Lest you think political turmoil caused by social media is purely a US-based phenomenon, the world’s biggest election starts next week in India as over 800 million people prepare to vote. And as it goes in any modern country with a relatively internet-savvy voting population, propaganda, fake news and misinformation campaigns from every political party are making it difficult for voters to make objective, well-informed choices. Guess who’s at the heart of the problem? Yup, that would be everyone’s favorite: Facebook. I’d almost feel sorry for them if I didn’t know that they were at the heart of the problem from the very start, having been a major online impetus for the current ruling party’s rise to power in 2014. And now they are having to lie in what’s proving to be a very uncomfortable bed.
Why do you think it’s called “Pandora’s Box”?
Sadly, the problems that Facebook and other social media platforms faced with the Christchurch nightmare will be the same ones they face in India’s upcoming election, which will be the same problems we will face in our elections next year: regardless of the number of human moderators and fact-checkers they point at this problem, the lid will never be shut as long as Facebook and its kin continues to commit to upholding free speech. How could they do otherwise? India’s scenario is particularly difficult for a number a reasons, chief among them is India’s 340 million users (compared to the US’s 214M) and more than a dozen languages. When you consider that Facebook’s moderation algorithms and staffing were primarily developed in English, this presents a problem that they are ill-equipped to deal with, despite being pointedly directed by India’s Election Commission to police election-related postings from all parties and candidates. In an attempt to combat fake news and hate speech, Facebook has hired several fact-checking organizations to bolster their moderation efforts, but critics point out that some of the very same organizations hired to police Indian Facebook have themselves been accused of posting their own fake news. Thus far, Facebook’s efforts in India, just like here and other countries abroad, have the appearance of moving in the right direction to “put a lid on things”, but they probably already know that this particular box can’t be closed, even if they really wanted to do so. Unfortunately, fake news continues to be profitable, and until we as a civilization make it otherwise, some other company will just step into the gap if Facebook ever decides to throw in the towel.
Image by Wokandapix from Pixabay
Microsoft isn’t playing around this time: support for Windows 7 will be ending in less than a year, and a recent round of updates include a pop-up on all Windows 7 machines reminding the user that the clock is now ticking down to January 14, 2020. If you haven’t seen pop-up already, you will probably start seeing it in April. Despite Microsoft’s near inescapable Windows 10 upgrade campaign, there are still millions of computers running Windows 7, and many of you are still quite content with the 10-year old operating system. Just like your favorite pair of jeans or comfy robe, Windows 7 will start having too many holes to use without exposing yourself.
It’s time to upgrade to Windows 10.
Regardless of yours or my thoughts on the matter, Microsoft really isn’t giving most of us a choice on this. “Why does losing Microsoft’s support for 7 matter to me? I never called them for issues in the first place!” While this is probably true for most of us, the support that is being ended is not just the help desk kind – believe it or not, Microsoft did offer actual technical support for Windows 7 issues – but also halting work on the security patches and compatibility updates. What this means as we move past the end of support for 7, any security flaws or bugs that crop up will no longer be fixed by Microsoft. “Fine! We can finally stop updating!” Maybe if your business doesn’t rely on working with anyone except your own internal people and data, but for the majority of the business world, isolating your technology operation like this ends up being more detrimental than it’s worth. We are seeing major shifts in all the primary business applications away from maintaining their Windows 7 compatibility; it is extremely difficult to purchase new computers with Windows 7 installed, and you cannot downgrade new computers from 10 to 7 without major complications and technical issues. While Windows 10 still seems to have some quality control issues, overall the platform has been relatively secure and stable, with issues mostly arising when it is used on older PCs (+5 years) and with older software and peripherals. Unless your computer was purchased in the past 3-4 years, your best bet is to purchase a new computer with Windows 10 already installed, but make sure you budget in upgrades for your applications (MS Office and Adobe Acrobat are the big ticket items) and your peripherals as well, especially older printers and scanners as well. It may seem like a lot of change all at once (and a lot of money as well), but it will be a wise investment in the long run.
Image by Gerd Altmann from Pixabay
One would think that nothing could be more awful than the violent mass murder that happened last Friday. Until you learn that the shooter live-streamed his monstrous rampage on Facebook. And surely nothing could be more depraved than that, right? But consider this: even after the live-stream was taken down by Facebook, over the course of the next 24 hours, literally tens of thousands of different versions kept appearing and reappearing on various video streaming sites, including YouTube and Twitter, faster than they could be removed. While it’s highly likely that many of the repostings were being performed by bots designed to take advantage of popular videos to leverage ad traffic, there are most assuredly humans behind at least some of that activity, demonstrating two very sobering and discouraging trends.
This is the Elephant on the Internet – the one that we can’t keep ignoring
If there is any good to come from this horrific event, it’s that a burning spotlight is now fixed (for the moment) on social media’s utter failure to control the spread of the killer’s hateful and atrocious ideology. Despite their efforts, versions of the video keep re-appearing, edited and formatted to avoid detection by the algorithms that are frantically being updated to attempt to remove the video’s spread. At one point, during the first 24 hours after the shooting, at least one version of the video was being uploaded every second. Facebook removed 1.5 million versions of the video on the Saturday following the event. And here’s what is actually even more depressing to consider: a large portion of this activity is happening not because the bots are trying to spread hate – the video is being reposted because people are watching it. Let that sink in. Regardless of the posters intent, the blame falls on our collective shoulders. Why are people watching this? What is wrong with society that this is not immediately repugnant? Will this be the crucible for social media, or will we let it slide yet again? Pandora’s Box is truly open, but perhaps it has been ever since social media first appeared on the internet, decades ago.
Image by Thomas Ulrich from Pixabay
Believe it or not, the world wide web turned 30 on March 11th.
Sir Tim Berners-Lee first submitted his proposal for an information management system in 1989 that was designed to manage and disseminate the growing sprawl of digital data being amassed by universities and researchers around the world. Four years later, CERN released the software behind the “World Wide Web” (the source of the “www” prefix) into the public domain and the first sparks of the modern internet caught the world on fire.
To note the 30th anniversary of his invention, Sir Berners-Lee penned an open letter to the world, but instead of heaping typical birthday platitudes on his brain child, he has reiterated a message of caution and guidance that was formalized last year at the Web Summit technology conference through a campaign called “Contract for the Web“. Because I know your time is precious, I’ll boil down his message for you into a TLDR:
- People are using the web with deliberate malicious intent. Governments, businesses and people must hold the perpetrators accountable.
- Profit and power motives are undermining and perverting the most beneficial power of the internet – the quick and democratic spread of information.
- This same beneficial power enables and empowers hatred and divisive discourse with equal force and we are still struggling with how to temper this unintended consequence.
What this means for you
Sir Berners-Lee’s Contract for the Web has the same lofty ambitions as the Universal Declaration of Human Rights or the Paris Agreement on Climate Change in that like the aforementioned accords, the Contract for the Web is not legally binding, but meant to act as a guideline for the betterment of the world, leaving cooperation, enactment and enforcement to individual countries and organizations. But as we can see in today’s political climate, things that are “good for everyone” aren’t always aligned with profit and power which means they don’t get equal time in companies (and governments) ruled by bottom lines and shareholder opinion. Anyone who has spent anytime on the internet, or read even a handful of my blogs on the repeated abuses of our privacy and security knows that we are approaching a tipping point where the negatives of the internet start to outweigh the positives (something we can already see with email), and when this happens, we all lose. For those of us who choose to behave ethically and compassionately, we lose a powerful tool to further our works.
Where does an average person start? Every vote still counts (hopefully) in this country. It’s important to make sure your elected representatives actually represent your values and deserve your vote. Be informed: seek balanced and objective information supported by reputable sources, form opinions and base decisions on facts, not just feelings, and always, always keep an open mind.
Image by Bruno Glätsch from Pixabay
Last year was not a good year for Facebook. Starting with the Cambridge Analytica, the social media giant seemed to stumble through a series of gaffes that literally erased billions from Mark Zuckerberg’s net worth. Yet, here we are again with the social media giant continuing to act with cavalier indifference towards its users’ privacy, and at this point, are you really surprised? We’re all adults here – I’m in no position to tell you what you should be keeping private or not, but I feel it’s my duty to make sure you are aware with whom you are sharing data, and that they are NOT here to serve you, but vice versa. And let’s put one big, stinging fact on the table – despite all of this, Facebook’s stock bounced back easily from last year’s drubbing, and is now poised to surge ahead thanks to better-than-expected fourth quarter earnings.
The latest proof that Facebook doesn’t care about your privacy
A few years back, Facebook instituted two-factor authentication for its login process, asking user’s for a phone number as the second factor. At this point, 2FA is the new security hotness, and millions are already smarting from a variety of virus infections, identity theft and account hacks to agree that 2FA was the best way to secure their accounts. While they weren’t (and still aren’t) wrong, could they have guessed that Facebook would start using that phone number as a means for other people to search for you, even if the searcher wasn’t someone you actually knew? How about doing this without even asking if its OK? This setting can be changed, but by default it’s set to allow “Public” access to use the 2FA phone number to help others find you. I don’t know about you, but that feels like the opposite of what everyone thought sharing this number with Facebook would do.
Strike two this month comes in the form of Facebook openly admitting that it receives data from many apps, including ones that help users track menstrual cycles, heart rates and website viewing habits, even if the user didn’t have a Facebook account. If this looks eerily similar to a recent article I wrote about a certain cell provider who was not being a good steward of your data, it is because it is yet another iteration of the same questionable practice.
Image courtesy of Stuart Miles from FreeDigitalPhotos.net
Full disclosure – I’ve long been a fan of many of Google’s services. I’ve used Gmail since the first beta, rely on Google search all day long, use a Pixel as my smartphone and listen to music all day long through their music service. It pains me when my favorite tech brands make poor choices, and unfortunately, Googles leadership seem to have forgotten their founders original scree, “Don’t be evil,” in favor of behaving like any profit-driven, ethically-ambiguous megacorp. The latest scandal comes from one of Google’s recent tech acquisitions in the form of a failure to disclose the presence of microphones in the Nest Secure home devices. Now, the presence of microphones in security devices shouldn’t come as a surprise, but Google’s failure to mention it in any documentation is a glaring breach of trust on their part.
What this means for you
When I first heard this news, I though to myself, “Well duh, of course these things have microphones. They are security monitoring devices,” and thought that, once again, naive consumers were purchasing and installing the devices without RTFM (“reading the fine manual” except substitute your own f-word). But no, Google (and Nest) didn’t actually document the presence of a microphone at all until it recently revealed that the Google Assistant technology could now be used on the Nest Secure device which, oh by the way, uses voice control…which, erm, requires a microphone…that is already on the device. According to Google, the microphone was disabled by default and can only be activated when the user specifically enables it. Which doesn’t make the whole failure to disclose any better, because how do we know it wasn’t enabled, and why should we trust them to be telling the truth now?
Unfortunately for you, even if you were being a careful consumer and reading the fine manual (or label, or reviews, etc.) the only way you would have known there was a microphone in the device would have been to dismantle it yourself, but why would you do that because the product documentation clearly lists the device’s specs, doesn’t it? Does this sound familiar? Like some other technology megacorp abusing its users’ trust? Is it going to take dragging these companies in front of Congress to get them stop being so lackadaisical with our privacy? Well, before we do that, let’s make sure we elect Congress critters that know iPhones aren’t made by Google.
There is nothing like severe weather to make you appreciate the benefits of a highly mobile workforce, whether you are the worker, safely ensconced in a warm & dry location, or the business owner, suddenly managing a half-empty office but confident the wheels of commerce are still turning. Thanks to declining technology costs and pervasive internet, using a laptop is no longer a status symbol of the executive or the sale team, nor is being away from the main office isolating and limiting. However, there are some speed-bumps on the highway to the work-from-anywhere ideal.
What you should know before going mobile
- Understand what applications and data are required to do your job. If it’s just internet access and email, you’ve got everything you need on just about any laptop, tablet or even smartphone. If you use industry specific applications that require access to data stored on your office server, can that app be run when you aren’t connected to the office network? Probably not, in which case you are going to need a VPN connection or remote access to your work PC.
- Plan your access to the internet carefully. Using your home internet connection is typically fine for most business users, but be very wary of posting up in a local coffee shop expecting to sip lattes and use their free WiFi without a means to secure your data transmissions such as using a VPN. What will you do if wherever you end up doesn’t have working WiFi? Most modern smartphones can provide a hotspot that should work for light internet work, but make sure you know how to use it before relying on it.
- Wireless internet is unreliable and possibly not secure. If you have a moderately sized home and the consumer-grade router installed by your ISP, you know of what I speak. If you have business-critical work that needs to be done, just know that WiFi can and will make you crazy with an unreliable connection, and doubly so for a smartphone hotspot, so plan accordingly. And don’t get me started on free WiFi provided by your local retail/restaurant/laundromat/etc. That WiFi should be consider as being provided for entertainment purposes only, and never used for business unless you have a proper VPN connection protecting you.
- Do you need to print? There are printers that are built for travel, but they are finicky and prone to fail at the least opportune time. Before any extended jaunt out of the office, make sure the printer is properly provisioned (ink and paper) and charged or equipped with its power cord. You might want to print something out just to be safe.
- Mind your ergonomics. Just because the local coffee shop is comfortable for lounging does not make it ideal for working. A couple hours sitting on a hard wooden stool hunched over your laptop will wreck the healthiest person’s back and neck. And typing away on a smaller keyboard will definitely strain your wrists and shoulders, while the small screen wreaks havoc with your eyes. The most productive and healthy remote workers will know what positions and heights are ideal for working with a laptop, and will equip themselves with things like laptop stands, cordless mice (and keyboards!) and choose environments that allow them to sit properly and comfortably.
- Are you going to be making a lot of phone calls? Those of us that spend most of our work day on the phone usually use a headset. Make sure the one you are planning to use can hold a good charge if it’s wireless, and has a better-than-average mic, as oftentimes you will be in noisy environments. You may be able to hear your caller just fine, but they may have trouble hearing you. Also keep in mind that if you are planning to use your phone as a hot spot, you may not be able to make phone calls at the same time.
- Is your device secure? It may seem like overkill, but consider using a cable lock on your laptop, especially if you are working in a public space and there’s any chance you may have to take your eyes off the device for more than a minute. If you store any sort of confidential company data on your laptop, including email, the hard drive should be encrypted and your laptop protected by a strong login password. Never leave your laptop or laptop bag visible in a parked car, even if it’s only for a few minutes.
Image courtesy of Stuart Miles at FreeDigitalPhotos.net
As more and more of you start to explore the possibilities of becoming part of the mobile workforce, I am frequently asked about one area in particular: How do I get access to the things I normally use at work when I’m on the road or working from home? This question is often followed up by: What’s the difference between remote access software and a VPN, and which one should I be using? Even if you think the answers might be more technical than you are ready to handle, I’ll try to provide some plain-English clarity to this complex topic, as understanding which one is appropriate for your work situation will be critical in determining how successful you will be as a true “road warrior”.
Are you ready to harness the power of the internet?
Most often, when the term “remote access software” is used, it is typically referring to commercial platforms like GotoMyPC, TeamViewer, LogMeIn, or VNC. In a nutshell, these programs are installed onto a computer that you wish to remotely access from another computer. For example: let’s say you have an office desktop and a laptop which you use at home. You would install this software on both computers, and it would allow you to “remote” into one from other. Typically this would be set up to allow your laptop to remote into your office desktop, primarily to provide you with access to the applications and data that are only available in your office, but from the “comfort” of a remote location outside of the office.
As you may have realized by now, the reason you need remote access software to work outside of the office is because the office network is separate from your home network by design, and the remote access software provides a “bridge” between the two networks, allowing your separate machines to talk to each other using the internet to do this.
“Wait a minute,” I hear you ask. “If this program can connect my office and my home network together via the internet, why do I even need these programs at all? Can’t my networks just talk straight to each other through the internet?” Well, they could, but it would be akin to you having a confidential conversation with someone by shouting at them across a crowded room full of strangers. Aside from simplifying the process of connecting two private networks together over the internet, they also provide some measure of security and privacy to your data as it crosses the internet.
“Surely the technology exists for our two networks to be connected without having to involve a third party that costs $XXX a month?” As a matter of fact it does, and it’s called a “virtual private network” or VPN, and works by creating a “virtual”, dedicated connection between two networks, usually your office and you (wherever you are). This VPN connection is often referred to as a “tunnel” which is also an apt analog to describe what it actually does.
“OK Chris, but why would I use a VPN over remote access software?” The most common reason is actually something that people often overlook: what if you don’t have an office desktop to remote into? What if your primary office machine is a laptop that goes home with you every night? The data is in the office on your server, but your laptop is on the road with you. This is where the VPN shines – regardless of where you are, if you have an internet connection and a VPN tunnel, your laptop is connected to the office network and all the services that are normally only available when you are sitting in the office. Granted, with the rise in popularity and acceptance of cloud-based services, some businesses are moving away from traditional premise-based services in favor of putting all of their data into the cloud, but for many industries, this is just not acceptable. And for those instances (of which there are legion) the VPN is the solution of choice. Keep in mind, building a VPN is not trivial – it requires the correct hardware and software and a level of technical configuration that is often best left to IT professionals, which is why commercial remote access services exist and are quite popular despite the cost.
TLDR; Use remote access software when you want to access one PC from another. Use VPN when you need to access an entire office network (and all of its private services) from a PC on different network. Keep in mind, certain functions, applications and services will be slower when being accessed over the internet, depending on the mode of access (remote or VPN or both) and the speed of your connection on both networks.
By the time you read this, Apple will be on day two of quarantining group calls in its video chat app, FaceTime. Why? Oh, how about a nasty eavesdropping bug that would allow callers to listen in on recipients before they pick up the call? Not necessarily ground-shaking in terms of espionage or cybercrime, but potentially embarrassing or even relationship-destroying, especially for an app that is heavily used for non-business calls. To add to the embarrassment of everyone, discovery of this bug is credited to young teenager trying to set up a group chat with his Fortnite friends. Thanks, Fortnite?
What this means for you
Probably not much, except if you use FaceTime for group chats which is now unavailable until Apple fixes the issue. At the moment, there is no firm ETA on the fix which “…will be released in a software update later this week,” per Apple’s official statement. Unfortunately, this isn’t the first security bug for FaceTime’s group chat feature which is not even a full year old. Last fall a security researcher was able to exploit a flaw in group chats to bypass the lock screen and view a user’s entire address book. Thanks to the internet and the always connected nature of iOS devices, bugs like these are typically fixed quickly, and unlike Android phones which suffer from a fractured operating system environment and inconsistent update policies controlled by competing manufacturers, Apple is able to react quickly to these situations. Score one for the fruit company!
Due in large part to the wild imaginations of modern media (both Hollywood and traditional news purveyors) and the average layperson’s less-than-thorough understanding of technology, the mythos of the “internet hacker” has grown larger than life, and is all-at-once mysterious, unstoppable, merciless, mercenary and at the same time held with the same regard as the boogeyman, ie. too scary to be real, right? Invariably depicted as leading an “alternative” lifestyle – whether it be mysterious lone-gun, angry anarcho-punk, sallow basement dweller, or “pencil-necked geek,” these stereotypical representations of “hackers” lead the average person to take them less seriously than a lawyer in a three-piece suit or surgeon in scrubs, which can lead to a mental devaluation of the actual threat. A recent presentation at a security conference in Washington, DC offered a different picture: that of an (as of yet) unnamed state-sponsored surveillance team managing a multi-million dollar budget and engaging in the seemingly mundane conversation of weighing the pros and cons of existing software versus building their own tools to covertly spy on and gather data from people’s smartphones.
What this means for you
The “buy or build” decision might sound familiar – it’s one that every modern organization faces numerous times – but that familiarity should alarm, not comfort you. Our biggest mistake is thinking cyber threat teams are like they are depicted in entertainment media instead of how they actually are: well funded, focused, professionally run and taking themselves very seriously. Gathering data, whether it be for political or financial gain, is a booming business for governments, traditional markets and a thriving criminal underworld, and oftentimes it’s impossible to draw clear lines between the three. Instead of a nuisance, the modern “hacker” is now a rival, competitor and threat rolled into one, and instead of some pimply-faced teen in a basement that goes by the handle “hAx4LuLz”, they are well-funded, organized teams operating under names like, “Arity Business Inc.” with well-defined product lines that are professionally marketed.
Don’t miss another important take-away from this: “hackers” are human as well, subject to making mistakes, like the one that unwittingly opened the kimono for this particular group, allowing the security researchers from Lookout to get an eye-opening glimpse into their daily operations. But don’t take false comfort from this fact. This same humanity also means that they are subject to making bad decisions about using their talents in pursuit of ethically questionable goals. They are just as easily swayed by fake news, greed, patriotism, fear or any of the numerous influences around us. In a world where Bill Gates is using his power and money to fight disease and poverty, surely his sociopathic doppelganger already walks among us, rising in the ranks of the cyber threat community and working for someone or thing that has much less noble pursuits in mind.
Image courtesy of Miles Stuart at FreeDigitalPhotos.net