love_coffee_not_java

Time to Patch Java

Java Patch Released

As you may have heard there is a significant security vulnerability in Java that is currently being exploited widely on the internet. This bug can be used to silently install keyloggers or other types of malicious software from compromised websites. Oracle has released a patch that you should install as soon as possible on all your computers and servers.

In addition, security researchers are recommending that you disable Java functionality in your web browser after installing the patch. This will help limit your exposure to bugs that will be exploited in the future.

You can download the patch here and then read below for instructions on how to disable java in your web browser.

Chrome

  1. Click on the Chrome menu, and then select Settings.
  2. At the bottom of Settings window, click Show advanced settings
  3. Scroll down to the Privacy section and click on Content Settings.
  4. In the Content Settings panel, scroll down to the Plug-ins section.
  5. Under the Plug-ins section, click Disable individual plug-ins.
  6. In the Plugins panel, scroll to the Java section. Click Disable to disable the Java Plug-in.
  7. Close and restart the browser to enable the changes.

Note: Alternatively, you can access the Plug-ins settings by typing about:plugins in the browser address bar.

Firefox

  1. Click on the Firefox tab and then select Add-ons
  2. In the Add-ons Manager window, select Plugins
  3. Click Java (TM) Platform plugin to select it
  4. Click Disable (if the button displays Enable then Java is already disabled)

Safari

  1. Choose Safari Preferences
  2. Choose the Security option
  3. Deselect Enable Java
  4. Close Safari Preferences window

Internet Explorer

  1. Open Internet Explorer. (See Screenshots below for help)
  2. Type ALT + T to activate the Tools menu and choose Manage add-ons. Choose “All items” from the Show drop-down menu. Disable “Java Plug-in –version number–.” It is safe to simply disable all of the items that begin with Java, but be sure to get this one. Close Internet Explorer.
  3. Type WINDOWS + R and type regedit (approve UAC prompt if necessary). Browse to HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in\{version}\UseJava2IExplorer and change (Default) to 0. 64-bit Windows users will need to change HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Plug-in\{version}\UseJava2IExplorer to 0.
  4. Download this text file, open it and save as disablejava.reg, run it to disable Java completely in IE.

 

Many Thanks to Naked Security and Shashi.co for these instructions

Type "Alt+T" then "Alt+A" to open Manage Add-Ons

Type “Alt+T” then “Alt+A” to open Manage Add-Ons

Show all addons

Show all addons

Select Java and choose disable

Select Java and choose disable

More Info

For further reading about this vulnerability I suggest:

mfp_security_risk

Is your Multifunction Copier a Security Risk?

I consider myself to be fairly well informed on issues concerning data security and privacy and I found this to be absolutely astonishing. Could your Multi-function Copier be on the of the most high value data targets in your organization?

I discovered this 2010 CBS News Investigative report this morning via my friend @pulrich. It’s quite disturbing.

 

Before I contribute to uninformed alarmism it should be noted that CBS made quite a splash with this investigative report and at least to a degree the industry has responded.

Several of the major MFP manufacturers have published security portals or papers that outline how they are addressing these issues.

What should you do?

ASK QUESTIONS

If you are a business with an MFP or considering an MFP ask questions of our Print Services provider or account rep. Don’t let them try to dazzle you with standards, ask clear questions about automatic wiping or encryption and then ask for certification documentation.

If you are evaluating a new printer I’d suggest starting with this list of Common Criteria Certified Products, (Click on Multi-Function Devices)

HAVE A POLICY

Before you sell or end the lease of your current MFP have a procedure to wipe the Hard Drive and clear the NVRAM. If the MFP is end-of-life yank the data storage components and use a secure destruction service to dispose of them.

 

 

DNSsvc.com bill is fake

If you’ve reached this page via Google you deserve an attaboy. Your instincts are correct – the “bill” you received from DNSsvc.com is not a bill.

I’ve highlighted in orange on the image below the portion that keeps them from being sued but is still deceptive marketing.

DNSsvc_bill_fake

Pretty shady stuff. Hope I helped someone save $65.00.  I’m not sure it will change anything but I encourage you to file a complaint with the BBB. It will take 3min and I’ve already found the direct report link for you.

Media Destruction Little Rock

Media Destruction Services for Good

I’m often asked about trustworthy methods to destroy hard-drives, backup tapes, and external drives so when I heard about this service I just had to share.

The United Cerebral Palsy of Arkansas offers media destruction services. It’s a full service offering and not only do you get great value you also know that you helped support the UCP.

For more information contact: Dan Leslie, 501-228-3814, [email protected]

Per Unit Pricing:

 0.8 cubic foot Carton $18.00
1.2 cubic foot Carton $21.60
1.8 cubic foot Carton $36.00
2.4 cubic foot Carton $48.60
3.6 cubic foot Carton $72.00
Shrink-Wrapped Pallet or Gaylord $707.00
32 Gallon Security Console $45.90
65 Gallon Container $90.35
175 Gallon Container $228.60
Per stop charge (applicable for multiple-stop routes) $50.00
Minimum charge (applicable if combination of transportation and destruction charges is <$50.00) $50.00
Vendor Container delivery charge during non-scheduled route or Regular (non-DTS) Transportation Pickup Charge $25.00
Vendor Container delivered during normal scheduled shred service route or bin swap service. $0.00
Hourly Labor Charge (Special projects, labor to palletize cartons upon request, etc.) $30.00
Hard Drive Destruction $5.00

Transportation Fees (based on round-trip mileage):

0-30 miles $141.00
31-60 miles $225.00
61-90 miles $280.00
91-120 miles $390.00
121-150 miles $450.00
151-180 miles $500.00
181-210 miles $650.00
211-240 miles $825.00
easy_email_campaign_management

Easy Email Campaigns

Many Facebook page owners are discovering the importance of building communication with customers and supporters on channels you control, namely Websites and Email Campaigns. (I’ll say a few more words about this toward the end of the post.) If you are new to managing email lists and sending campaigns here are a few platforms to help you get started.

MailChimp

MailChimp has all the bells and whistles and may seem a bit complicated at first but MailChimp’s documentation is very well done. Basically you’ll create a List, (e.g. Subscribers”) and publish a sign-up form for people to subscribe. Over time you might delve into creating sharp templates but to get started I highly recommend using their “Email Beamer” to send an update to your list directly from your email client. In other words you can send an email to all of your subscribers just as easy as you send an email to a friend. Here’s how:

  1. Send an email to your list’s unique email address (this is automatically created when you create the list)
  2. Mailchimp will reply with a confirmation that a draft has been created.
  3. Reply to the confirmation with the word “Send” and voila it will deliver.

Start with reviewing MailChimp’s Getting Started guide and then read about the Email Beamer feature.

I love Mailchimp and highly recommend them. If you have fewer than 2000 subscribers you can send up to 12,000 emails per month completely FREE. If you sign up for their service I’d appreciate you using my affiliate link to sign-up.

TinyLetter

TinyLetter, which is now part of the MailChimp family, is the no fuss method of sending email newsletters. It’s very simple to use and free to setup. I haven’t used it extensively so I don’t know the limitations of the product but knowing its pedigree I think you’ll be very pleased with this stripped-down email campaign tool.

Letter.ly

Letter.ly is similar to TinyLetter but focused on newsletters that charge a subscription fee. It’s fairly widely used and beyond simple to setup so if you want to charge a few dollars for access to the newsletter this is the fastest way to get up and running.

A word on Facebook Page Posts and visibility

If you manage a Facebook Page you are no doubt aware that your posts are no longer reaching as wide of an audience. Through edge rank algorithms and the introduction of promoted posts you probably feel like you’ve encountered a bait-and-switch. Here is the hones truth… Facebook doesn’t charge you for pages and they don’t owe you anything. Social networks can be an invaluable tool but realize that you are always at their mercy.

It is essential that you tie your community and communication to channels that you can control, (i.e. your website, your email database).

For further discussion on the subject I recommend reading these touchstone posts by @copyblogger:

In closing

There are many sites email campaign manager tools available (e.g. ConstantContact, Aweber) but Mailchimp is what I prefer, use and recommend. If you know of other email tools that focus on simple and easy email newsletters I’d love to hear about them. If you need help with Mailchimp feel free to contact me. I help a number of clients in the setup and management of Mailchimp and I’d be glad to help you as well.

Happy Emailing

 

 

telegraph_your_tweets

Be Prepared: Tweeting without Internet

Every natural disaster these days proves how useful Twitter in particular has become. The problem of course is these disasters usually mean your internet service and/or mobile data service is offline. So how do you stay connected and informed?

Twitter via Text Messaging (SMS)

You’ve probably heard that Twitter was initially built as an SMS service and because of that pedigree it maintains serious functionality through the lowly text message. However many of us don’t use twitter via text message enough to be adept at its syntax.

So here’s is one little tip that could really help – Save the Twitter SMS Commands PDF to your smartphone to have all the commands at your fingertips regardless of your internet connection.

Scan the QR code to open the PDF directly on your smartphone.

Try using iBooks, Evernote, or Dropbox to save a copy of this PDF if you aren’t familiar with this feature.

By the way you’ll need to link your cell phone to your Twitter account via the web at http://twitter.com/devices or you can do this via text message as well.

How to add your phone to your existing Twitter account via SMS:

  1. Send a text to your Twitter code with the word START.
  2. We’ll reply and ask you to text YES to the Twitter short code.
  3. Text your username to the same number. Do not use the @ symbol or quotation marks. Send your username ONLY, for example: larrybird
  4. Next, text your password. This is case sensitive, so be sure you are sending your password correctly.
  5. That’s it! You’re ready to go

This won’t take you 1 minutes of time and it might just help keep you connected in a time when you need it most.

cuttingthecord

Cutting the Cord – Part 1

I’m saying goodbye to my TV service.

I’m an early adopter in many arenas of technology but I’ve been hesitant when it comes to monkeying with my flat screen HD. For a few months I’ve been pondering cutting the cord and after some input from my Twitter community and research I’m ready to make the move.

The Tipping Point

I’m a long time AT&T customer and we were one of the first to sign-up for Uverse. The speed and service have been solid but I’m tired of paying through the nose for the little TV we like to watch. For the Uverse Family (think local channels + DisneyJr) we pay $74 per month. I’ve reached the point I find that ridiculous and I can fix it. Time for a change.

Our TV tastes and the largest hurdle

  • Me: NOVA, CBS Sunday Morning, Frontline, and I usually have 1-2 dramas that I keep up with. (Currently Parenthood)
  • My Wife: Days of our Lives, Project Runaway, and a sampling of Say Yes to the dress & Big Brother type shows.
  • Toddler: Dora, Diego, Blues Clues, etc…

What you will notice is I don’t list sports. Honestly, I’m not a huge sports fan. I love Arkansas Razorback college football and basketball. I enjoy NASCAR but don’t have the time and I’ve never really learned to love the NFL/NBA beyond casual interest in the NBA playoffs when the Mavs do well. Why is this important?

Live sports is probably the single biggest hurdle to cutting the cord.

There are good options for most of the major leagues online but the coverage and options don’t near match-up to traditional TV providers. So if  you live and die sports coverage then you can probably stop reading now.

Personally I’m not paying $70 a month for any sport and that is about what this breaks down to.

The Offerings

  1. Apple TV – Slick, $99 but the major deal breakers: No Amazon Video, I hate iTunes, I don’t like being married to a platform.
  2. Google TV$99, Lots of content options, full web browser. Reviews seem like apps and interface need some maturity. Also I don’t like being married to a platform.
  3. Boxee – Too pricey, the tech doesn’t sound stable enough.
  4. Roku – Great price, tons of content, platform independent. Winner.

The Cost

Let’s get to the numbers.

  • Uverse Family  + HD = $74 per month
  • Uverse 200 + HD = ~$95 per month
  • Roku with Netflix streaming, Hulu+ = 1 time cost of $99, then $16 monthly

Yes you read that correctly. I’m saving $58 per month and get 20x the content, in HD with no commercials.

Roku offers lower price units starting at $50 but with the savings I’ll get I’d be a fool not to get the 1080HD model. Being a geek I also opted for the Wired model because WiFi performance just can’t match a wire these days.

In the interest of full disclosure we are Amazon Prime members as well so we get Amazon Instant Video for free and their catalog is sparse but growing.

So I’ve placed the order and I hope to hook up this weekend. I’ll write a follow up about setup and experience once I have everything in place.

A few final notes:

My college team offers streaming of all games for $15 per month but that is too steep for me. The only other sporting event I really love is March Madness and I enjoyed it thoroughly in 2012 via their app. Are apps and streaming services like ESPN3 putting up a walled garden that requires a cable/dish account? Sure. This post is proof why. Record labels lost this fight and TV will as well so pardon me while I exit your garden and keep my $70 a month.

Your Turn

Have you dumped your traditional TV provider?

trust_reputation

The Currency of New Media is Still Reputation

In a world where everyone is rushing to be the first to break news its time we decide that being right is more important than being quick.

While much has been said concerning CNN and Fox reporting errors concerning the Healthcare ruling last week I’d like to examine a local example from this past weekend in hopes of raising our collective awareness and responsibility.

Just the Facts Please

Last night news began to break concerning a wildfire near one of my state’s flagship state parks, Mt. Magazine. Arkansas is under a severe drought and seemingly everyone is hyper aware of the fire danger we currently face so news of this type spread very quickly.

To my knowledge the news of the fire hit twitter around 8:30 via @KATVheather. Within a few moments @KATV_weather was also following the story. Then at 9pm and again at 10:40pm @ARscanning posted 2 photos reportedly from the Mt. Magazine fire. You can see the full timeline of these posts below

They weren’t.

My eagle-eyed friend @chad_gardner fired up google and easily found both of the images posted online.

Thankfully this wasn’t a matter of life and death and the reports were mostly harmless and quickly refuted. No harm done this time so let’s figure out what went wrong so we can be part of the solution.

It’s a Matter of Trust

@ARscanning is an anonymous account that began to gain traction a few months ago. Most of the tweets seem to be from an individual sitting and listening to a police scanner. The account has no real name, no face, no affiliation, and no website. I’m sure the individual behind the account has good intentions but the fact remains if you trust an account like this for verifiable news you need your head examined. It’s akin to taking stock market reports from a stranger wearing a hood on the street corner. So while the Arkansas Times commenters decry this as an example of why Twitter is a broken rumor mill I’d challenge that it is a failure of common sense.

However, what happened last night was not simply an issue of @ARscanning.’s reports. Yes, the community conscience should hold them responsible for posting inaccurate information but the larger issue is that trusted reporters and journalists started retweeting the account.

Here is the essence of the issue:

If you trust @ARscanning it is your own fault. If you are a trusted reporter and you help spread this inaccurate information without doing due diligence you are just as culpable.

We find an example of getting it right via our own social media juggernaut Mr. Todd Yakoubian, @KATV_weather. He saw the reports and instead of automatically forwarding them he used his resources and called the source of the news to verify what was happening. This in my mind is a perfect example of the value that traditional media can bring to social media. The average Joe doesn’t have contacts and resources to follow-up on a report in a timely manner so we place our trust in proven organizations that do.

To be fair the organizations/people that shared this info quickly corrected the info but they had already given the info their stamp of approval.

I’d like to add that Central Arkansas is blessed to have some incredibly active journalists and reporters as part of our Twitter community. This is not intended to condemn anyone or any organization, just a reminder that we need your skills more than ever.

Takeaways:

You have one currency; Trust. Don’t spend it lightly.

How can the average user help?

  • Remember the golden rule – Just because you read it on the internet doesn’t make it true.
  • Crisis Communications is too important to become a rumor mill. If you see “breaking” news tip a trusted reporter and ask them to follow up.
  • Take a tip from @acarvin and add the words “unconfirmed” to your tweet or ask for the source of the information.