well, I can tell you that I get people asking me the question whether they should downgrade to XP, as they are having issues with Vista. Time will tell if Vista really is "ME2" or not.

Where's my RAM? or How I learned to work in 64 Bits Part 1

2007-09-24T21:02:00.000-07:00

I built a new computer this month. It's got the most RAM of any system that I've personally owned. Here's the specs:

Amd Athlon 64 X2 4600+
4 Gigs Ram DDR2 800(4x1Gig)
gigabyte motherboard
PCI Express GeForce 8500GT 512 Meg
Misc hard drives I have laying around that I will be swapping out

I first installed Windows XP(32bit) Professional. I could only see 3.5 Gigs of ram, give or take a couple hundred meg. I was aware of this limitation, but it got me thinking about really wanting that extra RAM available. I am testing out some different Server Operating Systems on both VMWare Server and MS Virtual Server. So I decided to install Windows XP Profesional x64 Edition, the 64 bit version of Windows.

To be continued...

Windows Networking Tip - Enable NetBIOS

2007-09-06T22:20:00.000-07:00

No, the Better Business Bureau is not emailing you

2007-09-02T11:04:00.000-07:00

Be aware, there's another phishing type email that is gaining momentum. It claims to come from the Better Business Bureau and advises you that there is a dispute involving YOUR business. So what's different about that? This phishing email is customized and actually targets your business by name and address. About 1400 people so far have taken the bait and gotten hit.

So NO, the BBB isn't emailing you so delete that email!

Read more details over at this article at SecurityFocus

New Gmail phishing email to avoid

2007-08-21T07:50:00.000-07:00

There's a new phishing email going around that is targeting YOU, the unsuspecting Gmail user. You'll get an email that looks like this:

DON'T click on any of the links! Be safe, delete!

Microsoft's Virtual Labs: Free training on Microsoft products

2007-08-18T20:39:00.000-07:00

Whether you are planning a purchase or trying to brush up your admin skills, you need to do yourself a favor and check out a free resource from Microsoft. It's called Virtual Labs. Go to http://technet.microsoft.com/en-us/bb467605.aspx and signup. It won't cost you a dime, but Microsoft will call you to follow up as well as try and sell you something.

Once you sign up, you'll be able to download a manual, and 90 minutes of time in the virtual lab. Need more time than that? Just signup for another session. So give it a try, you have nothing to lose.

The Curse of the White Box

2007-07-30T20:15:00.000-07:00

Sometimes when picking up a new client, I'll be asked to work on a computer that's having trouble. Well, right now you're saying “that's what you do, isn't it?” Of course, but this computer is not an ordinary computer. Wait, maybe that IS the problem, it's so ordinary that it's a “White Box.” I'm sure you may be scratching your head right now and saying, “what is a white box?”.

The White Box that I am referring to is a computer that is built from available off the shelf parts. It's usually put together by smaller computer builders, often known as “OEMs”. When done right, White Boxes can offer a good value. Many OEMs provide great product and great service, I'm not going to bad mouth all of them. Like any business, there are great companies and there are, well, not so great ones. I am not against OEM computers, but I am against small businesses buying them I think that small businesses are better off buying from larger computer manufacturers such as Dell or HP and here's why:

Warranty: While many OEMs do offer extended warranty, the warranty that's offered through someone like Dell or HP is more dependable. Why? Well, simple economies of scale. When Dell(or HP) puts together a business class system, they engineer for that system to have a certain life cycle. They also keep exchangeable parts on hand for a number of years to support the standard and extended warranties for those systems. With a white box there's no guarantee that you'll be able to find an exact replacement for critical components such as Processors or Motherboards if you're outside the OEM builder's warranty. Longer warranties are also usually more expensive with the white box than with a Dell or an HP system. And here's another REALLY big thing about warranties. A Dell or an HP can offer you next business day onsite warranties. I have yet to see a system builder that offers the same. Even if they can come onsite for service, can you really expect them to be out there the next business day? There's no reason that a business should not expect that any hardware problem with a single computer should not be corrected completely by the next business day, at least under normal circumstances. Now to be fair, all the big guys subcontract all their support out to smaller companies. And you can get some real jokers out to work on your system. But if your IT person or department has done their job to the best that they can in diagnosing what exactly needs replacing, many problems with repair techs can be minimized.

Price: For the most part, base prices are comparable. But because the bigger manufacturers buy in much larger quantities, they usually offer better specials and promotions. Things such as large LCD flat panel monitors bundled with the computer can save you some money. Also, add ons such as MS Office Suite costs you less when bought with a new system from a large manufacturer.

Easy of Support: If your small business has a larger number of desktops(20+), then your IT budget will be easier to swallow if you invest the time having all the same type of desktop. This will ease IT support costs, since all the systems are the same that makes troubleshooting easier. Drive imaging can also be a big help. With all the same model of PC, your IT help can create a disk image that will enable software problems to be quickly fixed by simply re-imaging the computer. This will save hours over the traditional method of reinstalling an Operating System, applications and installing all patches.

Keeping your business running smoothly is top priority. Anytime you or your employees are unable to do their job, money is lost. So getting computers back into a working condition should be a priority. Buy the systems that are going to help you meet that goal, whatever color they may be.

What Search Engines store about you

2007-07-20T20:14:00.001-07:00

From Techworld.com

What if there were a giant database that contained your hidden insecurities, embarrassing medical questions, and the fact that you still think from time to time about your high-school romance? Well, such a data store does exist -- if you've ever plugged such private topics into a search engine.

The fact is, search engines like Google, Yahoo, and Microsoft Live Search all record and retain in their vast data banks any term that you query in addition to the date and time your query was processed, the IP address of your computer, and a cookie-based unique ID that -- unless you delete it -- enables the search engine to continue to know if requests are coming from that particular computer, even if the connection changes...... continue reading the full article here

More than you wanted to know about Viruses and other threats

2007-07-13T12:27:00.000-07:00

Today, threats to your computer and IT systems are more widespread and varied than ever before. The damage can cost time, money and even destruction of your data. Nowadays with identity theft a big danger too, it becomes even more important to protect yourself against there threats. First let's take a look at the different kinds of viruses and threats.

First, let's look at some different types of Viruses and malware that is currently popular. Thanks to Wikipedia for the following descriptions.

Different Kinds of Threats

Virus: A computer virus is a computer program that can copy itself and infect a computer without permission or knowledge of the user. The original may modify the copies or the copies may modify themselves, as occurs in a metamorphic virus. A virus can only spread from one computer to another when its host is taken to the uninfected computer, for instance by a user sending it over a network or carrying it on a removable medium such as a floppy disk, CD, USB drive or by the Internet. Additionally, viruses can spread to other computers by infecting files on a network file system or a file system that is accessed by another computer.

Worm: A computer worm is a self-replicating computer program. It uses a network to send copies of itself to other nodes (computer terminals on the network) and it may do so without any user intervention. Unlike a virus, it does not need to attach itself to an existing program. Worms always harm the network (if only by consuming bandwidth), whereas viruses always infect or corrupt files on a targeted computer.

Spyware & Malware: Spyware is computer software that is installed surreptitiously on a personal computer to intercept or take partial control over the user's interaction with the computer, without the user's informed consent. While the term spyware suggests software that secretly monitors the user's behavior, the functions of spyware extend well beyond simple monitoring. Spyware programs can collect various types of personal information, but can also interfere with user control of the computer in other ways, such as installing additional software, redirecting Web browser activity, or diverting advertising revenue to a third party.

Trojans: A Trojan horse is a program that installs malicious software while under the guise of doing something else. A Trojan horse differs from a virus in that a Trojan horse does not insert its code into other computer files and appears harmless until executed. The term is derived from the classical myth of the Trojan Horse. Trojan horses may appear to be useful or interesting programs (or at the very least harmless) to an unsuspecting user, but are actually harmful when executed. There are two common types of Trojan horses. One is ordinary software that has been corrupted by a hacker. A hacker inserts malicious code into the program that executes while the program is used. Examples include various implementations of weather alerting programs, computer clock setting software, and peer-to-peer file sharing utilities. The other type of Trojan is a standalone program that masquerades as something else, like a game or image file, in order to trick the user into running the program.

How you can protect your Computer & Network

So, now you know a wee bit more about viruses then you ever wanted. What can you do personally and at the company level to protect yourself and your IT systems?

One thing that will go a long way to protecting your PC is to purchase proven security software. My personal recommendation differs from your environment, depending on whether you are a networked office with server, or a small office with 3 computers.

IT - Expense or Investment?

2007-07-07T18:08:00.000-07:00

For many small businesses, spending money on their computer systems is an incidental expense. I've seen business owners spend hours or even days of their own time trying to fix problems that could be solved much quicker by having a competent computer consultant work on their systems.

Reasoning that you should try to fix it yourself is flawed reasoning and I'll tell you why. I'll bet good money that you don't clean your own carpets, or take care of your own plumbing problems. Also, I'm sure a good number of you use an accountant or an accounting firm to help your company keep your books in order. So why should your IT systems be any different? The most important thing you can be doing as a business person is running your business. Whatever that entails, your time is best spent taking care of your business, NOT worrying about your IT systems. Here's a good article about the impact that downtime can have on your business, as well as how to minimize it.

Every small business faces growing pains, and your business is no different. You can benefit from skilled professionals that can assist you with areas of your business that you don't need to become an expert on. Instead, you can become an expert at doing what you do best, running your business.

Total Data Solutions, Computer Help, Networking IT Services for San Antonio & surrounding area Small Businesses

2007-07-03T16:36:00.000-07:00

Hello, my name is Tim Cooling. I've been working in IT for the past ten years. I've been helping small businesses just like yours with their IT needs. I have clients in San Antonio, Kerrville & Fredericksburg and can help your business too.

What I'm doing now is reaching out by way of a new blog. My goal is to inform, educate and assist small business owners with their IT needs. Through tips, news, and advice it's my wish that you gain some nuggets of wisdom that will help you with your IT systems.