Author: jgamblin

We parody and poke holes in what they do.

Last day of session 2012.

Be so good they can’t ignore you.

When being interviewed on TV, make sure passwords are not written on wall behind you.

There has been some talk in my office about a fraudulent SMS charge scam on peoples AT&T bills over the last couple of months. There were 3 people in my office who got hit with this scam. I finally got around to examining our bill closer and found out that my wife’s phone had been hit by the same scam (For two months! Yes, shame on me for not looking closer at my bill and noticing this.).

The text message that came to my wife’s phone said this:

IQ Power: Welcome to Trivia Alerts! 3xmsgs/wk Monthly charge billed @ 9.99/mo. Reply HELP or call 8888906150 for help, STOP to cancel Msg&Data Rates May Apply

She Ignored it. Who wouldn’t? I have told a million people to ignore scam messages like this. Apparently with SMS text messaging though if you send unsolicited text messages to people saying that you are going to charge them $10 a month and they don’t respond you are allowed to do it?

This is what the charges on my bill looked like:

I had to contact AT&T (super fun) who said they would refunded the funds to my account and applied a purchase blocker to my account to prevent this in the future. Which is a start but it shouldn’t be allowed in the first place.

Yes I will be looking at my bills closer in the future.

People always ask me “What is twitter good for?”

Here is a good example.  Bank of America has a foreclosure on my block that they weren’t taking care of by mowing the grass and doing basic maintenance. After spending a couple of hours mowing my grass in the 90 degree weather I was tired of looking down the block to see this:

So I got mad and tweeted @BofAhelp this last night:

Hey @bofa_help this foreclosed house on my block has foot tall grass. Help? http://yfrog.com/oc4n7dujhttp://yfrog.com/gym6kbwlj

They replied to me this morning and sent me a DM asking for the address of the house and a contact number. They then called me a few hours later telling me they were working on the problem and would keep me updated if they found out anything. 

When I came home the house looked like this:

So that is what Twitter is good for!  🙂

Confidence comes not from always being right but from not being afraid of being wrong.

I have been doing a lot of traveling and speaking over the last year and my old (but trusty) Latitude D630 was starting to show its age (as in wont cold boot unless I remove the battery) and I was running out of room on the lid for conference stickers so I jumped at the chance when Dell offered to give me a new XPS13 Ultrabook.

This is my first ultrabook but just the difference in size is going to make me love the thing. It is a little less than 3 pounds compared to the 6+ pounds of my D630.

The laptop its self is really well put together. I love the Chiclet style keyboard, built in webcam and screen is just amazingly bright and clear.  I was watching an episode of the Simpsons on it the other day and it looked a lot better than my TV.

There are two things I am not in love with on this laptop. The track pad seems to lock up when I am using it and it takes a few seconds for it to respond. Update: This is fixed by disabling the Palm Rejection. The other thing I am not crazy about it the displayport, I understand they did it to save room but I will be that guy asking to borrow your displayport to vga converter at every conference. I lose those things faster than a second grader loses his baby teeth.

Overall the XPS13 seems to be pretty awesome. It will be very interesting to see how the battery and the case holds up once conference season starts for me in May.

I gave a talk at William Woods University on Friday about protecting yourself on social media sites and after I got done with my talk and was chatting with a group of students who came up to ask some follow up questions they didn’t want to ask in front of the group when one of the kids (I am getting old if I can call a college aged man a kid)  came up said:

Great talk but isn’t this mostly common sense stuff? Do people really not know this? 

OUCH.

I am pretty sure he just asked me why he wasted an hour listening to me tell people to not post images of their junk on twitter when he could have been out playing Frisbee on the quad.

I told him most people should but a lot of smart people don’t so a refresher isn’t always a bad idea and I then wanted to yell something about staying off my lawn at him.

Then tonight my buddy @jack_daniel goes on a twitter rampage about how security people can barely hide their contempt for the “stupid people” they work with.

It got me thinking about the self-image that I and many security people have.

We want to see ourselves as the Navy Seals of our IT Shop.  We do what no one else can do! We do it better, faster and sexier.

When in reality we are Paul Blart trying to tell our users nicely to not click links, have good passwords and not give the companies bank account information to a Nigerian Prince. Often with little real recourse we can take ourselves without calling someone else.

So maybe if we actually started acting like Paul Blart and not the Navy Seals our end users would respect us and we could do what we are actually paid to do,  Keep things in order and when something bad goes down call in the people with the real power.

I had the opportunity to talk to a large group of network administrators and computer professionals for colleges, libraries and K-12 schools in Missouri at the Morenet Connections and HELIX conference this past week about the importance of a security awareness program to their overall networks security.

Far too often we get caught up trying to solve network security problems that could be easily addressed with a “lunch and learn” with a complicated and expensive hardware solution. 

When was the last time you sit down with a pizza and explained to your end users:

• Why good passwords matter?
• Why they should use different passwords on all sites?
• How to protect their bank account?
• Why they should use 2FA on their accounts?

It will cost you $20 and likely do more than a $30,000 firewall could do.