Tag Archive for 2023

Blockchain is Enabling Malware

Blockchain is Enabling MalwareBlockchain was going to save the world. Remember the hype? It was going to save the environment. Blockchain was going to change the world.  In a 2018 hype piece Wired listed “187 Things the Blockchain Is Supposed to Fix.” The first item on the 2018 Wired list of things blockchain was going to fix is “Bots with nefarious intent.” 

Nozomi networksWell, it is 2023 and Wired’s prediction is wrong. Cybersecurity firm Nozomi is reporting that blockchain is being used to enable malware. Bleeping Computer writes that the security researchers found the Glupteba malware botnet has been resurrected. Glupteba is a blockchain-enabled malware that has been targeting Windows devices worldwide since at least 2011.

Blockchain-enabled malware

The San Fransisco cybersecurity firm describes Glupteba as a blockchain-enabled, modular malware that infects Windows and IoT devices. The malware is distributed through malvertising on pay-per-install (PPI) networks and traffic distribution systems (TDS). It pushes the malware installer when the victim clicks on a weaponized link disguised as free software, videos, or movies. Once installed, the malware will mine for cryptocurrency, steal user credentials, and deploy proxies on compromised systems. The proxies are later sold as ‘residential proxies‘ to other cybercriminals.

Bitcoin wallet

Glupteba uses the Bitcoin blockchain to evade disruption. The zombies get updated lists of command and control servers to contact for commands to execute their malware activities from Bitcoin. The infested computers search the public Bitcoin blockchain for transactions related to wallet addresses owned by the attackers. From the Bitcoin wallet, the zombie clients can fetch an AES encrypted address C2 server address.

The malware uses the blockchain strategy to prevent takedowns, like the Google December 2021 disruption. Google was able to disrupt the blockchain-enabled botnet. The botnet was disrupted by gaining court orders to seize control of the botnet’s infrastructure and filing complaints against two Russian operators.

rb-

Because blockchain transactions cannot be erased (by design), it is much harder to take down C2 servers. Furthermore, without a Bitcoin private key, law enforcement cannot plant payloads onto the controller address to take over or shutdown a botnet. Ars has a deeper explanation here.

Please remember that the original reason for Bitcoin was that it would do away with the need for trust in people. The assumption appears to be that you can trust the technology – but not people. This malware proves that this is a faulty premise.

 

How you can help Ukraine!

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

4 Things About Personality Tests HR Won’t Tell You

Four Things About Personality Tests HR Won't Tell YouThe job market is an enigma right now. Tech companies are terminating employees by the thousands, yet the unemployment rate fell to 3.4%. That is the lowest jobless level since May 1969. What means that their is a lot of hiring going on right now. Job seekers are likely to encounter personality tests at some point during the hiring process. A per-employment personality test is an assessment used by employers to reveal particular aspects of a candidate’s personality and estimate the likelihood that they will excel in such a position.

Personality tests – Big business

Personality tests are big business. A 2017 Society for Human Resource Management report says that 32% of HR staff use personality tests to vet executive roles, and 28% use them for middle-management positions. The personality test business is expected to be a $6.5 billion industry by 2027. Today, there are more than 2,500 different personality tests on the market. The Myers-Briggs test is the most commonly used personality test. The Myers-Briggs Company website brags that their test is used by more than 88 percent of Fortune 500 companies.

One of the things that Myers-Briggs claims to measures is how introverted or extroverted you are. In basic terms, introverted people direct their energy inward to their own feelings and thoughts, while extroverted people direct energy outward to other people and their environment. In reality, personality is far more complex. Laurel Steinberg, PhD, a licensed psychotherapist in private practice told Insider that most people fall somewhere in between these two types.

Friederike Fabritius, a neuroscientist who has worked with companies like Google and Deloitte on how to attract and retain top talent, found that employers tend to favor extroverts. In an article for CNBC, Ms. Fabritius warns that introverts should not be overlooked. She argues that introverts have four highly coveted skills that set introverts apart from everyone else.

Introverts think more

BrainGray matter, which exists in the outer most layer of the brain, serves to process and release new information in the brain. Ms. Fabritius cites a study that found that introverts’ brains work differently, and have thicker gray matter compared to extroverts. In people who are strongly extroverted, gray matter was consistently thinner. Introverts also showed more activity in the frontal lobes, where analysis and rational thought take place. Another study that scanned brains of both introverts and extroverts found that, even in a relaxed state, the introverted brain was more active, with increased blood flow.

Introverts can focus longer

Albert EinsteinBecause they enjoy spending time alone, introverts tend to be more willing than extroverts to put in the hours alone necessary to master a skill. The author cites the case of the most famous introvert, Albert Einstein. As a child his teachers thought he was a quiet loner who seemed a million miles away, lost in his thoughts. Einstein said, “It’s that I stay with problems longer.” This ability to focus intensely is a key characteristic of introverts, who often have more extended focus than extroverts.

Introverts are often “gifted”

Ben FranklinOn average, introverts and extroverts are the same in terms of intelligence. But statistics show that around 70% of gifted people are introverts. People are considered “gifted” when they exhibit above-average intelligence or a superior talent for something, such as music, art or math. Ms. Fabritius contends that your workplace is dominated by extroverts who criticize those who prefer to work alone — or skip after-work cocktails — as “not team players,” it may inadvertently alienate gifted people.

Introverts do the right thing

Dara knot represents inner strengthIntroverts tend to be less swayed by external events and driven more by their inner moral compass. The author cites a 2013 study on social conformity found that extroverts are more willing to go along with the opinion of the majority, even if it’s wrong. Extroverts are more likely than introverts to succumb to social pressure. The researchers concluded: “The higher the pressure, a larger number of conforming responses are given by extroverts.” In contrast, “there is no difference in conforming responses given to high- and low-pressure levels by introverts.

Introvert-friendly workplace

Ms. Fabritius offers some ways that a manager can create a work environment that introverts can flourish in.

Respect boundaries – It takes up to 23 minutes for a person to regain focus after they’ve been interrupted. Don’t expect people to answer every email or Teams message immediately.

Shorten meetings  – Many introverts are not fans of meetings. Let go of the idea that the entire office has to be invited to every meeting so that no one feels left out.

Don’t force a certain type of communication – The introverts in your office may prefer emails. Allow people to decide how they want to communicate, even if it differs from yours.

Provide the option of privacy – Introverts tend to need privacy. The solution is a flexible work environment that provides silence and private space for introverts.

Dangers of using personality tests

Dangers of using personality testsThere are consequences for using personality tests during the employment process.

In 2018 Best Buy settled a U.S. Equal Employment Opportunity Commission (EEOC) case where Best Buy had violated Title VII of the Civil Rights Act of 1964 by using personality tests during the application process.

CVS Caremark Corporation was charged by the EEOC with using personality testing to discriminate against employees. After receiving the charge, CVS stopped using the personality tests.

In 2015, the EEOC discovered that Target had been using pre-hire employment assessments to discriminate against candidates. Target paid $2.8 million for violating both the Civil Rights Act and the Americans with Disabilities Act.

rb-

As an introvert, I resent being pigeon holed by a test. I have had to take personality tests as part of the per-employment process (mostly in early career where the jobs were low paying.) What I see now – like it or not, the future of work is all about more choices, autonomy, and a culture that embraces different ways to work.

How you can help Ukraine!

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

2022’s Most Popular Posts

2022's Most Popular Posts2022 is in the history books.

There’s a lot to leave behind in 2022. Some of the global low lights included; COVID-19 is still with us, Russia invaded Ukraine, and climate change is headed in the wrong direction.

Neil Degrasse Tyson2022 low lights in the United States included; mass shootings across the U.S., the highest inflation in four decades, food prices spiked, and gasoline prices in the U.S. reached $5 a gallon. The U.S. Supreme Court overturned Row v. Wade after nearly 50 years, Florida enacted homo-phobic “Don’t say gay” laws and the the rudeness pandemic.

Fortunately, 2022 was not all doom and gloom. Here are the 5 most popular posts from the Bach Seat in 2022.

 

How you can help Ukraine!

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Are You Ready for the Metaverse

Are You Ready for the MetaverseThe metaverse is a vision of what the tech bros (think biased stakeholders with a personal interest in the success of the metaverse Sam Bankman-Fried and Elon Musk) want the next iteration of the internet to be. Their vision of the metaverse is a collection of interconnected virtual worlds. The virtual worlds are shared immersive, persistent, 3D virtual spaces. In this metaverse, they believe humans can experience life in ways they could not in the physical world (of course for money). McKinsey predicts that the metaverse can generate up to $5 trillion by 2030.

CNN Russian dairy farmers gave cows VR goggles with hopes they would be happier and make better milk The Verge has a more cynical vision. The “metaverse” lets companies dodge negative baggage associated with social media. “As long as you can make technology seem fresh and new and cool, you can avoid regulation,” researcher Joan Donovan told The Washington Post. “You can run defense on that for several years before the government can catch up.

The Metaverse requires improvements

Despite the media hype that the metaverse has received, it still requires improvements to become a reality. A recent survey by network gear maker Ciena found that 71% of professionals can see the metaverse becoming part of existing work practices in the next two years. The study also found that businesses see problems getting into the metaverse. They stated “... unreliable network performance and associated costs were cited as the top concerns holding organizations back …” Daniel Pimental, from the University of Oregon, explains that advances in several technologies are needed to make the metaverse real. He explained, “… advancements in artificial intelligence – computer vision – blockchain technology, and increased bandwidth with 5G connectivity, will form the foundation…

It needs better networks

Loading spinnerOur current networks won’t work. They take too long to deliver data. Dan Rampton of Meta says the metaverse experience will need a customer latency of less than 20 milliseconds. Latency is the delay when moving data from one place to another. In the metaverse, latency is the total delay of signal between the user and the data center that is controlling the metaverse experience. Are you old enough to remember the dreaded “buffering” screen? PCMag found that the best 5G latency in 2022 ranged from 39 – 47 milliseconds from the major carriers. Doug Dawson put the 10-20 millisecond latency into context.

  • Transmission delay is the time required to get packets from a customer to be ready to route to the Internet. He cites some of his clients who say that the latency on their fiber network typically ranges between 4 and 8 milliseconds. Cable systems are slower and can approach the 20 ms limit. Older technologies like DSL have much larger latencies. Low-orbit satellite networks, will not be fast enough to meet the 20 ms goal established by Meta. Some wireless technologies also have low latency as long as there aren’t multiple hops between a customer and the core.
  • The Next Generation Mobile Networks Alliance says that 5G networks should offer 10ms latency in general.
  • Processing delay is the time required by the originating ISP to sort between all of the packets received from users and route each appropriately.
  • Propagation delay is due to the distance a signal travels. It takes a lot longer for a signal to travel from Tokyo to Baltimore than it takes to travel from Baltimore and Washington DC.
  • Queuing delays are the time required at the terminating end of the transmission. Since a metaverse connection is almost certainly going to be hosted at a data center, this is the time it takes to receive and appropriately route the signal to the right place in the data center.

Bach Seat - Latency

The Metaverse needs to be better

Forbes - Five Ways The Metaverse Is Impacting CorporationsThe metaverse’s virtual environments will require high-end computers, gaming consoles, and VR headsets. These can be expensive. In 2021, Bill Gates noted that most people don’t have VR goggles and motion capture gloves to accurately represent their expression, body language, and the quality of their voice. Harvard‘s Eileen McGivney writes:

The hardware that is currently used to access metaverse experiences, like VR headsets, are not affordable and are difficult to wear for many people from groups who are underrepresented in the technology industry.

People with mobility issues will find navigating a real-time 3D avatar in the metaverse frustrating. Ms. McGivney offers some examples like people with limited mobility in their hands who will struggle with controllers. Others might have difficulty if they wear glasses. Also, most current headsets can’t be worn over head coverings or many hairstyles, like religious headscarves and natural Black hairstyles.

The metaverse is expensive

Acquiring the hardware to get on the metaverse can be expensive. Head-mounted devices (HMDs), can range from a DIY Google Cardboard that requires the user to provide a mobile phone to the Meta Quest 2 – formally known as Oculus Quest 2 which costs $1500. Mid-range devices are pricey, the HTC Vive costs $569, and the Valve Index VR costs $999.

There is no search engine in the metaverse. There is no way to find out more about what the content creators are sending you. The cost of creating content for the metaverse will keep many from presenting information that the big content creators don’t want out there. The cost to develop a metaverse social app is estimated to cost $25,000-$400,000 according to the marketing firm Appinventiv.

Interoperability

There is no unified metaverse. Companies are developing their vision of the metaverse in a vacuum. Major players are developing their own technology for the metaverse.

Then there’s the need for interoperability. Interoperability will allow you to take virtual items like clothes or money from one platform to another. Many experts believe this is vital for the metaverse to work. Most VR software is based on a “virtual world generator,” which is from a specific VR headset vendor. This kit provides the basic programs, drivers, data, and graphic-rendering libraries. There will be legal and commercial challenges too, apart from figuring out who will act as the police in the metaverse.

Cybersickness

Cybersickness in Virtual Reality Versus Augmented Reality There are real-world concerns about physical and mental health in the metaverse. There are physical risks from tripping or falling while wearing metaverse headsets. But people are also reporting symptoms of “cybersickness.” Cybersickness is described as unpleasant symptoms caused by being in the metaverse. Symptoms include:

  • Nausea (sweating, difficulty concentrating, stomach awareness),
  • Oculomotor disturbance (headache, eyestrain, blurred vision), and
  • Disorientation (dizziness with open and closed eyes, vertigo).

These are caused by the delay between actual head movements and the generated image.

Mental health risks 

There are also mental health risks. Because VR provides a much more realistic experience than watching something on a computer screen, the emotional and mental impacts are more intense. Plus, all the downsides of the current internet like violent pornography, the black market, sex trafficking, and criminal activities are magnified in VR.  Finally, people who are immersed in digital worlds often are doing so at the expense of exercising, breathing fresh air, and socializing physically.

The metaverse must be private

The metaverse must be privateDespite the promise of the metaverse, there remain risks. As Charlie Bell, Microsoft’s executive vice president of security pointed out in a recent blog post: “The problems of yesterday’s and today’s internet—impersonation, attempts to steal credentials, social engineering, nation-state espionage, inevitable vulnerabilities—will be with us in the metaverse.” Harvard’s McGivney concurs, “Many of these technologies are also designed in a commercial environment that prioritizes profit over things like data privacy

The metaverse is being developed by corporations whose business
models rely on collecting an increasingly detailed and wide range of data on every user. The technologies can track people’s
movements (e.g., movement, eye tracking) and emotions. The data collection will create a “motion signature.” A motion signature will connect some tracking data to a name, for example, now tracking data in many other places are attached to the same name. This increases the effectiveness of threats based on the inference of protected health information from tracking data.

Is that your boss

Microsoft warns that in the metaverse, fraud, and phishing attacks targeting your identity could come from a familiar face – literally. A metaverse attacker can create an avatar who impersonates a coworker, or a teller in a virtual bank lobby asking for your information. It could be an impersonation of your CEO inviting you to a meeting in a malicious virtual conference room.

rb-

TNero connected to the Matrixhe dystopian vision of a future where we are constantly connected to the metaverse to feel good is looming. Elon Musk’s implanted brain-machine interface Neuralink, can link the metaverse directly to a user’s mind which can cause the release of dopamine. Research shows that the brain may eventually begin to rely on that experience to release dopamine and feel good. As a result, people can become addicted to the metaverse to feel “normal.”

I agree with Scientific American. Given the world’s unpredictability, I have a hard time ruling out the possibility that an unholy alliance of big tech and the military will foist an implant-enabled metaverse on us. After all, as the real world gets scarier, the metaverse might become more and more appealing. In our frightening future, the metaverse, not religion, might serve as the opiate of the masses.

How you can help Ukraine!

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

National Pizza Day is February 9th

National Pizza Day is February 9thNational Pizza Day is February 9th! Pizza is the second most popular food in America after the Hamburger. Detroit has had a huge hand in popularizing pizza. Two of the largest pizza chains have their roots in metro Detroit. Domino’s Pizza (DPZ) was started in Ypsilanti, MI, and is HQ’d in Ann Arbor. Little Caesars started in Garden City, MI, and its HQ is in Detroit. In ‘Q4 of 2021 42 % of sales among major pizza chains went to Domino’s. Little Caesars earned 13 percent of U.S. sales among the pizza chains in ‘Q421. Globally pizza sales in 2022 were $141.1 billion.

Pizza’s origin story

From the tomb of Eurysaces the Baker in ancient RomeThe origins of pizza are lost in antiquity. Ancient Egyptians, Greeks, and Romans had flatbreads topped with oils, herbs, figs, cheese, and even meats. Pizza that we would recognize appeared in Naples during the 16th century as street food for the poor. It was not until approx. 1552 when the Spanish brought the tomato to Europe from the Americas that the modern pizza was invented. The biggest leap in the evolution of Pizza occurred with the unification of Italy in 1861.

Tradition says that in 1889 King Umberto I and Queen Margherita had grown bored with their French diet and wanted to try some pizzas from Naples’ Pizzeria Brandi pizzeria. The Queen enjoyed a pizza made to resemble the Italian flag with white mozzarella cheese, red tomatoes, and green basil for toppings. Since then, this pizza was also called the Margherita pizza after the Queen.

Queen Margherita pizzaEven with a royal fan like the Queen, Pizza would remain non-existent beyond Italy’s borders until WWII. With the growing number of Italians immigrating to the U.S. for jobs, and WWII vets who severed in Italy pizza’s popularity took off. Troops stationed in Italy in the 1940s would eat pizza and upon their return home seek out the pies, increasing demand in the U.S. to rank second behind hamburgers and the most popular food in America.  

Important dates in U.S. Pizza history

1904 – The first printed reference to “pizza” served in the U.S. is in an article in The Boston Journal.

1905 – The first pizzeria in the U.S., Lombardi’s, opened in New York City.

1943 – Pizzeria Uno in Chicago probably invents the deep dish pizza.

1945 – A WWII veteran who had been stationed in Italy, Ira Nevin built the first gas-fired Bakers Pride pizza oven sparking the commercialization of pizza. 

Buddy's Detroit style pizza

1946 – Detroit Pizza was developed at Buddy’s Rendezvous, a former speakeasy located at the corner of Six Mile Road and Conant Street in Detroit.

1957 – Frozen pizza was introduced in Newark, NJ  by the Celentano brothers who owned an Italian specialty store.

1958 – Pizza Hut, was founded in Wichita, Kansas.

1959 – Little Caesars, founded at 32594 Cherry Hill Road, Garden City, Michigan. It’s 2 ½ miles from the original Kmart.

1960 – Domino’s started out at 507 West Cross St. Ypsilanti, Michigan.

1962 – Controversial “Hawaiian” pizza, a pizza topped with pineapple and ham, was invented in Canada by Sam Panopoulos at the Satellite Restaurant in Chatham, Ontario.

1974 – The first pizza was ordered via a computer from Mr. Mike’s in East Lansing, MI. The large pepperoni, mushroom, ham, and sausage order required a CDC 6500 mainframe computer to complete.

1994 – The first pizza is ordered online. The large pepperoni, mushroom, and extra cheese pizza was ordered on “PizzaNet” – Pizza Hut‘s digital ordering hub developed by the Santa Cruz Operation (aka SCO).

Interesting Facts About Pizza

Here are some interesting facts surrounding National Pizza Day!Kirk and Spock eat pizza with forks
• Over 3 Billion pizzas are sold in the U.S. each year.
• Every second 350 slices of pizza are sold in the U.S.
• Americans consume over 23 pounds of pizza per year.
Pepperoni pizza is the most popular, preferred by 36% of the people.
• Americans consume 251.7 million pounds of pepperoni each year, mostly on pizza.
• 30% of Americans have pizza at least once a week.
• 19% of people love to pair their pizza with a beer.
• 10 percent say they like to pair wine with pizza.
• More pizzas are sold on Super Bowl Sunday, than any other day of the year.
Halloween is the second most popular day for eating pizzas.

Pizza is so great that it has more holidays

• March 14th – National Pi Day
• April 5th – National Deep Dish Pizza Day
• May 15th – National Pizza Party Day
• June 11th – Pizza Margherita Day
• September 5th – National Cheese Pizza Day
• September 20th – National Pepperoni Pizza Day
• October National Pizza Month
• October 9th – International Beer & Pizza Day
• October 11th – National Sausage Pizza Day
• November 12th – National Pizza with the Works except Anchovies Day

How you can help Ukraine!

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.