Tag Archive for 2012

Privacy on IPv6 Networks

Privacy on IPv6 Networks

Internet service providers, websites, and equipment vendors around the globe took part in the World IPv6 launch in June, Internet companies including AT&T (T), Cisco (CSCO), Comcast (CMCSA), Facebook (FB), Google (GOOG), Microsoft (MSFT), Verizon Wireless (VZ), and Yahoo (YHOO) decided to permanently turn on IPv6. A small fraction of Internet users and devices have started communicating via IPv6 networks, with more and more transitioning to the new protocol over the coming months and years. There are security and privacy implications in the switch to IPv6.

IPv6All kinds of devices will get new IPv6 numbers as the addressing format grows. The IPv6 addresses for these networked devices can be generated in a number of different ways and the choice of how they are created has potentially wide-reaching effects for security and privacy Center for Democracy & Technology explains. One of the original methods for assigning new addresses involved using a unique device identifier (known as a MAC address) as the suffix of the IPv6 address. This method creates a permanent, unique address for a device, potentially allowing any server that the device communicates with to indefinitely track the user.

IPv6 designers soon realized the potential security and privacy problems of MAC-based addresses; as a result, they created an alternate method known as “privacy extensions” or “privacy addresses” the article reports. The privacy extensions use a randomly generated number instead of a MAC address. In order to protect privacy on an IPv6 network, the random number is unrelated to any device identifier and in practice lasts no more than a week (and often much less time), ensuring that the user’s IP address cannot be used for long-term user tracking.

SmartphoneIt is up to operating system vendors to choose which IP address assignment method will be the default on their devices. The author says that some vendors have made good choices, particularly within the last year. Microsoft has long led the charge on IPv6 privacy, with privacy extensions on by default in all versions of Microsoft Windows since the release of Windows XP nearly a decade ago. Apple followed suit last year, with privacy extensions activated by default in all versions of Mac OS X since 10.7 (Lion) and with the release of iOS 4.3 for iPhone and iPad. Google did likewise in its Android 4.0 release last year.

The CDT says that as long as Internet users choose to upgrade their operating systems to the latest versions, they should be protected against perpetual security and privacy threats from IPv6 network address tracking.

rb-

mobile OS's send private information about their users to the networHowever, I wrote about reports from H.Security that mobile operating systems do not protect security or privacy on IPv6 networks. The report says mobile OSs send private information about their users to the network. The H.Security article says this is not a flaw in IPv6, rather it is lazy programming in some cases. The article points out that neither Apple’s iOS nor Android devices have the option to enable Privacy Extensions or the option to disable IPv6. apparently, the only thing smartphones need is a control option in the user interface to protect mobile OS users’ privacy and security on an IPv6 network.

Related articles
  • Romania Has the Fastest IPv6 Adoption Rate (maindevice.com)

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

5 Steps to Reinvent Your Personal Brand

5 Steps to Reinvent Your Personal BrandDorie Clark of Clark Strategic Communications, recently posted an excellent article, How to Reinvent Your Personal Brand on the Harvard Business Review blog, The post offers a plan to follow if you want to reinvent yourself. I am on my third career iteration from teacher to techie to manager (I didn’t say it was for the better).

embrace your new brandIt happens all the time. Your path may make perfect sense to you, but how can you convince others to embrace your new brand, and take you seriously? Ms. Clark explains five steps to reinventing yourself for the business marketplace.

1. What’s Your Destination? The author says you need to develop a detailed understanding of where you want to go, and the knowledge and skills necessary to get there. If you’ve been a techie for the past decade, you may understand every new marketing toy out there, from Facebook (FB) to Foursquare. But can you effectively convey that knowledge to a non-technical audience? Learning the skills you need will help you gain the confidence necessary to start identifying (and publicizing) yourself in your new identity.

Your Unique Selling Proposition2. Leverage Your Points of Difference. In marketing, it’s called a USP, a “Unique Selling Proposition.” What makes you different from anyone else? That’s what people will remember, and you can use it to your advantage according to the article.

3. Develop a Narrative. Ms. Clark says it’s human nature to have many interests, to seek new experiences, and to want to develop new skills over the course of your life. Unfortunately, that makes you a dilettante. It’s unfair, but to protect your brand you need to develop a coherent narrative. This narrative should explain to people, in a nice, simple way so they can’t miss it, exactly how your past fits into the present. It’s like a job interview, you’re turning what could be perceived as a weakness into a compelling strength that people can remember (he’s got a different take on the industry because he has knowledge most other people don’t).

Reintroduce Yourself4. Reintroduce Yourself. The majority of people, regrettably, aren’t paying much attention to you the author says. That means their perceptions are probably a few years out of date, and it’s not their fault. With hundreds (or thousands) of Facebook friends and vague social connections, we can’t expect everyone to remember all the details of our lives. So we have to strategically re-educate our friends and acquaintances, because, especially if we’re launching a new business venture, they’re going to be our buyers and recommenders. That means a concerted effort to phone or email everyone on your list, individually, to let them know about your new direction and, where appropriate, ask for their help, advice, or business. (Blast emails are a start, but too often go unread.)

5. Prove Your Worth. Ms. Clarks says there’s a difference between knowing that you’ve launched a new business and trusting that you’ll do a good job. She explains that she may like you a lot, but unless she sees proof of your skills, she may hesitate to put her reputation on the line by sending you referrals. That’s where blogs, podcasts, videocasts, and other forms of social media come in. It’s critical to let potential customers see what you’re about and test drive your approach before they make a large commitment.

Related articles

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

China’s Largest Automobile Company Comes to Motor City

China’s Largest Automobile Company Comes to Motor CityChina’s largest automobile company has opened a new outpost in the Motor City’s suburbs. TheDetroitBureau.com reports that Shanghai Automotive Industries Corporation USA Inc. (SAIC) located to metro Detroit to build closer ties with one of its principal partners, General Motors (GM), as well as some of the other North American automakers and suppliers.

Shanghai Automotive Industries Corporation USASAIC USA Inc. expects to have 100 employees in its new 30,000-square-foot operations center in the Motor City at 322 N. Old Woodward, Birmingham, MI. What that means in the long-term, especially with the Chinese expected to eventually target the American automobile market, remains an unanswered question according to the blog.

Cooperation between U.S. and Chinese automobile companies is increasingly important in the new global automotive marketplace, SAIC Motor Chairman Maoyuan Hu said in a statement. The article reports that Maoyuan said, “…the opening of the new North American Operations Center in Birmingham marks an important step in creating a stronger ties between the US and Chinese automotive industries. With the increasing importance of cooperation between the major global automotive markets, this move by SAIC to strengthen its US presence is significant.”

“I believe SAIC USA will enhance the operation of localization in the recruitment of professional, technical and management personnel and actively expand economic and trade activities,” Maoyuan said.

ChinaThe blog says SAIC USA’s decision to expand its Operation Center in Michigan was based on a number of critical factors, including access to a highly trained workforce, proximity to key global automotive partners, especially General Motors, proximity to world-class automobile parts suppliers, and the favorable business environment in Michigan. The CEO of China’s largest automaker said, “… we expect SAIC USA will continue healthy growth in this market and this will be a new chapter of mutually beneficial cooperation for China and the US, with the support of both countries.”

The Michigan SAIC USA facility will focus on three main areas of SAIC USA’s automotive business, including purchasing, logistics and technology, and engineering.

SAIC USA parent company, Shanghai, China-based SAIC Motor, is the largest automotive manufacturer in that booming country. It is also GM’s principal partner in China, involved in a variety of joint ventures, including the original Buick assembly plant in Shanghai. Among its various operations are Shanghai GM, Shanghai VW, SAIC Motor Commercial Vehicle Company, SAIC-GM Wuling Automobile Co. In total SAIC Motor sold over 4 million vehicles in 2011 in the China market alone.

Michigan Governor Rick Snyder said, “The company’s commitment to Michigan cements our standing as the automotive capital of North America.”

Most analysts eventually expect a Chinese presence in the US. Whether SAIC would come to the U.S. with products of its own remains to be seen, though that’s a possibility the maker isn’t ready to discuss right now.

rb-

GM makes about $1 billion a year in China so it is little wonder SAIC moved into the Detroit Area. The move should also help stabilize the Detroit job market which has been up and down lately.

Related articles
  • China: Shanghai GM begins construction on $1.1bn car plant (inautonews.com)

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

25 Most-Used Passwords Revealed

25 Most-Used Passwords RevealedRachel King at ZDNet’s Zero Day writes that the recent data breaches at LinkedIn, Last.fm, and eHarmony has put passwords back in the spotlight. Unfortunately, many people still rely on “password” to secure their digital identity. Antivirus software provider ESET noted some recent work by IT security consultant Mark Burnett who has compiled a list of the “top 500 worst (aka most common) passwords” based on a variety of methods he has detailed on his blog. The entire list is available here (ZIP).

25 Worst passwords

20122011
password
password
123456
123456
12345678
12345678
1234
qwerty
qwerty
abc123
12345
monkey
dragon
1234567
pussy
letmein
baseball
trustno1
football
dragon
letmein
baseball
monkey
111111
696969
iloveyou
abc123
master
mustang
sunshine
michael
ashley
shadow
bailey
master
passw0rd
jennifer
shadow
111111
123123
2000
654321
jordansuperman
supermanqazwsx
harleymichael
1234567football
2012 data from xato.net and 2011 data from SplashData.com

rb-
Why don't they listenApproximately 2/3’s of the worst passwords stayed the same between 2011 and 2012. Are your users’ passwords on this list? If so, it’s safe to say you should consider a password change policy to force them into using a stronger password.

I have written about passwords since at least 2010 – here, here, and here. When will they listen?

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

HP Sets Up Training Center In China

HP Sets Up Training Center In ChinaChina Tech News reports that the HP (HPQ) software business group announced cooperation with the municipal government of Neijiang, Sichuan province, China to build an information technology software talent training center.

HP logoThe article says the new base aims to give practical software training, IT outsourcing services, and IT resource services to promote the information development of China’s southwestern areas and to stimulate the sustainable development of the regional economy.

The IT software talent base is divided into three centers. The software talent training center will provide HP’s professional training to up to 5,000 university graduates each year. The training content covers IT operations monitoring and analysis, software management, software automation, application testing, and cloud service management.

Strategic development for China

ChinaThe Chinese economy is currently undergoing a transitional period and the development of information and software industries have become the focus for the strategic development of the country. The blog says Sichuan is an engine area for the western development of China. The HP center will focus on HP’s leading technologies, best practices and integrated cloud strategy according to China Tech News. The article concludes that the new HP IT software talent base is committed to delivering qualified software talents, quality software testing outsourcing services, and IT resource services to various enterprises, helping them improve IT infrastructure capacities.

rb-
Does HP want to bother with U.S. workers anymore?The continued abandonment of America by its industrial base. They could build a training center in Detroit whose economy is also currently undergoing a transitional period. One of the biggest excuses used by multi-nationals for off-shoring work is that American workers lack the skills that firms are looking for. This new training center in China says to me that HP just does not want to bother with U.S. workers anymore. 

HP has a long-term contract with the U.S. Navy worth $3 billion, are these Chinese HP staffers supporting our military?

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers and anything else that catches his attention since 2005. You can follow him at LinkedInFacebook and Twitter. Email the Bach Seat here.