Protecting Internet Name Resolution

Harbor Computer Services will be changing the DNS server forwarder locations and also applying a client and server side DNS patch as an emergency measure. This change is underway now and is a high priority item. It will take precedence over other minor issues. This will require a reboot of your server to take effect. Your technician will schedule this reboot with you.

Background: A few weeks ago a major flaw was discovered in DNS. This flaw affects all DNS servers in the world manufactured by every vendor. The flaw allows the bad guys to redirect your request, to visit google.com for example, to a spoofed website designed to look like the original site but is infected with malware. This kind of attack is common on websites and many shopping and banking sites have suffered such attacks. What is different about this is that they can now hack the DNS servers themselves.

A DNS server is the thing that translates google.com to the IP address number. Sites on the Internet are organized by number, not by name. The name is only present so humans can remember it. Computers use the number. You have a DNS server in your office. It keeps track of where your Internal computers are located. So when you type h:\sbs\clients your computer turns to the DNS server and says "where's that?". The DNS server responds 192.168.16.2. In this hack, the DNS would instead respond with 208.192.31.40 and your request would be mis-directed to the bad guys. The same thing will happen with external websites as well, if your ISP's DNS server is compromised.

Immediately after this flaw was discovered Microsoft released patches and we began to apply them. However, it was later discovered that the patch caused issues of its own. Between then and now, Microsoft has re-released the patch along with a list of other changes that are necessary to protect the server. We have tested this new round of patches on our server and it has been running without issue for several days now.

In addition to your DNS, your ISP also provides you with a DNS server. In checking with the various ISP's we have found that their servers are not yet patched and can therefore not be trusted. Because of this condition, we are moving all DNS forwarding to OpenDNS. OpenDNS hosts known good, patched DNS servers.

OpenDNS: In addition to providing a known good safe DNS server for you, OpenDNS has some additional advantages that we will talk to your about at a later date to see if you would like to implement. OpenDNS allows us to create shortcuts to commonly used websites to cut down on your typing. For example, if you commonly visit your bank and the URL is https://secure.mybank.com/online/banking we could shorten that to just bank and you would always go to the URL specified. In addition to shortcuts we can also customize OpenDNS to block certain categories of websites.

 

Your cooperation is appreciated while we make this important change to keep your business safe.

AntiVirus 2009 is a Virus

I can't say this strong enough. I may seem a bit pushy at this moment so forgive me. I'm known for my patience but I lose it when problems are self-inflicted by behavior that shouldn't be happening at work in the first place. Please stay off the porn sites at work. Doing so will result in a stable work environment where your computer doesn't get loaded up with junk applications designed to slowly kill it. And when you get a prompt to install software - don't. A lot of hours are being wasted cleaning up things that shouldn't be installed in the first place and this is costing your employer money. If you already have AntiVirus 2009 on your computer, call your technician immediately before it brings the PC totally down.

Antivirus 2009 Description

Antivirus 2009 (or Antivirus2009) is a rogue anti-spyware program and is a clone of Antivirus 2008. Antivirus 2009 is usually installed by a Trojan called Zlob via a video codec installer found on adult websites. Antivirus 2009 uses bogus spyware scans to trick the user to purchase the full Antivirus 2009 version.

Antivirus 2009 may generate misleading warning alerts and popups in order to scare the user into believing there’s an infection in their computer. Once a user clicks on the fake warning alert, Antivirus 2009 will redirect the user to Antivirus 2009’s website (www.antivirus-2009.com), where the full version of the program is sold. Antivirus 2009 is not a solution to the threats it alleges to remove.

Antivirus 2009 is part of the clan of rogue anti-spyware programs that have the term “antivirus” included in their names. Vista Antivirus 2008, Ultimate Antivirus 2008, System Antivirus 2008 and Windows Antivirus 2008 are among the collection of “antivirus” named programs. Although their names and interface are slighlty different, they all follow the same methods of infection. Antivirus 2009 may also generate system slowdown, instability and may be difficult to remove manually.

Purchasing Change

Effective August 15th, we will no longer fund the pre-purchase of any items. At the time of order payment in full we be required either by check or credit card. If payment is made by credit card an additional 3% processing fee will apply.

Harbor Computer Services had provided as a service to our clients the ability to buy now and pay later since 2000. But due to continued abuse of the system we are forced to suspend this service. The First Bank of Harbor Computer Services is closing. As it has always been, you are welcome to make purchases through us and take advantage of our vendor discount relationships. We intend to maintain these relationships as they have resulted in significant savings for our clients over retail price.

Reminder: Learn Support Portal @ Noon Today

Today at noon I will be presenting a 30 minute overview of our Support Portal. There will be time at the end for questions. The meeting will be held from the comfort of your own computer, using Live Meeting and a conference call. You should sign into both. If you haven't used Live Meeting before be sure to get there about 15 minutes early to download and install the software.

1. Copy this address and paste it into your web browser:
https://www.livemeeting.com/cc/usergroups/join

Copy and paste the required information:
Meeting ID: Z2NNGW
Entry Code: x$(76*s}X

2. Conference Dial-in Number: (616) 347-8100
Participant Access Code: 465751#

 

See you at Noon!

UPS Shipping Virus

Please be careful with messages from UPS. A spam email with a virus attached has been making the rounds. The email looks exactly like a normal message from UPS. However, it has a file attached that it directs you to open. UPS will not send you attachments. The attachment is a virus. 

No attachment from anyone should be opened unless you knew BEFORE receiving the email that they would be sending you an attachment. If you were not expecting an attachment, confirm with the sender what it is before you open it.

Here's what the UPS spam and virus email says:

Subject: UPS Tracking Number 6431834482

Unfortunately we were not able to deliver postal package you sent on July the 1st in time because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office

Your UPS

Live Archive...New Feature

For those clients that are using Exchange Defender for anti-spam and email redundancy, there's a new feature. Live Archive, the webmail account, will now include a history of your outbound email.

So now when you log into your account you will not only have a copy of your mailbox with the ability to send and receive email while your server or Internet is down, you can also view sent items. This brings Live Archive closer to being a full redundant solution.

It's nice to have the history of what was sent out. Not only to help you remember where you left off before the server, power or Internet problem, but it's also a nice archive to have when an employee leaves the company. Many times we've seen employees leave and delete email or send email off to another email system. This enhancement will help business recover and/or investigate these occurrences.

Further enhancements to the Live Archive service will continue to be released over the next several months.

Lunch & Learn: Support Portal

Now that we have provided every customer with access to our Support Portal and given you all accounts I wanted to invite you for a tour of the features so you can get the most out of it.

The Support Portal provides you with the ability to create requests for support, track what is complete and the status of what is being worked on, store vital documentation and view the history of all work done. All of the details are present in Support Portal.

Access to our support portal replaces the details on our invoice, so I want to be sure that you understand how to use the portal.

Join us online for a tour and an opportunity to ask questions about Support Portal.

When? July 24th at Noon

Where? Online from your computer

https://www.livemeeting.com/cc/usergroups/join?id=Z2NNGW&role=attend&pw=x%24%2876*s%7DX

Conference Dial-in Number: (616) 347-8100
Participant Access Code: 465751#

This meeting is presented via Microsoft Live Meeting. If you have not used Live Meeting before please click the URL 15 minutes before the meeting to download and install the software.

If prompted, enter:

Meeting ID: Z2NNGW
Entry Code: x$(76*s}X

Economic Stimulus Act of 2008

I read this article this morning and thought I would excerpt it here. It's a reminder of the tax benefits to business this year from the Economic Stimulus Act.

The Economic Stimulus Act signed by President Bush in February promotes business investments in 2008 by significantly expanding depreciation and one-time expensing options for qualified capital expenditures. This provides significant incentives for organizations to buy technology platforms and applications.

Those already planning to make a substantial technology purchase will receive a boost to cash flow, according to Matthew Shapiro, a professor of economics at the University of Michigan. But organizations probably won't make many additional investments, he says, because plans are
basically in place.

"The main effect is not to do additional investment but to get better cash flow results from investments that are already going to be undertaken," Shapiro says. "And that is substantial."
In the past, companies using a five-year schedule would claim depreciation of 20 percent the first year. For a company spending $1 million to replace all its computers and servers, that's $200,000. With the new bonus depreciation provision, companies can deduct 50 percent ($500,000) and 20 percent of the remaining balance ($100,000), for a total of $600,000 in the first year. The remaining cost can be depreciated over the recovery period.

• Depreciation bonus at-a-glance
  
  The Economic Stimulus Act allows additional first-year depreciation of 50 percent of the purchase cost.
  
  The depreciation bonus helps businesses that buy equipment this year cut their 2008 tax bill.
  
  The bonus applies to purchases of tangible personal property with tax lives of 20 years or less, among other things.
  
  Equipment must be purchased and placed in service in 2008.
  
• Section 179 expensing at-a-glance
  
  The Economic Stimulus Act nearly doubles the Section 179 expensing limit to US$250,000 from US$128,000.
  
  Companies can expense up to US$250,000 in purchases as long as they don't spend more than US$800,000.
  
  New and used equipment is eligible for expensing.
  
  The expensing limit can be combined with the depreciation bonus.

SBS and EBS Release Date Announced

Today Microsoft announced the release date for SBS and EBS. They will be released together on November 14th.

SBS 2008: Windows 2008, Exchange 2007, Sharepoint Services 3.0, Windows Software Update Services, OneCar for Server, Forefront for Exchange and the SBS goodies of Remote Web Workplace, Outlook Web Access, Outlook Anywhere. All on 1 server. Optionally there's a premium edition with SQL 2008 and a second Windows 2008.

EBS 2008: Everything in SBS spread across 3 servers, plus 2 additional copies of Windows 2008, System Center Essentials, Threat Management Gateway (the new ISA firewall), single CAL licensing across all products and a multi-server integrated management system. Optionally there's a premium edition with SQL 2008 and a 4th Windows 2008.

Changing Work Rules

All across the Internet the news is that business and government are rapidly changing work rules to allow for 4 day work weeks and more tele-commuting. Is it because tele-workers a more productive? Yes. Is it because of rising fuel and energy costs? Yes. Is it because workers are seeking jobs closer to home? YES!

Work rules constantly change and this one isn't exactly new, it's just picking up steam and fast! Of particular concern to business owners are employee perceptions. Your next hire is probably going to live closer and expect tele-commuting benefits.

2001

• Department of Transportation and Related Agencies Appropriation Act: Allows eligible employees to participate in a telework program to the maximum degree possible.

June 2008

• Utah this summer will become what experts say is the first state to institute a mandatory four-day work week for most state employees, joining local governments across the nation that are altering schedules to save money, energy and resources. Gov. Jon Huntsman, a first-term Republican, says he's making the change to reduce the state's carbon footprint, increase energy efficiency, improve customer service and provide workers more flexibility.
• County considers work week change - Brownsville Herald.
• With gas averaging $3.93 a gallon, four out of 10, or 44 percent, of workers say gas prices are affecting their commutes to work, according to a new national survey from Robert Half International. That's up from 34 percent two years ago when gas prices averaged $2.80. Of the workers who say they've changed their commutes to cope with gas prices: 46 percent say they are now carpooling more frequently. 33 percent say they are now driving a more fuel-efficient car. 33 percent say they are telecommuting more often. 30 percent say they're looking for a job closer to home.
• The fast-rising price of the daily commute is pushing a lot of people to hunt for a new job. In fact, 35% of American workers were searching for a job closer to home in order to cut back on the cost of commuting, according to a study by Manpower, the employment services firm.
• OSHA Backs Off Of Work-At-Home Rules