Contribute To The Community

Contribute To The Community

Join Our Group Of IT Professionals

Become a member of Honest Computer Help and get listed in our repair provider directory.

More...
Share Your Tips and Tricks

Share Your Tips and Tricks

Backup Your Data - The Golden Rule?

Is backing up your data the golden rule? What other tips and tricks can you share? What is your opinion?

More...
Looking For Computer Help?

Looking For Computer Help?

Have a question for an IT Professional?

Visit our forums, it is filled with helpful IT professionals from many different areas of the computer industry.

More...
Tired of Fighting Spam?

Tired of Fighting Spam?

See if one of our pros can help you...

Looking for the answer to end your battle against viruses and spam?

More...
Frontpage Slideshow (version 2.0.0) - Copyright © 2006-2008 by JoomlaWorks

Article Categories

Latest Tweets

Can Your Facebook Friends Sink Your Credit Score?
Written by Chris Muncy   
Tuesday, 26 January 2010 20:14

Want more proof that there is a downside to social networking? Look no further than the latest nitwit banking industry scheme to determine your creditworthiness.

InternetEvolution.com blogger Rob Salkowitz recently posted an outstanding summary of the latest data-mining trend: using social networking data to assess credit risk.

If your Facebook friends are deadbeats, it might be harder for you to get a credit card or mortgage, according to a recent report on the banking industry site, CreditCards.com.

That’s right: Some banks are turning to social media analytics firms to help enhance their credit-check procedures by looking at an applicant’s profile, behavior, and associations on sites like Facebook, Twitter Inc. , and MySpace . The theory is that people run with folks who share their values and behavior -- birds of a feather, and all that. You might even say "guilt by association," but that would be unkind.

Salkowitz's source is a news article on CreditCards.com that provides a wealth of additional details. But here's the gist: "The presumption is that if those in your network are responsible cardholders, there is a better chance you will be, too.

"So, if a bank is on the fence about whether to extend you credit, you may become eligible if those in your network are good credit customers."

Lenders are eager to spin this insanity as a legitimate risk-assessment technique. Lending Club executive Rob Garcia, for example, says that a Facebook user whose home address does not match the address on an application "could be a red flag." He also asserts that people who have large networks "get funded two to three times faster than without."

I'm ready to throw a few red flags here myself. The most obvious snag concerns a lender's ability to prove that someone on a social networking site -- or that someone's friends -- are who they claim to be. Most of us know that a Web search on our names will turn up dozens or even hundreds of virtual doppelgangers; without a Social Security Number or other unique identification, how is it possible to tell any of them apart with certainty?

Sooner or later, somebody will realize they were denied credit based on another person's social networking data. Normally, I'm not a fan of rampant litigation, but in this case I can't wait to see a little carnage in the courts.

Let's also consider the fact that lenders want to position this as a "whitelist" technique that can only work to an applicant's advantage. Unfortunately, the data-mining techniques being used here are utterly opaque to consumers, as are lenders' policies regarding how, when, and why they consider this sort of information.

Soon, I'm sure we will see the usual bottom-feeding "credit repair experts" offering to build credit-friendly social networking profiles for a not-so-reasonable fee. The thing is, given the sort of information lenders are apparently mining from these sites, it just might work.

Many people already understand that their social networking activity can draw unwanted attention from employers. Make a joke about taking one bong hit too many last weekend, and you can wave goodbye to that big job interview.

When credit issuers start snooping around, however, it's a different matter entirely. This isn't a question of making common-sense decisions about what you post online. These companies are using actual social networking relationships to make business decisions.

As Rob Salkowitz points out, it is hard to see any way out of this dead-end except through regulation. In the meantime, if you use a social networking site, I suggest checking -- and rechecking -- your privacy settings.

Ultimately, however, the only way to opt out of this sort of buffoonery might be to "opt out" of certain social networking sites entirely.

 

Source: Matthew McKenzie @ Smart Biz Resource

Add a comment
 
D-Link issues fixes for router vulnerabilities
Written by Chris Muncy   
Monday, 18 January 2010 21:18

Taiwanese firm says flaw could allow hackers to access administrative settings

 

D-Link Router

Router manufacturer D-Link Corp. today admitted that some of its routers have a vulnerability that could allow hackers access to a device's administrative settings. The Taipei, Taiwan-based form said that it has issued patches to fix the flaws.

According to a Jan. 9 blog post from SourceSec Security Research, some D-Link routers have an insecure implementation of the Home Network Administration Protocol (HNAP), which could allow an unauthorized person to change a router's settings.

SourceSec published a proof-of-concept software tool called HNAP0wn that would enable the hack -- a move that D-Link criticized.

"By publicizing their tool and giving specific instructions, the authors of the report have publicly outlined how the security can be breached, which could have had serious repercussions for our customers," D-Link said in a statement.

D-Link said it only appeared possible to hack the routers using the software tool and not just with stand-alone code.

D-Link and SourceSec differed over which models were vulnerable. SourceSec wrote that it suspected that all D-Link routers made since 2006 with HNAP support were affected, but they said they had not tested all of them.

D-Link said the models affected are the DIR-855 (version A2), DIR-655 (versions A1 to A4) and DIR-635 (version B). Three discontinued models -- DIR-615 (versions B1, B2 and B3), DIR-635 (version A) and DI-634M (version B1) -- are also affected.

The company said new firmware updates are being made available across its Web sites.

Source: ComputerWorld

Add a comment
Last Updated on Tuesday, 19 January 2010 15:53
 
Microsoft readies emergency IE patch to counter public exploits
Written by Chris Muncy   
Tuesday, 19 January 2010 16:06

Windows Logo

UPDATE: Here is the official confirmation from Microsoft that an out-of-band patch is coming.  No official date yet.

Microsoft has started dropping broad hints that an emergency patch for Internet Explorer will be released very soon to counter targeted attacks and the publication of exploit code for a “browse and you’re owned” vulnerability in its flagship Web browser.

The out-of-band update will be released once the company is satisfied that it has been properly tested against all affected versions of Windows.  This could happen as early as this weekend.

The decision to ship the IE patch outside of Microsoft’s scheduled Patch Tuesday releases follows the release of exploit code into the Metasploit attack tool.

The Metasploit code only works against Internet Explorer 6 but there are claims in the security research community that the vulnerability has been successfully exploited on IE7 (Windows Vista) as well as IE6 and on Windows XP.

Source: ZDnet

Add a comment
Last Updated on Tuesday, 19 January 2010 17:07