<$BlogRSDUrl$>

A technology blog for The Economist Group IT team

Monday, January 31, 2005

I recently created a list of usability guidelines for business users, developers, and designers to use when they kick off new web-based projects. These guidelines promote industry best practices along with my own personal experiences of what works. I believe its an effective way to get people thinking about concepts of usable design without getting too caught up in the details or implementation. Let me know what you think.


Comments:
No flowcharts? You surprise me.
 
Post a Comment

Friday, January 21, 2005

Easter Eggs

I set a competition in To Computing Heroes last week and was a bit dissappointed at the lack of application Easter Eggs that were reported. One that I like is that in Mozilla's Firebird. Enter "about:mozilla" (without the quotes) into the address bar to see a dig at Microsoft (Mammon). Microsoft respond in IE with a blue screen. I have mixed feelings about these indulgences, however. I remember an old version of Excel that had a complete video game embedded in the Help..About area. Initially Easter Egss were a list of credits, but even then the code is wasting your CPU cycles in scanning for trigger keystrokes....
Comments:
I remember when entering about:mozilla in old versions of Netscape (v3.x I think) used to change the animated N in the top corner to a fire breathing dragon, as well as displaying the "biblical verse" page.
 
Post a Comment

Thursday, January 20, 2005

When I'm up in Manchester and need to work I have to find an Internet connection so that I can get on the VPN. Usually, I go to Starbucks, where they have T-Mobile hotspots that cost £5 for an hour.

As I'm running Windows Firewall and my connection, once I'm on the VPN, is stronger than 128 bit encryption, I never really worried about security, and I hadn't heard of any hotspot scams. But reports are coming out about people using packet sniffing tools like dsniff to intercept unencrypted data.

Someone far too creative to be writing about technology coined the term "hotspot vampires" to describe hackers who sit around in cafés trying to read other people's information.

In retrospect, I shouldn't be surprised. For the types of people who steal credit card details from ATM's, open wireless networks are irresistably juicy targets. So the next time you bring your laptop, mobile or PDA to your favorite hotspot, make sure you don't send any sensitive data to unencrypted sites.
Comments:
Jerem makes a good point here illustrating the dangers of using open wireless hotspots. Just to make hesitant hotpot users even more uncertain, yesterday I read a report about another new term 'Evil Twins' guaranteed to strike fear into the hearts of hotspot users everywhere.

Putting my "Group IT Security 'Expert'" hat on, I should point out that when you are connected to our VPN, only traffic that is destined for our internal network is actually encrypted by the VPN client, general browsing traffic is not encrypted and may be vulnerable to Dracula and his friends.

There are a number of solutions to keep your hotspot web browsing safe from vampires - most rely on setting up an SSL connection to one website and then proxying your browsing from that site. Anonymizer is the one of the most well known.

Cloves of garlic can also help if you're still worried!
 
It's actually much easier for hackers than these two exploits suggest. At a tech. conference some time ago (can't remember when) free hotspots were set up by a team who wanted to know whether a tech-savvy crowd would balk at using an untrusted hotspot. Guess what their results were?
 
Post a Comment

Thursday, January 06, 2005

Microsoft Giant

Microsoft have released a beta version of their AntiSpyware program. This uses technology from Giant who were acquired by Microsoft in December. Fast work. Co-incidentally, the first reported exploit targeted at Firefox has surfaced. A vulnerability allows the url for a downloaded file to be masked. This in the week that Firefox is reported to have grown in use to 7.4% of the market. Also this week, eBay announced that they will roll out their own messaging service to get round phishing scams targeted at eBay users. The My Messages inbox for eBay users is similar to that used by online banks, such as smile.
Comments: Post a Comment

This page is powered by Blogger. Isn't yours?