Thursday, September 18, 2008

IS YAHOO MAIL SAFE?

In a blow to the republican vice presidential candidate’s privacy, hackers have taken
over and copied all the e-mails out of Governor Palins e-mail account on Yahoo. The
best part is that no one knows if the account was hacked via a Yahoo Zero day or a bad
password choice.

Given what is being described as a major breach of confidentiality and privacy on the
part of the republican candidate, Veracode has an idea of exactly how the yahoo mail
hack was carried out via the Yahoo password reset screen. If you know basic
information about the person you are interested in, and have access to the backup e-
mail account that the person uses, you can get a password reset sent to that other
account.

So if you back up is an account that someone else has access too, regardless of who
they are, the yahoo password reset function will work just the way it was intended.
The problem is that at least the backup account has to be compromised in some
manner to make this work. The data though that is in Wikileaks is a lot of information
that investigators were wanting to get but were being difficult to get legally. None of
the information on Wikileaks can be used in court, and odds are now that the account
has been compromised, none of the yahoo information can be used either. Wikileaks
reports that:

Circa midnight Tuesday the 16th of September (EST) activists loosely affiliated with
the group 'anonymous' gained access to U.S. Republican Party Vice-presidential
candidate Sarah Palin's Yahoo email account
gov.palin@yahoo.com and passed
information to Wikileaks. Governor Palin has come under criticism for using private
email accounts to conduct government business and in the process avoid
transparency laws. The zip archive made available by Wikileaks contains screen shots
of Palin's inbox, two example emails, address book and a couple of family photos. The
list of correspondence, together with the account name tends to re-enforce the
criticism. Following the release of this story, both Sarah Palin's better known account
gov.sarah@yahoo.com and the gov.palin@yahoo.com account have been suspended
or deleted as revealed by a test email sent to these addresses by Wikileaks. Although
the reasons for the deletion of both accounts can not not yet be established, one
interpretation is that Palin is trying to destroy her email records. Source: Wikileaks

This hack brings home the idea to the candidates that information security is
something that needs to be talked about at a national level if we are to be successful in
defending cyberspace in the USA. This is the kind of example that will bring a deeper
focus at least on the vice presidential candidate that we need some very real
information security, and she will have her own story to tell about it. This is not a
good thing on many levels, because the data has now been compromised and is
useless to law enforcement in case she really was doing something that she should
not have been doing. So while the hackers on this one might have provided the data
in the yahoo mail account, in the end they might have ended up compromising the
entire State of Alaska investigation into Governor Paulin’s actions.

Tuesday, September 9, 2008

10 Tips for making a Career Choice in IT

Considering a career in Information Technology (IT) - beginner, fresh graduate,
enthusiast or career changer? What is your reason for choosing a career in IT? Your
motive may differ from mine, but does it make sense? Not all reasons people give for
wanting to go into IT are reasonable. It is always in your interest to make your career
choice for the right reasons.

Here are some suggestions of what you should consider in making a career choice in

IT.

1. There is financial reward in IT but don’t choose your career simply for the
money. IT is financially rewarding when you choose the right field, make sensible
career choices and work hard. Although the economic factor must come into play
when making a career decision, it shouldn’t be the sole determining factor.

2. Avoid the “bandwagon effect”. Don’t jump on anybody’s bandwagon. What is good
for Lagbaja may not be good for Tamedun. For some it has been described as the
“Feel Good, Rave of the moment or Go with the flow” factor. Everybody seems to rush
for the hot career choices.

3. With specific reference to IT, don’t jump on IT because IT is the in thing. There is
no doubt that the scope of IT is quite wide. In a world ruled by fads and trends, IT
may be the “reigning champion”, but the significance of IT is more than that – IT adds
value. Do you really appreciate the power of IT or are you simply pursuing the latest
craze?

4. First and foremost, you must answer the “Who Am I” question. Understand
yourself. Sincere self-evaluation is a necessity for quality career management.
Knowing who you are helps you in determining what you want and don't want in a
career, and in providing career direction.

5. With specific reference to IT, what is your interest? Do you want to create, provide
or use IT, or create with IT? Are you the sort of person who wants to know how IT
itself works, i.e. the inner workings and how you can be an IT creator, or you are more
interested in how to get results using IT?

6. You desire an IT career because IT is not boring. Note that we perceive things
differently - what may be fun to you may be boring to me. This has to do a lot with
your perspective, your values. Does the idea of an IT career appeal to you? Many
come into IT because of the stimulating opportunities and rewards.

7. Do you want to work in IT because it is a well-respected profession? The IT
profession is respected globally because of the impact Information Technology (IT)
has on society. It is certainly a field where if you make the right impact you can get the
respect you deserve.

8. The sheer diversity is what attracts many to IT. The diverse nature of IT offers
many professionals the opportunity to work in different areas over time, and
sometimes even on an ongoing basis.

9. IT is a field that emphasizes knowledge and contribution.Individuals in IT need
knowledge and skills as noted previously in (3).Do you want the power of
knowledge? Do you enjoy and hunger to learn new things?

10. It should be obvious that your passion is key. You need to have a huge passion for
IT and how it works. Be honest and sincere with yourself: how passionate and
committed are you to a career in IT?

Friday, September 5, 2008

DATABASE ADMINISTRATOR - TO BE OR NOT TO BE?

Who is a DBA?
Many people who are interested in IT careers often talk about becoming a DBA. This
is no surprise as the demand for DBAs continues to rise. But while interest is quite
high do many really know what being a DBA entails? To some it's just about getting a
DBA certification. For most, it is simply a bad case of "joining the bandwagon". Let's
start by taking a look at databases and DBAs.

What is a DBA? What does a DBA do?
The term, DBA refers to the Database Administrator. A database is a collection of
information that's related to a particular function or purpose. In its simplest form,
your contact information kept in a file on your system is a database. We will not dwell
much on databases here but it is important to understand what drives the demand for
DBAs. A key requirement of modern IT infrastructure is secure and timely access to
and storage of vital data. The most reliable, time-tested method of storing electronic
data is inside a database. Databases are needed by organizations that store and use
information, irrespective of location or industry. And in today's knowledge-driven
economy useful and timely access to information makes the difference. Why use
databases is like asking why electricity is useful. Is there any industry or business that
doesn't depend on information? The aim of databases is to aid the generation and the
exploitation of knowledge in a reliable and cost-effective manner.


How would banks survive without databases on customers and financial
transactions? E-business sites use databases to track orders and inventory. Telecom
operators can't do without databases if they must keep track of accounting and
subscriber information. Airlines, airports depend on databases.

The most popular database products are from Oracle, Microsoft, IBM, MySQL and
Sybase. Oracle is the market leader in the database market followed by Microsoft SQL
Server. And from the open source scene, MySQL is making impressive impact in the
database world.


So what does a DBA do? DBAs are regarded as "those professionals who organize
information in a meaningful way so it can be easily maintained, retrieved and
updated". DBAs ensure that data produces and delivers real business value. The role
of the database administrator is very important in an organization. Though the role
can be quite complex, let us identify the core functions.

Database Implementation and Design
A critical duty of the DBA is designing databases for maximal performance, scalability,
flexibility, and reliability. A well-designed and implemented database justifies the database investment. In this regard, the DBA is responsible for installing new DBMS and upgrading existing DBMS. The DBA must be conversant with installation and upgrade issues, i.e. problems, requirements, etc.


Performance Monitoring and Tuning
A DBA must make sure databases are fast and responsive. A slow response database is usually indicative of poor system performance -something is wrong somewhere. The DBA monitors the state of the database for optimal performance and the error log or event log is also monitored for database errors. Poorly tuned databases are frustrating to use - they tend to add more stress than value. Monitoring is essential to assess the state of the database and tune accordingly.


Availability, Backup and Recovery
To many in the IT industry, the most important job of the DBA is that of availability, backup and recovery of data. Because of the value placed on electronic data, the database must be protected from all forms of failure -hardware, software, and human. A DBA maintains the information an organization needs to be successful. In the DBA world, "nothing else matters if your database can't be recovered".

Availability means data must be available to all who need it when they need it. What is the use of having a great, functional database if half of the time, it is inaccessible due to one failure or the other. A database only has value when it is available. If data is not available, the business stops functioning. Imagine the impact this will have on a bank that can't have access to customers' balances. A DBA must be equipped to eliminate and reduce outages -planned and unplanned. Since not all failure can be predicted, the DBA needs to implement recovery procedures that will reduce downtime associated with failure.


User and Data Security
The DBA is responsible for security management. DBA work must be grounded in the fundamentals of IT security. Security must be designed into the database and applications. This involves assigning users to databases and determining the proper security level for each user. To make sure data is secure rigorous security schemes are required for production and test databases.


Working with Developers and Network Administrators
DBAs need to work closely with members of the technical team to ensure high, overall database performance. For instance, there is an increasing overlap between the functions of the DBA and the developer. DBAs also work with network administrators who run the servers on which their databases reside. In fact quite a few DBAs initially start out as programmers or network system administrators. DBAs and developers especially have to work as a team in areas such as design, debugging, implementing and tuning of queries, triggers and stored procedures that are stored in the DBMS. Today's databases do not just store data. They store stored procedures, triggers and user-defined functions, which are processes that act upon that data.What have been highlighted are major functions of a DBA. It should be evident that the role of the database administrator is very important in an organization.


Success as a DBA

To succeed as a DBA, organizational skills are essential. It is a promising field for people who love planning and paying attention to details. Do you love details and planning?

Working with developers and Network administrators means you should have excellent interpersonal and communications skills. Teamwork and team building skills are essential. How do you motivate other members of the team? How do you provide leadership? DBAs maintain the information the organization needs to be successful. Do you have a clear business understanding of what the database systems are meant to achieve?

Also it helps to have an open mind. All databases and systems are not the same and there are many different ways of doing things. Often there is no single answer to a given question. There are best practices and standards you must adhere to, but you must also be creative and flexible in dealing with situations. Solving situation A may require you to think differently from the way you solved situation B. Nothing is cast in stone. There is no box of absolutes!

In addition as the DBA, you should recognize that the database is your responsibility. This requires leadership and the pursuit of excellence on your part, by being an advocate for best practices and good design. In this respect and due to the functions of DBAs in the technical team, DBAs are often involved in IT management and key aspects of Project management.

Conclusion

Becoming a DBA involves more than getting a certification. It requires intensive study, constant learning, practice and most importantly the creation of opportunities for work experience. Furthermore, you must have the right attitude and personality to handle the tasks described earlier. Focus on what works and what matters. Have a passion for learning the DBA substance mentioned earlier and keep on learning. Have an open, enquiring mind.

There are prospects in the database field just like in any other field but it all depends on your perspective and situation. Do you have the background? Do you have the interest? What opportunities for education and experience are available to you? Can you face the challenges? The choice is yours: to DBA or not to DBA?

 
Custom Search
Add to Technorati Favorites