Archive for the ‘News’ Category
Symantec statement on source code release and our opinion
January 17th, 2012We have reviewed the below statement from Symantec and while we are alerting you around this information it is our belief we do not have any current customers who are at risk. If you have any questions or would like for us to do an additional review of your environment, please contact our helpdesk at 770.514.1640 or help@ajcomputers.com.
Statement from Symantec Corporate
In an effort to keep you up-to-date on the unfolding events surrounding the
Symantec source code disclosure, further investigation of the claims made by
Anonymous brings us to believe that the disclosure was the result of a theft of
source code that occurred in 2006. Since 2006, Symantec has instituted a number
of policies and procedures to prevent a similar incident from occurring.
Affected products include:
- Norton Antivirus Corporate
Edition - Norton Internet Security
- Norton SystemWorks (Norton
Utilities and Norton GoBack) - pcAnywhere 12.0, 12.1 and 12.5
- Symantec Endpoint Protection
v11.0, which is four years old - Symantec AntiVirus v10.2, which
is five years old code, and a product that has been discontinued
Due to the age of the exposed source code,
except as specifically noted below, Symantec customers – including those
running Norton products — should not be in any increased danger of cyber
attacks resulting from this incident.
Customers of Symantec’s pcAnywhere product may face a slightly increased security
risk as a result of this exposure. Symantec is currently in the process of
reaching out to our pcAnywhere customers to make them aware of the situation
and to provide remediation steps to maintain the protection of their devices
and information.
How you can help customers using Norton Antivirus Corporate Edition, Norton
Internet Security, or Norton SystemWorks (Norton Utilities and Norton GoBack)
By keeping your customers’ solutions and virus definitions updated to the
latest version, you will help ensure protection against any new possible
threats that might result from this incident. Additional steps to take include
confirming that your customers are following best practices for protection
technology settings: tamper protection and IPS technologies defend against
vulnerabilities. Also consider enabling the uninstall password feature. This
helps prevents malware or other software from uninstalling Symantec AntiVirus
v10.2 or Symantec Endpoint Protection v11.0.
How you can help customers using pcAnywhere
As always with any remote control product (such as pcAnywhere), it is extremely
important that best practices are followed regarding physical security,
endpoint security, network perimeter security and secure remote access. For
example, all computers should have an endpoint protection technology installed
that is current and up-to-date. Corporate firewalls should not allow inbound or
outbound access to pcAnywhere without using VPN tunnels. Unauthorized
individuals should not be permitted on company property. Additionally,
companies should employ best practices when it comes to the configuration of
pcAnywhere – e.g. password strength, password retry limits, and requiring the
user to approve remote connections.
Symantec is committed to eliminating the increased risk as a result of the
exposure. In addition to a partner FAQ, we will also provide a technical white
paper that addresses initial remediation steps and issue maintenance patches as
a final step.
Given the nature of this ongoing investigation, we have no further details to
disclose at this time but will provide updates as we confirm additional facts.
For general information updates, please visit go.symantec.com/sourcecode.
For specific questions, please contact your Symantec account representative or
reference the partner FAQ or technical white paper being made available to you
via your partner account manager.
Deciding on a company name can backfire
September 19th, 2011So over the weekend, Netflix decided to split their business into 2 separate companies – the Netflix we know and love which will be responsible for streaming video (to your DVD player, computer, smartphone, etc) and a new company called Qwikster which is responsible for the physical DVD shipments (which is actually the original Netflix business model). The problem is, they didn’t secure all of the relevant domains and social media accounts to go with their new name. On Twitter, there’s been a user called qwikster which does not represent Netflix and will see a significant jump in his mentions and follower count simply because of the confusion.
So what do you do as the company? Just get over it? Try to buy the name (which violates Twitter’s terms of service) ? Or something else? With a marketing group and M&A team as large as Netflix, was this an oversight or just one of those things that people didn’t think was important?
As a business owner or marketer, what would you do?
Simple things that will ruin your day, analog issues meet a digital world.
January 5th, 2011So just before the December holidays our office building sprunk a leak. Some roof shingles came off from a windstorm and the next time it rained, we started to get water in the office. But wait for the kicker – the leak was right over the top of my desk. Our landlord (we rent our office) ran around and found a roofer to get up there and put a tarp over the top of the affected area. This worked great, until another windstorm came and blew the tarp off the roof, just before New Year’s Day. So after me calling the landlord 3 days in a row and the landlord calling the roofer 3 days in a row to get the tarp put on, it proceeded to rain – A BUNCH!
I had left the office assuming the tarp was being put back on and left some documents on my desk and a laptop as well. Suprise on Monday – documents ruined and water all in the laptop – and NO TARP ON THE ROOF. Those of you who know me, understand that I remained calm (not!), called my landlord calmly (not) and explained the situation calmly (not!).
So this week, they are working on resolving the roof issue, but as you can tell – I now have a bunch of documents I have to recreate and a laptop which MIGHT be able to be salvaged (we’re still trying to dry it out and see if it will start). So what are the lessons learned from here?
- Never assume someone else is going to do something they have shown they are not going to do
- Plan for the worst, a simple thing like a roof leak can cause major damage
- Know what to do and who to call in the event of an emergency or issue.
- Be persistent when an issue is not being resolved to your satisfaction
So an analog world issue causedhavoc in my digital world – a simple water leak causes digital damage and sets me back a day of work. What would you have done in this situation? Should I have done something different? What’s your plan if something like this happened?
Blogging Every Week for 2011 #postaweek2011
January 1st, 2011I’ve decided I want to blog more. Rather than just thinking about doing it, I’m starting right now. I will be posting on this blog once a week for all of 2011.
I know it won’t be easy, but it might be fun, inspiring, awesome and wonderful. Therefore I’m promising to make use of The DailyPost, and the community of other bloggers with similar goals, to help me along the way, including asking for help when I need it and encouraging others when I can.
If you already read my blog, I hope you’ll encourage me with comments and likes, and good will along the way.
Signed,
Joe Vivona
Spam Comes In All Forms – This One Carries the Wikileaks Moniker
December 8th, 2010Spam, and the massive destruction that accompanies it, has a way of riding on the back of whatever topic is popular at the moment. Right now, the latest news is spam carrying a Wikileaks worm. Symantec released an article today warning the public of the threat entitled “IRAN Nuclear BOMB!” from the Wikileaks organization which is not the case. The only content is a URL, which, when clicked, will download a threat identified as W32.Spyrat.
W32.Spyrat opens a backdoor using a predetermined port and IP address, allowing an attacker to perform the following actions on the compromised computer:
- Read, write, and execute files
- Steal stored passwords
- Issue commands
- Activate and view a webcam, if present
- Log keystrokes
- Create an HTTP proxy to route traffic through the compromised computer
Do not open this email or click on the URL if received. Read on for the full article at Symantec .
Julie Settle, A&J Computers Inc.
Today’s the Day — Tech and Legal Join Forces
November 19th, 2010Drumroll, please…LawPivot is here! The Q&A site meets Social Network concept is a self-described startup “Quora for legal” that allows technology companies to confidentially ask legal questions to expert attorneys. The founders are attorneys with technical experience. Jay Mandal, CEO, was a lead mergers and acquisitions attorney at Apple and co-founder Nitin Gupta was an intellectual property litigation lawyer.
For now the site is free for both companies and attorneys. It’s a great resource for startups, especially those who have not yet established a relationship with an attorney. Questions are completely confidential. Each question posed will receive confidential answers by various attorneys who cannot view each others answers.
If you are any type of attorney, I suggest you check out the site and see if it’s for you. I imagine a lot of start ups will. Visit http://www.LawPivot.com for details.
^ Julie Settle, A&J Computers Inc.
Motorola Is Planning a Tablet Device for Early in 2011
November 6th, 2010The creator of the Droid smartphone is planning on releasing a tablet device next year. They will continue to go head to head with Apple, competing with the iPhone and iPad.
Co-CEO Sanjay Jha comments, “Just as Droid was competitive…with iPhone, we want to make sure that any tablet that we deliver is competetive in the marketplace. We will only deliver that when that occurs. Hopefully that’s early next year.”
Other companies competing in the tablet device wars are Research in Motion (RIM), Cisco, Hewlett-Packard Company, Lenovo Group Ltd. and LG Electronics Inc.
^ Julie Settle
A&J Computers Inc.
8 Tips to Stay Cyber Safe
October 15th, 2010The month of October is National Cyber Security Awareness Month (NCSAM). NCSAM is a national public awareness campaign to encourage everyone to protect their computers and our nation’s critical cyber infrastructure. Cyber security requires vigilance 365 days per year. However, the Department of Homeland Security (DHS), the National Cyber Security Alliance (NCSA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC), the primary drivers of NCSAM, coordinate to shed a brighter light in October on what home users, schools, businesses and governments need to do in order to protect their computers, children, and data.
Online:
- Keep your personal information private on social networks.
- Install a URL scanning tool to alert you of potentially harmful web links.
- Review your bank account and credit card statements regularly for questionable charges.
- Review your credit report and credit score regularly.
- Choose difficult encrypted passwords, consider using KeePass to safely store all your passwords.
On Your Computer:
- Keep your operating system and software programs up to date.
- Install these type software programs: anti-virus, anti-spyware and firewall .
- Back up your computer data regularly.
Below are our recommend downloads to keep your computer safe:
- Anti-Virus: AVG Antivirus, Symantec Anti-Virus, Trend Micro AntiVirus
- Firewall: MS Windows firewall
- Anti-Spyware: Webroot’s Spy Sweeper
- URL Link Scanner: AVG LinkScanner
- Credit Report: Federal Trade Commission
- Credit Score: Credit Karma
- Password: KeePass
Below are additional sites listed by the NCSAM:
- Anti-Virus: ESET NOD32 Antivirus, F-Secure Internet Security, Kaspersky Anti-Virus, Norton AntiVirus, Webroot Internet Security
- Firewall: ZoneAlarm, Norton Internet Security
- Anti-Spyware: PC Tools Spyware Doctor with AntiVirus 2011, STOPzilla (removal)
- Credit Report: Equifax, TrustedID
- Credit Score: myFICO
A&J Computers offers solutions for all your IT security needs. Visit us at ajcomputers.com for more details or contact with questions.
^ Julie Settle
A&J Computers Inc.
My observations and opinions on BlackBerry DevCon 2010
October 4th, 2010I just returned from the BlackBerry Developer Conference in San Francisco. As part of the event staff I typically don’t go to sessions and while I get a sense of how things are going – I don’t normally get the ‘vibe’ from attendees. This year RIM threw all that out the window with a couple of announcements – the PlayBook, WebWorks and a change to AppWorld.
First the big news – RIM is releasing a new tablet device called the PlayBook – while there are a ton of sites and blogs that will give you all the tech specs and other things – here’s my take: the PlayBook is a logical extension to your blackberry smartphone. Providing an enhanced platform including adobe flash and air which gives application developers more features – I see the PlayBook opening up a number of web based and widget based application areas for companies like ours and enabling a much easier development experience. From reading email on a larger screen to multitasking blackberry and walking around a conference with all the key information at your fingertips – this is a positive development for corporate users. From an it perspective – one the device is unpaired from your smartphone (bluetooth) all your email and other sensitive information is gone – making the security person in me feel better at night. So this seems like a win/win device for us here and really I can’t wait for 2011 to come so I can get one (availability in North America slated for q1).
WebWorks is the rebranded and improved widget technology. RIM made a bold move here by open sourcing the runtime and taking a major step forward to attract developers to the device. By allowing a developer to harness the power of the web, access on-device items like email, GPS, BBM and others – the platform is staring to compete on an even level with other device OSes and make development of the so-called ‘super apps’ a ton easier with the removal of the need to code in java. We will be building some super-apps in the very near future and enable our customers to do stuff on their blackberry smartphones we’ve only just discussed in the past. An additional benefit to open sourcing the runtime – the arrival of extension development. We all know the base of any runtime environment is great (a la .net, java, Silverlight, etc.) – but it’s the extension and control developers which truly empower app developers to take good apps to great apps. If you’re a developer, this is the platform to build BlackBerry apps on.
The final announcement was around the change in policy by RIM for developers who want to submit the application to AppWorld. Normally a token fee was charged for administrative purposes and to stop the ‘truly useless’ applications from going up on AppWorld. Well no more – at DevCon 2010 RIM announced they are going to waive this fee for developers. While a seemingly small item, this allows the hobbyist developer a no-cost option to publish their application to the masses and opens up development to a whole new genre.
Overall DevCon 2010 was a great experience as always – one thing I found out as I was writing this is the BlackBerry Developer Zone will make available the recordings from DevCon 2010 to all its members for free. That content is being produced and should be up soon. If you’re not a member and you didn’t get a chance to become a member, join now for free and see what you’ve been missing (http://blackberry.com/developer).
For any of you who missed the keynotes, announcements, etc. – you can check it out at http://www.blackberrydevcon.com (shameless plug for our web site development team). WES 2011 is in 7 short months (May 3-5, 2011) in Orlando, Florida – maybe we’ll see you there.
Good-Bye San Francisco, thanks for the hospitality for a 2nd year and we’ll see you again very soon.
Still Need to Buy Windows XP? Better Act Now.
September 17th, 2010Microsoft has announced that the last day to purchase Windows XP is October 22nd. This means it will no longer be stocked and available from Dell, HP or on the shelves at Best Buy. And if you still need to order computers with XP preinstalled, that date is October 1st (less than 2 weeks away).
Here are the 2 main questions we are hearing regarding XP’s discontinuation:
- My whole business relies on Windows XP. What if I need technical support?
A&J Computers Inc. is here to support your technical needs, and Microsoft will continue to directly offer Extended Support until April 2014. - Can my Windows XP programs run on Windows 7?
In most cases the answer is Yes. Microsoft has a Windows 7 Compatibility page to help you find out if your programs or hardware will work with Windows 7.
View the Microsoft announcement for full details about Windows XP End of Life at: http://www.microsoft.com/windows/windows-xp/end-of-sale.aspx.
Please contact us as soon as possible to place any computer orders that require Windows XP preinstalled to ensure they ship by the 10/22 deadline.
Julie Settle
A&J Computers Inc.
