9.15.2009
I Haven't Posted an XKCD Comic in a While
Labels:
I call them pointies
A Relationship Rekindled; The Nigerian Returns
Just when I thought my dear friend Khalil Maher from
But I'm getting ahead of myself. I forgot to tell you how I responded to the last email from Khalil (you can read the first two chapters of the epic saga here and here). He had asked me for my full name(s), age, address, and phone number. It took me a while to decide how I was going to advance the conversation without blowing my cover. On the one hand, I wanted to give him as much information as possible, gaining his trust. But I was slightly uncomfortable giving him information that I could be spammed on (my address and phone number). While I sat around pondering (I do that a lot. It looks even more ridiculous than it sounds), my dear pen pal Khalil was getting impatient.
Hello i,m still waiting for your response pls if you want to help me
be fast? K.M
Mr. Impatient. Kinda rude, but I'll let it go this time. I mean, I am a Successful American Businessman. I have a life. I'll get to your email when I'm done being Successful for the day.
But seriously, it was now or never. This is what I decided on:
Sorry for the delay, my friend.
As I mentioned earlier, I do run a pretty successful business, and I can get caught up in the flood of emails I get on a daily basis.My full name is John Robert Smith, I am 39 years old. Before I give you my phone number and address, I would like to maybe get to know you better. If you could answer some simple questions for me, it would put my mind at ease. Why do you want to live in the UK? From my own business experience, I can tell you that the land of opportunity is in America. What is in the UK that you want to live there? i could possibly get you a job at my company (we manufacture devices called Interwebs, a new way to connect people around the world through small strands of highly conductive metals that carry all kinds of information to and from where ever you want. Slowly but surely, we are profiting immensely from the venture. The world hasn't seen anything like it), if that's what you need.Are you originally from Pakistan? Your English is not so bad for somebody learning it later in life.Like I said, I will be glad to help. I just want to get to know you a little better.Hope to hear from you soon.-John Smith
Anyways, after sending this one out, I expected a quick response from Khalil, hopefully giving me some more tidbits of his adventures through the European Banking System.
Weeks went by, and I began to fear the worst. Did I really lose him already? We were just getting started! What was untrustworthy about my response. Was it the whole inventing the Interwebs thing? Did I go too far with that? I pondered once again, and then I paced while pondering (that's when I'm stressed and need a workout), and I finally decided to give up. I guess Khalil was smarter than I originally suspected. He didn't trust me anymore and moved on to better hunting grounds. So would I.
And then, when hope had turned her back on me, on a white stallion galloping away from the rising sun, Khalil Mohammed Maher charged his way back into my inbox! He hadn't given up on me after all! he was back for more, and this is what went down:
Hello,very sorry i was sick before,but i,m get better,here is my
personal data # 4 singo lane,shersha, karachi,pakistan is my
house,murate finance house,close E 22, sindh Estate is my office
address.Because i inherit the currency trade from my father,Alhj Ahmah
Hassan Khalil El Murat. Here is my phone number +928445550555.I hopeto hear from u? k.M?
I forgive you, Khalil. We all get sick for weeks at a time and don't check our emails. And I'm glad you,re get better. That's some juicy data in that email. I have no idea what he's talking about (he can be a little generous with the comma usage), but this is precisely what Google was invented for, right?
Ok, let's start from the beginning. Karachi is the capital of Pakistan. Karachi is split up into towns. Shershah is a neighborhood in the Keamari Town of Karachi. Keamari Town is on the west coast of Karachi, and boasts a 99% muslim population of around 380,000 (according the website). He writes Singo lane, but he probably meant Sango Lane, which is problematic because that's a neighborhood in a different town: Lyari Town. A Google maps analysis reveals the following:
This place called Singo Lane (apparently, there is argument among Google and Wikipedia on how to spell the time) is pretty much in between Shersha and Lyari, so I won't gripe too much about it. I have no idea what to do with #4. I doesn't come up on any search for an address.Either way, moving on. Things start to fall apart with the next statement. I couldn't find any mention of Murate finance house anywhere. I even looked through the banks and financial institutions listing on the city website. It doesn't exist. The closest thing I could find was Murat, which is a small rural town somewhere else in Pakistan. Regarding the Sindh Estate "address", there is a place called Sindh Industrial Trade Estate, in a town in Karachi named after the Estate itself (SITE Town). Maybe E22 is an address in that complex. I can't find any other refernce to it.
The next part is a little creepy, if not outright hilarious. It's his father's name, Alhj Ahmah Hassan Khalil El Murat. The one with the currency exchange business. If you give that name to Google, you get results that all have to do with listings of Guantanamo Bay prisoners! None of them exactly match that name, but it sounds like Khalil may have used that list to come up with his "father's" name. See for yourself. I'm not sure what to think about that, but I'm definitely amused.
Lastly, the phone number doesn't come up in any international directory I saw. I don't really want to pay for an international phone call (I was banned my Google Adsense, so I have no income to spend on this blog anymore), and I can't imagine anything productive coming out of that call.
So, we've proven Khalil Maher is in fact a lying scammer (Yay!!!!). We may have known that already, but this is fun! Are you having fun yet? I need to write back to him, but I don't know if he'll respond if I don't give him more info. Any ideas?
9.11.2009
Norton Thinks They're Special or Something
The funny thing about computer security companies is that they have to know how to do the crimes to be able to prevent them. So, when Norton puts out a little "informational campaign" like this one, it worries me.
Norton wants you to know how much your online identity is worth to black market salesman. So they put out this little questionnaire about your general Internet habits and an estimate of how much money you think is in your bank accounts. They then give you an estimate of how much you're worth, and how much the black market will pay for your identity.
I clicked through the questionnaire, and came to the bothersome conclusion that I would be worth about 10 bucks.
And then I laughed at myself (in an office setting, unfortunately) for being a moron.
Begin Rant
This is the basic idea of the questionnaire: Let's educate the public on cyber-security by telling them what happens when you give strangers your personal information. How are we going to do that? Let's ask them for their personal information! And guess what? They'll give us everything we want to know because we're the "good guys." We couldn't possibly have an ulterior motive for wanting this valuable data. No, we're just being good public servants. We really want the people of the Interwebs to know how much they're worth on the black market. Because that knowledge will be useful to them. It will help them be more careful by not giving websites their personal information.
Are you starting to understand how evil this is?
Not only are you giving a stranger the amount of money in your bank accounts, but all they're giving back to you is a dollar amount that isn't even backed up with facts. There's no way to verify that Norton is telling you the truth. I mean, have they actually tried selling your identity on the market? That would make sense. But seriously, Norton, why should I believe you? Even if they were telling you the truth, who cares? Why is that information important to me? Should I go hide under a table now? Should I cancel all my credit cards, close out my bank accounts, turn off my computer, and take up an Amish lifestyle? Why are you telling me this? I am not safer because of it.
Just to further the point, I took the questionnaire again and told them I have zero dollars in any bank account or credit card and I surf the web like a normal person, aware of the dangers but sharing relevant information to trusted sites. I was worth $1700 but I would be sold for $33. When I put in my estimated actual bank values, but was a little more cautious about the Interwebs, I was worth about 500 and sold for 10. Sounds kinda wrong. And the best result was when I was the perfect citizen of the Interwebs, no data online, no money spent online, not even an email address. This is what the result was:
Your risk Rating is Low.This means you're taking th right steps.You might have a lot of data living online, and you're playing safely with it. But you can never be too careful. Move on to the next page to learn more about your value to a cybercriminal and how you can stop cybercrime from happening to you.
So, basically, no matter how perfect you are, you will still need Norton to tell you how much danger you're in and how they can save you from cyberdamnation.
Norton has two goals here:
- Sell you their product - They are a for-profit business, just by the by. Scare tactics are one of the best ways to sell product. Ask any marketing professional (except for the one's that disagree, obviously). The end of the questionnaire is all about which Norton product
will slow your computer down the mostis the best one for protecting your systems. Now that you're good and scared, you'll buy anything, because you're officially gullible (look, it says so on the ceiling!). - Data Mining - You've gotta love the irony of the whole thing. It's beautiful, really. The questionnaire that warns people of how much they are (or aren't) worth by telling them the value of personal information is collecting data that will be put into one huge database that will be worth a whole lot of money. Instead of letting Norton steal your data for fun and profit, you're just giving it to them when they ask for it. This data will most likely be used to better target the right market demographic when selling their wares. Security firms around the globe would kill for this kind of data. But giving Norton money for it would probably suffice.
They're conniving little villains, but they're really good. Like I said, they got me good. If they can get the Ruler of the Interwebs....I fear nobody is safe.
9.10.2009
The Video Game Industry Just Won
All except for one. One band didn't give in. One band decided they wouldn't let their precious music into the hands of the digital monster. Time and time again, money has been thrown at this band, impossible amounts of money, all just to get them to go digital. Politics and in-fighting obstructed the process even further and eventually people assumed it was never going to happen.
That band would be the Beatles. And the Video Game Industry is reaping the profits of their digital future.
The Beatles: Rock Band was released yesterday to critical acclaim and huge sales. It would be the first time the rights to The Beatles' music would be given to a digital distributor such as a video game publisher. Not only is the music available, but previously unreleased studio conversation and an unreleased Christmas record laid down in 1963 has been released as an unlockable.
This is a humongous and epic victory for the video game industry and it is a great flexing of muscles, showing the other entertainment outlets that video games are a force to be afraid of. If they can get the Beatles to embrace digital distribution, then nothing is impossible.
Congratulations to Harmonix on putting this out successfully, and I hope gamers around the world are reveling in the success of this industry.
9.09.2009
I Got Punched In the Face
So, I'm walking down the street, minding my own business, doing my own thing, being a cliche, when a big man in a suit walks (or should I say lumbers) towards me.
"Apologize now or I punch you in the face."
"For what?"
The man stands there silently, glaring, getting ready to punch me in the face.
"Ok, Ok, I'm sorry. I'll never do it again. I promise. Now, can I get on with my life?"
"Hmm...let me think. No"
And then I was punched in the face.
As I lay on the asphalt writhing in painful agony, I begged my assailant for some answers.
"Please, just tell me what I did, I promise I won't do it again!! I really didn't mean any harm!"
"It's too late. You've been punched in the face. I can't really take that back. But I will tell you this. You see this book here?" He threw a tome of vast humongitude full of legalese down on the ground right in front of my face. "You definitely broke one of these rules. I can't tell you which one, but it doesn't make a difference. They're all cardinal sins, and honestly, you should be happy I didn't stab you. In the face. You're such a horrible person, that's probably what you deserved."
As he walked away from me into the sun, he stopped and turned his head towards my limp and lifeless body.
"Oh, by the way, don't try to contact me or anyone I work for about this incident. It is futile. Nobody has answers for you. You must understand that we have everybody's interests in mind. If you do try and circumvent the system, we will hunt you and your family to the edges of the Earth and we will kill you."
"In the face."
Ok, so maybe it didn't happen exactly that way. It's pretty close though. If you replace "me" with "my blog", "my face" with "Google Adsense", and "Big Suit man" with "Google", the story is still true.
Yes, I've been permanently banned from Google Adsense. No, I have no idea why. No, they gave me no warning or explanation other than "your account poses a significant risk to our advertisers' financial interests." If you are one of the 2.5 readers that frequent my site every day, then you know this to be quite ridiculous. So, when Google gave me a chance to appeal the ban, I thought Ok, maybe they have a soul after all. Alas, they have no soul. A week and a half after I sent in the appeal, I got a polite little email from Google saying "we got your appeal, and frankly, we don't care. Cry about it."
The man stands there silently, glaring, getting ready to punch me in the face.
"Ok, Ok, I'm sorry. I'll never do it again. I promise. Now, can I get on with my life?"
"Hmm...let me think. No"
And then I was punched in the face.
As I lay on the asphalt writhing in painful agony, I begged my assailant for some answers.
"Please, just tell me what I did, I promise I won't do it again!! I really didn't mean any harm!"
"It's too late. You've been punched in the face. I can't really take that back. But I will tell you this. You see this book here?" He threw a tome of vast humongitude full of legalese down on the ground right in front of my face. "You definitely broke one of these rules. I can't tell you which one, but it doesn't make a difference. They're all cardinal sins, and honestly, you should be happy I didn't stab you. In the face. You're such a horrible person, that's probably what you deserved."
As he walked away from me into the sun, he stopped and turned his head towards my limp and lifeless body.
"Oh, by the way, don't try to contact me or anyone I work for about this incident. It is futile. Nobody has answers for you. You must understand that we have everybody's interests in mind. If you do try and circumvent the system, we will hunt you and your family to the edges of the Earth and we will kill you."
"In the face."
Ok, so maybe it didn't happen exactly that way. It's pretty close though. If you replace "me" with "my blog", "my face" with "Google Adsense", and "Big Suit man" with "Google", the story is still true.
Yes, I've been permanently banned from Google Adsense. No, I have no idea why. No, they gave me no warning or explanation other than "your account poses a significant risk to our advertisers' financial interests." If you are one of the 2.5 readers that frequent my site every day, then you know this to be quite ridiculous. So, when Google gave me a chance to appeal the ban, I thought Ok, maybe they have a soul after all. Alas, they have no soul. A week and a half after I sent in the appeal, I got a polite little email from Google saying "we got your appeal, and frankly, we don't care. Cry about it."
You know, normally, when a website is doing something wrong, the offended party sends some kind of cease and desist letter which says something along the lines of "Stop or we'll be forced to take action." Because sometimes people really do make mistakes. They don't mean anything by it, and if reminded, they will stop. Google decided to go the evil route. They disable your account, and then make you cry to get it back. Maybe. If they're in a good mood.
And it's not like the things you can do wrong are all that cardinal. If you post a picture that someone gave permission for you to use, but it turns out that person stole the picture, banned. If a stranger clicks on an ad on your site too many times, and you don't report it, banned. If you even reference the idea of influencing users to click on ads, banned. If you change the color of the Adsense box on your own, banned. If you change the font, banned. I'm not saying these things are OK to do. But at least give me a warning before you destroy my blog's income. The Terms and Conditions are very broad, sometimes vague, and are often changed without warning.
I don't know what Google has against me. I honestly don't want to break the rules, and it's not like I'm a big enough site to actually be able to abuse anything. All they've done is put a bad taste in my mouth. My views of Google have certainly been tarnished because of this. It's not because my account was disabled (It wasn't like I was making big bucks or anything). It just seems like an evil policy. It goes against Google's image of being fair, being for the people, and being human. It instead puts Google in the corporate light it tries so hard to shy away from. All they are is a huge data farm with huge profits. Maybe they really are no different than any corporation in that they care only about the bottom line. It's sad, but I'm afraid it's true. I'm losing faith in the human face of Google. It's inspiring me to make a search engine that gives legal information on how to sue evil corporations. I'll call it Soooogle. I'll show them. (That had nothing to do with my point, but I thought it was funny. There, it makes sense now.)
So that's it. No more Google Ads for me. I still don't know why. And my face still hurts.
9.08.2009
Windows 7, Our Savior?
At least, that's what everyone seems to think. Proponents of the new OS admire the new look and feel, the new tightness of the GUI. They heap praise on the various user interface enhancements, the start menu, the taskbar, and the uber-hip backgrounds. The hardware works this time around, and users don't need speed machines to get Windows 7 running smoothly. This is all good and well, but let me ask you this: As the system administrator of a 1000+ user IT infrastructure, do you really give a flying flapjack about the new taskbar? How about the new ways you can preview files? What about the Aero Peek GUI?
Didn't think so.
This is my issue with you, Windows 7. You may be solving all the problems that plagued Vista, and that's great. We love you for it. But there's a reason we never left XP, and it's not because we hated Vista (we did). XP works. It may not be the prettiest OS on the block, it may not have the biggest and the bestest features, but it has been a steady, reliable, and faithful companion to IT professionals through the years. It has consistently been able to meet the IT needs of businesses everywhere, and it still does. Businesses don't need slick graphics, fancy toolbars, or upgraded Freecell (I'm particularly excited about that one, though). Businesses need control, reliability, and speed. All of which XP is still faithfully supplying to this very day.
Users may herald Windows 7 as the Seventh Coming, but its true judgement will be at the hands of sys admins at large corporations. Home users are only a fraction of Windows' market. if Microsoft will come out of this release truly redeemed, they are going to have to impress the IT Pros. And that won't be easy.
You see, XP was easy. When faced with the choices of Windows 98, NT4, 2000, or even ME, switching to XP was a no-brainer. The back-end networking and security features that are the basis of IT infrastructures today were implemented well for the first time in XP. The integration with Windows Server 2003 that we also depend heavily on for things like Active Directory, VPN, Exchange (Outlook), was also revamped and overhauled in XP. It also included the option of a software firewall. While it did have a rocky start, and every big OS is going to have a rocky start, it matured quickly to be the OS of choice for businesses around the globe. It basically forced Novell out of the market, and IE took over as the default Internet Browser for the world. Now that it's been a few years, and XP is only more entrenched in the market, it's going to take a whole lot more than fancy graphics and driver updates to uproot the stable foundation that XP built.
The strategy that Windows 7 is employing to target that demographic is to re-introduce the Vista enterprise features that nobody used because they were in Vista, and to show off some new enterprise features that aren't groundbreaking, but safe.
BitLocker- This was a security feature in Vista that encrypted entire partitions with AES encryption (that's a strong one). In a corporate environment, this would go a long way in securing data beyond the basic NTFS encryption methods and permissions. With Windows 7, this capability will be extended to removable media such as flash drives, enabling this protection for remote and travelling users.
DirectAccess - one of the biggest complaints we get from users is that they can't get on to the VPN. Unfortunately, there's very little we can do from our end because the problem is typically their Internet connection. They have to work with their ISP to get it working. Even if it does work, it can be slow when sharing VPN with regular Internet. DirectAccess is a server implemented alternative to VPN that uses a regular Internet connection (using IPsec IPv6 or, if unavailable, IPv6 tunneled through IPv4 and SSL) to access network intranet resources. The DirectAccess server runs on the edge of the network and acts as a gateway to remote users. It's an interesting idea. I don't know if the performance increase is worth the purchase of a new server, but i guess time will tell.
AppLocker - The bane of all System Administration is user installed software. They are typically the cause of all evil and Windows 7 hopes to better enable the IT pro to control the deadly sin. AppLocker is basically a whitelist of downloads and applications that a user is allowed to install and/or configure. This is much more secure than a blacklist of things they can't do, and more thorough as well.
There a few others, and they are all pretty cool, but I still fall back to my original argument. These things are improvements, sure, but they aren't revolutionizing the OS like XP did. Windows 7 adds some nice touches here and there to enterprise IT management. But is it really worth the cost of implementation when you already have a stable, powerful OS, that MS will officially support against 2014? To completely destroy a saying, if it ain't broke, don't upgrade. If IT managers don't need the "cool" parts of the new OS (they don't), then Windows 7 will a lot more innovating to do if it really wants to be resurrected and proclaimed savior of mankind (and it does really want that).