Friday, February 29, 2008

Common sense and Hacking...

When it comes to common sense in this world, it is earned not given. Now when you add lack of common sense to a computer hacker you gain a potent combination of choice words I rather not share. I read this article around the net that involves some hackers, google and this program developed by hackers called Goolag. This program's function is simple, the user takes the program and runs it. It runs a few queries through Google searching for credit card information and other personal data owned by others where it then presents it to the user of this Goolag program. Scary? Yes it is. To think that a simple program could be used to search through google's database and query out sensitive information with little to know work involved.

Don't get me wrong though hackers have indeed been using Google as a means to hack information from unsuspecting individuals pretty much from its inception. But this task was manual and took time and experience to even begin to know where to look and what to look for. But with this new automated program designed to find the same mentioned data off Google can nearly cut the time in half which can allow hackers and thieves to steal your sensitive information quite easily. This worries many companies and the authorities on how this program can affect people who make many purchases over the Internet or who participate in online banking.

There is however a light of hope in this dark cloud however. Experts say that this program will do little damage if any at all if websites that store the sensitive information practice good networking and keep their security checks in place. As long as the website has good protection then this program will do little in breeching your identity. So the key is for companies to keep their websites more secure and keep private information off of publically accessible websites.

As a strong user of the internet I am always concerned about hackers stealing my information, and I hope that website operators would do everything in their ability to keep everything safe and confidential. This article was interesting to read because it really taught me that I need to be careful with what kind of websites I use and make their that they practice good network security before I do business with them.

Link to where I read this short article hosted on G4Tv's website:

http://www.g4tv.com/thefeed/blog/post/683199/
Google_Hacking_Gets_Easier.html#readmore

It's right on the tip of our fingers!

In this article we will be discussing a nice piece of futuristic technology to make our lives a bit easier at the gas pump. Shell is introducing into just a few of its gas stations the ability to pay using a finger print reader that will be linked up to an account registered in your name. It's supposedly easy to enroll where you simply register your finger print, select your search code and you preferred choice of payment. The unfortunate part is that you don't get to many options in the form of choice towards payment option. Those options being eCheck, Shell card of Shell Mastercard. So those of you who do not have one of those 3 types of payment may not participate but I am sure those of you who want to take part would be welcomed to apply for one of the following listed above.

This is an interesting way for this technology to be used, no more having to dig around for your card or worry that if you misplaced your card that it could actually be stolen. It seems very secure and safe because no two fingerprints are identical, so nobody would be able to access your account. They add on to the security your account information will be stored and encrypted on IBM data centers. This is great news in the age of identity theft happening on a constant basis. I would have to think that being able to store so many records for customers it would require a very large and reliable database. The database would have to be accessed by all participate shells and be available when ever a shell is open for business. In theory could be 24/7.

I saw this information on a page on the Shell website which will be listed below. I think its amazing that we are finally starting to enter an age in technology that I once saw on tv shows on the Sci-fi channel. Hopefully flying cars are in the near future that don't run on gasoline!

Link to the page:
http://www.shell.com/home/content/us-en/shell_for_motorists/payments/pay_by_touch/
goldfinger_main.html

Tuesday, February 26, 2008

When simple sensorship goes wrong~

Hello everyone thank you for tuning in today. We shall be discussing when hacking + government goes wrong. So imagine yourself in a world where your government decides they do not want their citizens to view certain websites on the internet without your direct knowledge or consent...not to hard to picture I would imagine. Anyways supposing said government decides the only way to accomplish this is to block the website all together from reaching its citizens. How does one accomplish this you ask? Well there is a variety of ways you could in theory come to this conclusion. One of them being officially stating disapproval of this site and urge citizens to stay away from it. Request the website operators from allowing certain IP's coming from said country to access the website ( this would probably be more ethically accepted ). Or you can take matters into your own hands and hack the website and/or your citizens force block this website from accessing. Now you are probably wondering what website and what country would even consider taking steps towards Internet censorship. The website is YouTube, perhaps you have heard of it? You know a little video sharing site where users upload videos for people to watch and comment. And the country in question you ask? Well it is the country of Pakistan. Honestly I did not see that coming.~

What sparked the country wide banning of YouTube came from the recent increase of anti-Islamic type videos that have been popping up recently on YouTube's servers. Pakistan obviously no longer favored such videos being accessible by its citizens decided to take up the ban hammer in its own hands and attempted to block the site from being reached by anyone in their country. Now take a pause before reading on and ask yourself how does one ban a website? Well if you read the first paragraph I gave a couple of scenarios on how this possibly could be done but I am sure you can imagine which scenario Pakistan decided on. Yes they took the unethical approach and hacked into YouTube's servers and attempted Internet protocols that resulted in much more then a simple ban hammer for its citizens. The end result was Pakistan must of miscalculated its attempts at blocking just its nation and ultimately blocking the website to many of its users world wide.

One must question the ethic's in doing this. I can understand that they may want to block it for their own reasons but wouldn't simple communication between YouTube and the Pakistan government been a little simpler than "hijacking" a server? What kind of security threats could this have caused as a result? We all know hacking is hacking, it does not matter if you are stealing information or simply just disabling a website from viewers to see. Steps taken could end in the same way with risks to data integrity. Whose to say there was no hidden agenda? I am not pushing any blame towards anyone but simply asking questions that many would not think to ask. If I were to "hijack" a website to prevent those from viewing it, am I not taking censorship into my hands where the Internet it accessed by all not just by some? What would give me the right to do so?

Protecting data integrity is the goal of all people who run and maintain servers and databases. Is it not a crime in itself to force your way in without authorization and take certain actions into your own hands? These are questions we need to think about as Internet censorship takes steps closer to becoming a possible reality.

All credit goes to G4Tv and Wired News where I learned of and read the article. Both links will be shown below. Until next time everyone~

http://www.g4tv.com/thefeed/blog/page2.html

http://hosted.ap.org/dynamic/stories/P/PAKISTAN_YOUTUBE_BLOCKED?
SITE=WIRE&SECTION=HOME&TEMPLATE=DEFAULT&CTIME=2008-02-24-09-04-19

Wednesday, February 20, 2008

Is your school network safe??

In a world where we have to deal with the fear of campus shootings and crime, it only seems natural that the next step would take place over the internet. Now don't get me wrong I don't support any of these kinds of acts where a student's safety is compromised, especially being a student myself I feel this story can hit home just because of its nature. Being an I.T. major I can really feel sorry for the network administrator at the University of Harvard. Here is a guy whose entire career is based upon protecting, running and maintaining this network and here comes some random hacker to break it, copy an entire database worth of material and display it for the world to see. One could say this network admin. is going to be busy for quite a few days fixing security loop holes.

In this article we see that a hacker on this past Monday from the date of this article has allegedly broken it one of the University of Harvard's websites and compressed it into a 125mb file that appeared on BitTorrent a peer to peer file sharing application. It was hosted on the "Pirates Bay" a BitTorrent website. The database appears to be legit comprising of misc. files taken from Harvards servers. An attached note from the supposed hacker states that this stunt was used to demonstrate the weakness in security at Harvard. A very serious stunt indeed, one can only wonder how weak it truly was for someone to break into a school network without anyone catching it and stealing data of of their databases and then distributing it out onto the internet.

This kind of situation could in theory happen to anyone but it really makes you concerned since students rely on the security of their schools network to protect their important information. We as students use the school websites for virtually everything such as registration, paying tuition, managing student sensitive information. Suppose this hacker decided to take it a step further and steal personal data from the student body. As bad as this could be for the students it would be that much more worse for Harvard because of the impending lawsuits that may ensue from outraged individuals. I really worry about the rise of hackers in the recent years, although not all hackers are bad. There is ethical hackers these days but like anything in this world there will always be two sides to any coin.

Link to the article is here and all credit goes to PC World for its well written article. It's very informative and I urge anyone who is interested to check it out!

http://www.pcworld.com/article/id,142589-page,1/article.html

Monday, February 18, 2008

Internet Pirates Vs. Big Brother

This article concerns me quite a bit. As an avid user of the Internet I always worry about my personal data being leaked or taken from me by an outside source. As much as I try to keep my data safe on my computer the fact is someone will always be ahead of the game knowing all the tricks of the trade to get past any attempt I put forth to protect myself.

We all know that online piracy has recently caused a bit stir in the last few years with people file sharing music, movies and programs. These people know they are copyrighted and must cope with the fact that they are subject to legal action. But despite all that when it comes right down to actually catching these individuals how does a company accomplish this? This ties into my article and video I found on the G4 network website. I will post the link first so that anyone interested may see the video.

http://www.g4tv.com/attackoftheshow/blog/post/
682282/The_Loop_The_New_Web_Police.html#readmore

This article mainly deals with companies such as AT&T who are attempting to step up as internet police and discover who are the subscribers in their networks that are using the
as a way to pirate movies, music, etc. Many things come to mind when I think of an ISP trying to become internet police when it comes to illegal file sharing. For instance, how do they intend to accomplish this? Being an I.T. major focusing on networks one would have to think that one of the few ways to be able to do this is to actually spy into peoples computers and look around on their hard drives for the evidence. But does this actually infringe on our rights? I would say yes because what of those people that store sensitive information such as personal data, social's, credit cards or online banking? How can an ISP such as AT&T justify paying an individual who is basically classified as a hacker to enter your computer without permission and "look around for illegal file sharing." What if this "hacker" is a crook who uses his job to steal peoples identities or takes the time since hes already in your computer to read personal mail etc. I would think this can infringe on our rights 100% and can compromise our financial and personal data.

This concerns me because as someone who uses the Internet to make online purchases and uses email quite often I would not be comfortable knowing that my ISP (which is not AT&T- thank goodness) may enlist the aid of their networks admins. and possibly outsources hackers to infiltrate my network to attempt and discover is I file share or not (which I don't). How they plan to justify this action without fearing on lawsuits is beyond me. We can only sit and watch as these developments progress and hope that our online rights won't be denied when push comes to shove.

Are you Anon!

I saw this report on a show I watch on the G4 network, I am not 100% if it was displayed on the standard news on local channels but I thought this was an interesting article to relate to database. Now despite the fact that this involved real people and their fight towards a goal it has much to do with database as any of my other past topics.

As the title of this topic says....Are you Anon. Well for those out of the loop, Anon short for Anonymous is group of individuals who are completely unknown in what they look like but have a strong force backing over the Internet. They are a faceless, leaderless group that randomly choose organizations or individuals that don't quite meet up with their moral beliefs and ethical views of the world. Recently they has made public that they are now setting their sights on the Church of Scientology. They feel this organization needs to be completely dismantled and brought down for the alleged crimes against them. My article has to deal with some of the steps they took to take down Scientology.

This all started by a posting of a video posted onto YouTube that interviews Tom Cruise and him talking about Scientology. Scientology requests the video to be brought down under the argument of copy right infringement. Because of that the video leaks out to other websites where they show it in full and ignore the demands of Scientology to bring it down. Because of this they have aroused the eyes and ears of the group Anonymous who are fighting against Internet censorship, another big topic in the U.S. at the moment. The group Anon has many computer user and hackers in the group where they have effectively put the Church of Scientology on notice. Using computer mischief they have rendered many websites that belong to Scientology useless using Denial of Service attacks and data fax spamming. They have also created a computer voiced video that was posted on YouTube declaring their actions onto Scientology.

Though the article was short their were many instances of Network violations present. Though I am not sure I agree with their DoS ( Denial of Service ) method to take down alot of Scientology's websites I do however understand what they are trying to do. Using their own websites and completely bringing them down falls in the line of Network Security. At some point some of the Anon hackers must of gained either admin. privilege's or access their servers and overloaded them with commands and requests. At the same time this happening it was reported through another source that while they had access to their servers a number of their databases with copy written material, exclusive to Scientology, had been taken and distributed over the Internet. So we are dealing with a group who are very good with computers but can use them in very bad ways such as taking information off of others databases and servers etc. However it's not all criminal activities they are pursuing. To wrap this all up there was a huge protest at many of the Scientology owned facilities by hundreds of people all wearing some type of mask protesting Scientology. All of which claimed to be apart of Anon.

I thought this article was very interesting because of its ties with Database and Network Security. It even had a human side to it of what people will do so that their voice and opinion is heard. The fight will be a long one in my opinion with many casualties I fear. A protest like this that challenges laws in the U.S. where a group fights for human rights and the other fights for freedom of religion. It will be a tough fight for the both of them, and I fear not to voice my over all opinion because I have read of many others going to jail because of comments they made in the regard. So I will leave it at this and watch from the sidelines as this story further unfolds.

Thursday, February 14, 2008

Did technology create the next super man!

Sorry for the lack of posts lately folks, this past week I have been focusing on 4 different tests in most of my classes, so I am gonna try and pump out a few cool articles before weeks end to try and catch up with the pace I tried to set~

On that note lets get down to it with this very interesting article I found on robotics etc. Rest assured all things can have a place in the wonderful of database you just have to have a creative mind and logic when it comes to explaining it!

Today I would to present a new power suit that amplifies human strength. Wow it really can be like superman....one day maybe. But anyways this suit developed by some enginneers in Japan is being perfected and hope to begin its use in hospitals and nursing homes. But as you can probably guess such a use won't stop there. I am sure this marvelous piece of tech can be used in many different ways. Soilders on the battlefield, construction work, farming are just some of the many ideas that sprang to my head.

This suit is driven by portable batteries, small body senors and micro air pumps. As I stated about helping hospital workers one wearing a perfected version of this suit could easily lift a patient at a suggested weight of 180 pounds with half the effort of lifting someone that weighs that much. Imagine this...your small petite in stature and usually never would be able to lift 180 pounds much less even weight that much, but perhaps you could manage to lift 90 pounds with some help. Well if you had perhaps two people each wearing this suit each of you lifting this 180 pound person would literally be splitting the weight in half and using half the strength to do it, in essense you could be lifting 90 pounds instead of the 80 pounds. Talk about taking some of the slack off. The only draw back I see is that the suit itself in its current state weights about 66 pounds. But I am sure with future technology advancements everyday the weight of the suit will drop while its power increased. One of the testers comment in saying "When I wear it, I don't feel that it's heavy at all," He also commented in saying that "The sensors can tell the muscle power needed to lift an object."

Now that being said about the sensors we think to ourselfs sensors store information taken from the host. When your muscles react to begin lifting the sensors read this information into the suit where then the suit begins to adjust the power needed to lift. In a way its almost as if the suit stores the calculated strength to a table where it then references how much power is in turn needed to help its host lift the desired item. This is sort of like a database holding information where you then query the suits sophisticated database to attain the desired result. I believe that is a good way to explaing exactly how this suit can relate to database.

For those not 100% sure of how this suit works I will try and elaborate as best as possible. A network of senors track the limbs of the host then relay any and all data to the onbaord microchip. Once that is done the microchip regulates air flow into the micro air pumps where it then expands to give the desired lifting. To note an earlier comment about the suit weighing 66 pounds, to elaborate more the suit is self sustaining which means it can support its own weight and still having a battery support lift of about 30 minutes. Future versions of this suit are still in progress to help it overall perform and look better with more flexibility and looks.

This suit looks and seems amazing to me, with the right imagination and a little work this suit can go far beyond its intended target and reach new heights in not only supplementing ones own strenght but perhaps to help those rehabilate damaged limbs or even help those who lost the ability to walk on their own. I am very interested to see how this suit evolves in our technologically inclined world and perhaps one day we all can mimic what one would call true super human strength!

All credit etc. go to the author of this article from the article link provided below~
http://www.livescience.com/technology/060928_power_suit.html

Tuesday, February 5, 2008

Go Green! Go Security!!

As broad as my articles have been for the last few posts, I can't stress enough the importance of Going Green! We only have one earth and I think it's great the I.T. world steps up with new advancements in technology that is safe and yet good for the environment.

Without further ado allow me to present for your reading pleasure.....A new low powered Microchip. Let's discuss this chip and its features a little bit more and discuss how we can relate this in the grand scheme of Database!

Now despite this article being a bit dated I am sure even in this day the technology is being improved upon even further than this articles gives justice. But for the sake of just being informed its important to note some of the key points it had to offer when the article was first published! The chip I am discussing is a PIC 8-bit flash micro controller with integrated KEELOQ® cryptographic peripheral. This chip uses a combination of low power consumption and a reliable battery powered operation. This chip boasts that it is the total solution for secure data transmissions and authentication applications. That I think is very important for those with sensitive information stored in databases and servers. I do not think anyone else would disagree with me on that notion. But we must know, is this all it can do? Sure there has to be other features that set it apart from the rest! What possible applications could the new PIC12F635 and PIC16F636 microcontrollers have in store?

It is important to note that these chips can be used for Remote security control which in turn is basically Remote Keyless entry, an example would be perhaps the lock/unlock feature on your automobile. Passive Keyless entry and remote door locks and gate openers are other Remote security control types associated with these microchips. These microchips don't stop there, they can also be used for Authentication purposes for example property and identity. The microchips also boast of being associated with remote sensor and their intercommunications for Security Systems. So we see that it has some many general purposes to those listed but the real question we should be asking for those not completely tech inclined is " What does this all mean and why is it better then my wireless door locker in my car or my garage door opener in my house?" Well I am glad you asked that, you see in this day and age new devices exist that can intercept signals given off by your garage door opener or current keyless entry controllers for your car. With the properly equipped thief and the right tool for intercepting this signal they can take that signal and store it into their signal stealing device and use it to gain access to your car or home when you are away and unsuspecting. I don't think I have to tell you what that means when an outsider gains access to your belongings! So how does this tie back into these microchips now that I have seemingly gone off into a tangent. Well fear not a direct quote from the article states that

" KEELOQ technology is based on a proprietary, non-linear encryption algorithm that creates a unique transmission on every use, rendering code capture and resend schemes useless. The new devices now feature this encryption algorithm as an integrated hardware peripheral to the PIC microcontroller core. " ( credit to Eric Lawson on this well stated article ) Article web address to be found by clicking on "here"

So there you have it, a new kind of chip that boasts lower energy consumption for our environment and some great features to help better protect those sensitive files in your database or even in your own home! I personally enjoyed this article because it basically killed two birds with one stone. Microchip Technology Inc. developed a way to go green while increasing security for anything that has these microchips integrated!