Friday, May 25, 2012

Social Networking in the Workplace Pros & Cons Part 1


The growth of social networking platforms has been phenomenal. Millions of people around the world with access to the Internet are members of one or more social networks. They have a permanent online presence where they create profiles, share photos, share their thoughts with friends and spend hours catching up with what their hundreds of friends are doing with their lives.

Give most people access to the Internet and they will spend the next hour checking their email, their Facebook profile, their MySpace Web page, updating their Twitter account and their LinkedIn account. And it doesn’t happen only once a day. The time spent using social networking applications is one reason why many businesses are reluctant to allow employees to use sites like Facebook, MySpace and LinkedIn during office hours. Add the time spent on nonworkrelated browsing, and employers have a point. At the same time, however, businesses are starting to appreciate that social networking has its advantages, and there are many companies that have adopted social networking as another vehicle to gain a better presence online and a wider audience.

The Benefits
Expanding Market Research

Social networking sites give businesses a fantastic opportunity to widen their circle of contacts. Using Facebook, for example, a small business can target an audience of thousands without much effort or advertising. With a good company profile and little in terms of costs, a new market opens up, as do the opportunities to do business.

Personal Touch

Social networks allow organizations to reach out to select groups or individuals and to target them personally. Businesses can encourage their customers to become connections or friends, offering special discounts that would be exclusive to online contacts. This personal touch is not only appreciated but may give the business access to that customer’s own network of contacts.

Improve Your Reputation

Building strong social networks can help a business to improve its reputation with as little advertising as possible. Social networks can boost your image as thought leaders in the field and customers/contacts start to acknowledge your business as reliable and an excellent source of information/products that suit their requirements.

Low-Cost Marketing

Once social networks have become established and people become familiar with the brand, businesses can use the sites or applications to implement marketing campaigns, announce special offers, make important announcements and direct interested people to the specific Web sites. It is mostly free advertising, and the only cost to the business is the time and effort required to maintain the network and the official Web site.

The Concerns
Social networking sites are applications and, as such, are generally not a problem for organizations. It is the people who use them that are a cause for concern. Social networkers, if one can call them so, are the root of five problems for an organization that allows social networking at work.

Productivity

One reason why organizations on social networking in the workplace is the fact that employees spend a great deal of time updating their profiles and sites throughout the day. If every employee in a 50-strong workforce spent 30 minutes on a social networking site every day, that would work out to a loss of 6,500 hours of productivity in one year! Although this may be a generalization, organizations look very carefully at productivity issues, and 25 hours of non-productive work per day does not go over well with management. When you factor in the average wage per hour you get a better (and decisive) picture.

There is also an effect on company morale. Employees do not appreciate colleagues spending hours on social networking sites (and others) while they are functioning to cover the workload. The impact is more pronounced if no action is taken against the abusers.


Resources

Although updates from sites like Facebook or LinkedIn may not take up huge amounts of bandwidth, the availability of (bandwidth-hungry) video links posted on these sites creates problems for IT administrators. There is a cost to Internet browsing, especially when high levels of bandwidth are required.

Viruses and Malware

This threat is often overlooked by organizations. Hackers are attracted to social networking sites because they see the potential to commit fraud and launch spam and malware attacks. There are more than 50,000 applications available for Facebook (according to the company) and while FaceBook may make every effort to provide protection against malware, these third-party applications may not all be safe. Some have the potential to be used to infect computers with malicious code, which in turn can be used to collect data from that user’s site. Messaging on social networking sites is also a concern, and the Koobface worm is just one example of how messages are used to spread malicious code and worms.

Social Engineering

Social engineering is becoming a fine art and more and more people are falling victim to online scams that seem genuine. This can result in data or identity theft. Users may be convinced to give personal details such as Social Security numbers, employment details and so on. By collecting such information, data theft becomes a serious risk. On the other hand, people have a habit of posting details in their social networking profiles. While they would never disclose certain information when meeting someone for the first time, they see nothing wrong with posting it online for all to see on their profile, personal blog or other social networking site account. This data can often be mined by cybercriminals.

By David Kelleher


Thursday, May 24, 2012

Information Security Blogg Intro

Greetings

This blogg which is separate from my Mr Technics Speaks is for strictly Information on the latest threats and trends going on in the world today. Clearly in the world there isn't much incentive into how "Scary" IT is getting. IT is in everything, our cell phones our watches, even our TVs and stoves, yet still we think we can take certain things for granted.

Mission

The world knows of trends and threats but in the Caribbean we are a secret haven for hackers from clients to even organisations because Caribbean people are stuck in the """These things wouldn't happen to us""" type of mentality. The reality is however the users in the Caribbean seek no interest in protecting there lives and yes I said lives because our lives are bonded in IT now.




McAfee has reported that the common Low Orbit Ion Cannon (LOIC) denial of service (DoS) tool has been ported to Android. ‘Ported’ might be too strong of a word as this mobile device version is in fact a wrapper around the Javascript version. Nonetheless, this is an interesting advancement in the ubiquity of hacking tools.

Hacktivism (hacking as political or social protest) is becoming increasingly popular with groups like Anonymous using hacking tools to launch distributed denial of service attacks on organizations all over the world. LOIC, one such tool used by the hackers, was originally developed to stress-test websites, however it has now been effectively used by hackers to take websites offline by sending a flood of TCP/UDP packets which overwhelms the server and makes it inaccessible.

Originally written in C#, LOIC inspired the creation of an independent JavaScript version. This version allowed a DoS attacked to be launched from a web browser. In conjunction with PasteHTML, which allows anyone to post HTML onto the web anonymously (no pun intended), and the free AppsGeyser service, which converts web pages into an App, an Android App has been created which encapsulates the Javascript version of LOIC in an Android app. Specifically, the version spotted by McAfee, targets the Argentinian government, but theoretically an Android app can be created to attack any web site. When the app is launched a WebView component is used to run the JavaScript that sends 1,000 HTTP requests with the message “We are LEGION!” as one of the parameters.

“Creating Android applications that perform DoS attacks is now easy: It requires only the URL of an active web LOIC–and zero programming skills–thanks to automated online tools,” wrote Carlos Castillo for McAfee.  


Still willing to ignore the risks ?

Mr Technics

Follow/share and note that all adds on this blogg are add free so feel free to click.