<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Observations by Jonar Nader &#187; Tech security</title>
	<atom:link href="http://www.logictivity.com/blog/category/radio/technology/tech-security-technology-radio/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.logictivity.com/blog</link>
	<description>Thoughts, ideas, and questions from the world&#039;s only Post-Tentative Virtual Surrealist.</description>
	<lastBuildDate>Fri, 23 Jul 2010 00:43:55 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>How to become a data thief Part 2</title>
		<link>http://www.logictivity.com/blog/how-to-become-a-data-thief-part-2/</link>
		<comments>http://www.logictivity.com/blog/how-to-become-a-data-thief-part-2/#comments</comments>
		<pubDate>Fri, 04 Dec 2009 12:37:50 +0000</pubDate>
		<dc:creator>Jonar Nader</dc:creator>
				<category><![CDATA[Tech security]]></category>

		<guid isPermaLink="false">http://www.logictivity.com/blog/?p=2902</guid>
		<description><![CDATA[People do not know how to use their technology. They leave the door open to data thieves. Jonar Nader describes the many ways that people can lose their private data to hackers and those driven by curiosity. To listen to an excerpt from the radio broadcast, please click on the green play button below. Below [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.logictivity.com/blog/wp-content/uploads/2009/12/Jonar-Nader-how-to-become-a-data-thief-2.jpg" alt="Jonar Nader how to become a data thief 2" title="Jonar Nader how to become a data thief 2" width="630" height="250" class="alignnone size-full wp-image-2903" /><br />
<img src="http://www.logictivity.com/blog/wp-content/uploads/2009/12/White-leading1.jpg" alt="Jonar Nader line break" title="Jonar Nader line break" width="630" height="20" class="alignnone size-full wp-image-2872" /><br />
People do not know how to use their technology. They leave the door open to data thieves. Jonar Nader describes the many ways that people can lose their private data to hackers and those driven by curiosity. To listen to an excerpt from the radio broadcast, please click on the green play button below.</p>
<p><img class="alignnone size-full wp-image-4190" title="Jonar Nader" src="http://www.logictivity.com/blog/wp-content/uploads/2009/11/Jonar-Nader.jpg" alt="" width="630" height="20" /></p>
<h2><span style="color: #0000ff;">Below is a transcript of the audio file.</span></h2>
<p><img class="alignnone size-full wp-image-4190" title="Jonar Nader" src="http://www.logictivity.com/blog/wp-content/uploads/2009/11/Jonar-Nader.jpg" alt="" width="630" height="20" /><br />
Host: So what about voice mail and electronic mail, how safe is that?</p>
<p>Jonar Nader: Not at all. I had a friend, whose boss said to her that a very private electronic mail message is going to arrive, don&#8217;t open it. Well you never say that to a secretary, well she came up to me and said &#8220;look I must know how&#8221; and I said &#8220;look I really can&#8217;t tell you, but for example you don’t have to open the electronic mail to read it, but you can perhaps just send it to yourself from his mail&#8221; now in the particular package that were possible. This meant that instead of opening the mail she could just forward it to herself and read it, it was a very saucy private, personal letter that was from some lovey dovey overseas and isn&#8217;t necessity the mother of encryption?</p>
<p>Host: Yes.</p>
<p>Jonar Nader: And as far as voice mail is concerned, you know the tone when you dial a phone you can hear tones all the time, so many people do it on hands free and all you need to do is have a Dictaphone on and you record and play back the sound and you get the tones right and you know the four digit code to your voice mail. And the voice mail is the best thing to do it to because you can do it from anywhere outside or at a public phone. Now another thing you have to watchout for is when you got to a hotel. Now many saucy things have happened in offices when people find out who&#8217;s having an affair with whom because that executive will travel to Melbourne or overseas and a bill that would come back from a major hotel would have all the phone, bar bills etc on it, and those phones are listed in full, so if somebody is having an affair with somebody else, and they see at 2am the boss was calling Miss somebody else downstairs, rumours can start.</p>
<p>Host: Or mister I suppose.</p>
<p>Jonar Nader: Yes, that is right. And a lot of people in offices thin they can save money by barring IDD and STD and other such from phones, but notice that the fax machine isn&#8217;t barred so people go over to the fax machine and make overseas phone calls. Another great trick to do, which is not a great idea if you are caught, is to divert the fax machine to your phone so that when somebody is trying to call the fax at your office it calls your phone instead, and then you get this Beep Beep instead that tells you a fax is coming, you then quickly conference call to a fax machine so that you can divert the faxes coming through and hold confidential data. Now all this sounds so simple, but the simplest of all is the rubbish bin, there is actually a trade out there that will actually call you and clean your rubbish bin out and give you all the important information, with all these espionage businesses going around left, right and centre, it is so easy and there is so much of it out there. And you know there is a Bachelor of Science which is called a BSC, well there is another one called BSR which is a Bachelor of Shredding Recovery, and there are actually people who study how to recover shredded material. And now with computer imaging you can actually put little pieces of shred through it and it will actually map them for you so it is getting much easier, but then the tonnage of paper is getting much harder to look through as well.</p>
<p>Host: Jonar, did all this come out of espionage or the idea of espionage, or just trying to crack a computer and get to the bottom of something that just seemed much smarter then the average person?</p>
<p>Jonar Nader: You mean the people doing it?</p>
<p>Host: Yes. <br />
Jonar Nader: Curiosity, we all know about the great royal scandal where somebody pressed the redial button and found out who is speaking with whom, and at home, how many of you dial a number and think that nobody knows about it, but the next person can press redial and the best thing people can do is press clear redial, I mean how many people don’t use their technology. But that goes back to the question. Technology is fantastic for those who know how to use it, and it is great when it gives you and advantage. But that is where you must always read up and stay one step ahead, and you will so perhaps next time we can talk about some more, because there are dozens of ways and dozens of things to look out for. </p>
<p><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.logictivity.com/blog/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share/Bookmark"/></a> </p>]]></content:encoded>
			<wfw:commentRss>http://www.logictivity.com/blog/how-to-become-a-data-thief-part-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to become a data thief Part 1</title>
		<link>http://www.logictivity.com/blog/how-to-become-a-data-thief-part-1/</link>
		<comments>http://www.logictivity.com/blog/how-to-become-a-data-thief-part-1/#comments</comments>
		<pubDate>Fri, 04 Dec 2009 12:34:28 +0000</pubDate>
		<dc:creator>Jonar Nader</dc:creator>
				<category><![CDATA[Tech security]]></category>

		<guid isPermaLink="false">http://www.logictivity.com/blog/?p=2898</guid>
		<description><![CDATA[Unless you know how they do it, you will not know when it is being done. For this reason, Jonar Nader presents lectures that teach people about the 101 ways that thieves go about stealing your data from your computer and your office. How safe is voice mail? Is a shredded document safe? To listen [...]]]></description>
			<content:encoded><![CDATA[<p><img src="http://www.logictivity.com/blog/wp-content/uploads/2009/12/Jonar-Nader-how-to-become-a-data-thief.jpg" alt="Jonar Nader how to become a data thief" title="Jonar Nader how to become a data thief" width="630" height="250" class="alignnone size-full wp-image-2899" /><br />
<img src="http://www.logictivity.com/blog/wp-content/uploads/2009/12/White-leading1.jpg" alt="Jonar Nader line break" title="Jonar Nader line break" width="630" height="20" class="alignnone size-full wp-image-2872" /><br />
Unless you know how they do it, you will not know when it is being done. For this reason, Jonar Nader presents lectures that teach people about the 101 ways that thieves go about stealing your data from your computer and your office. How safe is voice mail? Is a shredded document safe? To listen to an excerpt from the radio broadcast, please click on the green play button below. To listen to an excerpt from the radio broadcast, please click on the green play button below.</p>
<p><img class="alignnone size-full wp-image-4190" title="Jonar Nader" src="http://www.logictivity.com/blog/wp-content/uploads/2009/11/Jonar-Nader.jpg" alt="" width="630" height="20" /></p>
<h2><span style="color: #0000ff;">Below is a transcript of the audio file.</span></h2>
<p><img class="alignnone size-full wp-image-4190" title="Jonar Nader" src="http://www.logictivity.com/blog/wp-content/uploads/2009/11/Jonar-Nader.jpg" alt="" width="630" height="20" /><br />
Host: Even though you can have a password and such, it doesn&#8217;t necessarily mean you are going to be terrifically safe when it comes to people getting into your records and data and stuff, does it?</p>
<p>Jonar Nader: Yes, security is concerned in both computers and the way we live. There is absolutely nothing that can be gotten at and absolutely nothing that is sacred, and we will run through a few things toady that will give you and example.</p>
<p>Host: Well, why?</p>
<p>Jonar Nader: Why is nothing sacred?</p>
<p>Host: Well, why is the password a joke.</p>
<p>Jonar Nader: Well, a password is like a key, but a key in its own right is of no use to a house if you care to break in through the window, or if you care to copy the key or borrow it or whatever. Passwords are necessary but people seem to feel that &#8220;oh well, I have a password and everything is fine.&#8221; Companies are loosing millions of dollars all the time and privacy of individuals is being invaded all the time without them even knowing about it. But you don&#8217;t even need a password, take for example the postman delivering your Telecom bill, automatically we know who you have been calling, your mobile telephone bill lists every number, so you know what you are doing and for how long. These days at the office, all the phone numbers are listed and they can tell who you call etc, but there are ways around it you see. So today in our discussion we will talk about ways around it, not so they can become data thieves, but so they understand how things work. Now, if we take the password problem, most passwords are so simple, that it is usually someone&#8217;s name, cat, dog or whatever, so we have to try to tell people to never use names and numbers only, and beware of trap games. Now a trap game is when someone gives you a software product and says &#8220;hey, how would you like to play golf?&#8221; and they give you the golf game, and that game actually captures every single key stroke that you have keyed in all week and it will fall over and you say to them &#8220;my golf game doesn&#8217;t work anymore&#8221; and they say &#8220;oh let me come and fix it&#8221; so they come and fix it and while they are fixing it they are actually extracting all the key strokes, and amongst those key strokes there will be all the errors including all the passwords you have keyed in that week, so that is one way of doing it. I will just give you so examples to start with.</p>
<p>Host: That’s quite depressing to begin with.</p>
<p>Jonar Nader: Well it is.</p>
<p>Host: So you&#8217;re saying when it comes to a password, make it three words, a letter and a number or something like that, but something that has nothing to do with a name or something that obvious?</p>
<p>Jonar Nader: Well names are notoriously easy to pick up, for example, an average dictionary on disk has about 60 000 words in it, and if your password is summer or dog or cat or even anything longer, the computer can scan through that in a matter of hours and crack the password. Now all the MIS managers, the computer people out there listening to this are thinking &#8220;oh yeah, but it is not that easy&#8221; but I will only equally say &#8220;but it is you can crack anything.&#8221; Now for a simple password that has two digits you have 1300 combinations, but you can crack that in four hours in worst case, and a four digit password has 1 700 000 characters and you can crack that in about six months if you apply the normal manual labour to it, but if you apply a very fast computer to it then it can be done in a matter of seconds. Now people say &#8220;Yes, but what if it has 10 digits and it has 3700 000 000 000 000 combinations?&#8221; well equally take a look at lotto, the chances of winning lotto are so remote, but yet people still win them everyday. So imagine if say the Russians wanted to crack the Pentagon code, all they would have to do is run lotto on it and somebody is actually likely to crack a code that can launch a nuclear missile. Because in Australia and the US and France people win lotto all the time, I mean look at the remoteness of that. So we are talking about probabilities and possibilities and all of that. And there is also a thing called MIMO (mathematics in mathematics out), any program that uses mathematics to encrypt itself can use mathematics to reverse encrypt itself or de-encrypt itself. So a few things for people to watch out are don&#8217;t leave your PC switched on over the weekend if you have a modem because people can track you, a lot of companies don&#8217;t realise that weekend access is one of their worst times, and what people tend to do is either steal data or use their telephone network. So often, if you know the right numbers you can tell to your whole family overseas, courtesy of somebody else&#8217;s phone bill. And a lot of people have been caught on that. But that is how Steven Jobs, who started Apple, became a little bit well known in the early days, many years ago, because he was selling &#8216;The Black Box&#8217; and the black box was something you could connect to a computer and connect to the ABC switchboard and dial home, and they used to have party lines all over the place. </p>
<p><a class="a2a_dd addtoany_share_save" href="http://www.addtoany.com/share_save"><img src="http://www.logictivity.com/blog/wp-content/plugins/add-to-any/share_save_171_16.png" width="171" height="16" alt="Share/Bookmark"/></a> </p>]]></content:encoded>
			<wfw:commentRss>http://www.logictivity.com/blog/how-to-become-a-data-thief-part-1/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
