The book on Library Mashups, to which I contributed a chapter on the LibraryThing API, is available on the Kindle – for .26 cents less than the paperback. If those .26 cents have been holding you back from picking up a copy of this book (or if you are like me and a couple of my co-workers and have grown to prefer books in electronic formats), head over to Amazon and get yourself a nice clean e-edition!
Powered by Twitter Tools
Powered by Twitter Tools
This session will be about something I’m very interested in – network backups. Since a lot of this will be kind of specific, I plan to do a lot of summarizing. He started with network storage, which I don’t need. The network backup, though, I do. They have set it up so that it’s not going across the general Internet. This is nice! Beyond that, it’s all encrypted, both in transit and on the server. Dedups and compression are done before the data leaves the library. Nice! Agentless backups mean that only one backup client necessary. All major OSs are supported, databases are supported. Cost is per GB stored, client included in service. Client statistical mode-we can figure backup size precisely before committed to the service. Data is stored outside MO. Pricing info should be available in a couple of weeks.
Brian Krebs (http://www.krebsonsecurity.com/) talked about bank fraud and security. This generally starts with an email attachment (ZeuS) and ends with a company’s money in the Ukraine or Russia. Brian talked about both the computer issues and the human issues – with a fascinating discussion of the mules used to move the money.
Some of the common attacks (in Europe, at least, not seeing it in the US yet) include form field injection, session riding, balance manipulation, and attacks hitting consumers, rather than heavily secured commercial accounts.
Red flags for banks – 10-20 new employees added to payroll, IP address weirdness.
Advice – disallow batches that deviate from standard format (revise banking contract), request low-tech verification, access accounts only from non-windows machine (excellent idea-get a dedicated Netbook with Mac or Linux installed), get involved and write your lawmaker, require 2 signoffs for wire transfers.
What’s coming? more litigation between banks & victims, lots of smaller cases coming up, guidance from FFIEC on transaction monitoring/analysis guidelines, Bill from Rep. Schumer -S3898 to offer schools & consumers same protections as companies.
Online banking is not secure for small organizations. Banks need to inform customers of risks and sell risk mitigation services.
Wow – the Tech Set just won the Greenwood Publishing Group Award for the Best Book in Library Literature. This is the set of books that includes my Microblogging and Lifestreaming in Libraries!! Congrats to my fellow authors and to Elyssa Kroski for pulling this all together!