Sunday, November 1, 2020

More Secure Than Your Password



Hackers break into corporate computer systems and release lists of usernames and passwords on the open web. Home PCs are vulnerable to malware, viruses and other tricks to access your personal, financial and private information. These have now become regular occurrences. The most common weakness in these types of hacks is the password. Passwords are a technology from a time when our computers were not inter-connected. The age of the password has come to an end. 
Here are some security technologies that, once implemented, will replace the traditional password.

BioMetrics
Biometrics authentication is used in computer security as a form of identification and access control. It refers to using physical human characteristics and traits instead of a manually entered password. Examples include, but are not limited to, a fingerprint, palm print, facial recognition, retina pattern and even DNA. The products that allow client access will have biometric readers that interface with the host security system.

No one method of biometric security is said to do the best job of protecting system access. When you consider biometric security, you want to select a physical characteristic that is constant and does not change over time, and are also difficult to fake or can be changed on purpose. You also need to consider that some biometric security metrics are consider more invasive than others (e.g. DNA vs. facial recognition). Some methods take a lot of time to execute, such as a retinal scan which can take as much as 15-30 seconds. In addition, ethical use issues have been raised over some of the biometric security metrics. The details of the methods and issues will not be addressed in this post.

Fob
A fob, also called a key fob or token, is a small security hardware device with built-in authentication used to control and secure access to a network and data. Typically, the fob randomly generates an access code, which usually changes every 60 seconds. These one time use codes are the "password" used to validate system access, and they work as long as timing and code algorithm synchronization exists between the client's fob and the host authentication server.

Disconnected fobs are the most common type of security  fob, and do not have a physical connection to the client's computer. They use a built-in screen to display the generated authentication code, which the client manually enters via the keyboard. Bluetooth technology is also used as a disconnected fob.

Connected fobs must be physically connected to the client's computer. Authentication is automatically performed once a physical connection is made, eliminating the need for the client to manually enter the authentication code. Smart card technology is also used as a connected fob.

Wearables
A "wearable" refers to a mobile device such as a cell phone or tablet computer. With wearable security, authentication is a 2-step process. The client enters an account identifier code via a keyboard. The security system then transmits a one-time use pass code to the client via a pre-registered email address, or device for an SMS (text message). Upon receipt of the pass code, the client enters that code via the keyboard. That code is not used again. Typically, the security system will accept the transmitted code only within a set period of time before the code expires. If the code expires before successfully entered, the client must request a new code.

In the Mean Time...
Until you implement stronger security measures, the first step in improving security is to have strong passwords. In SplashData's recently released list of worst passwords, the 2-time annual winner (or loser) of the most common (and therefore worst) password is "123456". Following that is "password". People continue to put themselves at risk by using weak, easily guessable passwords. Individuals and organizations must encourage the adoption and enforcement of stronger passwords.

Microsoft's tips for creating strong passwords are:
  • Is at least eight characters long
  • Does not contain your user name, real name, or company name
  • Does not contain a complete word
  • Is significantly different from previous passwords
  • Contains characters from each of the following four categories:
    • Uppercase letters
    • Lowercase letters
    • Numbers
    • Keyboard symbol characters (e.g. !@#$%, etc.)

For example, a password of "troubadours" is not considered very strong. A stronger choice would be "Trou8@d0Ur$".

I encourage you to leave a comment by clicking on "...comments" below...
David Schuchman

Thursday, October 1, 2020

Consider Hiring an Older Skilled Worker


Until recently, companies had smaller budgets, which led to some people being promoted into higher positions or management with little experience. However, good workers do not always make effective managers. To stay competitive in today's marketplace, companies now need to make an effort to attract and retain older workers.

Here are some reasons to attract older workers:

A Less Risky Hire
Companies invest many hours and financial resources into the screening, hiring and training of new employees, only to find that many employees leave for “greener pastures” in order to ascend through their career path. Older workers tend to be more interested in stability where younger workers might be more concerned about moving up the corporate ladder as quickly as possible. In addition, making a poor employee selection will cause your management to look poorly upon you and your decision.

They Are Focused
Older people have been working their entire adult life and are often not searching for the next opportunity at another company or a new role like younger workers. They know exactly what they want to do, are typically satisfied with a good work opportunity, and are focused on getting the work done. 

Maturity
Compared to their younger colleagues, older workers have years of experience you can't teach or replace. Maturity comes from years of life and work experiences, and makes for workers who get less "rattled" when problems occur.

Efficiency
Their years of experience in the workplace give older workers a superior understanding of how jobs can be done more efficiently, which saves companies money. Companies can save the cost of many man hours lost to inefficiency.

Confidence
Older workers have confidence, built up through the years, which means they won't hesitate to share their ideas with management. People without that confidence may keep their ideas to themselves because of an irrational concern that they won't get credit for their ideas.

Battle Tested 
Many industries are cyclical and older workers have experienced the highs and lows, making them more the wiser. The great recession and housing market crash of 2008 was something the country also experienced in the early 1980s. Old members of the workforce learned valuable lessons that helped them weather the recent economic storm and prepare their companies for the next one.

They Have Strong Networks
Older workers have been in the workforce longer and they've had more time to meet people and network along the way. Hence, they have stronger professional network of clients, vendors, partners and other professionals that serve within their industry.

Reduced Labor Costs 
Some older workers have insurance plans from prior employers or from a spouse/partner. In addition, some have an additional source of income and are willing to take a little less to get the job they want. They understand that working for a company can be about much more than just collecting a paycheck.

I encourage you to leave a comment by clicking on "...comments" below...
David Schuchman