Archive for the 'Hacking' Category

Ashworth Instructor Points Out Why The IT Field Is Hot!

Monday, March 3rd, 2008


                     Thanks to .res for permission to use this Photo. 

The annual IT Salary and Skills Report conducted by Global Knowledge and Tech Republic was released this week for 2008.  Here are some of the points of interest from the study:

  • The average salary in the IT industry was $73,963, up 3.25% from 2007.  80% of workers reported an increase of pay for 2008.   
  • The average salary for those with a college degree was $76,446.  Those with a certificate or degree from a technical college had an average salary of $65,712.
  • Those 25 and younger with 2 years of experience or less make $39,883 on average.  This same age group made $46,303 with 3 to 4 years of experience.
  • The average IT worker is 43 years old and has been in IT for 14.3 years.
  • 59% have a college degree
  • 78.7% report that they are very or mostly satisfied with their career choice
  • IT is the third highest paying industry field
  • 42% plan on obtaining an IT Certification within the next year.
  • 34.4% hold a Microsoft Certification of some type
  • The highest paying IT Certification is the Project Management Professional (PMI) at $101,695.  The lowest paying IT Certification is Comptia A+ at $41,726.
  • On average, those with a Cisco CCNA make $64,260.  Microsoft MCSEs make $71,980.
  • Help Desk Support professionals make an average of $48,773.
  • Admin Support personal make an average of 51,819
  • Network Administrators make an average of $56,277
  • Web/Internet Professionals make an average of $62,658

Brad Rudisail
Computer Network Technician/Network Security Instructor
Ashworth University

Microsoft To Increase The “Openness” Of Its’ Products. Really?

Tuesday, February 26th, 2008

if you don't know, you better ask somebody: freezy freakies ya'll! 
                              Image courtesy of 80stees.

In a surprise announcement, Microsoft vowed to increase the openness of its key products!

Yes this is still February, April 1st is several weeks away yet!

So what did Microsoft say in this release? Well,

Specifically, Microsoft is implementing four new interoperability principles and corresponding actions across its high-volume business products: (1) ensuring open connections; (2) promoting data portability; (3) enhancing support for industry standards; and (4) fostering more open engagement with customers and the industry, including open source communities

Several times in the last few years I have advocated for Microsoft to Open Source Windows and Internet Explorer and while this announcement doesn’t go that far, it does seem to be a step in the right direction.

According to Microsoft’s CEO-in-waiting and current Chief Software Architect, Ray Ozzie

“Customers need all their vendors, including and especially Microsoft, to deliver software and services that are flexible enough such that any developer can use their open interfaces and data to effectively integrate applications or to compose entirely new solutions,” said Ozzie. “By increasing the openness of our products, we will provide developers additional opportunity to innovate and deliver value for customers.”

The Microsoft products this refers to are Windows Vista (including the .NET Framework), Windows Server 2008, SQL Server 2008, Office 2007, Exchange Server 2007, and Office SharePoint Server 2007, and future versions of all these products. (more…)

Ashworth Instructor Discusses The Dangers Of Using Default Passwords…

Wednesday, February 13th, 2008


               Thanks to radiorover for permission to use this Photo.

The following interview with Robert Moore illustrates the apathy that is still amazingly apparent in the IT industry today despite the strong awareness of IT vulnerabilities and the importance of tightening security for all organizations and even home users.  It also shows how easy it is for even computer novices to break into network devices.   

A quick Google search for sites showing the default passwords for just about any computer or network device sold on the market in the past decade can be easily found.  Many of these sites are not developed for malicious purposes.  The fact is that network devices are constantly resold and recycled.  This requires that the device be reset to its default configuration to erase the settings made by the original owner.  In order for the new owner to configure the device, he or she must know the default password credentials in order to access the device.  Because the original device documentation is often missing, these default password sites are vital. 

These sites make it even more important to immediately change the password for any newly purchased network device.  Recently, I heard a high school student inform me that he regularly accesses his neighbor’s wireless router by using the default logon for the device.  By doing this, the student can use his neighbor’s DSL connection for free.

Brad Rudisail
Computer Network Technician-Network Security Instructor
Ashworth University

Wikipedia Founder Jimmy Wales Explains Everything In This Inspiring Video!

Thursday, February 7th, 2008

Jimmy Wales Is A Cool Guy!

                   Thanks to Joi for permission to use this Photo.

Wikipedia has had a dramatic impact on the way people collaborate to create, search, update, and catalogue information.  Millions of people visit this site and “wiki” every day.  I recently read the bestselling book, “Wikinomics”, where the collaborative networking principles that built this new information platform are endorsed as complimentary to more open business models of the future.  As you can see, there are lessons we can learn as entrepreneurs from the Wikipedia success story, but how can we apply these lessons in our own small business ventures.  In this video, Wikipedia founder Jimmy Wales shares his insights into the somewhat miraculous rise of the Wiki empire. Wales emphasizes how important the collaborative development process was and continues to be for his company.  I hope this video inspires you to dream big!

P.S. Be sure to check out Ashworth’s wikipedia page when you get a chance! 

Penny J. Waddell
Online Business Management Instructor
Ashworth University

Microsoft Enters The IT Security Market!

Wednesday, February 6th, 2008

 
                Thanks to J. Parks for permission to use this Photo.

Microsoft recently unveiled their Forefront Security Application Suite that provides antivirus protection as well as Spam and spyware protection.  Forefront provides network protection at client, server and enterprise edge level.  Due to the pricing and licensing structure that Microsoft offers their enterprise customers for their products, Forefront is sure to make a big splash on the marketplace and offer strong competition to industry leaders such as Symantec and Norton.   As a network security specialist, it’s absolutely vital that you stay in tune with soon to be mass-market security applications such as Forefront, so be sure to check into this blog often as I continue providing weekly updates.  Let me know if you have any questions and feel free to share your thoughts in the comments section.  We’ll talk again soon…

Brad Rudisail
Computer Network Technician-Network Security Instructor
Ashworth University

Ashworth Network Security Instructor Reviews 2008’s Top 10 Cyber Security Threats…

Monday, February 4th, 2008


              Thanks to foundphotos for permission to use this Photo. 

The SANS Institute, an organization dedicated to computer security training, certification and research recently released their Top Ten Cyber Security Threats for 2008.  Below is a summary:
           

  1. Attacks via web browser vulnerabilities, particularly plug-incomponents such as QuickTime and Flash.  Many of these plug-ins are rarely updated. 
  2. The growing sophistication of Botnets.  The most popular exampleis the Storm Trojan which accounted for one in twelve virus infections only a week after its release.  This new breed of botnets uses peer-to-peer control rather than a centralized controller that can be eliminated. 
  3. Cyber espionage, particularly economic espionage conducted bynation states 
  4. As Mobile phones are become general purpose computers, worms,viruses, and other malware will increasingly target them 
  5. Insider attacks by rogue employees, consultants and contractors.These threats will result in the further limiting of the cyber rights and abilities of employees. 
  6. Identity theft performed by persistent bots.  These bots notonly target email addresses, bank accounts information and passwords but even the cyber behavior of users that can be later used forextortion. 
  7. Increasingly malicious spyware 
  8. Web Application Security Exploits are constantly being targetedas so many applications today are web based and can be targeted by hackers. 
  9. Social Engineering continues to be widely utilized.  Phony taxscams are very popular today. 
  10. Infected Consumer Devices such as USB drives that can containmalicious code or espionage based applications that can attack acomputer in a matter of seconds when the USB drive is inserted into a computer. 

Brad Rudisail
Computer Network Technician-Network Security Instructor
Ashworth University

RFID: Data And Privacy Implications

Sunday, February 3rd, 2008

that's that...
                        Thanks to Seth Hosko for permission to use this Photo.

Most of what we define as data or information is what we explicitly create or gather. For example, if I write an article or contribute to a wiki, the resulting information is intentional and a result of active work on my part. When a scientist discovers a cure to a disease, or a new drug to treat or reduce symptoms, the information is again a consequence of intent. Our conversations are similar - we are active, intentional creators of data (I’ll call this first tier information). But we create a second kind of information on a daily basis. Second tier information is a by-product of what we do - our actions and our choices. We are largely not aware of this information. It’s difficult to capture - unless we are hyper self-aware or we are being stalked. This information used to vaporize as it was not embodied in text, images, or any other conceptual or physical product. That’s changing. Facebook - with its Beacon program - follows us and observes our choices, essentially turning our transient information into first tier information. This is a significant development; one that has enormous future implications in privacy and the rights of citizens and corporations. (more…)

Economics In A Data Rights Management (DRM) Free World: A Reality Check

Wednesday, January 2nd, 2008

 
           Thanks to Monica Semergiu  for permission to use this Photo.

After my previous post, Doug Johnson asked me to explain the economic model of a DRM-free world. This has been done by others on numerous occasions, so what follows should only be thought of as a summary.

Today, the demand that someone (not necessarily the artist) be compensated for the creative act is driving the demand for digital rights management. Because it is today so easy to make copies of content, the idea is that any access to content must be compensated. Otherwise, we are told, the creator (or, more accurately, the rights holder) will not be rewarded.

But we have had free content since time immemorial. Not always in the form of television, obviously, but from the days the first stories were told around the campfire and the days the first paintings were drawn on the walls of caves, listeners and viewers could access that content for free.

It is important to recognize this. It is important to see that free access to content has, though history, been the rule, not the exception. That the commodification of content, that the charging of access fees, subscriptions, or some other form of tariff, is a recent invention for almost all forms of content.

Yet, somehow, through history, artists and authors and musicians managed to ply their trade. How was this possible? It was rarely through sale of recordings or reproductions. Here are some ways authors, artists and musicians can support themselves in a post-DRM world. (more…)

Advice To Retailers From Ashworth Instructor Brad Rudisail: Take Network Security Course!

Wednesday, December 12th, 2007

 
          Thanks to Steve Jurvetson for permission to use this Photo.

I have always found it ironic that so many people today are still hesitant about making an online purchase with their credit card, yet have no problem giving it to a total stranger at a restaurant or retail store.  In November 2007, the famed CBS show 60 Minutes ran a feature story on the risk of using your credit card at retail store locations.  I was shocked to find out that the primary point of vulnerability wasn’t the integrity of the retail checkout employee, but the wireless network.  Come to find out, many, many retailers are still using WEP for wireless encryption rather than some sort of WPA or WPA2. 

Students in the networking course at Ashworth know that WEP is an easily crackable encryption standard and went out of favor years ago.  One can even go to the Internet to www.irongeek.com and watch a simple video as to how to crack WEP.  Once cracked, elementary hackers, or war drivers as they are referred to today, can then access the retail network and find the servers that hold customer financial information. (more…)

How Tech’s Trend Setters See The Future…

Monday, December 10th, 2007

 
              Thanks to Manny Diller for permission to use this Photo.

Google’s chief evangelist, Vint Cerf, recently wrote a fascinating article for The Guardian in which he discusses the future of the Internet, technology, innovation, new trends, etc. with some of the world’s brightest tech minds.  If you’re interested in hearing what people like the myspace and YouTube creators see ahead, and you should be, check out this article and let me know what you think.  Click on the image above to read article.

Ryan Rode
Interactive Services Manager
Ashworth University