Google hit with record EU fine over Shopping service

The BBC today reported on its web page that Google had been fined a record amount with the fines being imposed here including the daily non compliance fine and the up and coming GDPR I get the impression the authorities are becoming tired of companies lip service to rules and regulations . I would suggest any organisation large or small who hasn’t started to tighten up their systems or check whether they are compliant addresses this with some urgency. It may seem like a waste of money now but if you get caught and fined it may well be you won’t have a company after all these new fines are based on Group Turnover not profit and in effect there is no limit.

Posted in News | 6 Comments

NHS in England hit by ‘cyber-attack’

With the BBC reporting NHS England being hit with what appears to be a ‘cyber attack’ and the fact that GDPR is less the 12 months away there has never been a more important time to invest in security. If this attack proves anything it is that no matter how big or small you are security is your responsibility and you can’t rely on the fact your using the same system as say the Government or some other Blue Chip organisation as making you secure. Cybersecurity is no longer a luxury or just for the big boys it is an essential if you want to keep your business viable, if you would like to discuss or need help please call Blue Shell Limited on +44(0)1624 620469 or email info@blueshell.im .

Posted in News, Security Alerts | 3 Comments

Cloud-should I migrate?

Whilst many are thinking of moving their systems into the cloud for cost, security and uptime, I would say think again. The principle of cloud is great, but I would suggest that setting up your own cloud with your own equipment is the better option. For example, once you have selected your provider based on your current needs and budget only to find in the future that a competitive provider has become a better option, how do you switch? Often this mean that your data must be bought back to in-house storage before it can be transferred. Once a company has been using cloud computing for 3 or 4 years it is doubtful that they would still have the storage and equipment to do this, after all wasn’t the point of moving to cloud in the first place, to get rid of your kit and reclaim the space used to house it?

The other issue would be the vulnerability to your company should your cloud provider make a mistake. An example of this was the recent 5 hour outage on Amazons cloud-computing which affected a large amount of web and app sites including Slack, Trello and Medium. According to an Article in the Telegraph, Amazon blamed a typo for the outage. Apparently an employee intended to remove a small amount of servers, but instead caused an unprecedented performance issue for thousands of companies. Whilst I accept human error effects us all, the point is, that whilst your on a cloud provider this is not your kit and you have to wait for them to locate and fix the error. Providers may priorities other customers before addressing your companies issues. If the kit is yours, and supported by your own team, this simply wouldn’t be an issue. When evaluating the true cost of cloud from a provider or your own version, it is advisable to take all eventualities into consideration.

It may of course be that you don’t want to use cloud of any sort and just stick to your own Server Infrastructure hard partitioned.

Posted in News | 6 Comments

Microsoft Joins the Linux Foundation

In an announcement today the Linux Foundation announced that Microsoft had become a Platinum member of the organisation and as part of this John Gossman who is Architect on the Microsoft Azure team will join the board of the Linux Foundation.

“The company has become an enthusiastic supporter of Linux and of open source and a very active member of many important projects. Membership is an important step for Microsoft, but also for the open source community at large, which stands to benefit from the company’s expanding range of contributions.”
To see the full announcement from The Linux foundation click here

Posted in Blue Shell News, News, Technology | 1 Comment

Think IT security is to costly think again

In recent times many companies feel that the cost of implementing IT security or having it checked is just not a cost effective use of company money.
” After all we buy our virus checker and we use the same software as the big corporate down the road”
Well think again, not only is a breach likely to cost you serious damage to your reputation, under the new General Data Protection Regulation you could be fined up to four percent of your annual turnover.
So for example in the case of the recent Tesco issue this could have led to a fine of £1.9bn, no small amount, oh and of course they are “the big corporate down the road.”
Although the text is not 100% clear in GDPR it is thought that whole group would be subject to the fine, not just the sub division, so in the case of Tesco this is why the fine would appear to be so large. It is also worth pointing out that the cost would not stop here as once fined, the company would be open to class-action law suits.
With less than 24 months until this law comes in it may well be time to reconsider the attitude to spending on security, after all with fines based on turnover you may well find you don’t have a business after one single breach. It may well become more difficult to get liability insurance to cover this eventuality if you can not demonstrate you are secure.

Posted in Blue Shell News, Security Alerts | 1 Comment

Microsoft Announces price increases on back of Brexit

On 24th October this year Microsoft announced it was planning to raise its Enterprise Service prices by 13% and a whopping 22% for its Cloud Services in the UK from January 1st 2017.
This was blamed on the drop of sterling due to Britains decision to leave the European Union or Brexit as it is know.
This is the first Major IT supplier to announce this rise, but it is unlikely to be the last and we expect other key suppliers such as Oracle and IBM to follow suit. Blue Shells Technical Director Nigel Bazley said “it maybe time for business to consider the move to Linux and OpenOffice as an alternative to Microsofts Windows and Office based systems. The main point to be made here is that theses systems are mostly freeware and so are not going to hurt your business when the pound fluctuates help keeping your IT cost stable in these turbulent times.”
It might also be prudent if you are thinking of turning to the cloud, to conduct a detailed examination of your Cloud providers contract. Such questions that you may want to consider are:
Do I have the bandwidth and resilience in external network connections to my cloud provider and what is the cost ?
Is my cloud provider vulnerable to DDOS attacks, indeed have they ever suffered such an attack and if so how long was the outage?
Can I move my systems from one cloud provider to another easily ?
A sudden rise in Cloud provider charges means companies often look for an alternative supplier, but find they are unable to leave the current provider easily. Should you require to move your data to an alternative provider you frequently find all your data must be taken back in house before moving to your new cloud host.
All these questions are worth asking and it maybe time for companies to decide whether a more cost effective, stable and secure route would be migration to the Open source and Linux solutions. Its worth noting that France’s national police force, started moving their 90,000 desktops from Windows XP to Ubuntu in 2007 over concerns about the additional training costs of moving to Windows Vista, and following the success of Open Office roll-outs.  The force has saved about €50 million on software licensing between 2004 and 2008.
 

Posted in Blue Shell News | 3 Comments

America Finally relinquishes control of Internet to ICANN

After 47 years since the first message was sent over ARPA net the forerunner to the modern day internet America has finally given up control of the top level DNS and ip allocation. Despite a last minute attempt by some members of congress led by Senator Ted Cruz to get a judge in Texas to grant an injunction the hand over was completed on Saturday the 1st of October 2016. ICANN will now control the allocation of Ip addresses and more importantly the top level DNS service which in effect means who ever controls this has the power to make countries go ‘Dark”. The system is already run by ICANN under contract from the US government but now will be totally devolved of US govt control and influence. We wait to see how this move will work and whether the US will be happy if decisions are made that they see as not in their interest.

Posted in News | 1 Comment

How to list only directories in Unix or Linux

We were asked recently by a customer how to list only the directories when doing an ls command

Firstly ls lists all files in a directory so an ls would produce something like this

ls /tmp

storage.log ifcfg.log packaging.log

if we now wanted to list only directories we would issue the command

ls -d */

this would give something like this

systemd-private-611c364c72354a2fbb19e7a3484b0262-colord.service-tCwbBC/

systemd-private-611c364c72354a2fbb19e7a3484b0262-cups.service-zLRpKH/

systemd-private-611c364c72354a2fbb19e7a3484b0262-rtkit-daemon.service-I6FhXd/

if we now wanted to see permissions,ownerships and dates we would do the following

for files we would issue the command

ls -la

this would give something similar to the following

-rw-r–r–. 1 root mousse 0 Sep 22 11:53 ifcfg.log

-rw-r–r–. 1 root mousse 0 Sep 22 11:53 packaging.log

-rw-r–r–. 1 root mousse 0 Sep 22 11:53 storage.log

from the above we can see that the files are owned by root and the group is mousse and from the permissions we can see that root has read and write on these files, the group mousse has read and everyone else all has read too.

if we wanted to do this for directories we would issue the following command

ls -dal */

this would give us something similar to the following

drwx——. 3 root mousse 16 Sep 30 11:05 systemd-private-611c364c72354a2fbb19e7a3484b0262-colord.service-tCwbBC

drwx——. 3 root mousse 16 Sep 30 11:05 systemd-private-611c364c72354a2fbb19e7a3484b0262-cups.service-zLRpKH

drew——. 3 root mousse 16 Sep 30 11:05 systemd-private-611c364c72354a2fbb19e7a3484b0262-rtkit-daemon.service-I6FhXd

From this we can see the directories are owned by root with read write and execute permissions however the group mousse and everyone else has no rights at all.this means no one apart from root can gain access to this directory or anything in it.

Now if we wanted to be able to look at these files or directories with the additional information of size and date order we would issue the following

for files

ls -larth

this would give something similar to the following

-rw-r–r–. 1 root root 107 Sep 22 11:54 storage.log

-rw-r–r–. 1 root root 108 Sep 22 11:57 packaging.log

-rw-r–r–. 1 root root 57 Sep 22 11:59 ifcfg.log

as you can see the sizes are listed plus the date and time that were last written too handy if you have an error and you can see which log was written to last good place to start your detective work.

Now if we do the same for directories but this time i will choose the /var directory where logs are written as an example

ls -larthd /var */

You should get something similar to this

drwxr-xr-x. 2 mickey mousse 6 Sep 22 12:06 hsperfdata_nb1302/

drwxr-xr-x. 2 root mousse 18 Sep 22 12:07 hsperfdata_root/

drwx——. 2 mickey mousse 51 Sep 22 16:41 mozilla_nb13020/

drwx——. 2 mickey mousse 6 Sep 22 16:45 tracker-extract-files.10000/

drwxr-xr-x. 20 root mousse 4.0K Sep 30 11:04 /var

drwx——. 3 root mousse 16 Sep 30 11:05 systemd-private-611c364c72354a2fbb19e7a3484b0262-rtkit-daemon.service-I6FhXd/

drwx——. 3 root mousse 16 Sep 30 11:05 systemd-private-611c364c72354a2fbb19e7a3484b0262-cups.service-zLRpKH/

drwx——. 3 root mousse 16 Sep 30 11:05 systemd-private-611c364c72354a2fbb19e7a3484b0262-colord.service-tCwbBC/

drwx——. 2 mickey mousse 23 Sep 30 11:05 ssh-ZbJbou1039oX/

hope this helps. Hopefully we will be publishing more tips soon feel free to contact us through our web page www.blueshell.im or follow us on twitter or our Facebook page

Posted in Tech Tips | 11 Comments

Russia Kicks Out Microsoft Software For Local MyOffice

Moscow city will replace Microsoft Corp. programs with domestic software on thousands of computers in answer to President Vladimir Putin’s call for Russia’s authorities to reduce dependence on foreign technology amid tensions with the U.S. and Europe.
The city will initially replace Microsoft’s Exchange Server and Outlook on 6,000 computers with an e-mail system installed by state-run carrier Rostelecom PJSC, Artem Yermolaev, head of information technology for Moscow, told reporters Tuesday. Moscow may expand deployment of the new software, developed by Russia’s New Cloud Technologies, to as many as 600,000 computers and servers, and may also consider replacing Windows and Office, Yermolaev said.

Putin is urging state entities and local companies to go domestic amid concerns over security and reliability after U.S. firms shut down paid services in Crimea following Russia’s 2014 annexation. The plan poses a challenge to the likes of Microsoft, SAP SE and Oracle Corp. in the country’s $3 billion software market. Adding to pressure, Putin’s internet czar German Klimenko wants to raise taxes on U.S. technology companies to help Russian competitors such as Yandex NV and Mail.ru Group Ltd.

“We want the money of taxpayers and state-run firms to be primarily spent on local software,” Communications Minister Nikolay Nikiforov told reporters. From 2017, government entities including the Federal Anti-Monopoly Service, General Prosecutor’s Office and Audit Chamber “will be tightening their grip” on state institutions that aren’t switching to domestic alternatives, he said.

Microsoft declined to comment.

Government entities spend about 20 billion rubles ($295 million) a year on foreign software, according Nikiforov. His ministry has produced a list of nearly 2,000 Russian software products that state-run companies should use instead of products from global vendors.

Moscow’s government has already switched Cisco Systems Inc. technology for city surveillance cameras to local software, Yermolaev said. State media company Rossiya Segodnya and Moscow’s regional government switched from Oracle database systems to open-code PostgreSQL software supported by local programmers, according to Digital Russia.

For the full article Click Here

Posted in News | 5 Comments

Oracle New T7 Servers with M7 co processor and Latest Solaris 11.3 Operating system a massive leap

Oracles new T7 series with M7 co-processor looks amazing and the integration of the latest Solaris operating system and database to the Hardware provides massive leaps in security stopping unauthorised access to parts of memory it will help prevent such things as heartbleed.

Coupled with the encryption facilities the co-processor adds such speed and security its amazing, anyway don’t take my word for it follow this link to find out more
If you would like to know more or need support with any Oracle product call us on Blue Shell Limited Oracle Gold Partners on +44(0)1624 620469

Posted in Technology | 2 Comments