Archive for April, 2008

Hacks, on EVE Online, are clear violations of the terms of service for using the game and maintaining an account. If you’re considering doing an EVE Online hack, understand that everything you’re doing can, and ultimately will, result in your account being shut down. You won’t get a refund of funds played, the account will get shut down, no questions asked or answered. That little “I agree” button you clicked when you set up the account came at the end of a license agreement that spells out the penalties in full measure.

That being said, if you think you can get away with it (you can’t), there are a few EVE Online hacks that work for short periods of time, and can be used to close the gap on other players.

The first hack is using database analysis tools whenever a new patch comes out to go sniffing for universe database exploits. You need a hex editor and some decent technical knowhow to make this work, but you’re basically trying to use the database files downloaded to your computer to “sniff” for new sectors or changes to existing sectors, to find the resources before everyone else does. This requires that you be one of the very first people out there to download a patch, and requires enough additional work that the benefit is probably pretty minimal. Related to this is trying to find malformed tables in the download for exploits – sometimes, these can be treated as invisible gates to new regions. Beware – sometimes those gates are one-way gates and you may get stuck in a place with no way home.

The second hack is trying to compromise another player’s account, to steal in game resources. This is definitely risky in terms of account deletion. It’s also risky in terms of actual, honest to god fraud. Doing this EVE Online hack can actually put you behind bars, because it’s considered electronic funds fraud, even by proxy or remove. So before you try doing EVE Online hacks, think very carefully about the consequences of getting caught.

All in all, trying to do EVE Online hacks is a great way to get your account nuked and lose all the fun of playing this great game with 500,000 of your fiercest competitors on a 5,000 star galaxy. You won’t enjoy the rewards if you cheated to get them, so do it honest. EVE Online hacks are cheating, and cheaters never prosper.

Tom Kranz has written articles on EVE Online ships and the EVE Online free trial which is available, as well as a number of EVE Online guides. His articles, along with more information on the EVE Online game, can be found at http://www.eve-online-info.com

Comments Off

Organisations should develop a proactive policy and strategy that embraces new ideas and methods to create a secure mobile workplace. “Secure mobility” is typically defined as the ability to provide employees and customers with secure “anytime, anywhere, any device” access to the corporate network. To be pro-active means acting in advance to deal with an expected difficulty.

1) Secure Mobility in the Workplace

Forcing employees to use only devices that are provided by IT is possible but both difficult to achieve and liable to result in resistance due to perceived inflexibility.

2) Secure Mobility Challenges

Your organisations may already have been confronted with the real risk of security breaches as a result of the explosion of mobile devices in the workplace. Although mobile workers are major culprits in inviting potential security breaches, organisations on the other hand are not actively deploying prevention strategies, because they do not recognise their mobile workforce.

Organisations should therefore create a proactive plan to mitigate potential security risks, to allow employees to enjoy the convenience of using mobile devices and organisations to gain maximum value from a productive, mobile workforce.

3) A Proactive Secure Mobility Plan

A Proactive Secure Mobility Plan consists of the following components:

3.1) Recognise your mobile employees

To assess the risk presented by using consumer mobile devices, conduct a baselining exercise starting with an audit to identify existing remote workers and the devices that they are using.

3.2) Plan

Once you understand current levels of mobile working, you can begin to look at the risks associated with this and plan for mitigation and controlled expansion of the mobile network. The planning phase should ascertain the different types of access required to the network and the associated risks like the impact of a stolen laptop, an unauthorised access to a particular server, data-store or the network, and the risks associated with public services such as Internet cafes, wireless hotspots or Bluetooth communication being used to access the corporate network.

Once you have completed the risk analysis, determine the potential impact of exploitation of these risks in terms of the cost to the organization. Identify mobile workers and gauge the types of devices employees are already using. Classify your employees in groups and determine the types of information and resources that need to be made accessible to them. Assign the overall responsibility for security to a single individual so that ownership and escalation paths are clear. Document the role that strategic technology partners like system integrators play in the deployment of secure. Communicate this to your employees and technology partners. Conduct internal training sessions or hold sessions as part of new employees’ induction programmes.

3.2.A) There are technologies to prevent unauthorised access to the network. For example, Network Admission Control (NAC) enforces policy for remote devices connecting to the corporate network, and Wireless detection devices Install wireless detection technology on your wireless networks to monitor unauthorised wireless users and the deployment of rogue access points.

3.2.B) There are technologies to prevent compromise of the endpoint: Client Security Softwares, Host-Bbased Intrusion Detection/Prevention Software (IDS/IPS), and Anti-Spywares.

3.2.C) There are technologies to prevent information loss or dataloss or exposure to information: Data Encryption, and Information/Data Leak Prevention (ILP / DLP) softwares.

3.4) Monitor compliance with your organisation’s mobile policy

Use devices that monitor the network for compliance and ensure that you haven’t been compromised by viruses or other malicious code. Security monitoring technology combined with compliance tools will ensure any breach in policy is quickly identified and dealt with.

Assess vulnerability of the network and key devices. Once they are found, introduce steps to mitigate these vulnerabilities. Perform penetration testing in conjunction with the Vulnerability Assessment to test network resilience fully against potential threats.

4) The Benefits of Secure Mobility

Once you have implemented a Proactive Secure Mobility Plan, you can begin to realise the various benefits derived from mobile technology. These include:

4.1) Improved employee productivity

They will have the ability to access information from wherever they are located in the world. Better access to information leads to greater productivity.

4.2) Ensure Business Continuity

Mobile technology provides the capability for employees to carry on working from home or other locations ensuring the business continues to operate whatever the situation.

4.3) Eliminating traditional work boundaries and creating a more flexible workspace

Secure mobility provides an opportunity to enhance employees’ toolsets and assists in creating a flexible working environment that is not bound to a physical location.

4.4) Improved client interactions

A secure mobile environment can significantly improve the client interface enabling business to be conducted at the client’s convenience regardless of employee location.

http://www.datacraft-asia.com – The leading independent IT services and solutions company in Asia Pacific. Datacraft combines an expertise in networking, security, Microsoft solutions, storage and contact centre technologies to craft IT solutions for businesses.

Comments Off

According to security specialists, “Security practitioners must escape the ineffective, reactive loop of traditional approaches by proactively engaging with business units, getting involved earlier in the information technology (IT) development lifecycle, and including more deterrence and preventive measures in the protection posture.”

The best method to achieve this is to be pro-active dealing with today’s information security challenges. To be pro-active means acting in advance to deal with an expected difficulty.

1) Proactivity is the key.

Mass collaboration is a new social, business and technology trend that has changed the global market place, but at the same time it has also opened up a host of non-traditional security threats.

An “open” global marketplace, however, has a profound effect on IT security. According to a specialized research report recently released, “Attacks are quieter and more targeted than they used to be. They tend to be better crafted and more effective than broad-spectrum virus or worm attacks … and the level of damage is greater.”

The best way to protect yourself is to integrate security into all technologies and devices and create a secure infrastructure. Chief Security Officers need to become more proactive, starting with business planning and by ensuring that information security is a priority on boardroom agendas.

2) De-perimeterisation.

Wikipedia defines De-perimeterisation as “a concept/strategy used to describe protecting an organisation’s systems and data on multiple levels by using a mixture of encryption, inherently-secure computer protocols, inherently-secure computer systems and data-level authentication, rather than the reliance of an organisation on its (network) boundary to the Internet.”

2.1) Proactive steps to address de-perimeterisation

2.1.A) Use perimeter control points to surround sensitive collections of resources.

Create control points where they are needed: on the network, hosts or sometimes around the content. Also create perimeters around various subsets of the user population on the network level, or around the data centre in specific geographic locations, or even virtual perimeters around business unit IT resources.

2.1.B) Deploy your control points depending on your business requirements.

Adopt a combined architecture approach to security by including an appropriate balance of perimeter, identity, endpoint and content control points.

2.1.C) Develop a holistic architecture that includes an appropriate balance of perimeter, identity, endpoint and content control points.

Organisations need to develop their own architectures and models, and insert products as necessary when they are good fits.

3) OS Security

Operating systems are no longer a specific entity with constraints that we can think about in simplistic security terms. Their complexity comes from layering and embedding functionality and sharing libraries and device drivers.

3.1) Proactive steps to address OS security

3.1.A) Slow down your patching.

3.1.B) Push for more information sharing among anti-malware vendors, and between customer organisations and vendors, to build better, real-time active lists of malware and other problems out there.

3.1.C) Consider host intrusion prevention systems (HIPS) and application control.

3.1.D) Consider deploying NAC, TPMbased volume encryption and other protection technologies that will move into the mainstream over the next few years. Think management of assets and configurations instead of compromised systems.

4) Information-centric security

An information-centric architecture requires proactive discovery and classification, engagement with the business, as well as layered protection. The real issue is “Which users have access to information, and what are they supposed to do with it?”

4.1) Proactive steps to address information-centric security

4.1.A) Engage business and legal teams to understand specific information characteristics and life cycles.

4.1.B) Encryption should be targeted and well managed.

5) Compliance

Regulations are in some respects similar to an attack on the enterprise, and are indistinguishable from other types of threats in that they create a negative impact. A compliance response tries to control the risk created by the regulation. The response drives up costs and places pressure on competitiveness.

5.1) Proactive steps to address compliance

5.1.A) Create a strategic security programme that is inherently compliant.

5.1.B) Change compliance processes slowly and rules may change as quickly as necessary.

5.1.C) Engage the legal team early and intimately, and create a defined communications channel and escalation process between legal, compliance and IT groups.

6) Creating a Secure Infrastructure

Security solution providers should utilise in-depth knowledge of the converged network and all its vulnerabilities, opportunities and challenges, to plan, build, support and manage a secure infrastructure for their clients – an infrastructure that is secure and adaptable enough to support clients’ business applications, core network and information, today, tomorrow and beyond.

To achieve a Secure Infrastructure, you are recommended to consider the following areas:

6.1) Perimeter Security

6.2) Intrusion Management

6.3) Content Security

6.4) Access Management

http://www.datacraft-asia.com – The leading independent IT services and solutions company in Asia Pacific. Datacraft combines an expertise in networking, security, Microsoft solutions, storage and contact centre technologies to craft IT solutions for businesses.

Comments Off

Access and understand the core logic behind the skills required to solve issues and problems in the workplace. Before you take an MCSE exam from any site, you should first prepare yourself with a MCSE Study Guide. Not only that, but using a Study Guide in combination with Interactive Exams – GUARANTEES you the best chance to pass the MCSE.

You can prepare yourself to succeed in your studies. Try to develop and appreciate the following habits:

Take responsibility for yourself and recognize that in order to succeed you need to make decisions about your priorities, your time, and your resources.

Center yourself around your values and principles. Don’t let friends and acquaintances dictate what you consider important.

Put first things first. Follow up on the priorities you have set for yourself and don’t let others, or other interests, distract you from your goals.

Discover your key productivity periods and places, morning, afternoon, or evening? Find spaces where you can be the most focused and productive. Prioritize these for your most difficult study challenges.

Consider yourself in a win-win situation when you contribute your best to a class, you, your fellow students, and even your teacher will benefit. Your grade can then be one additional check on your performance.

First understand others, then attempt to be understood. When you have an issue with an instructor (a questionable grade, an assignment deadline, etc.) put yourself in the instructor’s place. Now ask yourself how you can best make your argument given his/her situation.

Look for better solutions to problems. For example, if you don’t understand the course material, don’t just re-read it. Try something else! Consult with the professor, a tutor, an academic adviser, a classmate, a study group, or your school’s study skills center.

Look to continually challenge yourself.

What you can control in your studies:

Get a dedicated space, chair, table, lighting and environment

Avoid your cellphone or telephone.

Put up a sign to avoid being disturbed or interrupted

If you like music in the background, OK, but don’t let it be a distraction.

Stick to a routine, efficient study schedule.

Accommodate your day/night time energy levels.

Set a goal and make a schedule.

Focus:

Before you begin studying, take a few minutes to summarize a few objectives, gather what you will need, and think of a general strategy of accomplishment.

Incentives:

Create an incentive, if necessary, for successfully completing a task, such as calling a friend, a food treat, a walk, etc.

Changing the subject you study every one to two hours for variety vary your study activities.

Alternate reading with more active learning exercises. If you have a lot of reading, try the SQ3R method.

Ask yourself how you could increase your activity level while studying? Perhaps a group will be best? Creating study questions? Ask your teacher for alternative strategies for learning. The more active your learning, the better.

Take regular, scheduled breaks that fit you. Do something different from what you’ve been doing (e.g., walk around if you’ve been sitting), and in a different area.

Give yourself a reward when you’ve completed a task.

Hopefully by following these suggestions you will be able to develop a good MCSE Study Guide.

Anthony T. Moss owns and operates http://www.mcsestudysite.com

Comments Off

While growing and developing a business is never likely to be considered easy by anyone, sometimes the greater challenges come when the business has been developed and reaches a stage where it needs to progress to a higher level to continue growing profitably. It is very easy for an organization to rely on keenness, motivation and fresh naivety to pull it through the initial stages of development but the ability to transform and progress requires different skills and many firms realize they require some additional support to move the company to where they want it to be.

The author suggests you consider the following four critical areas of business process services during your project.

First, start with an examination of any immediate issues that are in urgent need of repair. Most companies have a historian or someone who has unsuccessfully advocated a series of changes and improvements. Find that person and unemotionally review their suggestions to find which ones have merit, now that the time to make changes has occurred.

Second, if there are any repairs needed, focus on exactly where the problems are and what should be done to correct these processes to allow the firm to progress. Another option that many firms choose is to receive a diagnosis of their current financial status which can be created alongside a framework to suggest where there are potential opportunities for the business to exploit and utilize may occur.

Third, project manage the process and results from the prior two steps to successfully navigate and deliver results that meet your corporate objectives for doing this process. Start with one or more smaller issues where low hanging fruit and a quick success are available.

Finally, re-evaluate from this position, to maintain and stabilize what your people, along with external experts on an as needed basis, have delivered to consolidate these results. This process can be periodically updated on as extensive a basis as your company is ready to embrace.

Its all too easy for the strategic planning process to become clouded or over-complicated or for the level of business and information to become too much for the current structure to handle and this is where the support of an industry expert can quickly move the firm forward and utilize an array of business process improvement tools to engineer a substantial benefit to your organization.

Whichever steps are appropriate for your company, consider a make versus buy approach to see where externally available software or consultants can be leveraged to accelerate or more cost effectively manages this process.

Gary W. Patterson, FiscalDoctor, has advised over 200 companies across traditional and emerging industries to help improve profitability, reengineer business models, and strengthen or gain competitive advantage in the marketplace. http://www.FiscalDoctor.com or blog, http://www.FiscalClinic.com

Comments Off