Categories
conference

Security symposium wrap-up; day 1

I started off the morning with YET ANOTHER fall, this time on my outside steps which were icy, but much shorter than the basement steps I fell down last month. Besides a honkin’ big bruise on my hip, I’m all right.
The conference began with a keynote which I’ve already summarized and posted about, so I won’t do that to you again – other than to note that keeping a machine that is used *only* for online banking duties is a great idea, but I’m wondering about the software we use and if a Linux machine (which we could keep safe) will work with the software. Something I need to check into when I get back home.
I also blogged about the morning’s session – centralized logging with Windows – so I won’t go into that either.
Lunch was excellent – just sandwiches and cole slaw, but I was ready for it when it came – and the conversation at my table was better. We began with discussions of the state of cartoons and the fact that cartoons today are so much worse than those of years ago (and I think someone actually said “get off my lawn” at one point, too… Even though it may be considered violent, who can forget Elmer Fudd singing about killing a rabbit to the tune of Wagner’s operatic compositions? This segued (somehow) into the #hcod (the issue of Harper Collins capping ebook checkouts at 26 – do a quick search on the #hcod tag if you aren’t familiar) problem and then into the fact that librarians often act as the copyright police, even when we often disagree with the rules (this last bit may just be my opinion…). It was an excellent discussion that ran into the next session, so I ended up missing that one.
The geek out at the conference session has also been blogged about here, so I won’t say much other than it was an interesting idea – get everyone into a single room to discuss any issues they are having while a very knowledgable MORENet employee (Randy Raw) introduced us to people who could help us with that issue or were going through the same thing and would commiserate with us. It was assisted networking and it was a really good idea!
The exhibit/reception was nice – I got to talking to Lee Cushing during the geek out session and we continued the conversation in the exhibit hall. We decided to sign up for a “librarian issues” roundtable tomorrow night as a way to get the few library types who come to this conference together to talk about the stuff that effects us. I’m looking forward to it. Mike showed up during the reception and we walked around the exhibits together before heading outside to talk and wait for Jason Long – the IT person for the local library system – to join us.
Jason is just starting to offer Overdrive (as in, it goes live on Monday) and he had questions. He’s been using Centurion for a while and I had questions. It was a great conversation and a nice way to catch up on what we’ve been doing since last chatting at MLA (though he reads this blog – Hi, Jason! – so he has some idea of what I’ve been doing).
Now it’s time to start to hunt down dinner, as soon as Mike finishes his meeting with his co-presenters and wind down for the day – ready to start all over again at the 7am breakfast tomorrow!

Categories
conference

Geek out at the conf

Geek out – short talks, comments on what’s going on at our orgs, questions to geeks who are doing the same sort of stuff.
First – thin apps on VMWare View for virtualized desktops
New MS licensing for edu, not sure about libraries
Moodle – provisioning second pipe to Morenet to keep from using all the bandwidth of main pipe for hosted stuff like Moodle
Discussion of burstable bandwidth from Morenet
Talked about what’s coming from Morenet -lots of cool stuff…
Replacements to illuminate – Morenet is looking at big blue button, an open source adobe connect type of content presentation software
Moving from Novell to Windows
Question about filtering mergers and how it’s going to work
Discussion of packet shaping vendors
IPv6 issues – remember logging software (and other software) needs to be able to parse it, too, so check both hardware & software purchases.

Categories
conference

Centralized logging with alerts for windows

With Steve Massman and Travis Reddick

KiwiSyslog and SNARE client as well as Logcheck & other open source utilities.
Could get emails every 30 mins that you have to read. Download and read OS security guides!
Log everything – everything. Success and failures both.
Use 2003 or 2008 and use an existing machine if it’s not heavily used, use a software firewall allow only your machine to RDP, lock down ports to only logging servers. No virus software necessary.
Kiwisyslog -$300ish – separate log files by machine
SNARE – free, log sys and security, domain controllers add directory service, DNS and file replication logs, look for new events in Kiwi
Log check – for 2003, logcheck.ignore is what you use to filter your logs to keep from being overwhelmed, examples of what goes into logcheck.ignore file, Case matters, be specific
Configuring scheduled task – in 2008, disable “network access: do not allow storage of passwords and credentials for network authentication” or the task won’t run.
Splunk? Can manage ASA files – useful for us!
Downloads – FTP://FTP.more.net/pub/s_P/massmans

Demo time!

Categories
Web 2.0

Security symposium keynote

Brian Krebs (http://www.krebsonsecurity.com/) talked about bank fraud and security. This generally starts with an email attachment (ZeuS) and ends with a company’s money in the Ukraine or Russia. Brian talked about both the computer issues and the human issues – with a fascinating discussion of the mules used to move the money.
Some of the common attacks (in Europe, at least, not seeing it in the US yet) include form field injection, session riding, balance manipulation, and attacks hitting consumers, rather than heavily secured commercial accounts.
Red flags for banks – 10-20 new employees added to payroll, IP address weirdness.
Advice – disallow batches that deviate from standard format (revise banking contract), request low-tech verification, access accounts only from non-windows machine (excellent idea-get a dedicated Netbook with Mac or Linux installed), get involved and write your lawmaker, require 2 signoffs for wire transfers.
What’s coming? more litigation between banks & victims, lots of smaller cases coming up, guidance from FFIEC on transaction monitoring/analysis guidelines, Bill from Rep. Schumer -S3898 to offer schools & consumers same protections as companies.
Online banking is not secure for small organizations. Banks need to inform customers of risks and sell risk mitigation services.

Categories
Web 2.0

The Tech Set won an award!

Wow – the Tech Set just won the Greenwood Publishing Group Award for the Best Book in Library Literature. This is the set of books that includes my Microblogging and Lifestreaming in Libraries!! Congrats to my fellow authors and to Elyssa Kroski for pulling this all together!

Categories
Web 2.0

The week in Tweets

  • @mstabbycat Are you ready for St Patrick's Day? Black & Tan Cupcakes | The Family Kitchen – http://bit.ly/eZmydw (via http://ff.im/znSub) #
  • RT @FakeAPStylebook: Only use passive voice when… you know what? Text REDCROSS to 90999 to donate $10 to the int. relief fund for Japan. #
  • 1/2 thru @ShannonKButcher 's Living on the Edge book. Still no mention of "mancudgel". Enjoying the hell out of it anyway! #
  • @sglassmeyer It's my *favorite* euphemism for the penis in romance novels. Pretty much exactly what you expected, yes? #

Powered by Twitter Tools

Categories
Web 2.0

Ninite – my new best friend

I’ve been seeing posts about Ninite for a week or two and kept meaning to go check it out, but didn’t really get a chance to do it until I was working the desk on Friday afternoon. When I did, though, I was seriously impressed! Single click updates/installs of pretty much every major program needed to run a computer center (with the exception of the OS) – all made available for updating with a single program and they update silently! No more forgetting to unclick that stupid “include the Yahoo! toolbar” in Java updates, no more forgetting a single Flash update among the 35 computers that you spent all morning updating – just run a single program and all of your Flash, Java, Chrome, Firefox, Adobe Reader, .Net, Air, Silverlight, ad nauseum programs are updated. You can also set up a “new computer bundle” that includes all the above, plus CCleaner, Malwarebytes, Avast or AVG, Chrome, Safari, Evernote, KeePass, etc, etc, etc.
This will be a lifesaver for anybody who has to update and maintain a bunch of computers.

Categories
Web 2.0

The week in Tweets

  • RT @savelibs: The eBook User's Bill of Rights #ebookrights #hcod #savelibs http://bit.ly/hwb5y0 (re HarperCollins autodeleting lib ebooks) #
  • HCOD, eBook User Bill of Rights and Math http://j.mp/gTAoUt – very nice summary of #hcod issues by Sarah. Reason #206 why I'm a fan… 😉 #
  • @laurenpressley @dancohen but you can buy the actual digital *file* – not 100% the same, but it is a real item you could own. #
  • @laurenpressley True! 1 of the reasons we went with OD is because we now own those files – even if we cancel. Until #hcod that is…. #
  • @mstabbycat Behind SAMs club/HyVee at the Broadway-Hwy 63 exchange. If you turn in toward SAMs, then left at the gas station, you'll see it! #
  • @mstabbycat I know I am. Wait… What? #

Powered by Twitter Tools

Categories
Web 2.0

The week in Tweets

Powered by Twitter Tools

Categories
Web 2.0

750 Words and GTD

Lauren Pressley wrote a little thank you to the 750 words site that got me thinking about how I use it (go check out her explanation of how she uses it and then come back – I’ll wait). During the summer, I was using it pretty regularly as I sat outside on my back deck in the evening, drinking a hard cider and futzing with my iPad (and killing little green pigs – the time I lost to that game…). It was a handy way for me to get a handle on my day – a way for me to reflect about what I’d done and what I had yet to do (kill more green pigs!). When the weather got colder and I didn’t spend so much time outside with just me and my iPad, I dropped the habit. Recently, though, I’ve been doing pretty much what Lauren has – firing the site up first thing and spending a few minutes writing about anything that comes to mind. What I’ve found is that it’s becoming a tool for me to use with my GTD system. I spend a good deal of my writing time, since it is first thing in the morning, considering what I have to do over the course of the day. Sometimes I hash things out in my head about what research methods I’d use to figure out why my cron jobs crash at random times on my web server (my latest “research this issue” task item…), other times I use it to solidify my thoughts on an upcoming meeting. Occasionally, I use it as a prompt for library (or personal) blogging – coming up with ideas and, very minimally, working them out before I begin the process of actually writing the posts.
Mostly, though, it’s helped me focus on my to-do list (often I check my to-do list on my iPad as my computer is booting, so that’s pretty much the last thing I’ve read before the site appears on my computer). I work through what needs to be done and come up with action items that I might have missed when adding stuff to the list earlier – it’s sort of like a mini-review (of 10 minutes or so) every single morning. That is seriously helpful, folks!
I know that many people use the site to journal their days or to have a platform for coming up with story/article/novel ideas, but I’ve found that it’s actually more useful to me as a productivity tool! I can write, consider and reflect without worrying too much about editing and revising (see previous blog post on why that isn’t really a problem for me in this forum…).
Lauren’s post really made me consider how I use the 750 words service – I don’t think I’d have realized what a help it is to me in getting things done, both professionally and personally, without her post! In that vein, I hope that this either encourages some of you to try out the site to see what having a blank page, 10 to 15 minutes of reflection time and nothing in particular to write about will do for you or that it will make some of you think about how you already use the site and maybe tweak it a bit so that it works even better.