Posts for March 2013

Did we just nearly break the internet? What the Spamhaus attack says about our security

If you noticed your internet connection slowing markedly yesterday, with some sites sluggish and others unavailable, for once it might not have been down to your broadband supplier. 

That's because spam fighting service Spamhaus was subjected to an enormous distributed denial of service (DDoS) attack.

It seems that Spamhaus blacklisted a controversial hosting provider, Cyberbunker, because its servers were apparently being used to send lots of spam. 'Friends' of Cyberbunker then bombarded Spamhaus with the biggest DDoS attack ever.

Are any of us innocent?

The incident spawned headlines like Global internet slows after 'biggest attack in history'. And with so much malicious data flying through the internet's wires, some innocent internet users found their service was disrupted as a result.

But how innocent are those internet users? Is our slack security as individuals partly to blame for the scale of the disruption?

It's an interesting question because this attack was coordinated using a huge 'botnet' of internet devices, including a large number of insecure broadband routers.

It's the exact threat experts recently warned us about, where hackers exploit weaknesses like default passwords to take control of these devices.

Your router is part of the problem

As more details of the Spamhaus attack emerge, we might get a better idea of what devices it involved. But as The Guardian reports, that innocent-looking router in the corner of your office could have been a part of the problem:

"Some of those requests will have been coming from UK users without their knowledge, said Blessing [an internet expert]. "If somebody has a badly configured broadband modem or router, anybody in the outside world can use it to redirect traffic and attack the target – in this case, Spamhaus."

Obviously, whoever initiated the attack is ultimately responsible. However, the scale of it was partly due to the vast number of insecure internet devices out there.

We're all to blame

So, who is to blame? Manufacturers who sell their products with inadequate security and don't properly explain how to beef it up? Internet service providers that make their routers less secure so they can log in remotely when they need to? IT adminstrators who don't update their software promptly?

Or is it all of them, and each of us too?

The internet is a decentralised, open network. That makes it very difficult for any single body to effectively police this type of incident, and means that we're collectively responsible for the internet's security.

Yesterday, we almost broke it. Perhaps it's time we all took the time to be more secure online.

• Five key website security checks
• Emma Watson could bring down your company computers
• How to hack 420,000 internet devices

How to hack 420,000 internet devices

Here's a stark reminder that internet security perhaps isn't quite as tight as we'd all like.

An anonymous researcher managed to take control of 420,000 insecure internet devices like webcams, network routers and printers.

They were use to effectively create a huge network of internet devices that could be used for dodgy purposes like taking websites down via denial of service attacks. (The researcher didn't go ahead and cause any damage, but the potential was there.)

Standard passwords

What's striking about this research is both the huge number of devices that could be compromised, and the ease with which it could be done. Quite simply, the researcher accessed each device by trying standard usernames and passwords like admin or root.

In a month where a high-profile cyber-attack against South Korea hit the headlines, it's important for your business to remember that sometimes the simplest hacking attempts - like trying default usernames and passwords - can be just as damaging.

Don't neglect the obvious

The anonymous researcher summed up the problem in a post online:

"While everybody is talking about high class exploits and cyberwar, four simple stupid default telnet passwords can give you access to hundreds of thousands of consumer as well as tens of thousands of industrial devices all over the world."

In short: choose your passwords carefully. And whenever you add a new piece of equipment to your computer network, check if it has sign in credentials and change them if so. If you don't, you could be a part of this problem.

• The ABC of business IT security
• Most small businesses have had a security breach. Have you?
• Emma Watson could bring down your business computers

Image: Rob Kints / Shutterstock.com

Dell XPS 10 review: a great business tablet with one Achilles' heel

Light and slender, Dell's XPS 10 tablet computer looks like a small laptop, except the optional keyboard (not pictured) can be removed, transforming it into a pure 10.1" touch screen tablet.

We spent a couple of days using the XPS 10. Here are our first impressions.

Solid and weighty

The XPS 10 is an attractive, understated piece of kit. It feels solid and - when you choose to use it - the keyboard is pleasant and quiet, if a little undersized.

It would be nice if the keyboard had a backlight, but the large trackpad works nicely without feeling at all cramped.

Because the keyboard contains extra batteries, when you use the XPS 10 in its 'laptop' configuration, the battery life is fantastic. It'll keep going for 16+ hours, which is great if you're on a long flight or simply don't want to recharge so often.

However, the flipside of this staying power is the significant weight of the keyboard. In pure tablet mode, the Dell XPS 10 weighs in at 635g, which is slightly less than an iPad. But adding the keyboard more than doubles this to 1.3kg.

A well-connected tablet

The XPS 10 impresses with its connectivity too. The screen includes a micro-USB port and micro-SD memory card slot, as well as the dock connector for the keyboard. When the keyboard isn't attached, this doubles as an HDMI output via an adaptor, allowing you to connect an external screen when in tablet mode.

There are extra ports on the keyboard, including two USB connections and a mini-HDMI port, for hooking up screens and projectors.

The touch screen is clear and bright - even in sunlight - and allows multi-touch gestures just like a decent tablet should. It responds well when you tap and swipe, comparing favourably with other tablets in this bracket.

Adequate storage, good performance

The XPS 10 includes either 32GB or 64GB (gigabytes) of storage space. That's not a huge amount, particularly when you realise the pre-loaded software can leave as little as 16GB of usable space on the smaller-capacity model.

It is still room for lots of text documents or thousands of images. However, it would be wise to avoid downloading large video or music files, as these could eat up that space quickly.

Overall, the XPS 10's performance certainly feels snappy. Chuck in the enormous battery life and this Dell tablet starts to look like a real winner.

Is Windows RT enough?

The XPS 10's Achilles' heel is that it comes with Microsoft Windows RT, a special version of Windows designed for tablets.

The problem with Windows RT is that it can't run most standard Windows software. That means some of the programs you use in your business are unlikely to work on the XPS 10.

The tablet does come with a web browser, email software and other tools which mean it's fine for browsing the internet and using many cloud services. There's also an app store where you can download apps that will work on the tablet, although it's sparsely populated compared with competing app stores from Apple and Android.

Most usefully, the XPS 10 includes a special version of Microsoft Office, meaning you can work on Word, Excel and PowerPoint documents.

However, when you buy the tablet you'll get the Home & Student Edition of Office, which is not licensed by Microsoft for commercial use. As ZDNet has revealed, you'll need to buy an additional commercial license to legally use this version of Office in your business.

It's worth noting this isn't really Dell's fault. Microsoft hasn't made other versions of Office available with Windows RT. But it still seems bizarre that a tablet specifically marketed as being 'great for work and play' comes with key software that you can't legally use for work.

• Should you buy a Microsoft Surface?
• Does your business need Windows 8?
• Microsoft wants every computer to have a touch screen

Four tools to help you get ready for Real Time PAYE

If your business has employees, you've probably already heard about Real Time PAYE.

Also called Real Time Information or RTI, it will require you to submit payroll information to HMRC every single time you run payroll.

Never heard of RTI?
Visit our Real Time PAYE resources page >>

Real Time PAYE software

Real Time PAYE comes in for most businesses from 6 April. If you outsource your payroll, then just make sure your payroll provider is fully prepared for RTI, and check if they need anything from you to get ready.

If you run payroll in-house, then it's inportant you're using payroll software or a payroll cloud computing service that can send your Real Time PAYE information to HMRC.

You need to use software because HMRC will only accept Real Time PAYE information sent over the internet.

Here are four reputable software packages that are ready for Real Time PAYE and can help you get prepared:

1. Sage One Payroll. This easy online payroll system lets you log in online to run payroll and perform RTI submissions for up to 15 employees. Prices start from £5 a month and include 24/7 support in case you need help getting started.
2. QuickBooks Payroll is traditional software you install and use on your computer. It's currently on offer at £22 a month, but that includes payroll for up to 99 staff plus fully-featured accounting software.
3. BrightPay is another payroll tool you can install and run on your computer. It's a good option for small companies as it's free to run payroll for up to three staff. Get unlimited employees for £89 - make sure you order the 2013/14 version for RTI functions.
4. Moneysoft Payroll Manager. It ain't a pretty website, but MoneySoft will get the Real Time PAYE job done for you. You'll pay £56 for the basic package, allowing you to run RTI payroll for up to 20 staff.

How prepared do you feel for RTI? Leave a comment to let us know.

• More information about RTI reporting

Business tech bargain: half price fibre broadband

Fibre: the secret to faster broadband. (Image: Flickr user James Laurence Stewart)

Here's a tech bargain ideal for home-based businesses looking for an internet connection with a bit more oomph.

Yorkshire broadband firm Plusnet is currently offering its unlimited fibre broadband service at £9.99 for the first six months. That's half the normal price of £19.99.

You'll have to pay line rental (£13.99 a month or £126 a year) on top of that, but the offer makes this broadband tech bargain significantly cheaper than most competitors.

See it now on the Plusnet site >>

Cheaper fibre broadband

Over a year, the Plusnet package will cost you £347.76 - or a little less if you pay the annual line rental up front.

For comparison, BT's Unlimited Infinity 2 package - which has the same 76Mbps speed and unlimited downloads - adds up to £423 over the same period.

About this tech bargain

If - like most of us - your internet connection is still based on ADSL (which uses a traditional copper wire to connect you to the local telephone exchange), this Plusnet package will give you a big speed boost. That's because it uses a modern fibre optic cable to bridge the distance from your street to the exchange.

This allows Plusnet to offer speeds of up to 76Mbps - around ten times faster than the speed of an average UK broadband connection. You'll notice web pages load more snappily, and the extra speed will make a vast difference when you download large files or several people are using the connection at once.

What's more, Plusnet's broadband service generally gets good ratings from users.

The main potential drawback is that you must be based in Plusnet's service area. To see if this includes you, just click Start your order on the Plusnet site, then pop in your postcode when requested.

• See all Plusnet deals
• View our previous business tech bargains

How 4G broadband will revolutionise business

Since mobile phones first gained the capacity for internet browsing, they have become a priceless tool for business owners across the world. They keep you connected throughout the day, even when you travel around.

Most people are familiar with the term ‘3G’ by now (it’s the technology which powers most mobile internet access), but the idea of 4G may still baffle some.

Put simply, 4G is the fourth-generation communications technology which will allow much faster mobile internet connections. It’ll only be for mobile phones at first, but eventually laptops and portable gaming devices will benefit too.

It's an advance in technology that could drastically change the way we carry out business. Here’s why:

1. Connect for less

4G will be fast enough to allow you to use voice over internet protocol (VoIP) software reliably, enabling you to make calls over the internet rather than using up your mobile network’s allowance of minutes.

You can do this via services like Skype or Viber (which also allows you to send text messages via mobile internet).

Mobile networks will probably change their tariffs as mobile VoIP takes off, but if you can get an unlimited data plan then you may never need to worry about exceeding your call allowance again.

2. Collaborate on the road

If you need to check documents outside of the office, it can currently take anything up to ten minutes to download each file you want to view. Hardly ideal if you’re trying to get things done!

4G will make this much faster. You can take advantage of it even more by implementing a cloud computing system to share documents and software.

For instance, inTechnology, which provides cloud services ranging from file-sharing to payment systems, predicts that this year will be the year businesses make the switch. Many small and medium-sized businesses are already beginning to do so.

3. Create your own hotspot

If you carry a laptop or tablet with you, you might be please to know that most smart phones can be turned into a wireless hotspot. This means you can connect any other wireless device to your phone and use your phone's data service to browse the internet.

This is ideal if you spend long periods of time on the road or between meetings. When you do get a moment you’ll be able to sit down at a computer and get straight to work - without having to look for free Wi-Fi or pay a separate fee for a dongle!

While it’s true you can do this with existing 3G networks, the extra speed promised by 4G makes portable hotspots a much more attractive and useful proposition. 

Jordan Peck is a keen writer who writes about various topics including technology and business.

• Next-generation mobile broadband tested
• Data limits could make 4G for business costly
• 4G can really help your business, finds 4G network

Business tech bargain: take files with you with this Samsung 1TB portable hard drive

The Samsung M3 portable external hard drive delivers handy portable data storage.

It is easy to take wherever you go as it is small in size but not in capacity, with the ability to hold up to 1TB of data. 

At only £55.00 (£53.99 if you use the code HDSPECIAL) this tech bargain is available from eBuyer.

See this offer on the eBuyer website >>

If you commute to work on a regular basis or need to transfer large files then this product could be of huge help to you and your business.

It's also a great, low-stress option for backing up your company files.

About this tech bargain

The Samsung's durable design stands up to the rigours of daily use and has a three-year manufacturer warranty. 

This portable hard drive also comes with SafetyKeyTM protection so you can protect confidential or personal data, and uses a standard USB connection, making it compatible with virtually all laptop and desktop computers.

• See other great deals at eBuyer
• See our previous tech bargains

The ABC of business IT security

It’s good to refresh your knowledge when it comes to something as crucial as IT and data security. So here’s a slightly tenuous ABC of business IT security. Plus a D and an E for good measure.

A is for anti-virus

Get good anti-virus software and keep it up to date. You usually have to subscribe to software updates, and don’t wait for this to expire before you renew it. Even a few days without adequate protection is asking for trouble.

Spyware - which attempts to extract information from your computer without your knowledge - is another threat. However, most anti-virus packages also include anti-spyware protection too.

You can shop around for the best anti-virus deals. Reputable suppliers include McAfee, Kaspersky and Bitdefender.

B is for backups

Ideally, all the data on your computer system needs to be backed up to external hard drives. This ensures that you won’t lose sensitive information if your computers are corrupted by spyware or viruses.

Inform your staff that they need to back up their data at the end of each day, and regularly remind them to do so. External hard drives don’t cost the earth (you can see a selection here on Amazon), and you’ll be saving yourself a lot of hassle if the worst comes to the worst.

C is for control

When it comes to protecting data from prying eyes, control is the key. If there are files on your company’s shared drive which you don’t want all your staff to view, you should control who can access them.

If you use Microsoft Windows, here’s how to restrict access to a certain folder:

1. Right click the folder and click Properties
2. Click the Security tab
3. Click Edit and then Add
4. Add the usernames of the people you want to access the folder into the box that appears on screen
5. Click Ok

That’s it – you’ve created a list of people who can access that particular file or folder on the shared drive.

D is for data encryption

Encrypting your computer systems makes it harder for hackers and fraudsters to access sensitive business information.

This can be anything from emails and financial figures to documents and databases hat are stored on computers or servers in your business. You can also protect portable storage devices like USB drives, which protects them in the event of loss.

Setting up encryption software can be a little tricky, but this guide to encrypting your laptop is a good place to start. It’s also worth speaking to your IT supplier if you need help.

Encryption is an excellent way to ensure your business transactions are protected from unwanted attention. Even if a fraudster manages to steal a disk containing sensitive information, they should still be unable to read it.

E is for external help

Instead of relying on your own knowledge about maintaining computers, it is a good idea to have an trusted IT supplier you can turn to. They will help troubleshoot any problems with your system, allowing you and your staff to focus on running your business.

Even seemingly minor problems should be flagged up, as they can indicate larger problems with your IT security. It all helps avoid any lingering suspicions that your company has been targeted.

It’s often a good idea to choose a local IT supplier, so you can ask business contacts and friends who they’ve used in the past. Perhaps they could even negotiate you a discounted rate!

Written by online security expert, James Archer, on behalf of online retailer The Safe Shop

• How to find and choose an IT supplier
• Your security plan
• How to prevent IT disasters