Recently in Social Category

At Walt Disney World biometric measurements ar...

Image via Wikipedia

What Lauren says is a good enough start, I'll simply refer you to his blog post.

Lauren Weinstein's Blog: "Your Papers, Please!" - Get Your Fingerprints Ready! Cross-Party Senate Alliance Pushing National ID Card http://j.mp/bBzApT

Greetings. According to the Wall Street Journal, U.S. Senate immigration reform advocates Chuck Schumer and Lindsey Graham are proposing a mandatory biometric (e.g. fingerprint-based) National ID Card system, and are attempting to brush away privacy concerns as trivial and irrelevant.

Reblog this post [with Zemanta]
Note: I heard back anonymously from a customer of iContact. Are they upset that all their customer's email addresses were stolen? Yes. But they aren't that worried about the impact, because they know that most of their customers will never realize that iContact or their company was the source of the leak. In other words, there is no incentive for bulk mail providers to improve security. An email address, particularly one associated with a particular set of services, is the means by which targeting spammers target phishing attacks. It's the key to password changes, bank accounts, and more. Why are the security standards for email any less than they are for credit cards?

Every time a web site asks me for an email address, I use a unique address that includes their domain name in it. This makes it very easy for me to track when a company either misbehaves, or their mailing list has been compromised. Of course, often the company sending me the mail is using a third-party email provider to deliver, and here's the dirty secret.

When your email provider's database gets broken into, and a spammer gets all of their customer emails? They don't necessarily tell you, the client. And they certainly don't bother telling the poor sucker whose email address was stolen.

Image representing AWeber Communications as de...

Image via CrunchBase

Case #1—AWeber
Starting December 2009, I began receiving spam to the address I use for the help-a-reporter service. I filed a report with their existing bulk mail provider, but got no response. It turned out that HARO had only recently switched to this provider, the real culprit was their previous email provider. A discussion with Adam Shankman led him to research the issue and find out (from an article on the internet!), that his previous email provider had been compromised and all of HARO's email addresses had been fed to spammers. AWeber's subscriber list had been compromised, and they had told none of their customers until they started getting complaints. 

Image representing iContact as depicted in Cru...

Image via CrunchBase

Case #2—iContact
Today I noticed three identical spam messages to three different custom email addresses. They were for the morrisonsoftdesign.com, fontgear.net and myhappyplanet.com. I went back and found that a) it had been going on for at least a few weeks and b) all three companies do, or have used icontact.com to deliver their mail (morrisonsoftdesign.com switched providers at some point). So in other words. If you have an account with morrisonsoftdesign.com, fontgear.net or myhappyplanet.com, or any other company that uses iContact, your email address has almost certainly been fed to the spammers. But don't blame the company you subscribed with, the culprit is iContact. Other iContact customers include  (according to their web site) Peach Running Co., West Race Cars, Pro Mom Couture and 58,654 other customers with 577,545 email addresses. Feel free to let them know what you think of their ineptitude.

spam.png
It's unconscionable that these companies are not notifying their own clients of data breaches, let alone the end-users who end up getting spammed. If any of them have a presence in California, it is probably also illegal.


Reblog this post [with Zemanta]
Lauren Weinstein recently posted the following to his NNSquad Mailing List.

Example of how "de-Latinized" domain names can be subverted

http://bit.ly/6YbTBR  (Dean Collins' Blog)

Dean, the "fun" has only just begun.  Some of us have been warning of
this consequence for ... well ... pretty much since day one of the
concept.

As the character of Margo Channing (Bette Davis) so accurately warned
in "All About Eve":

"Fasten your seatbelts, it's going to be a bumpy night!"

To say the least ...

--Lauren--
NNSquad Moderator

The article starts off discussing the trademark issues when someone registers an identical word in a different language, but then hits the more critical (and long-anticipated) issue that it is now possible to have the domain name.
раyраl.com
which, when pasted in your browser window looks like "paypal.com" but is actually cyrillic and goes to an entirely different site.

Here's my take on the situation (I've sent this to Lauren, it may or may not appear in the mailing list).

Things like the alternate character sets in раyраl.com are one reason why I depend on browser's and/or packages like http://agilewebsolutions.com/'s 1Password (Mac & iPhone, formerly 1Passwd for you Unix geeks) or http://supergenpass.com/ (bookmarklet-based, cross-browser) to remember passwords. They aren't fooled by what the URL looks like, they only enter the password if the site actually has the same domain. That said, depending on lack of feedback (the browser didn't enter the password automatically) is lousy security. I'm very surprised that the browsers makers weren't prepared to at least provide a character set indicator on the URL (we all knew this was coming) not that it would make a huge difference for the majority of users.

I've become convinced that there is no UI solution to phishing. Password entry (or a completely different authentication model) needs to be done outside of the browser, and the interaction between the browser and the web site needs to be under secured program control. The system is too complex, and the possible failure modes so varied, that the average user simply cannot be expected to tell a legitimate error from a forged one. The other day my mother cut up her credit card because an online store said it wasn't valid, so she assumed it had expired. Presumably she either entered a typo, or their back-end was down (it was a valid site). No UI in the world is going to help when the system is too complex for the user to understand.

Solutions like 1Password and SuperGenPass work 90% of the time, until the domain name changes, or the form field names change*; then you have to enter the info by hand. A secure certificate solution for filling out and remembering forms, per-site randomly generated passwords, and a protocol for passing the information back and forth might put a dent in the phishing market, but like spam and viruses--this isn't a solvable problem, it's an ongoing battle.

* And yes, obviously a software password repository creates single target to all of the user's information. But given that most people use the same password for all sites, and those sites are in their browser history, I don't see the security issue as significantly different from the current situation.
Reblog this post [with Zemanta]

I'm not a PR or social media consultant, so what does this do for me?

I know. We probably do not need yet another "why should I use Twitter" post. But, the topic keeps coming up, and there is no one definitive answer, so I thought I would give it another try.

This evening I was talking to Alan Ball about Twitter. We had first met at Hannah Burr's Productivity session at the MassTLC Innovation Unconference, and tonight we both happened to be at Dan Bricklin's TechTuesday get-together. He asked me about the value of Twitter to someone like him, because frankly: if you are not in the marketing or social media space, it is not really obvious how to use Twitter. If your business is communicating and selling yourself online, there is a clear benefit to being active on social networks of all kinds.  Alan, however, is a freelance industrial designer (Alan Ball Industrial Design, Inc.). His customers are usually hardware engineers; they are not likely to be heavy Twitter users. So, why should Alan join Twitter, and more importantly, what should he do once he is there?

Twitter as a golf course.

Even getting people to understand Twitter can be an uphill climb, but Alan mentioned something that Laura Fitton (better known in social networking circles as @pistachio) had said at another session at MassTLC Innovation:

"Twitter is my golf course."

That particular analogy clicked with him. Twitter is a networking tool in the old sense of networking—a way to keep in touch with current and potential business partners in a social setting. (Laura expands on it somewhat here). That's a good way to look at it, but it doesn't change the fact that most of his clients aren't using Twitter—playing golf by yourself doesn't offer a lot of networking opportunities.

Twitter is about reputation.

In my mind, the primary value of Twitter to a business is as a way to build and enhance reputation.

The classic example of this is @comcastcares, a Twitter account backed by one person (Frank Eliason) who spends (as far as I can tell) most of his waking hours answering customer questions for Comcast. He has probably done more to improve Comcast's abysmal customer service reputation than anyone else in the company. He does it by being knowledgeable and transparent. You can watching his responses to customers, and he is very open about network problems, letting you know not only how long until a fix is ready, but why he knows. For example, on 2 October 2008, he tweeted a reply to a customer: "I am not loving your signals, running tests in neighborhood and looks like it could be isolated at your location. I recommend a tech." He also improves Comcast's reputation by being human; one of his tweets from 21 July 2008 reads, "I am home with my 6 month old today because she is sick. I ask our 2 year old if she wants to stay with Dad. She responds NO! GO TO SCHOOL." The human element is something that makes Twitter unique in what has increasingly become an impersonal world of customer support. It is a reminder that you are dealing with an actual human. People's questions are more polite, and more tolerant of any difficulties a service may be having. Companies would do well to not only follow Frank's example on Twitter, but to carry some of those lessons over to their traditional customer support systems.

This approach works for customer support, but there is more to reputation than talking to customers. Reputation is about building a following of people who believe you have something worthwhile to share. I believe this is where Twitter has the most to offer anyone who is not in the social media business.

How do you build a reputation?

One of the first companies I worked for out of school was Apollo Computer. A large portion of Apollo's architecture design and discussion took place on the R&D mailing list. As a new employee (with only one year in the industry plus a highly relevant degree in Anthropology), I was understandably nervous about my skills. I soon discovered the mailing list was completely agnostic as to age, education or background. People would post questions, suggestions, problems; others would respond. If you dove in with a nonsense response, you were ignored (or on occasion, flamed). Fundamentally, though, your reputation was based not on who you were, but how good your ideas were. Twitter provides the same environment, only with a scope which spans companies, countries, and time zones.

When you join Twitter, you generally start by following a few people you heard about online. You can also go to http://search.twitter.com/ to see if anyone is discussing topics you find interesting. As you watch posts from the people you follow, you see half of the conversation, so you begin following some of the people who seem to be carrying on interesting conversations with your contacts. Eventually, you jump into the conversations. The advantage Twitter has over a mailing list is two-fold. First, it scales better: because they are limited in size, many conversations can happen at the same time. Second, people can carry on semi-private conversations which followers can either ignore or contribute to (e.g. anyone following my timeline will quickly discover that my children are attending boarding school this year and that I regularly converse with my oldest about homework, sleep, caffeine, and any other pesky worries a parent has when their child is away).

It is these semi-private conversations that can enhance your reputation. You see someone talking about something. You think you have something useful to add, so you reply. Your correspondent can ignore you, block you (oops!), reply to your post, or decide (usually after looking at your Twitter timeline) that the reply was useful and not a fluke, and follow you. Congratulations! You just improved your reputation. Someone felt what you said had value, and wants to hear more.

Your peers are more important to your reputation than your customers.

Back to the question at hand. How does this help if your customers do not use Twitter? The answer is something that also came up at the MassTLC Innovation Unconference, although in a different context. A number of sessions focused on getting the attention (and hopefully, dollars) of venture companies. The issue is that VCs primarily invest in people, not ideas. They want to know the people they are investing in, but of course that is not always possible, so when they are interested in a presentation, they talk to others in the field and the community. They need to know if you are someone who is trusted and respected by your peers.

When it comes down to it, customers are not that different than VCs, especially when they are dealing small companies. Customers want to know if you have a good reputation. They will find out by searching online of course, but also by using their contacts to see if anyone knows you. Has someone they know on the other coast heard of you, and does that person think you have good ideas? What do people in your field think of you? This is where building an online reputation can make a big difference to your company and your career.

So, if Twitter is your golf course, the people with whom you want to play golf are not necessarily your customers (which is not to say you should not invite them if they do play golf). The people with whom you want to interact are your peers, because it is amongst your peers that you can best build your reputation. (And seriously, interacting with your peers is always good for creativity, whether or not you feel a need to network.) The good news is, if your peers are not on Twitter, you can certainly draw them in—because all these arguments work for them too.

Do not hit the golf course without practicing first.

Finding the proper balance of posting/replies, and social/work discussion is a skill, and it takes time. If you were going to network on the golf course, I trust you would go out and get a few lessons before you get together for a foursome. The same strategy works for Twitter. Your peers and customers are not online yet? Great! You get online and learn the ropes now. As your community grows, you will be the expert who has the necessary skills. You had to learn the right way to communicate by the telephone, and the right tone and frequency to use in email. Twitter is just another communication tool, but as with previous tools, it pays to hone your skills first. If you are in a hurry, talk to someone like Laura Fitton, the leading "golf pro" on Twitter.

About that "micro-blogging" thing.

I am not terribly fond of the term "micro-blogging". Yes, there is an aspect of Twitter that is similar to blogging, and certainly it can be used in that manner. Blogging, however, tends to consist of pronouncements-from-on-high without a lot of conversation. (This can change if you have an extremely popular blog that receives a high volume of comments, but face it, most people do not and never will.) Twitter is more about conversations, discussions, and (yes) arguments. Twitter can be used as a mini-blog, but demonstrating your skills in active conversation will enhance your reputation far more than just posting your opinions.

One final thought.

Do not be shy about sharing your expertise. For every person who benefits from your free advice, there are a dozen more who will remember that you are the go-to person when they need your services.

"I always tell people, your biggest problem in life is not going to be hiding your stuff so nobody steals it. It's going to be getting anybody to ever use it." — George Church

Kee Hinckley with help from Angeles Winesett

I don't think I need to say much here. September 21.

Background and Purpose - International Day of Peace

About International Day of Peace, September 21


The International Day of Peace ("Peace Day") provides an opportunity for individuals, organizations and nations to create practical acts of peace on a shared date. It was established by a United Nations resolution in 1981 to coincide with the opening of the General Assembly. The first Peace Day was celebrated in September 1982.

In 2002 the General Assembly officially declared September 21 as the permanent date for the International Day of Peace.

By creating the International Day of Peace, the UN devoted itself to worldwide peace and encouraged all of mankind to work in cooperation for this goal. During the discussion of the U.N. Resolution that established the International Day of Peace, it was suggested that:

"Peace Day should be devoted to commemorating and strengthening the ideals of peace both within and among all nations and peoples…This day will serve as a reminder to all peoples that our organization, with all its limitations, is a living instrument in the service of peace and should serve all of us here within the organization as a constantly pealing bell reminding us that our permanent commitment, above all interests or differences of any kind, is to peace."

Since its inception, Peace Day has marked our personal and planetary progress toward peace. It has grown to include millions of people in all parts of the world, and each year events are organized to commemorate and celebrate this day. Events range in scale from private gatherings to public concerts and forums where hundreds of thousands of people participate.

Anyone, anywhere can celebrate Peace Day. It can be as simple as lighting a candle at noon, or just sitting in silent meditation. Or it can involve getting your co-workers, organization, community or government engaged in a large event. The impact if millions of people in all parts of the world, coming together for one day of peace, is immense.

International Day of Peace is also a Day of Ceasefire – personal or political. Take this opportunity to make peace in your own relationships as well as impact the larger conflicts of our time. Imagine what a whole Day of Ceasefire would mean to humankind.

Salon Article
Protesters here in Minneapolis have been targeted by a series of highly intimidating, sweeping police raids across the city, involving teams of 25-30 officers in riot gear, with semi-automatic weapons drawn, entering homes of those suspected of planning protests, handcuffing and forcing them to lay on the floor, while law enforcement officers searched the homes, seizing computers, journals, and political pamphlets. Last night, members of the St. Paul police department and the Ramsey County sheriff's department handcuffed, photographed and detained dozens of people meeting at a public venue to plan a demonstration, charging them with no crime other than "fire code violations," and early this morning, the Sheriff's department sent teams of officers into at least four Minneapolis area homes where suspected protesters were staying.

This isn't the first of these this week. It really bothers me that the police can arrest people, confiscate their goods, never press charges, and release them all later with no explanation and no consequences. This makes intimidation far too easy. The magic words "homeland security" keep getting invoked.

If the police now have a simple way to hold people without charges, then the people need a simple way to make the police suffer consequences when the power is misused. 

Well, okay, he's getting close…

Doonesbury@Slate - Daily Dose Donesbury

"Take the Middle East seriously, because that's the center of - that's the place where people get so despondent and despair that they're willing to come and take lives of U.S. citizens."
-- George W. Bush, asked on Al Arabiya TV what advice he would give the next president

You mean like, maybe policy of supporting dictatorships and monarchies, and squelching even semi-democracies, might possibly have something to do with terrorism?

Let's hear for for having three relatively independent branches of government. It's far from perfect, but the odds of all three making the same mistakes at the same time are thankfully low.


The future of President Bush's controversial military trial system for terror suspects held at Guantanamo Bay has been dealt a potentially terminal blow by the US Supreme Court.

In its third rebuke of the Bush Administration's treatment of prisoners at Guantanamo Bay, the court ruled that the 270 foreign terror suspects have the right under the US Constitution to challenge their detention in civilian courts on the American mainland.

The 5-4 ruling did not order the military tribunal process to be halted but it could trigger a chaotic rush to civilian courts that in practical terms will leave the question of what to do with men such as Khalid Sheikh Mohammed, the September 11 mastermind, in the hands of the next president.
http://www.timesonline.co.uk/tol/news/world/us_and_americas/article4123181.ece

About this Archive

This page is an archive of recent entries in the Social category.

Security is the previous category.

Software is the next category.

Find recent content on the main index or look in the archives to find all content.

Subscribe via Reader

Subscribe via Email

Enter your email address:

Delivered by FeedBurner

About Me

I'm the CEO/CTO of Somewhere, Inc., a company building a unified social networking layer that gives people the means to track their friends across multiple social networks.
Creative Commons License
This blog is licensed under a Creative Commons License.

Archives