Saturday, March 16, 2013

TED Talk: Amanda Palmer - The Art of Asking - Video



Don't make people pay for music, says Amanda Palmer. Let them. In a passionate talk that begins in her days as a street performer (drop a dollar in the hat for the Eight-Foot Bride!), she examines the new relationship between artist and fan.

TEDTalks is a daily video podcast of the best talks and performances from the TED Conference, where the world's leading thinkers and doers give the talk of their lives in 18 minutes (or less).

Thursday, March 7, 2013

FROST: Forensic Recovery Of Scrambled Telephones

Freezing an Android phone can help reveal its confidential contents, German security researchers have found.

The team froze phones for an hour as a way to get around the encryption system that protects the data on a phone by scrambling it.

Google introduced the data scrambling system with the version of Android known as Ice Cream Sandwich.

The attack allowed the researchers to get at contact lists, browsing histories and photos.

Cold start 
Android's data scrambling system was good for end users but a "nightmare" for law enforcement and forensics workers, the team at Erlangen's Friedrich-Alexander University (FAU) wrote in a blogpost about their work.

To get around this, researchers Tilo Muller, Michael Spreitzenbarth and Felix Freiling from FAU put Android phones in a freezer for an hour until the device had cooled to below -10C.

The trio discovered that quickly connecting and disconnecting the battery of a frozen phone forced the handset into a vulnerable mode.

This loophole let them start it up with some custom-built software rather than its onboard Android operating system. The researchers dubbed their custom code Frost - Forensic Recovery of Scrambled Telephones.

The Frost software helped them copy data on a phone that could then be analysed on a separate computer.

A chilled phone also helped their hacking project. Data fades from memory much more slowly when chips are cold which allowed them to grab the encryption keys and speed up unscrambling the contents of a phone.

PhD student Tilo Muller told the BBC that the attack generally gave them access to data that had been put in memory as users browsed websites, sent messages or shared pictures.

The researchers tested their attack against a Samsung Galaxy Nexus handset as it was one of the first to use Android's disk encryption system. However, they said, other phones were just as likely to be vulnerable to the attack. The team are planning further tests on other Android handsets.

While the "cold boot" attack had been tried on desktop PCs and laptops, Mr Muller said the trio were the first to try it on phones.

"We thought it would work because smartphones are really small PCs," he said. "but we were quite excited that the trick with the freezer worked so well."

The German research group is now working on defences against the attack that ensures encryption keys are never put in vulnerable memory chips. Instead they are only used in the memory directly attached to a phone's processor.

UK Financial Scams: A Growth Industry

"Trust me, I'm a financial adviser!"

The Financial Scams is one industry that is still growing rapidly, showing no sign of reccession. These range from the sophisticated to the downright weird – but all have the same aim: to relieve you of your money.

Recent figures from the National Fraud Authority show that the total lost to individuals from fraud and other scams is more than £6bn a year.

Here are the top 10 scams to watch out for this year (beware, there are more!);

1 Rare metals
Rare earth metals are chemical elements such as scandium and yttrium which are used in the manufacture of computers and phones.

The Financial Services Authority (FSA) warns that companies are using high-pressure sales tactics and are targeting vulnerable customers out of the blue who are often told that supply of these metals is falling, causing prices to rise.

The FSA said it had “yet to see any convincing evidence that there is a viable market for investors to make money from investments in rare earth metals”.

It says that manufacturers using these metals buy in quantity: so they are not likely to want to buy from small independent companies.

2 Pension liberation fraud
Victims are told they can release their pension funds built up before they reach 55 years old. The Pensions Regulator warns that accessing pension savings before minimum pension age is only possible in rare cases, such as terminal illness.

It says that entering into a pension liberation scheme “can be fraudulent where individuals are not informed, or are misled, as to the consequences of entering into one of these schemes”.

It says these schemes can result in tax charges and penalties of more than half the value of a member’s pension savings – and victims are seldom told about these costs.

In the UK it is possible to get 25pc from your pension as tax-free cash. For more information check with your pension provider or a legitimate and FSA registered financial adviser.

3 Mobility aids
Scams targeting elderly people have raked in more than £28m in three years. The Insolvency Service said that around 2,000 elderly people were victims of scams ranging from dodgy investments to companies selling unsuitable or overpriced mobility scooters and stairlifts.

The scam involves selling these aids on the telephone or at home to elderly people with salesmen not coming off the phone until the sale is closed.

These scams can be avoided by only dealing with reputable companies which do not pressurise clients and allow them the chance to consider a deal before paying up.

4 Dodgy job offers
This scam involves victims being attracted by fake job offers which effectively turn them into money launderers.

Financial Fraud Action UK says the offers use titles such as “money transfer agent” or “payment processing agent”.

Those who succumb become part of a money-laundering scheme and are known to authorities as “money mules”.

They are told to receive money into their bank accounts and to transfer it to another, taking a cut themselves.

The money involved is often stolen or the proceeds of drug dealing and extortion. The mules are used to move the money offshore into overseas accounts.

5 Lotteries
Lottery scams remain common, according to Which?, the consumer group. One of the scams seen by Which? purported to come from the International Monetary Fund, which promised the recipient $8m if they paid £960 to release the funds.

It’s easy to tell a lottery scam. You have to buy a ticket to have a chance of winning a lottery. If you haven’t, you can’t win.

6 Truancy fraud
Essex County Council warned last month that a parent of a pupil in one of its schools received a phone call purporting to be from the Education Welfare Service.

The parent was told that as their child had not attended school that day they would be fined £340 and they were asked to give their card details over the phone.

The council pointed out that the Education Welfare Service does not phone parents demanding payment over the phone: it sends penalty notices by post and it would not phone parents demanding immediate payment.

7 Wine scams
These are a growing concern, says the Insolvency Service. According to Decanter magazine, scammers posing as buyers have attempted to defraud suppliers of around £1.6m since May 2011.

Individuals have also been hit by scammers selling en-primeur wine. This is wine that is sold while it is still in the barrel.

Victims are told they are buying wine at this stage because it will rise in value, by fraudsters posing as wine merchants.

Unfortunately, the wine doesn’t exist, and the victims are left out of pocket.


8 Love
According to Action Fraud, there is an increase in romance scams. It has had more than 1,000 reports in the past 12 months from those who believe they have found love online but have actually become victims of criminals who want to relieve them of their money.

The typical victim has been conned out of £21,600. This scam works when those involved hand over useful personal and financial details about themselves to people they have fallen for online.

Anyone looking for love online should watch out for basic warning signs. Be cautious of unsolicited advances, especially if they have too much interest in your personal details and bank accounts.

9 Landbanking
This involves companies which divide land up into smaller plots to sell to cold-called investors on the basis that once the land becomes available for development, it will rise in value but the FSA said the land is often in areas of natural beauty or historical interest and there is little chance of it ever being given permission for developers to build on.

One plot of land recently sold was on a site of special scientific interest; another was on a slope too steep to be built on. The FSA said landbanking schemes had cost investors up to £200m.

In extreme forms scammers can sell plots of land anywhere in the world and have also been known to sell plots on the Moon!

10 Carbon credit trading
Carbon credits are certificates or permits which represent the right to emit one ton of carbon dioxide, and they can be traded. They are little understood by the general public, even when they are legitimately traded among corporations.

This Carbon credit trading scam involves cold callers targeting investors to buy into the “new big thing” in commodity trading because industries have to offset their emissions.

Carbon credits can be sold and traded legitimately, and the FSA pointed out that there were many reputable firms operating in the sector.

Investors might find they cannot sell their investment or get a competitive rate because they only have a few credits to trade.

Never trade in any commodity or venture that you do not understand or have not 'fully' studied and researched. Get references, visit sites and talk to existing customers. Caveat Emptor!

Tuesday, February 26, 2013

Windows Sysinternals Primer: Process Explorer, Process Monitor, and More



The Sysinternals utilities are vital tools for any computer professional on the Windows platform. Mark Russinovich's popular "Case Of The Unexplained" demonstrates some of their capabilities in advanced troubleshooting scenarios.

This complementary tutorial session focuses primarily on the utilities, deep-diving into as many features as time will allow. Learn tips and tricks that will make you more effective with the Sysinternals utilities.

How to Manage and Deploy video

The case of the Unexplained video

More Videos here

Thursday, February 14, 2013

Employers: How to Manage Dyslexia in the Work Place

Dyslexia is a hidden disability that affects 10 per cent of the population. It predominately causes reading and writing difficulties but memory, mathematics, organisation and sequencing skills can also be affected.

If un-addressed, dyslexia can result in underachievement. However, it does not affect intelligence and need not be a barrier to success.

There are many brilliant dyslexic professionals following a wide range of careers. But for those struggling, it is important for an employer to be aware of the ways they can help.

The UK  Equality Act 2010 covers dyslexia so all workplaces need to comply with it if a staff member is dyslexic. This act repeals and replaces the original UK Disability Discrimination Act 1995.

1 Know the signs
Indications of dyslexia in the workplace will reflect the nature of the work and will vary depending on the individual’s difficulties and their severity.

Key indicators might include performance that is not reflective of potential, written documentation that is unexpectedly poor or seems careless, confused memos or messages, deadlines regularly not being met or taking longer to learn new skills.

Have you noticed whether the individual appears forgetful, seems disorganised, has low self-esteem or suffers unduly from stress or anxiety? These are behaviours that may be attributed to dyslexia.

2 Seek confirmation
Many adults do not know that the difficulties they have are the result of dyslexia. If confirmation is required, referral to an occupational psychologist or an expert trained in screening and assessment for dyslexia should be considered.

3 Provide support
Effective support can often be simple and inexpensive. This may include;
  • holding regular one-to-one sessions to reinforce aims and objectives;

    • help with prioritising and organising workloads by using calendars with deadlines clearly marked, diaries or electronic reminders; 
    • allowing regular breaks; 
    • setting realistic objectives and negotiating deadlines; and, if required, 
    • professional training and coaching.

    4 Use technology
    Many products can be incorporated into an office environment,
    • spellcheckers are commonplace, 
    • encourage the use of a dictaphone for note-taking, or 
    • change the set-up of the person’s PC to make it more usable (Consider doing this from both an ergonomic and in terms of operational, as in software default layouts – font size and colour, and the use of a preferred background colour to clarify reading). 
    • Consider investing in Assistive technology such as EasyReader, and /or
    • voice-activated software such as Dragon NaturallySpeaking, and /or 
    • planning software such as Inspiration may also be helpful.
    5 Look at your practices
    Develop dyslexia-friendly practices across the business for recruitment, assessment, training and health and safety.

    Consider how accessible your communications are and provide alternative formats such as large print or audio.

    Plan training sessions and inductions that accommodate extra time or support to ensure retention of information.

    For instance, give the individual training materials in advance or present communications in a more dyslexia-friendly layout. This may include:

    • bullet points;
    • font size of no less than 11pt;
    • sans-serif typefaces such as Arial;
    • left-justified margin;
    • cream or off-white background;
    • increased spacing between lines;
    • important points in bold (not italics).

    6 Consider individual needs
    Do not assume or generalise. Dyslexia is complex and the number, type and severity of difficulties will vary.

    This will also be influenced by the individual’s ability to manage their own dyslexia. Discussions about support strategies should consider fully what the person feels they need. Listen to them. Do not impose on them.

    7 Seek specialist help
    You are not expected to be a dyslexia expert and, given its complexity, it may be wise to discuss specific strategies and adjustments with a specialist.

    If dyslexia is suspected and formal identification is required, contact an occupational psychologist or specialist service provider.

    Avoid New Age alternative therapy 'solutions' and only consider support and assistance from medically or educationally qualified consultants and institutions.

    In the UK, the Citizens Advice Bureaus should be able to point you in the right direction.

    8 Increase awareness
    Encourage better understanding among all staff by including accurate information about dyslexia in internal communications.

    Key Points

    • Dyslexia need not be a barrier to success, and is recognised under the UK Equality Act 2010.
    • Dyslexia is common – an organisation with 50-100 employees could have up to 10 workers who are dyslexic.
    • Adjustments can help to maximise potential.
    • Do not generalise – treat each case individually.

    Sunday, February 3, 2013

    Which Came First, the Chicken or the Egg?



    Since the dawn of recorded history, philosophers have pondered which came first, the chicken or the egg, as a causality dilemma exploring grander existential inquiries into the origin of life and the universe.

    But, it turns out, science has an answer that bypasses the metaphysical and dives right into the nitty-gritty of the tangible and concrete.

    In yet another illuminating animation, AsapSCIENCE enlist evolutionary biology in answering the age-old question, comparing the process to how dogs became dogs and ultimately demonstrating that, like much of science, the solution may have more to do with semantics and nomenclature than with actual scientific evidence.

    Friday, February 1, 2013

    Online Child protection : CEOP UK Video



    'The Parents' and Carers' Guide to the Internet', from CEOP, is a light hearted and realistic look at what it takes to be a better online parent. The show covers topics such as, talking to your child about the technologies they use and the things they might see, such as pornography.

    With interviews from leading experts such as, Professor Tanya Byron, Dr Linda Papadopoulos and Reg Bailey, as well as key industry players from Facebook, Club Penguin and Moshi Monsters , this online guide aims to equip you with the tools to have those tricky conversations with your children and keep your family safe online.