<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Kate&#039;s Comment &#187; Security</title>
	<atom:link href="http://www.katescomment.com/tag/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.katescomment.com</link>
	<description>Thoughts on British ICT, energy &#38; environment, &#34;Cloud&#34;, and security from Memset&#039;s MD</description>
	<lastBuildDate>Thu, 01 Jul 2010 08:49:04 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Supply Chain Disintegration: A better way to buy IT</title>
		<link>http://www.katescomment.com/supply-chain-disintegration/</link>
		<comments>http://www.katescomment.com/supply-chain-disintegration/#comments</comments>
		<pubDate>Thu, 01 Oct 2009 10:20:15 +0000</pubDate>
		<dc:creator>Katy</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Business]]></category>
		<category><![CDATA[cloud]]></category>
		<category><![CDATA[hosting]]></category>
		<category><![CDATA[outsourcing]]></category>

		<guid isPermaLink="false">http://www.katescomment.com/?p=200</guid>
		<description><![CDATA[Unfortunately IT suppliers are not immune from the global economy and can fail just like any other company. I believe the best way you can protect yourself is by disintegrating the IT services supply chain. I shall explain...
]]></description>
			<content:encoded><![CDATA[<p><img style="float: right; margin-left: 10px;" src="/images/eggs-basket_300.jpg" alt="All your eggs in one basket" />The best way you can protect yourself from IT suppliers going bust is by disintegrating the IT services supply chain.  The rationale goes like this: Do not host your software with the same people that build it (eg. Salesforce.com or Google) since all your eggs are in one basket.</p>
<p>Instead, purchase your software from one provider, but have a direct relationship with the host. Some of our customers are starting to do this with us and Zimbra. Zimbra is sort-of like Google docs, but open source, and they host it with us, and backup to a third-party host (which is cheap to do).</p>
<p><em><strong>Good for resellers too</strong></em></p>
<p>Managing the backup and hosting process might be a new way that resellers can differentiate their offering or add value to the supply chain as more and more businesses look to protect their data as they move to a <a href="/the-definition-of-cloud-computing">Cloud Computing</a> model.  Ensuring ease of data migration between cloud providers is paramount for businesses moving forward.</p>
<p>By not being tied to one provider, a business could easily migrate to another host, or if Zimbra becomes unsupported, for example, they would not lose their data, and we would carry on hosting while they work with us to find a new software solution. If we fail, they still have their data and Zimbra can help them get set up again. We (the <a href="http://www.memset.com/">managed hosting</a> provider in this example) would not own their data even if we did fail, but no harm in belt-and-braces.</p>
<p><em><strong>Hosting commoditisation is here</strong></em></p>
<p>Software providers cannot realistically compete in today&#8217;s commoditised hosting market place, and instead should stick to their strengths. This also applies to migrations &#8211; when moving customers between hosts there are now companies that specialise in the migration itself but have no interest in selling software nor hosting. One such company is <a href="http://migrations.semsolutions.co.uk/memset/">SEM Solutions</a>, with whom we have recently started working.</p>
<p>Another big win from supply chain disintegration is that you gain total price transparency; no more getting stitched up by one provider who is just whacking a huge mark-up on a commodity service like hosting (yes, I&#8217;m talking to you, local government CIOs <img src='http://www.katescomment.com/wordpress/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> .</p>
<p>Not only does it show you which bits cost what, thus allowing you to compare with the market rates, but disintegrating the supply chain also makes migration to a new Cloud / managed hosting provider easy since you just need to work with the software supplier to migrate to the new host, and are not tied in to one provider.  Equally, since you own the data on the service (because you are buying the hosting direct), moving to a new software provider is greatly simplified.</p>
<p><em><strong>Eating my own dog food</strong></em></p>
<p>So, do I take my own advice? Yes; Memset is one of the fastest growing technology SMEs in the country, and all our business critical information and systems are hosted in the Cloud (or at least our little bit of it) and accessed over the Web. None of my staff have Microsoft Office, we do not pay for any software, and we do not need servers in our office for administration applications. Everyone has a laptop, and since all our systems and documents (we use a Wiki for the latter) are hosted online everyone can work from home without the complications of a VPN. We do not use any paper for internal communications either, thus minimising &#8220;the printer has broken&#8221; type problems.</p>
<p>We also use <a href="http://trac.edgewall.org/" target="_blank">Trac</a> project management and documentation management system for all our internal documentation, task and project management. It is free and simple to host yourself with any managed hosting provider. Simple, scalable systems like Trac have also made it easy for us to obtain and maintain our quality, security and environmental management systems (ISO9001, ISO27001 &#038; ISO14001 accreditations).</p>
]]></content:encoded>
			<wfw:commentRss>http://www.katescomment.com/supply-chain-disintegration/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Copyright&#8217;s death throes?</title>
		<link>http://www.katescomment.com/copyrights-death-throes/</link>
		<comments>http://www.katescomment.com/copyrights-death-throes/#comments</comments>
		<pubDate>Sat, 30 Dec 2006 16:50:23 +0000</pubDate>
		<dc:creator>Katy</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[lifestyle]]></category>

		<guid isPermaLink="false">http://www.katescomment.com/wordpress/?p=23</guid>
		<description><![CDATA[To give the guys a break I had been doing the Christmas on-call. Keeping a weather-eye on our plethora of monitoring systems I noticed a spike in bandwidth usage from one of our customer&#8217;s servers. A few moments later the cause is obvious; some script kiddie has hacked in and started up a bit torrent [...]]]></description>
			<content:encoded><![CDATA[<p><img style="float:right; margin-left:10px; position:relative;" src="http://www.katescomment.com/images/flaming_cd_hand.jpg" width="300" border="0" />To give the guys a break I had been doing the Christmas on-call. Keeping a weather-eye on our plethora of monitoring systems I noticed a spike in bandwidth usage from one of our customer&#8217;s servers. A few moments later the cause is obvious; some script kiddie has hacked in and started up a bit torrent site serving various illegal rips and wares. The proliferation of copyright infringement is enormous – are we witnessing the death of copyright?</p>
<p>It was a moment&#8217;s work to kill off the torrent site, and I sent a gentle email to the customer in question suggesting that they might like to take advantage of our <a href="http://www.perimeterpatrol.com/" target="_blank">Perimeter Patrol&trade; security</a> services. He was a lucky one – many of our customers only decide to get us to manage their server&#8217;s security for them after a major, and damaging intrusion, but in their case no harm was done. There are plenty of commercially-run sites as well; it is not all just hackers stealing others&#8217; bandwidth, and peer-to-peer file sharing is constantly growing especially as home broadband connections become ever-faster.</p>
<p>There is an on-going battle on the encryption and encoding front too. Just recently in <a href="http://www.reghardware.co.uk/2006/12/28/hddvd_crypto_cracked/" target="_blank">The Register</a> I heard that someone has already <a href="http://www.reghardware.co.uk/2006/12/28/hddvd_crypto_cracked/" target="_blank">cracked the new HD DVD&#8217;s anti-rip system</a>; embarrassing in the extreme for the HD DVD format&#8217;s supporters. The problem is, at a simplistic level, if you can play it then you can copy it. There are simply no two ways about it, and I for one think the music and movie industries are fighting a battle they cannot win, and should be taking a different approach entirely.</p>
<p>I am hardly innocent myself; I am quite a fan of <a href="http://www.allofmp4.com/" target="_blank">allofmp3.com</a> (a Russian mp3 site that purports pseudo-legality), but in my defense I primarily use it for getting good quality rips of CD&#8217;s and tapes I already own and therein, I think, lies a potential savior of the music industry. People like me do not want to be criminals, and we are also quite happy to pay a modest fee for a convenient service. I could have just ripped my CD&#8217;s for free, but I preferred to pay a few dollars and not faff about with disks etc.</p>
<p>Traditionally, a major cost for the media industries has been distribution, but the Internet renders that tiny. I am no expert, but I am pretty sure the music industry could make good money even at a small fraction of the current prices, say 10-20p per track. If combined with a really good interface most people would be quite happy to pay rather than mess about trying to download dodgy mp3&#8242;s.</p>
<p>In fact, it might even allow the music industry to sell a lot more thanks to being able to make “smart suggestions” based on what other users with similar tastes also like – there are already examples of such systems out there. Equally, such a model would be a great boon to small-time artists who currently have a nightmare getting their material heard since there would be minimal costs associated with getting your music listed, and if it was good then the “smart suggestions” system would auto-promote it. Everyone wins. Hmm, why am I giving out potentially-killer business ideas to the world? <img src='http://www.katescomment.com/wordpress/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>However, this all powerfully reminds me of a sub-text to an excellent book I read last year by Peter F. Hamilton, <a href="http://en.wikipedia.org/wiki/Misspent_Youth" target="_blank">Misspent youth</a>. It portrays a world where ubiquitous high-speed connectivity and massive personal storage capacities have rendered copyright impotent, and the professional production of new novels, music and movies ends. Such a future seems, at times, chilling near.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.katescomment.com/copyrights-death-throes/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Taking the heat</title>
		<link>http://www.katescomment.com/taking-the-heat/</link>
		<comments>http://www.katescomment.com/taking-the-heat/#comments</comments>
		<pubDate>Mon, 24 Jul 2006 11:50:44 +0000</pubDate>
		<dc:creator>Katy</dc:creator>
				<category><![CDATA[Environment]]></category>
		<category><![CDATA[datacentre]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.katescomment.com/wordpress/?p=13</guid>
		<description><![CDATA[When temperatures rise to record levels, it&#8217;s not just trains and water supplies that go wrong; all sorts of infrastructure can be affected including the Internet. Normally our data centres have plenty of over-capacity in their air-conditioning systems. Cooling a data centre is one of their big design challenges &#8211; each of our 1 metre [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://www.photoarrow.com/big/r04.html" target="_blank"><img src="http://www.katescomment.com/images/hotweather.jpg" style="float:right; margin-left:10px; position:relative;" width="300" title="Blazing Sun - used with permission © Photoarrow.com/big" border=0></a>When temperatures rise to record levels, it&#8217;s not just trains and water supplies that go wrong; all sorts of infrastructure can be affected including the Internet.</p>
<p>Normally our data centres have plenty of over-capacity in their air-conditioning systems. Cooling a data centre is one of their big design challenges &#8211; each of our 1 metre square racks uses around 4KWatts, all of which gets turned into heat which is roughly the same as four electric fire bars; standing behind one is positively toasty! Believe it or not we are fairly conservative as to how we stack the servers as well &#8211; a rack full of blade-servers might easily double that figure.</p>
<p>The <a href="http://www.999today.com/weather/news/story/3495.html" target="_blank">record temperatures</a> this month have caused problems though. When the outside air temperature increases it becomes harder for the air-con units to dump heat – after all, for the external units to be able to radiate heat away they need to be hotter than the ambient temperature, and that is compounded by the fact that the area they are trying to cool is being additionally heated as well. When temperatures spiked to over well over 30 degrees Celsius earlier this week one overworked air-conditioning unit at our Fareham site failed. The data centre team was swift to respond and it was back up and running within an hour, however what under normal circumstances would have been a reduction in capacity well short of the safety-margin over-capacity actually meant there was not quite enough cooling for that brief period, thanks to reduced efficiency of the air-con units and the generally increased ambient temperature.</p>
<p>The result was a small rise in the building&#8217;s internal temperature, which was then compounded. As the temperature increased slightly, the hotter-running servers had to increase their fan-rates to keep cooler, and hence use more energy. On top of that CPUs tend to become less efficient as they heat up, again using more power. More power usage means more heat generation, and suddenly you have a positive-feedback loop, although thankfully quite a slow acting one.</p>
<p>Thanks to a swift response no serious harm was done; however one of our busier machines did manage to pull a whopping 400Watts and contributed to a power-trip being blown which, frustratingly, caused an unscheduled reboot for the handful servers on that power bar.</p>
<p>Along with increasing energy costs and a moral responsibility to battle climate change, this sort of technical consideration in the face of ever hotter Summers is yet another reason why IT hardware &#038; infrastructure providers need to have energy firmly on the agenda. We certainly do.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.katescomment.com/taking-the-heat/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mobile working &#8211; have I cracked it?</title>
		<link>http://www.katescomment.com/mobile-working-have-i-cracked-it/</link>
		<comments>http://www.katescomment.com/mobile-working-have-i-cracked-it/#comments</comments>
		<pubDate>Sun, 09 Jul 2006 12:48:48 +0000</pubDate>
		<dc:creator>Katy</dc:creator>
				<category><![CDATA[Business]]></category>
		<category><![CDATA[lifestyle]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technovation]]></category>

		<guid isPermaLink="false">http://www.katescomment.com/wordpress/?p=11</guid>
		<description><![CDATA[I&#8217;m frequently out and about and on trains (usually between Guildford and London), and always try to make good use of the time. The ability to work anywhere is important to me, and I think I might have finally cracked it! Up until recently I had been using a massive Dell Inspiron 9100, which is [...]]]></description>
			<content:encoded><![CDATA[<p><img style="float:right; margin-left:10px; position:relative;" src="http://www.katescomment.com/images/laptopvaio.jpg" width="300" border="0" />I&#8217;m frequently out and about and on trains (usually between Guildford and London), and always try to make good use of the time. The ability to work anywhere is important to me, and I think I might have finally cracked it!</p>
<p>Up until recently I had been using a massive Dell Inspiron 9100, which is a great laptop as long as you don&#8217;t actually put it on your lap or try to lug it around on the tube. I have also been a faithful Palm user for many years, but trying to do anything useful on a PDA, even with a bluetooth keyboard, is painful thanks to slow &#038; limited applications, terrible reliability issues and poor battery life.</p>
<p>So, I recently splashed out on a gorgeous little <a href="http://shop.sonystyle-europe.com/SonyStyle/b2c/deeplink.do?campaignId=OTC-PPCGBNBCODE&#038;countryId=GB&#038;languageId=GB&#038;s=external&#038;ss=show&#038;id=VGN*" target="_blank">Sony Vaio VGN-TX2HP</a> (see right). Not only is it perhaps the ultimate geek-girl fashion accessory (and great for starting conversations on the train!), but it is so small that it fits in my handbag, so light that it is a breeze to carry, and has a battery life that puts the energizer bunny to shame (4-7 hours!)! It comes in-and-out of standby mode really fast too, making it so convenient to use that I will often put it to sleep while changing lines on the underground and just wake it back up for another 10 mins work tube-hop.</p>
<p>My other problem was mobile connectivity. I was using 3G on my hopelessly slow, chunky and unreliably Nokia 6680, which not only had major issues handing over between cells causing the connection to bounce irritatingly when on the move, but was also limited to 112Kbps thanks to the bluetooth connection.  Therefore I recently gave in to temptation and bought one of Vodafone&#8217;s new high speed mobile data cards.  I went with their more expensive £25/mo, 250MB/mo one rather than the popular £17/mo, 2,000MB/mo T-mobile for three reasons: i) I trust Vodafone&#8217;s network more ii) Vodafone don&#8217;t filter the traffic – T-mobile block things like VOIP and even MSN apparently, &#038; iii) Vodafone&#8217;s can do up to 1.8Mbps when the new <a href="http://en.wikipedia.org/wiki/High-Speed_Downlink_Packet_Access" target=_blank">HSDPA system</a> is fully rolled out. I have been seriously impressed so far; I get a persistent link almost all the way from Guildford to Waterloo, and the connection speeds are truly broadband-like. Even the latency is better &#8211; I can happily use PuTTY/SSH without a painful lag.</p>
<p>This sort of true anywhere-connectivity gives a whole raft of new options as well. Already, all my email is stored centrally on a remote IMAP server, along with most of my critical documents, diary and so forth. I am only a few steps away from having everything important centrally stored with my laptop acting as little more then a client application terminal, and when I have managed that the days of fretting about backups will be gone. I am not alone either; we are seeing an ever increasing demand for online business applications from IMAP email to CRM solutions and centrally hosted groupware.</p>
<p>Anyway, you may be saying &#8220;that&#8217;s all very well, but those are not cheap toys!&#8221;, and you&#8217;d be right.  However I am quite sure that they have already paid for themselves in terms of my increased productivity. Money well spent I say (and come on, they&#8217;re so cool!  <img src='http://www.katescomment.com/wordpress/wp-includes/images/smilies/icon_razz.gif' alt=':P' class='wp-smiley' /> ).</p>
]]></content:encoded>
			<wfw:commentRss>http://www.katescomment.com/mobile-working-have-i-cracked-it/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
